[{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com data:; img-src 'self' data: https: blob:; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'","count":2242},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.gstatic.com https:\/\/www.awin1.com https:\/\/lantern.roeyecdn.com https:\/\/tagmanager.google.com https:\/\/cdn.trustcommander.net https:\/\/www.dwin1.com https:\/\/www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/bat.bing.com https:\/\/*.doubleclick.net https:\/\/www.axa-video.de *.visualwebsiteoptimizer.com app.vwo.com https:\/\/www.google.com https:\/\/platform.commandersact.com https:\/\/connect.facebook.net https:\/\/*.aklamio.com data.axa.de snap.licdn.com blob: https:\/\/ct.pinterest.com https:\/\/s.pinimg.com https:\/\/acdn.adnxs.com https:\/\/ib.adnxs.com ; ;style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com *.visualwebsiteoptimizer.com app.vwo.com s3.amazonaws.com https:\/\/googletagmanager.com https:\/\/www.googletagmanager.com ;frame-src https:\/\/www.awin1.com app.vwo.com *.visualwebsiteoptimizer.com https:\/\/entry.axa-de.intraxa\/ https:\/\/entry.axa.de https:\/\/www.axa-video.de https:\/\/www.axa.de https:\/\/inte.axa.de https:\/\/*.doubleclick.net https:\/\/cdn.trustcommander.net https:\/\/www.dwin1.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/td.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/www.google.com https:\/\/ct.pinterest.com https:\/\/googletagmanager.com https:\/\/insight.adsrvr.org 'self' https:\/\/www.googletagmanager.com;base-uri 'self';object-src 'none';img-src 'self' data: https:\/\/ad.doubleclick.net https:\/\/*.ads.linkedin.com data.axa.de *.visualwebsiteoptimizer.com chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com https:\/\/track.adform.net https:\/\/ad.doubleclick.net https:\/\/www.facebook.com https:\/\/bat.bing.com https:\/\/www.google.com https:\/\/www.google.de https:\/\/www.google-analytics.com https:\/\/www.google https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/googleads.g.doubleclick.net https:\/\/i.ytimg.com https:\/\/maps.gstatic.com https:\/\/maps.googleapis.com https:\/\/www.financeads.net https:\/\/www.aklamio.com\/ https:\/\/ct.pinterest.com https:\/\/ib.adnxs.com;form-action 'self';default-src 'self' https:\/\/assets.faircado.com https:\/\/static.preply.com https:\/\/fonts.gstatic.com\/ blob: data:;connect-src 'self' data.axa.de https:\/\/api.vid-adblocker.com https:\/\/ad.doubleclick.net\/ https:\/\/*.google.de https:\/\/www.facebook.com\/ https:\/\/*.ads.linkedin.com https:\/\/p.adsymptotic.com https:\/\/*.linkedin.oribi.io https:\/\/sjs.bizographics.com ad.doubleclick.net *.visualwebsiteoptimizer.com app.vwo.com https:\/\/*.googlesyndication.com https:\/\/*.google.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/www.google.com https:\/\/www.googleanalytics.com https:\/\/stats.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/bat.bing.com https:\/\/privacy.trustcommander.net https:\/\/privacy.commander1.net https:\/\/privacy.commander1.com https:\/\/www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/fonts.googleapis.com https:\/\/*.axa.de https:\/\/cloud.service.aerzteversicherung.de https:\/\/mcdyr4395tgnrcnr8bt5wsrgh-11.pub.sfmc-content.com https:\/\/*.aklamio.com https:\/\/www.googleadservices.com https:\/\/ct.pinterest.com https:\/\/ib.adnxs.com https:\/\/acdn.adnxs.com https:\/\/google.com;;report-uri \/site\/axa-de\/cspReportOnly","count":279},{"content-security-policy-report-only":" script-src https: blob: 'unsafe-inline' 'unsafe-eval' 'self';base-uri 'self';report-uri https:\/\/reporting-api.gannettinnovation.com;report-to default","count":271},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;","count":269},{"content-security-policy-report-only":" connect-src 'self' *.google-analytics.com *.analytics.google.com https:\/\/stats.g.doubleclick.net *.facebook.com; font-src 'self' data: https:\/\/use.typekit.net https:\/\/fonts.gstatic.com; frame-src 'self' servedbyadbutler.com *.authorize.net *.paypal.com *.google.com www.book2look.com *.book2look.com *.booksense.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.facebook.com; img-src 'self' images.booksense.com *.booksense.com *.book2look.com data: https:\/\/www.googletagmanager.com *.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/googleads.g.doubleclick.net *.google.com *.googleusercontent.com *.gstatic.com https:\/\/encrypted-tbn0.gstatic.com *.facebook.com https:\/\/www.paypalobjects.com https:\/\/withfriends.co https:\/\/images-na.ssl-images-amazon.com https:\/\/m.media-amazon.com https:\/\/covers.openlibrary.org https:\/\/p.typekit.net https:\/\/i.ytimg.com; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/tagmanager.google.com *.doubleclick.net https:\/\/connect.facebook.net https:\/\/danjg53usxhfc.cloudfront.net code.jquery.com cdn.mxpnl.com https:\/\/www.paypal.com *.gstatic.com https:\/\/cdnjs.cloudflare.com https:\/\/use.typekit.net https:\/\/unpkg.com https:\/\/www.youtube.com https:\/\/s.ytimg.com cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/www.book2look.com; script-src-elem 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/tagmanager.google.com *.doubleclick.net https:\/\/connect.facebook.net https:\/\/danjg53usxhfc.cloudfront.net code.jquery.com cdn.mxpnl.com https:\/\/www.paypal.com *.gstatic.com https:\/\/cdnjs.cloudflare.com https:\/\/use.typekit.net https:\/\/unpkg.com https:\/\/www.youtube.com https:\/\/s.ytimg.com cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/www.book2look.com; style-src * 'report-sample' 'unsafe-inline'; base-uri 'self'; report-uri https:\/\/o4507465725640704.ingest.us.sentry.io\/api\/4510783202066432\/security\/?sentry_key=ea4d6ac5ddc8cc5a46f75f8ac24a565d","count":181},{"content-security-policy-report-only":" ","count":102},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri \/csp_logger?path=\/","count":77},{"content-security-policy-report-only":" default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; report-uri \/csp-report","count":75},{"content-security-policy-report-only":" frame-ancestors 'self'","count":61},{"content-security-policy-report-only":" default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; report-to blogspot; report-uri https:\/\/www.blogger.com\/cspreport","count":60},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: *.mpsimg.com *.bdimg.xyz; font-src 'self' data: *.svcasino.art;","count":54},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval' blob: data: https:\/\/www.google.com\/recaptcha\/enterprise.js https:\/\/www.gstatic.com\/_\/mss\/boq-one-google\/_\/ https:\/\/www.gstatic.com\/og\/_\/js\/ https:\/\/apis.google.com\/js\/api.js https:\/\/apis.google.com\/js\/client.js https:\/\/www.googletagmanager.com\/gtag\/js https:\/\/www.google-analytics.com\/analytics.js https:\/\/www.googletagmanager.com\/gtag\/destination https:\/\/www.gstatic.com\/_\/mss\/boq-recaptcha\/_\/js\/k=boq-recaptcha.RecaptchaChallengePageUi.en_US.H5EorKvTaCo.2018.O\/ https:\/\/apis.google.com\/_\/scs\/abc-static\/_\/js\/ https:\/\/www.gstatic.com\/recaptcha\/releases\/;report-uri \/recaptcha\/challengepage\/_\/RecaptchaChallengePageUi\/cspreport\/fine-allowlist","count":32},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval' blob: data: https:\/\/ajax.googleapis.com\/ajax\/libs\/jquery\/3.6.4\/jquery.min.js https:\/\/translate.google.com\/translate_a\/element.js https:\/\/www.google.com\/recaptcha\/api.js https:\/\/www.google.com\/recaptcha\/enterprise.js https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/tools\/feedback\/chat_load.js https:\/\/www.google.com\/tools\/feedback\/help_api.js https:\/\/www.google.com\/tools\/feedback\/load.js https:\/\/www.google.com\/tools\/feedback\/open.js https:\/\/www.google.com\/tools\/feedback\/open_to_help_guide_lazy.js https:\/\/www.gstatic.com\/feedback\/js\/ https:\/\/www.gstatic.com\/feedback\/js\/help\/prod\/service\/lazy.min.js https:\/\/www.gstatic.com\/inproduct_help\/api\/main.min.js https:\/\/www.gstatic.com\/inproduct_help\/chatsupport\/chatsupport_button_v2.js https:\/\/www.gstatic.com\/inproduct_help\/service\/lazy.min.js https:\/\/www.gstatic.com\/uservoice\/feedback\/client\/web\/live\/ https:\/\/www.gstatic.com\/uservoice\/surveys\/resources\/prod\/js\/survey\/ https:\/\/www.gstatic.com\/_\/mss\/boq-one-google\/_\/ https:\/\/www.gstatic.com\/og\/_\/js\/ https:\/\/apis.google.com\/js\/api.js https:\/\/apis.google.com\/js\/client.js https:\/\/www.googletagmanager.com\/gtag\/js https:\/\/www.google-analytics.com\/analytics.js https:\/\/www.googletagmanager.com\/gtag\/destination https:\/\/www.gstatic.com\/_\/mss\/boq-identity\/_\/js\/k=boq-identity.AccountsSignInUi.en_US.fJxSgns9910.es5.O\/ https:\/\/apis.google.com\/_\/scs\/abc-static\/_\/js\/ https:\/\/translate.googleapis.com\/_\/translate_http\/_\/js\/ https:\/\/www.gstatic.com\/recaptcha\/releases\/;report-uri \/v3\/signin\/_\/AccountsSignInUi\/cspreport\/fine-allowlist","count":29},{"content-security-policy-report-only":" report-uri \/report-csp-violation","count":25},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval' *.alicdn.com *.aliyun.com *.alyasset.com *.alcasset.com *.alipay.com log.mmstat.com ynuf.aliapp.org *.alipayobjects.com local.alipcsec.com:6691 appx appx-t2 oem-img.wanwang.xin; style-src 'unsafe-inline' *.alicdn.com *.aliyun.com *.alipay.com *.alipayobjects.com oem-img.wanwang.xin; font-src data: *.alicdn.com *.aliyun.com *.alipayobjects.com; frame-src *.aliyun.com *.alicdn.com *.aliyuncs.com *.alipay.com *.taobao.com *.alibabacloud.com *.1688.com xstore.insights.1688.com; report-uri \/\/www.aliyun.com\/api\/log\/csp-report","count":25},{"content-security-policy-report-only":" script-src  'unsafe-eval' 'unsafe-inline' 'self' 'report-sample' https:\/\/wb.ru https:\/\/*.wb.ru https:\/\/rwb.ru https:\/\/*.rwb.ru https:\/\/wildberries.ru https:\/\/*.wildberries.ru https:\/\/wb-basket.ru https:\/\/*.wb-basket.ru https:\/\/wbbasket.ru https:\/\/*.wbbasket.ru https:\/\/wbcontent.net https:\/\/*.wbcontent.net https:\/\/api-maps.yandex.ru https:\/\/yastatic.net https:\/\/wibes.ru https:\/\/*.wibes.ru https:\/\/7c6f0c1e-2b5d-4b11-9b4f-4d7d8f1e9a3a.wb.ru; worker-src 'self' blob: https:\/\/*.wbbasket.ru https:\/\/*.wbcontent.net; report-uri https:\/\/nel.wb.ru\/csp; report-to csp;","count":24},{"content-security-policy-report-only":" block-all-mixed-content; report-uri https:\/\/blog.hatena.ne.jp\/api\/csp_report","count":24},{"content-security-policy-report-only":" default-src https: wss: 'unsafe-inline' 'unsafe-eval'; font-src https: data: ; img-src  https: data: blob: ; media-src https: blob: ; worker-src https: blob: ; report-uri https:\/\/www.netflix.com\/log\/www\/csp\/1;","count":23},{"content-security-policy-report-only":" frame-ancestors 'self' https:\/\/skybox.eskypartners.com; report-uri https:\/\/esky.report-uri.com\/r\/t\/csp\/enforce","count":21},{"content-security-policy-report-only":" default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; report-uri  \/csp-report","count":21},{"content-security-policy-report-only":" object-src *.agriaffaires.pro *.machineryzone.pro *.agriaffaires.com *.machineryzone.fr *.machineryzone.com *.truckscorner.fr *.mbcore.io; frame-ancestors 'self' *.agriaffaires.pro *.machineryzone.pro *.agriaffaires.com *.machineryzone.fr *.machineryzone.com *.truckscorner.fr *.mbcore.io; report-uri https:\/\/api.leboncoin.fr\/api\/csp-report\/v1\/report\/;","count":20},{"content-security-policy-report-only":" default-src * 'unsafe-inline' 'unsafe-eval'; style-src 'unsafe-inline'; script-src 'none' 'report-sample'; connect-src 'none'; form-action 'none'; frame-src 'none'; worker-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests; block-all-mixed-content; report-uri https:\/\/csp.threatview.app\/report; report-to threatview","count":19},{"content-security-policy-report-only":" default-src 'self';","count":18},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval' blob: data: https:\/\/clients2.google.com\/gr\/gr_full_2.0.6.js https:\/\/clients2.google.com\/gr\/gr_sync.js https:\/\/payments.google.com\/payments\/v4\/js\/integrator.js https:\/\/payments.sandbox.google.com\/payments\/v4\/js\/integrator.js https:\/\/ssl.gstatic.com\/external_hosted\/lottie\/lottie.js https:\/\/translate.google.com\/translate_a\/element.js https:\/\/www.google-analytics.com\/analytics.js https:\/\/www.google.com\/recaptcha\/api.js https:\/\/www.googletagmanager.com\/gtag\/js https:\/\/www.googletagmanager.com\/gtag\/destination https:\/\/www.gstatic.com\/_\/mss\/boq-one-google\/_\/ https:\/\/www.gstatic.com\/og\/_\/js\/ https:\/\/apis.google.com\/js\/api.js https:\/\/apis.google.com\/js\/client.js https:\/\/www.google.com\/tools\/feedback\/chat_load.js https:\/\/www.google.com\/tools\/feedback\/help_api.js https:\/\/www.google.com\/tools\/feedback\/load.js https:\/\/www.google.com\/tools\/feedback\/open.js https:\/\/www.google.com\/tools\/feedback\/open_to_help_guide_lazy.js https:\/\/www.gstatic.com\/feedback\/js\/ https:\/\/www.gstatic.com\/feedback\/js\/help\/prod\/service\/lazy.min.js https:\/\/www.gstatic.com\/inproduct_help\/api\/main.min.js https:\/\/www.gstatic.com\/inproduct_help\/chatsupport\/chatsupport_button_v2.js https:\/\/www.gstatic.com\/inproduct_help\/service\/lazy.min.js https:\/\/www.gstatic.com\/uservoice\/feedback\/client\/web\/live\/ https:\/\/www.gstatic.com\/uservoice\/surveys\/resources\/prod\/js\/survey\/ https:\/\/www.google.com\/js\/bg\/ https:\/\/www.gstatic.com\/_\/boq-play\/_\/js\/k=boq-play.PlayStoreUi.en_US.wIhCn3mdPR4.2021.O\/ https:\/\/apis.google.com\/_\/scs\/abc-static\/_\/js\/ https:\/\/translate.googleapis.com\/_\/translate_http\/_\/js\/ https:\/\/www.gstatic.com\/recaptcha\/releases\/ https:\/\/payments.youtube.com\/payments\/v4\/js\/integrator.js https:\/\/payments.cloud.google\/payments\/v4\/js\/integrator.js;report-uri \/_\/PlayStoreUi\/cspreport\/fine-allowlist","count":18},{"content-security-policy-report-only":" default-src 'self' blob: https: data: mediastream: 'unsafe-eval' 'unsafe-inline';report-uri https:\/\/metrics.media-amazon.com\/","count":17},{"content-security-policy-report-only":" default-src 'self'","count":17},{"content-security-policy-report-only":" default-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'unsafe-inline'; connect-src 'self'; base-uri 'none'; form-action 'none'","count":15},{"content-security-policy-report-only":" default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: ; form-action 'none' ; frame-ancestors 'self' ; script-src 'unsafe-eval' 'unsafe-hashes' 'report-sample'; report-uri \/csp_report","count":14},{"content-security-policy-report-only":" default-src * 'self'; style-src * 'self' 'unsafe-inline'; img-src * 'self' data: blob:; script-src * 'self' about: 'unsafe-inline' 'unsafe-eval' data:; worker-src * 'self' data: blob: 'unsafe-eval' 'unsafe-inline'; frame-src * 'self'; media-src 'self' blob: *; font-src * 'self' data:; upgrade-insecure-requests; form-action 'self'; frame-ancestors 'self';report-uri \/contentsecuritypolicy\/report","count":14},{"content-security-policy-report-only":" script-src 'self'; object-src 'self'; report-to csp-endpoint;","count":13},{"content-security-policy-report-only":" connect-src 'self' *.google-analytics.com *.analytics.google.com https:\/\/stats.g.doubleclick.net *.facebook.com; font-src 'self' data: https:\/\/use.typekit.net https:\/\/fonts.gstatic.com; frame-src 'self' servedbyadbutler.com *.authorize.net *.paypal.com *.google.com www.book2look.com *.book2look.com *.booksense.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.facebook.com; img-src 'self' images.booksense.com *.booksense.com *.book2look.com data: https:\/\/www.googletagmanager.com *.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/googleads.g.doubleclick.net *.google.com *.googleusercontent.com *.gstatic.com https:\/\/encrypted-tbn0.gstatic.com *.facebook.com https:\/\/www.paypalobjects.com https:\/\/withfriends.co https:\/\/images-na.ssl-images-amazon.com https:\/\/m.media-amazon.com https:\/\/covers.openlibrary.org https:\/\/p.typekit.net https:\/\/i.ytimg.com; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/tagmanager.google.com *.doubleclick.net https:\/\/connect.facebook.net https:\/\/danjg53usxhfc.cloudfront.net code.jquery.com cdn.mxpnl.com https:\/\/www.paypal.com *.gstatic.com https:\/\/cdnjs.cloudflare.com https:\/\/use.typekit.net https:\/\/unpkg.com https:\/\/www.youtube.com https:\/\/s.ytimg.com cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/www.book2look.com https:\/\/www.google.com; script-src-elem 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/tagmanager.google.com *.doubleclick.net https:\/\/connect.facebook.net https:\/\/danjg53usxhfc.cloudfront.net code.jquery.com cdn.mxpnl.com https:\/\/www.paypal.com *.gstatic.com https:\/\/cdnjs.cloudflare.com https:\/\/use.typekit.net https:\/\/unpkg.com https:\/\/www.youtube.com https:\/\/s.ytimg.com cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/www.book2look.com https:\/\/www.google.com; style-src * 'report-sample' 'unsafe-inline'; base-uri 'self'; report-uri https:\/\/o4507465725640704.ingest.us.sentry.io\/api\/4510783202066432\/security\/?sentry_key=ea4d6ac5ddc8cc5a46f75f8ac24a565d","count":13},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.googleapis.com *.cloudflare.com https:\/\/*.usercentrics.eu *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com https:\/\/ss.kaffek.dk\/ https:\/\/ss.kaffek.at\/ https:\/\/ss.kaffek.be\/ https:\/\/ss.kaffek.bg\/ https:\/\/ss.kaffek.ch\/ https:\/\/ss.kaffek.co.uk\/ https:\/\/ss.kaffek.cz\/ https:\/\/ss.kaffek.de\/ https:\/\/ss.kaffek.es\/ https:\/\/ss.kaffek.fi\/ https:\/\/ss.kaffek.fr\/ https:\/\/ss.kaffek.gr\/ https:\/\/ss.kaffek.hu\/ https:\/\/ss.kaffek.ie\/ https:\/\/ss.kaffek.it\/ https:\/\/ss.kaffek.nl\/ https:\/\/ss.kaffek.no\/ https:\/\/ss.kaffek.pl\/ https:\/\/ss.kaffek.pt\/ https:\/\/ss.kaffek.ro\/ https:\/\/ss.kaffek.se\/ https:\/\/ss.kaffek.sk\/ https:\/\/stats.g.doubleclick.net https:\/\/scripts.clarity.ms https:\/\/e.clarity.ms https:\/\/a.clarity.ms\/collect https:\/\/www.google.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/capig.kaffekapslen.dk https:\/\/o.clarity.ms https:\/\/demo-3.conversionsapigateway.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * https:\/\/www.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src https:\/\/www.youtube.com\/ *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com bid.g.doubleclick.net https:\/\/www.google.com\/ *.braintreegateway.com *.paypal.com google.com *.google.com * www.google.com https:\/\/www.facebook.com https:\/\/googleads.g.doubleclick.net https:\/\/bid.g.doubleclick.net https:\/\/td.doubleclick.net\/ https:\/\/www.google.com.ua\/ https:\/\/www.google.bg\/ https:\/\/ct.pinterest.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/*.usercentrics.eu https:\/\/ss.kaffek.dk\/ https:\/\/ss.kaffek.at\/ https:\/\/ss.kaffek.be\/ https:\/\/ss.kaffek.bg\/ https:\/\/ss.kaffek.ch\/ https:\/\/ss.kaffek.co.uk\/ https:\/\/ss.kaffek.cz\/ https:\/\/ss.kaffek.de\/ https:\/\/ss.kaffek.es\/ https:\/\/ss.kaffek.fi\/ https:\/\/ss.kaffek.fr\/ https:\/\/ss.kaffek.gr\/ https:\/\/ss.kaffek.hu\/ https:\/\/ss.kaffek.ie\/ https:\/\/ss.kaffek.it\/ https:\/\/ss.kaffek.nl\/ https:\/\/ss.kaffek.no\/ https:\/\/ss.kaffek.pl\/ https:\/\/ss.kaffek.pt\/ https:\/\/ss.kaffek.ro\/ https:\/\/ss.kaffek.se\/ https:\/\/ss.kaffek.sk\/ https:\/\/stats.g.doubleclick.net https:\/\/scripts.clarity.ms https:\/\/e.clarity.ms https:\/\/a.clarity.ms\/collect https:\/\/www.google.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/connect.facebook.net https:\/\/capig.kaffekapslen.dk https:\/\/o.clarity.ms https:\/\/demo-3.conversionsapigateway.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https:\/\/images.unsplash.com *.googleapis.com https:\/\/www.google.com https:\/\/bat.bing.com\/ https:\/\/www.facebook.com https:\/\/cdn.kaffekapslen.be https:\/\/www.google.com.ua\/ https:\/\/www.google.bg\/ https:\/\/www.google.dk\/ https:\/\/googleads.g.doubleclick.net https:\/\/bid.g.doubleclick.net https:\/\/kaffekapslen.dk\/ https:\/\/kaffekapslen.media https:\/\/www.googletagmanager.com\/ https:\/\/app.usercentrics.eu\/ https:\/\/*.usercentrics.eu https:\/\/connect.facebook.net\/ https:\/\/firebasestorage.googleapis.com https:\/\/ss.kaffek.dk\/ https:\/\/ss.kaffek.at\/ https:\/\/ss.kaffek.be\/ https:\/\/ss.kaffek.bg\/ https:\/\/ss.kaffek.ch\/ https:\/\/ss.kaffek.co.uk\/ https:\/\/ss.kaffek.cz\/ https:\/\/ss.kaffek.de\/ https:\/\/ss.kaffek.es\/ https:\/\/ss.kaffek.fi\/ https:\/\/ss.kaffek.fr\/ https:\/\/ss.kaffek.gr\/ https:\/\/ss.kaffek.hu\/ https:\/\/ss.kaffek.ie\/ https:\/\/ss.kaffek.it\/ https:\/\/ss.kaffek.nl\/ https:\/\/ss.kaffek.no\/ https:\/\/ss.kaffek.pl\/ https:\/\/ss.kaffek.pt\/ https:\/\/ss.kaffek.ro\/ https:\/\/ss.kaffek.se\/ https:\/\/ss.kaffek.sk\/ https:\/\/stats.g.doubleclick.net https:\/\/scripts.clarity.ms https:\/\/e.clarity.ms https:\/\/a.clarity.ms\/collect https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/connect.facebook.net https:\/\/capig.kaffekapslen.dk https:\/\/o.clarity.ms https:\/\/demo-3.conversionsapigateway.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com data: 'self' 'unsafe-inline'; script-src *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https:\/\/maps.googleapis.com *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ cdn.jsdelivr.net https:\/\/kaffekapslen.media\/ https:\/\/app.usercentrics.eu\/ https:\/\/connect.facebook.net\/ https:\/\/*.usercentrics.eu https:\/\/bat.bing.com\/ https:\/\/www.clarity.ms\/ *.avada.io *.shopify.com https:\/\/ss.kaffek.dk\/ https:\/\/ss.kaffek.at\/ https:\/\/ss.kaffek.be\/ https:\/\/ss.kaffek.bg\/ https:\/\/ss.kaffek.ch\/ https:\/\/ss.kaffek.co.uk\/ https:\/\/ss.kaffek.cz\/ https:\/\/ss.kaffek.de\/ https:\/\/ss.kaffek.es\/ https:\/\/ss.kaffek.fi\/ https:\/\/ss.kaffek.fr\/ https:\/\/ss.kaffek.gr\/ https:\/\/ss.kaffek.hu\/ https:\/\/ss.kaffek.ie\/ https:\/\/ss.kaffek.it\/ https:\/\/ss.kaffek.nl\/ https:\/\/ss.kaffek.no\/ https:\/\/ss.kaffek.pl\/ https:\/\/ss.kaffek.pt\/ https:\/\/ss.kaffek.ro\/ https:\/\/ss.kaffek.se\/ https:\/\/ss.kaffek.sk\/ https:\/\/stats.g.doubleclick.net https:\/\/scripts.clarity.ms https:\/\/e.clarity.ms https:\/\/a.clarity.ms\/collect https:\/\/www.google.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/capig.kaffekapslen.dk https:\/\/o.clarity.ms https:\/\/demo-3.conversionsapigateway.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app cdn.jsdelivr.net *.cloudflare.com https:\/\/*.usercentrics.eu *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com https:\/\/ss.kaffek.dk\/ https:\/\/ss.kaffek.at\/ https:\/\/ss.kaffek.be\/ https:\/\/ss.kaffek.bg\/ https:\/\/ss.kaffek.ch\/ https:\/\/ss.kaffek.co.uk\/ https:\/\/ss.kaffek.cz\/ https:\/\/ss.kaffek.de\/ https:\/\/ss.kaffek.es\/ https:\/\/ss.kaffek.fi\/ https:\/\/ss.kaffek.fr\/ https:\/\/ss.kaffek.gr\/ https:\/\/ss.kaffek.hu\/ https:\/\/ss.kaffek.ie\/ https:\/\/ss.kaffek.it\/ https:\/\/ss.kaffek.nl\/ https:\/\/ss.kaffek.no\/ https:\/\/ss.kaffek.pl\/ https:\/\/ss.kaffek.pt\/ https:\/\/ss.kaffek.ro\/ https:\/\/ss.kaffek.se\/ https:\/\/ss.kaffek.sk\/ https:\/\/stats.g.doubleclick.net https:\/\/scripts.clarity.ms https:\/\/e.clarity.ms https:\/\/a.clarity.ms\/collect https:\/\/www.google.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/capig.kaffekapslen.dk https:\/\/o.clarity.ms https:\/\/demo-3.conversionsapigateway.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.googleapis.com https:\/\/www.facebook.com eu.playground.klarnaevt.com https:\/\/www.kaffekapslen.dk\/ https:\/\/az-apim-st-kaffekapslen.azure-api.net\/ api.kaffekapslen.com https:\/\/www.google.com https:\/\/googleads.g.doubleclick.net https:\/\/bat.bing.com\/ https:\/\/kaffekapslen.matomo.cloud\/ https:\/\/api.usercentrics.eu\/ https:\/\/*.usercentrics.eu https:\/\/pagead2.googlesyndication.com\/ https:\/\/graphql.usercentrics.eu\/graphql https:\/\/monitor.kaffekapslen.com\/ https:\/\/google.com\/pay https:\/\/region1.google-analytics.com https:\/\/www.google.bg\/ https:\/\/capig.kaffekapslen.dk\/ https:\/\/kaffekapslen.media https:\/\/get.geojs.io *.avada.io https:\/\/ss.kaffek.dk\/ https:\/\/ss.kaffek.at\/ https:\/\/ss.kaffek.be\/ https:\/\/ss.kaffek.bg\/ https:\/\/ss.kaffek.ch\/ https:\/\/ss.kaffek.co.uk\/ https:\/\/ss.kaffek.cz\/ https:\/\/ss.kaffek.de\/ https:\/\/ss.kaffek.es\/ https:\/\/ss.kaffek.fi\/ https:\/\/ss.kaffek.fr\/ https:\/\/ss.kaffek.gr\/ https:\/\/ss.kaffek.hu\/ https:\/\/ss.kaffek.ie\/ https:\/\/ss.kaffek.it\/ https:\/\/ss.kaffek.nl\/ https:\/\/ss.kaffek.no\/ https:\/\/ss.kaffek.pl\/ https:\/\/ss.kaffek.pt\/ https:\/\/ss.kaffek.ro\/ https:\/\/ss.kaffek.se\/ https:\/\/ss.kaffek.sk\/ https:\/\/stats.g.doubleclick.net https:\/\/scripts.clarity.ms https:\/\/e.clarity.ms https:\/\/a.clarity.ms\/collect https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/connect.facebook.net https:\/\/capig.kaffekapslen.dk https:\/\/o.clarity.ms https:\/\/demo-3.conversionsapigateway.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":12},{"content-security-policy-report-only":" default-src data: blob: about: 'self' 'unsafe-inline' 'unsafe-eval' https: wss:; report-uri \/csp\/report?always;","count":11},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.gstatic.com https:\/\/www.awin1.com https:\/\/lantern.roeyecdn.com https:\/\/tagmanager.google.com https:\/\/cdn.trustcommander.net https:\/\/www.dwin1.com https:\/\/www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/bat.bing.com https:\/\/*.doubleclick.net https:\/\/www.axa-video.de https:\/\/*.visualwebsiteoptimizer.com https:\/\/app.vwo.com https:\/\/www.google.com https:\/\/platform.commandersact.com https:\/\/connect.facebook.net https:\/\/*.aklamio.com blob: https:\/\/ct.pinterest.com https:\/\/s.pinimg.com https:\/\/acdn.adnxs.com https:\/\/ib.adnxs.com https:\/\/snap.licdn.com https:\/\/data.dbv.de ;style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/app.vwo.com https:\/\/s3.amazonaws.com https:\/\/googletagmanager.com https:\/\/www.googletagmanager.com ;base-uri 'self'; object-src 'none'; default-src 'self' blob: data: https:\/\/fonts.gstatic.com\/; form-action 'self'; frame-src https:\/\/www.awin1.com https:\/\/app.vwo.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/entry.axa-de.intraxa\/ https:\/\/entry.axa.de https:\/\/www.axa-video.de https:\/\/www.axa.de https:\/\/inte.axa.de https:\/\/*.doubleclick.net https:\/\/cdn.trustcommander.net https:\/\/www.dwin1.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/td.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/www.google.com https:\/\/ct.pinterest.com https:\/\/googletagmanager.com https:\/\/insight.adsrvr.org 'self' https:\/\/www.googletagmanager.com https:\/\/data.dbv.de https:\/\/www.youtube.com; img-src 'self' data: https:\/\/*.visualwebsiteoptimizer.com https:\/\/chart.googleapis.com https:\/\/wingify-assets.s3.amazonaws.com https:\/\/app.vwo.com https:\/\/track.adform.net https:\/\/ad.doubleclick.net https:\/\/www.facebook.com https:\/\/bat.bing.com https:\/\/*.google.com https:\/\/www.google.de https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/googleads.g.doubleclick.net *.doubleclick.net https:\/\/i.ytimg.com https:\/\/maps.gstatic.com https:\/\/maps.googleapis.com https:\/\/www.financeads.net https:\/\/www.aklamio.com\/ https:\/\/ct.pinterest.com https:\/\/ib.adnxs.com https:\/\/*.ads.linkedin.com https:\/\/data.dbv.de; connect-src 'self' https:\/\/*.visualwebsiteoptimizer.com https:\/\/app.vwo.com https:\/\/*.googlesyndication.com https:\/\/*.google.com https:\/\/*.google.de https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/www.google-analytics.com https:\/\/*.doubleclick.net https:\/\/bat.bing.com https:\/\/privacy.trustcommander.net https:\/\/privacy.commander1.net https:\/\/privacy.commander1.com https:\/\/www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/fonts.googleapis.com https:\/\/*.dbv.de https:\/\/cloud.service.aerzteversicherung.de https:\/\/mcdyr4395tgnrcnr8bt5wsrgh-11.pub.sfmc-content.com https:\/\/*.aklamio.com https:\/\/www.googleadservices.com https:\/\/ct.pinterest.com https:\/\/ib.adnxs.com https:\/\/acdn.adnxs.com https:\/\/www.facebook.com https:\/\/*.ads.linkedin.com https:\/\/p.adsymptotic.com https:\/\/*.linkedin.oribi.io https:\/\/sjs.bizographics.com;;report-uri \/site\/dbv-de\/cspReportOnly","count":11},{"content-security-policy-report-only":" report-uri \/report-csp-violation; upgrade-insecure-requests","count":10},{"content-security-policy-report-only":" default-src https: 'self' *.facebook.net *.googletagmanager.com *.bizibly.com *.doubleclick.net https:\/\/*.intercomcdn.com https:\/\/*.datadoghq-browser-agent.com; font-src 'self' https:\/\/*.intercomcdn.com *.fontawesome.com data:; base-uri 'none'; object-src data: 'unsafe-eval'; img-src 'self' data: * ; script-src https: 'self' 'unsafe-eval' 'unsafe-inline' http:\/\/*.google-analytics.com http:\/\/*.gstatic.com http:\/\/*.bing.com http:\/\/*.googleadservices.com http:\/\/*.hs-scripts.com http:\/\/*.bizible.com *.facebook.net *.googletagmanager.com http:\/\/*.fontawesome.com http:\/\/*.outbrain.com blob:; style-src https: 'self' *.fontawesome.com 'unsafe-inline'; report-uri \/rest\/trackers\/csp;","count":10},{"content-security-policy-report-only":" default-src https: data: 'unsafe-inline' 'unsafe-eval'","count":10},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' https:\/\/i.yippy.com https:\/\/s.yippy.com https:\/\/z.yippy.com data:; font-src 'self' https:\/\/z.yippy.com; connect-src 'self' https:\/\/cloudflareinsights.com; media-src 'self' https:\/\/s.yippy.com; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; form-action 'self'; upgrade-insecure-requests","count":10},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/*.newrelic.com https:\/\/*.nr-data.net https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/www.googletagmanager.com; font-src 'self' https:\/\/themes.googleusercontent.com fonts.gstatic.com https:\/\/cdn.jsdelivr.net data:; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.vimeo.com; img-src 'self' https:\/\/translate.google.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/cdn.jsdelivr.net https:\/\/i.ytimg.com https:\/\/www.gstatic.com https:\/\/maps.gstatic.com https:\/\/maps.googleapis.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com data:; script-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.newrelic.com https:\/\/*.nr-data.net https:\/\/*.googletagmanager.com cdn.jsdelivr.net cdnjs.cloudflare.com https:\/\/cdn.ckeditor.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com maps.googleapis.com unpkg.com; script-src-attr 'self'; script-src-elem 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.newrelic.com https:\/\/*.nr-data.net cdn.jsdelivr.net cdnjs.cloudflare.com https:\/\/cdn.ckeditor.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com maps.googleapis.com unpkg.com; style-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com unpkg.com; block-all-mixed-content","count":10},{"content-security-policy-report-only":" default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.dealerspace.ai https:\/\/*.appdealersites.com.br https:\/\/*.dealersites.com.br https:\/\/dealersites-content.com https:\/\/dealersites-content.s3.amazonaws.com https:\/\/dealersites-content.s3.us-east-1.amazonaws.com https:\/\/phonetrack-static.s3.sa-east-1.amazonaws.com https:\/\/s3.agsistema.net https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.googleadservices.com https:\/\/*.doubleclick.net https:\/\/connect.facebook.net https:\/\/*.facebook.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.rdstation.com.br https:\/\/*.clarity.ms https:\/\/cdn.cookielaw.org https:\/\/*.onetrust.com https:\/\/*.youtube.com https:\/\/*.youtube-nocookie.com https:\/\/*.ytimg.com https:\/\/*.privacytools.com.br https:\/\/*.goadopt.io https:\/\/*.securiti.ai https:\/\/*.qualicookies.com.br https:\/\/*.dponet.com.br https:\/\/*.edna.center https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/*.mouseflow.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/d335luupugsy2.cloudfront.net https:\/\/snap.licdn.com https:\/\/px.ads.linkedin.com https:\/\/*.leadster.com.br https:\/\/*.leadforce.com.br https:\/\/embed.tawk.to https:\/\/*.permeets.com https:\/\/*.mobiauto.com.br https:\/\/*.swipetospin.com https:\/\/cdn.scaleflex.it https:\/\/cdnjs.cloudflare.com https:\/\/code.jquery.com https:\/\/cdn.jsdelivr.net;style-src 'self' 'unsafe-inline' https:\/\/*.dealerspace.ai https:\/\/*.appdealersites.com.br https:\/\/*.dealersites.com.br https:\/\/dealersites-content.com https:\/\/dealersites-content.s3.amazonaws.com https:\/\/dealersites-content.s3.us-east-1.amazonaws.com https:\/\/phonetrack-static.s3.sa-east-1.amazonaws.com https:\/\/s3.agsistema.net https:\/\/cdn.jsdelivr.net;img-src 'self' data: blob: https:;font-src 'self' data: https:;object-src 'none';media-src 'self' blob: https:;frame-src 'self' https:\/\/*.dealerspace.ai https:\/\/*.appdealersites.com.br https:\/\/*.dealersites.com.br https:\/\/dealersites-content.com https:\/\/dealersites-content.s3.amazonaws.com https:\/\/dealersites-content.s3.us-east-1.amazonaws.com https:\/\/phonetrack-static.s3.sa-east-1.amazonaws.com https:\/\/s3.agsistema.net https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.googleadservices.com https:\/\/*.doubleclick.net https:\/\/connect.facebook.net https:\/\/*.facebook.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.rdstation.com.br https:\/\/*.clarity.ms https:\/\/cdn.cookielaw.org https:\/\/*.onetrust.com https:\/\/*.youtube.com https:\/\/*.youtube-nocookie.com https:\/\/*.ytimg.com https:\/\/*.privacytools.com.br https:\/\/*.goadopt.io https:\/\/*.securiti.ai https:\/\/*.qualicookies.com.br https:\/\/*.dponet.com.br https:\/\/*.edna.center https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/*.mouseflow.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/d335luupugsy2.cloudfront.net https:\/\/snap.licdn.com https:\/\/px.ads.linkedin.com https:\/\/*.leadster.com.br https:\/\/*.leadforce.com.br https:\/\/embed.tawk.to https:\/\/*.permeets.com https:\/\/*.mobiauto.com.br https:\/\/*.swipetospin.com https:\/\/cdn.scaleflex.it https:\/\/cdnjs.cloudflare.com https:\/\/code.jquery.com https:\/\/cdn.jsdelivr.net;frame-ancestors 'self';connect-src 'self' https:\/\/*.dealerspace.ai https:\/\/*.appdealersites.com.br https:\/\/*.dealersites.com.br https:\/\/dealersites-content.com https:\/\/dealersites-content.s3.amazonaws.com https:\/\/dealersites-content.s3.us-east-1.amazonaws.com https:\/\/phonetrack-static.s3.sa-east-1.amazonaws.com https:\/\/s3.agsistema.net https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.googleadservices.com https:\/\/*.doubleclick.net https:\/\/connect.facebook.net https:\/\/*.facebook.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.rdstation.com.br https:\/\/*.clarity.ms https:\/\/cdn.cookielaw.org https:\/\/*.onetrust.com https:\/\/*.youtube.com https:\/\/*.youtube-nocookie.com https:\/\/*.ytimg.com https:\/\/*.privacytools.com.br https:\/\/*.goadopt.io https:\/\/*.securiti.ai https:\/\/*.qualicookies.com.br https:\/\/*.dponet.com.br https:\/\/*.edna.center https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/*.mouseflow.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/d335luupugsy2.cloudfront.net https:\/\/snap.licdn.com https:\/\/px.ads.linkedin.com https:\/\/*.leadster.com.br https:\/\/*.leadforce.com.br https:\/\/embed.tawk.to https:\/\/*.permeets.com https:\/\/*.mobiauto.com.br https:\/\/*.swipetospin.com https:\/\/cdn.scaleflex.it https:\/\/cdnjs.cloudflare.com https:\/\/code.jquery.com https:\/\/cdn.jsdelivr.net;worker-src 'self' blob:;form-action 'self';base-uri 'self'","count":10},{"content-security-policy-report-only":" default-src https: 'unsafe-inline' 'unsafe-eval' wss: ;img-src https: data: blob: ; font-src https: data:; form-action https: http:\/\/www.last.fm","count":9},{"content-security-policy-report-only":" script-src 'self'","count":9},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/bat.bing.com https:\/\/connect.facebook.net https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/ct.pinterest.com https:\/\/googleads.g.doubleclick.net https:\/\/s.pinimg.com https:\/\/script.hotjar.com https:\/\/snap.licdn.com https:\/\/static.ads-twitter.com https:\/\/static.hotjar.com https:\/\/unpkg.com https:\/\/www.googletagmanager.com https:\/\/js.hsforms.net https:\/\/js-eu1.hs-scripts.com https:\/\/js-na1.hs-scripts.com https:\/\/js.hs-analytics.net https:\/\/js-eu1.hs-analytics.net https:\/\/js.hubspot.com https:\/\/js-eu1.hubspot.com https:\/\/js.hs-banner.com https:\/\/js-eu1.hs-banner.com https:\/\/js.hsadspixel.net https:\/\/cdn.engage.teamviewer.com https:\/\/apps.mypurecloud.de https:\/\/directsearch.velux.tech https:\/\/exp-api.velux.at https:\/\/exp-api.velux.de https:\/\/exp-api.velux.pl https:\/\/exp-api.velux.hu https:\/\/exp-api.velux.nl https:\/\/exp-api.velux.ro https:\/\/sgtm.velux.at https:\/\/w.usabilla.com https:\/\/apis.google.com https:\/\/static.hsappstatic.net https:\/\/*.velux.com https:\/\/*.velux.co.uk https:\/\/*.velux.de https:\/\/*.velux.fr https:\/\/*.velux.dk https:\/\/*.velux.nl https:\/\/*.velux.be https:\/\/*.velux.no https:\/\/*.velux.se https:\/\/*.velux.pl https:\/\/*.velux.ch https:\/\/*.velux.hu https:\/\/*.velux.cz https:\/\/*.velux.hr https:\/\/*.velux.ro https:\/\/*.velux.it https:\/\/*.velux.es https:\/\/*.velux.pt https:\/\/*.velux.ie https:\/\/*.velux.ca https:\/\/*.velux.com.au https:\/\/*.velux.co.nz https:\/\/*.velux.co.jp https:\/\/*.velux.ba https:\/\/*.velux.bg https:\/\/*.velux.ee https:\/\/*.velux.lt https:\/\/*.velux.lv https:\/\/*.velux.rs https:\/\/*.velux.si https:\/\/*.velux.sk https:\/\/*.velux.com.tr https:\/\/*.velux.ua https:\/\/*.velux.lat https:\/\/*.veluxusa.com https:\/\/scripts.clarity.ms https:\/\/www.clarity.ms https:\/\/embed.typeform.com https:\/\/anfragen.velux.at https:\/\/d1hgczpbubj217.cloudfront.net https:\/\/exp-api.velux.fr https:\/\/sgtm.velux.de https:\/\/sgtm.velux.fr https:\/\/pixels.omnitagjs.com https:\/\/www.youtube.com https:\/\/145747460.fs1.hubspotusercontent-eu1.net https:\/\/lottingem.com https:\/\/www.google.com https:\/\/ads-engagement.presage.io https:\/\/www.gstatic.com https:\/\/secured-pixel.com https:\/\/sgtm.velux.co.uk https:\/\/3001.scriptcdn.net https:\/\/js-eu1.hsforms.net https:\/\/p.teads.tv https:\/\/recaptcha.net https:\/\/sgtm.velux.nl https:\/\/tafopo.navahididi.com https:\/\/www.gstatic.cn; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/directsearch.velux.tech https:\/\/cdn.chatvisor.com https:\/\/cdn.honey.io https:\/\/www.gstatic.com; img-src 'self' data: blob: https:\/\/*.google.sk https:\/\/learnupon.s3.eu-west-1.amazonaws.com https:\/\/ad.doubleclick.net https:\/\/adservice.google.com https:\/\/analytics.twitter.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/contenthub.velux.com https:\/\/imgsct.cookiebot.com https:\/\/px.ads.linkedin.com https:\/\/px4.ads.linkedin.com Cetco https:\/\/track.hubspot.com https:\/\/forms-na1.hsforms.com https:\/\/perf-na1.hsforms.com https:\/\/perf-eu1.hsforms.com https:\/\/region1.analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/www.googletagmanager.com https:\/\/www.googleadservices.com https:\/\/thumbnails.shelf-eu.com https:\/\/brxcdn.com https:\/\/i.ytimg.com https:\/\/joko-mobile-app-media.s3.eu-west-1.amazonaws.com https:\/\/track-eu1.hubspot.com https:\/\/www.facebook.com https:\/\/analytics.google.com https:\/\/www.bing.com https:\/\/l.facebook.com https:\/\/www.google.com https:\/\/www.google.hu https:\/\/www.google.fr https:\/\/www.google.de https:\/\/www.google.co.uk https:\/\/www.google.nl https:\/\/www.google.dk https:\/\/www.google.no https:\/\/www.google.se https:\/\/www.google.pl https:\/\/www.google.ch https:\/\/www.google.it https:\/\/www.google.es https:\/\/www.google.pt https:\/\/www.google.ie https:\/\/www.google.ca https:\/\/www.google.com.au https:\/\/www.google.co.nz https:\/\/www.google.co.jp https:\/\/www.google.ba https:\/\/www.google.bg https:\/\/www.google.ee https:\/\/www.google.lt https:\/\/www.google.lv https:\/\/www.google.rs https:\/\/www.google.si https:\/\/www.google.sk https:\/\/www.google.com.tr https:\/\/www.google.com.ua https:\/\/www.google.at https:\/\/www.google.be https:\/\/www.google.cz https:\/\/www.google.ro https:\/\/www.google.hr https:\/\/*.velux.com https:\/\/*.velux.co.uk https:\/\/*.velux.de https:\/\/*.velux.fr https:\/\/*.velux.dk https:\/\/*.velux.nl https:\/\/*.velux.be https:\/\/*.velux.no https:\/\/*.velux.se https:\/\/*.velux.pl https:\/\/*.velux.ch https:\/\/*.velux.hu https:\/\/*.velux.cz https:\/\/*.velux.hr https:\/\/*.velux.ro https:\/\/*.velux.it https:\/\/*.velux.es https:\/\/*.velux.pt https:\/\/*.velux.ie https:\/\/*.velux.ca https:\/\/*.velux.com.au https:\/\/*.velux.co.nz https:\/\/*.velux.co.jp https:\/\/*.velux.ba https:\/\/*.velux.bg https:\/\/*.velux.ee https:\/\/*.velux.lt https:\/\/*.velux.lv https:\/\/*.velux.rs https:\/\/*.velux.si https:\/\/*.velux.sk https:\/\/*.velux.com.tr https:\/\/*.velux.ua https:\/\/*.velux.lat https:\/\/*.veluxusa.com https:\/\/secure.adnxs.com https:\/\/bat.bing.net https:\/\/forms-eu1.hsforms.com https:\/\/consent.cookiebot.com https:\/\/www.google.com.ph https:\/\/www.google.co.za https:\/\/25713015.fs1.hubspotusercontent-eu1.net https:\/\/www.google.fi https:\/\/www.google.com.eg https:\/\/www.google.com.my https:\/\/c.clarity.ms https:\/\/ade.googlesyndication.com https:\/\/www.google.lu https:\/\/www.google.co.in https:\/\/www.google.co.th https:\/\/fonts.gstatic.com https:\/\/www.google.cl https:\/\/www.google.com.vn https:\/\/www.google.com.lb https:\/\/www.google.co.tz https:\/\/www.google.mk https:\/\/weshare.23video.com https:\/\/translate.google.com https:\/\/www.google.ru https:\/\/www.google.com.bd https:\/\/www.google.com.sa https:\/\/www.google.com.mt https:\/\/www.google.gg https:\/\/ads-engagement.presage.io https:\/\/www.google.co.kr https:\/\/www.google.lk https:\/\/www.google.me https:\/\/www.google.is https:\/\/track.adform.net https:\/\/www.google.co.ao https:\/\/www.google.ae https:\/\/www.google.com.kw https:\/\/www.google.com.hk https:\/\/sgtm.velux.at https:\/\/www.google.md https:\/\/connect.facebook.net https:\/\/www.google.co.ma https:\/\/www.google.je https:\/\/cdn.honey.io https:\/\/hawk-tracker.360yield.com https:\/\/p1.outbrain.com https:\/\/www.google.al https:\/\/www.google.by https:\/\/www.google.co.id https:\/\/www.google.co.il https:\/\/www.google.co.uz https:\/\/www.google.com.cy https:\/\/www.google.com.gh https:\/\/www.google.dz https:\/\/www.google.ge https:\/\/www.google.gr https:\/\/www.google.im https:\/\/www.google.tn https:\/\/cdn.engage.teamviewer.com https:\/\/ersatzteile.veluxshop.de https:\/\/leepraktic.net https:\/\/log.pinterest.com https:\/\/www.google.co.cr https:\/\/www.google.com.gi https:\/\/www.google.com.mx https:\/\/www.google.com.np https:\/\/www.google.com.sg https:\/\/www.google.li https:\/\/www.google.sm https:\/\/www.google.sr https:\/\/yastatic.net https:\/\/t.co https:\/\/analytics.twitter.com; connect-src 'self' data: https:\/\/js.monitor.azure.com https:\/\/northeurope-2.in.applicationinsights.azure.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/consentcdn.cookiebot.com https:\/\/ct.pinterest.com https:\/\/px.ads.linkedin.com https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/www.facebook.com https:\/\/pagead2.googlesyndication.com https:\/\/api-cdn.mypurecloud.de https:\/\/api.mypurecloud.de https:\/\/webmessaging.mypurecloud.de https:\/\/engage.teamviewer.com wss:\/\/engage.teamviewer.com https:\/\/cdn.engage.teamviewer.com https:\/\/cta-service-cms2.hubspot.com https:\/\/cta-eu1.hubspot.com https:\/\/forms.hsforms.com https:\/\/api.hubapi.com https:\/\/hubspot-forms-static-embed.s3.amazonaws.com https:\/\/analytics.twitter.com https:\/\/t.co https:\/\/vc.hotjar.io https:\/\/content.hotjar.io https:\/\/metrics.hotjar.io wss:\/\/ws.hotjar.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/analytics.videomyjob.com https:\/\/browser.pipe.aria.microsoft.com https:\/\/d1hgczpbubj217.cloudfront.net https:\/\/translate.googleapis.com https:\/\/translate.google.com https:\/\/apis.google.com https:\/\/sgtm.velux.at https:\/\/sgtm.velux.de https:\/\/sgtm.velux.pl https:\/\/sgtm.velux.co.uk https:\/\/sgtm.velux.fr https:\/\/sgtm.velux.nl https:\/\/sgtm.velux.cz https:\/\/sgtm.velux.it https:\/\/sgtm.velux.es https:\/\/sgtm.velux.dk https:\/\/sgtm.velux.hr https:\/\/sgtm.velux.hu https:\/\/sgtm.velux.ee https:\/\/exp-api.velux.at https:\/\/exp-api.velux.de https:\/\/exp-api.velux.pl https:\/\/exp-api.velux.hu https:\/\/exp-api.velux.nl https:\/\/exp-api.velux.ro https:\/\/directsearch.velux.tech https:\/\/anfragen.velux.at https:\/\/log.pinterest.com https:\/\/*.fls.doubleclick.net https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/*.velux.com https:\/\/*.velux.co.uk https:\/\/*.velux.de https:\/\/*.velux.fr https:\/\/*.velux.dk https:\/\/*.velux.nl https:\/\/*.velux.be https:\/\/*.velux.no https:\/\/*.velux.se https:\/\/*.velux.pl https:\/\/*.velux.ch https:\/\/*.velux.hu https:\/\/*.velux.cz https:\/\/*.velux.hr https:\/\/*.velux.ro https:\/\/*.velux.it https:\/\/*.velux.es https:\/\/*.velux.pt https:\/\/*.velux.ie https:\/\/*.velux.ca https:\/\/*.velux.com.au https:\/\/*.velux.co.nz https:\/\/*.velux.co.jp https:\/\/*.velux.ba https:\/\/*.velux.bg https:\/\/*.velux.ee https:\/\/*.velux.lt https:\/\/*.velux.lv https:\/\/*.velux.rs https:\/\/*.velux.si https:\/\/*.velux.sk https:\/\/*.velux.com.tr https:\/\/*.velux.ua https:\/\/*.velux.lat https:\/\/*.veluxusa.com https:\/\/*.clarity.ms wss:\/\/engage.teamviewer.com https:\/\/form.typeform.com https:\/\/local.adblock360.com https:\/\/fileupload.mypurecloud.de https:\/\/forms-eu1.hsforms.com https:\/\/exp-api.velux.cz https:\/\/perf-na1.hsforms.com https:\/\/ad.doubleclick.net https:\/\/consent.cookiebot.com https:\/\/wdd-velux-designs.azurewebsites.net https:\/\/bded8a3c6ae-1-1053047382554.us-central1.run.app https:\/\/fast.wistia.net https:\/\/md-eecad2978f7a43f5b7838c919258e6de.ecs.us-east-2.on.aws https:\/\/s.pinimg.com https:\/\/api.mf.webcontentassessor.com https:\/\/dd.binsiad.com https:\/\/gadstat.com https:\/\/perf-eu1.hsforms.com https:\/\/singleview.site; frame-src 'self' blob: https:\/\/consentcdn.cookiebot.com https:\/\/fast.wistia.net https:\/\/leadmanagement.velux.co.uk https:\/\/td.doubleclick.net https:\/\/weshare.23video.com https:\/\/www.googletagmanager.com https:\/\/ct.pinterest.com https:\/\/engage.teamviewer.com https:\/\/apps.mypurecloud.de https:\/\/www.facebook.com https:\/\/meetings.hubspot.com https:\/\/meetings-eu1.hubspot.com https:\/\/forms-eu1.hsforms.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/d1hgczpbubj217.cloudfront.net https:\/\/embed.typeform.com https:\/\/sgtm.velux.at https:\/\/sgtm.velux.de https:\/\/sgtm.velux.pl https:\/\/sgtm.velux.co.uk https:\/\/sgtm.velux.fr https:\/\/sgtm.velux.nl https:\/\/sgtm.velux.cz https:\/\/sgtm.velux.it https:\/\/sgtm.velux.es https:\/\/sgtm.velux.dk https:\/\/sgtm.velux.hr https:\/\/sgtm.velux.hu https:\/\/sgtm.velux.ee https:\/\/*.velux.com https:\/\/*.velux.co.uk https:\/\/*.velux.de https:\/\/*.velux.fr https:\/\/*.velux.dk https:\/\/*.velux.nl https:\/\/*.velux.be https:\/\/*.velux.no https:\/\/*.velux.se https:\/\/*.velux.pl https:\/\/*.velux.ch https:\/\/*.velux.hu https:\/\/*.velux.cz https:\/\/*.velux.hr https:\/\/*.velux.ro https:\/\/*.velux.it https:\/\/*.velux.es https:\/\/*.velux.pt https:\/\/*.velux.ie https:\/\/*.velux.ca https:\/\/*.velux.com.au https:\/\/*.velux.co.nz https:\/\/*.velux.co.jp https:\/\/*.velux.ba https:\/\/*.velux.bg https:\/\/*.velux.ee https:\/\/*.velux.lt https:\/\/*.velux.lv https:\/\/*.velux.rs https:\/\/*.velux.si https:\/\/*.velux.sk https:\/\/*.velux.com.tr https:\/\/*.velux.ua https:\/\/*.velux.lat https:\/\/*.veluxusa.com https:\/\/embed.wistia.com https:\/\/gateway.zscloud.net https:\/\/outlook.office.com https:\/\/9724945.fls.doubleclick.net https:\/\/caclk.com https:\/\/anfragen.velux.at https:\/\/gateway.zscalertwo.net https:\/\/google.com https:\/\/9981267.fls.doubleclick.net https:\/\/bcsgsrv.com https:\/\/form.typeform.com https:\/\/forms.hsforms.com https:\/\/velux.typeform.com http:\/\/weshare.23video.com https:\/\/9981258.fls.doubleclick.net https:\/\/my.velux.at https:\/\/veluxb2c.b2clogin.com https:\/\/www.recaptcha.net; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/directsearch.velux.tech https:\/\/cdn.chatvisor.com https:\/\/velux-transform.pages.dev https:\/\/velcdn.azureedge.net https:\/\/assets.website-files.com https:\/\/oc-cdn-public-eur.azureedge.net https:\/\/*.velux.com https:\/\/frontend-cdn.perplexity.ai https:\/\/cdn.scite.ai https:\/\/brxcdn.com https:\/\/static.shopback.com https:\/\/res-1.cdn.office.net https:\/\/assets.merci-app.com https:\/\/cdn.yiban.io; media-src 'self' blob: data: https:\/\/contenthub.velux.com https:\/\/*.velux.com https:\/\/downloads.delivery.twentythree.com https:\/\/weshare.23video.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; manifest-src 'self'; upgrade-insecure-requests; block-all-mixed-content https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/connect.facebook.net https:\/\/pagead2.googlesyndication.com https:\/\/s.pinimg.com https:\/\/static.hotjar.com https:\/\/px.ads.linkedin.com; report-uri https:\/\/www.velux.de\/api\/velux\/cspreport\/submit;","count":9},{"content-security-policy-report-only":" object-src 'none'; frame-ancestors 'self'; form-action 'self' https:\/\/www.facebook.com https:\/\/translate.googleapis.com; report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub0f04d11e18a35974032f2067338a5e7d&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Acspreport-webauto%2Cenv%3Aprod;","count":9},{"content-security-policy-report-only":" font-src *.googleapis.com *.gstatic.com *.fontawesome.com https:\/\/geowidget.easypack24.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com widgets.swaven.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com www.google.com *.weltpixel.com https:\/\/geowidget-app.inpost.pl\/ https:\/\/sandbox-easy-geowidget.easypack24.net\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com ct.pinterest.com c.az.contentsquare.net halc.iadvize.com widgets.swaven.com opiniones2.opiniones-verificadas.com td.doubleclick.net youtube.com adw.esthederm.fr *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/images.unsplash.com *.googleapis.com *.gstatic.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https:\/\/geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org https:\/\/meetanshi.com\/media\/logo.png naos.dam-broadcast.com magefan.com cm.magefan.com https:\/\/redchamps.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com ct.pinterest.com c.az.contentsquare.net scontent.cdninstagram.com content.static-swaven.com eu-west-1-wtb-tag-api.swaven.com www.google.fr www.facebook.com cdn.quable.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.googleapis.com *.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https:\/\/www.googletagmanager.com tagmanager.google.com https:\/\/geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com ct.pinterest.com c.az.contentsquare.net sdk.privacy-center.org halc.iadvize.com static.iadvize.com www.gstatic.com www.google.com wtb-tag.mikmak.ai wtb-tag.swaven.com widgets.swaven.com cdnjs.cloudflare.com connect.facebook.net try.abtasty.com s.pinimg.com static.affilae.com s7.addthis.com t.contentsquare.net data.perfmaker.net adw.esthederm.fr *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com tagmanager.google.com https:\/\/geowidget.easypack24.net https:\/\/geowidget.inpost.pl unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com ct.pinterest.com c.az.contentsquare.net *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https:\/\/geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.googleapis.com https:\/\/www.google-analytics.com *.easypack24.net *.inpost.pl *.openstreetmap.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com ct.pinterest.com c.az.contentsquare.net www.google.com halc.iadvize.com static.iadvize.com api.iadvize.com wtb-api-hub.swaven.com region1.google-analytics.com maps.googleapis.com adw.esthederm.fr *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":9},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval' 'self'   1003891.track.convertexperiments.com app.hubspot.com   cdn-3.convertexperiments.com cdn-4.convertexperiments.com   *.metrics.convertexperiments.com *.signals.convertexperiments.com   logs.convertexperiments.com *.convertexperiments.com cdn.pdst.fm   connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net   js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com   organizer.bizzabo.com play.vidyard.com script.hotjar.com snap.licdn.com   static.hotjar.com static.hsappstatic.net www.google-analytics.com   www.googletagmanager.com www.recaptcha.net code.highcharts.com www.youtube.com   js.hubspot.com www.dropbox.com widget.altrulabs.com www.google.com   maps.googleapis.com wt-assets.hubteam.com cdn2.hubspot.net   www.redditstatic.com cdn.veritonic.com gosniply.com d.impactradius-event.com   js.hubspot.com 50339659.hs-sites.com analytics.tiktok.com api.s10h.io   sgtm-amer.hubspot.com js.hsadspixel.net cdn.intellimize.co   static.cloudflareinsights.com ob.greencolumnart.com tags.pw.adn.cloud   cdn.jsdelivr.net js.storylane.io; report-uri   https:\/\/send.hsbrowserreports.com\/csp\/report","count":8},{"content-security-policy-report-only":" default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; report-uri https:\/\/www.klaviyo.com\/csp\/","count":8},{"content-security-policy-report-only":" frame-ancestors https:\/\/*.sfr.fr https:\/\/*.red-by-sfr.fr; report-uri https:\/\/www.sfr.fr\/eTagP\/CSP.jsp","count":8},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self' wss:; media-src 'self' blob:; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; upgrade-insecure-requests; report-uri \/csp-report;","count":8},{"content-security-policy-report-only":" default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';","count":8},{"content-security-policy-report-only":" default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; connect-src * data: blob: 'unsafe-inline'; frame-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; object-src * data: blob: 'unsafe-inline';","count":8},{"content-security-policy-report-only":" default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self';","count":8},{"content-security-policy-report-only":" default-src * 'unsafe-inline' 'unsafe-eval' data: blob:","count":8},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; report-uri \/form\/analytics-csp-report.php","count":8},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'report-sample'; connect-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline' 'report-sample'; font-src 'self' data:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri \/csp-report;","count":8},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https:\/\/cms.staticlucky88.com http:\/\/api-gw-prod.com https:\/\/hotmatch.storeallinone.com https:\/\/api.bakogai.com\/gt-stats-be https:\/\/webchat.s1-tool.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' ws: wss: https:\/\/cms.staticlucky88.com http:\/\/api-gw-prod.com https:\/\/hotmatch.storeallinone.com https:\/\/api.bakogai.com\/gt-stats-be https:\/\/webchat.s1-tool.com; frame-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self'","count":8},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl\/marketing_platform","count":7},{"content-security-policy-report-only":" block-all-mixed-content; report-uri https:\/\/dmgm.report-uri.com\/r\/t\/csp\/reportOnly","count":7},{"content-security-policy-report-only":" child-src blob: data: https:; connect-src https: wss:; default-src blob: data: https: 'report-sample' 'unsafe-eval' 'unsafe-inline'; font-src data: https:; form-action https:; frame-src data: https:; img-src blob: data: https:; media-src blob: data: https:; object-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; report-uri https:\/\/csp.ffx.io\/; report-to csp-endpoint","count":7},{"content-security-policy-report-only":" require-trusted-types-for 'script'","count":7},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.clarity.ms https:\/\/c.bing.com https:\/\/*.tradetracker.net; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/*.maze.co; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/www.obelink.at\/metrics https:\/\/cdn.jsdelivr.net https:\/\/static.obelink.eu https:\/\/*.doubleclick.net https:\/\/*.adnxs.com https:\/\/analytics.google.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/connect.facebook.net https:\/\/www.google.com https:\/\/*.youtube.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/*.hotjar.com https:\/\/*.maze.co https:\/\/l.getsitecontrol.com https:\/\/*.paypal.com https:\/\/*.stripe.com https:\/\/*.stripecdn.com https:\/\/squeezely.tech https:\/\/*.squeezely.tech https:\/\/*.hcaptcha.tech https:\/\/*.trustedshops.com https:\/\/*.aiden.cx https:\/\/*.clarity.ms https:\/\/d5yoctgpv4cpx.cloudfront.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/tagmanager.google.com https:\/\/*.maze.co; img-src 'self' data: https:\/\/media.obelink.eu https:\/\/media.obelink.nl https:\/\/obelink.nl https:\/\/www.obelink.nl https:\/\/media.obelink.de https:\/\/obelink.de https:\/\/www.obelink.de https:\/\/media.obelink.at https:\/\/obelink.at https:\/\/www.obelink.at https:\/\/media.obelink.be https:\/\/obelink.be https:\/\/www.obelink.be https:\/\/media.obelink.pl https:\/\/obelink.pl https:\/\/www.obelink.pl https:\/\/media.obelink.fr https:\/\/obelink.fr https:\/\/www.obelink.fr https:\/\/media.obelink.it https:\/\/obelink.it https:\/\/www.obelink.it https:\/\/media.obelink.es https:\/\/obelink.es https:\/\/www.obelink.es https:\/\/commerce.obelink.eu https:\/\/images.ctfassets.net https:\/\/www.google.com https:\/\/www.google.nl https:\/\/*.googleadservices.com https:\/\/*.gstatic.com https:\/\/*.doubleclick.net https:\/\/*.adnxs.com https:\/\/*.squeezely.tech https:\/\/*.googletagmanager.com https:\/\/www.facebook.com https:\/\/*.maze.co https:\/\/*.paypal.com https:\/\/widgets.trustedshops.com https:\/\/img.youtube.com https:\/\/i.ytimg.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/ts.tradetracker.net; connect-src 'self' https:\/\/app.aiden.cx https:\/\/www.google.com https:\/\/*.google.com https:\/\/*.google.nl https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.doubleclick.net https:\/\/*.adnxs.com https:\/\/*.squeezely.tech https:\/\/*.trustedshops.com https:\/\/*.etrusted.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/l.getsitecontrol.com https:\/\/*.maze.co https:\/\/*.paypal.com https:\/\/cdn.growthbook.io https:\/\/p2iqhncxyh.execute-api.eu-central-1.amazonaws.com https:\/\/*.clarity.ms https:\/\/c.bing.com; frame-src 'self' blob: https:\/\/app.aiden.cx https:\/\/*.doubleclick.net https:\/\/www.facebook.com https:\/\/*.maze.co https:\/\/*.stripe.com https:\/\/www.google.com https:\/\/www.youtube.com https:\/\/*.paypal.com; media-src 'self'; object-src 'self'; base-uri 'self'; form-action 'self';","count":7},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com data: *.vimeo.com *.afip.gob.ar *.google.com *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar *.mercadopago.com.uy *.mercadopago.com.co *.mercadopago.com.pe *.mercadopago.cl *.zdassets.com https:\/\/www.google.com.ar https:\/\/analytics.tiktok.com https:\/\/www.google.com https:\/\/track-icommkt.com https:\/\/scripts.icommkt.online https:\/\/bam.nr-data.net https:\/\/event.getblue.io\/ https:\/\/static-content-qas.vnforapps.com\/ https:\/\/static-content.vnforapps.com\/ *.google-analytics.com analytics.google.com https:\/\/www.googletagmanager.com https:\/\/externalassets.icommarketing.com https:\/\/www.prunenews.com https:\/\/www.clarity.ms https:\/\/cdn.omniconvert.com https:\/\/app.omniconvert.com *.omniconvert.com *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https:\/\/checkout.wompi.co *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * webpay3g.transbank.cl webpay3gint.transbank.cl *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com https:\/\/checkout.wompi.co *.vimeo.com *.afip.gob.ar *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar *.mercadopago.com.uy *.mercadopago.com.co *.mercadopago.com.pe *.mercadopago.cl *.zdassets.com https:\/\/www.google.com.ar https:\/\/analytics.tiktok.com https:\/\/www.google.com https:\/\/track-icommkt.com https:\/\/scripts.icommkt.online https:\/\/bam.nr-data.net https:\/\/event.getblue.io\/ https:\/\/apitestenv.vnforapps.com\/ https:\/\/apiprod.vnforapps.com\/ https:\/\/static-content-qas.vnforapps.com\/ https:\/\/static-content.vnforapps.com\/ *.google-analytics.com analytics.google.com https:\/\/www.googletagmanager.com https:\/\/externalassets.icommarketing.com https:\/\/www.prunenews.com https:\/\/www.clarity.ms *.readysize.ai modal.readysize.ai *.weltpixel.com https:\/\/cdn.omniconvert.com https:\/\/app.omniconvert.com *.omniconvert.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https:\/\/static-content-qas.vnforapps.com https:\/\/static-content.vnforapps.com https:\/\/live.decidir.com https:\/\/*.online-metrix.net https:\/\/h.online-metrix.net *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com https:\/\/comercios.wompi.co https:\/\/checkout.wompi.co *.vimeo.com *.afip.gob.ar *.google.com *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar *.mercadopago.com.uy *.mercadopago.com.co *.mercadopago.com.pe *.mercadopago.cl *.zdassets.com https:\/\/www.google.com.ar https:\/\/analytics.tiktok.com https:\/\/www.google.com https:\/\/track-icommkt.com https:\/\/scripts.icommkt.online https:\/\/bam.nr-data.net https:\/\/event.getblue.io\/ https:\/\/static-content-qas.vnforapps.com\/ https:\/\/static-content.vnforapps.com\/ analytics.google.com https:\/\/www.googletagmanager.com https:\/\/externalassets.icommarketing.com https:\/\/www.prunenews.com https:\/\/www.prune.com.ar *.prune.com.ar https:\/\/www.clarity.ms *.readysize.ai modal.readysize.ai https:\/\/cdn.omniconvert.com https:\/\/app.omniconvert.com *.omniconvert.com https:\/\/firebasestorage.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/static-content-qas.vnforapps.com https:\/\/static-content.vnforapps.com https:\/\/*.online-metrix.net https:\/\/h.online-metrix.net *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.vimeo.com *.afip.gob.ar *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar *.mercadopago.com.uy *.mercadopago.com.co *.mercadopago.com.pe *.mercadopago.cl *.zdassets.com https:\/\/www.google.com.ar https:\/\/analytics.tiktok.com https:\/\/www.google.com https:\/\/track-icommkt.com https:\/\/scripts.icommkt.online https:\/\/bam.nr-data.net https:\/\/event.getblue.io\/ https:\/\/apitestenv.vnforapps.com\/ https:\/\/apiprod.vnforapps.com\/ https:\/\/static-content-qas.vnforapps.com\/ https:\/\/static-content.vnforapps.com\/ *.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/externalassets.icommarketing.com https:\/\/www.prunenews.com https:\/\/www.clarity.ms *.readysize.ai modal.readysize.ai https:\/\/cdn.omniconvert.com https:\/\/app.omniconvert.com *.omniconvert.com *.avada.io *.shopify.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/static-content-qas.vnforapps.com https:\/\/static-content.vnforapps.com https:\/\/live.decidir.com https:\/\/developers.decidir.com\/ https:\/\/*.online-metrix.net https:\/\/h.online-metrix.net *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com https:\/\/merchants.playdigital.com.ar\/ https:\/\/merchants.preprod.playdigital.com.ar\/ https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https:\/\/comercios.wompi.co *.readysize.ai modal.readysize.ai https:\/\/cdn.omniconvert.com https:\/\/app.omniconvert.com *.omniconvert.com *.fontawesome.com https:\/\/fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com assets.braintreegateway.com https:\/\/static-content-qas.vnforapps.com https:\/\/static-content.vnforapps.com *.tagmanager.google.com *.googletagmanager.com https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com https:\/\/sandbox.wompi.co https:\/\/production.wompi.co https:\/\/checkout.wompi.co *.vimeo.com *.afip.gob.ar *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar *.mercadopago.com.uy *.mercadopago.com.co *.mercadopago.com.pe *.mercadopago.cl *.zdassets.com https:\/\/www.google.com.ar https:\/\/analytics.tiktok.com https:\/\/www.google.com https:\/\/track-icommkt.com https:\/\/scripts.icommkt.online https:\/\/bam.nr-data.net https:\/\/event.getblue.io\/ https:\/\/apitestenv.vnforapps.com\/ https:\/\/apiprod.vnforapps.com\/ https:\/\/static-content-qas.vnforapps.com\/ https:\/\/static-content.vnforapps.com\/ analytics.google.com https:\/\/www.googletagmanager.com https:\/\/externalassets.icommarketing.com https:\/\/www.prunenews.com https:\/\/www.clarity.ms *.readysize.ai modal.readysize.ai https:\/\/cdn.omniconvert.com https:\/\/app.omniconvert.com *.omniconvert.com https:\/\/get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/static-content-qas.vnforapps.com https:\/\/static-content.vnforapps.com https:\/\/apitestenv.vnforapps.com https:\/\/apiprod.vnforapps.com https:\/\/live.decidir.com https:\/\/developers.decidir.com\/ https:\/\/*.online-metrix.net https:\/\/h.online-metrix.net *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.run.app https:\/\/merchants.playdigital.com.ar\/ https:\/\/merchants.preprod.playdigital.com.ar\/ https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":7},{"content-security-policy-report-only":" default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'","count":7},{"content-security-policy-report-only":" default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline'","count":7},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'report-sample' https:\/\/*.nr-data.net https:\/\/*.intellimizeditor.com https:\/\/intellimizeditor.com https:\/\/cdn.intellimize.co https:\/\/ajax.googleapis.com https:\/\/ajax.cloudflare.com https:\/\/analytics.twitter.com https:\/\/api.intellimize.co https:\/\/app-abk.marketo.com https:\/\/audience.nrich.ai https:\/\/bat.bing.com https:\/\/boards.greenhouse.io https:\/\/cdn.ampproject.org https:\/\/cdn.cookielaw.org https:\/\/cdn.onesignal.com https:\/\/cdnjs.cloudflare.com https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net https:\/\/js-agent.newrelic.com https:\/\/js.chilipiper.com https:\/\/maps.googleapis.com https:\/\/munchkin.marketo.net https:\/\/onesignal.com https:\/\/player.vimeo.com https:\/\/s.yimg.com https:\/\/sc.lfeeder.com https:\/\/script.crazyegg.com https:\/\/script.hotjar.com https:\/\/secure.esignlive.com https:\/\/secure.onespan.com https:\/\/serve.nrich.ai https:\/\/ssl.google-analytics.com https:\/\/snap.licdn.com https:\/\/static.ads-twitter.com https:\/\/static.cloudflareinsights.com https:\/\/static.hotjar.com https:\/\/tag.demandbase.com https:\/\/tag.nrich.ai https:\/\/tpc.googlesyndication.com https:\/\/translate.google.com https:\/\/tribl.io https:\/\/www.clarity.ms https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com https:\/\/www.youtube.com https:\/\/d41.co https:\/\/*.d41.co https:\/\/embed.ustudio.com https:\/\/asana-user-private-us-east-1.s3.us-east-1.amazonaws.com https:\/\/id.rlcdn.com https:\/\/scout-cdn.salesloft.com https:\/\/tracking.g2crowd.com https:\/\/j.6sc.co https:\/\/view.ceros.com https:\/\/app.leandata.com https:\/\/js.zi-scripts.com https:\/\/ws-assets.zoominfo.com https:\/\/optimize.google.com https:\/\/www.googleoptimize.com\/ https:\/\/extend.vimeocdn.com https:\/\/code.highcharts.com https:\/\/cdn.bizible.com https:\/\/www.vimeo.com https:\/\/vimeo.com https:\/\/cdn.jsdelivr.net blob: https:\/\/www.g2.com https:\/\/challenges.cloudflare.com\/ https:\/\/unpkg.com\/ https:\/\/cdn.ckeditor.com\/ https:\/\/js.qualified.com https:\/\/*.qualified.com https:\/\/code.jquery.com; style-src 'self' 'report-sample' https:\/\/app-abk.marketo.com https:\/\/cdnjs.cloudflare.com https:\/\/fonts.googleapis.com https:\/\/js.chilipiper.com\/ https:\/\/onesignal.com https:\/\/secure.onespan.com https:\/\/tag.demandbase.com https:\/\/translate.googleapis.com https:\/\/tribl.io https:\/\/use.fontawesome.com https:\/\/cdn.jsdelivr.net https:\/\/optimize.google.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com https:\/\/unpkg.com\/ https:\/\/*.qualified.com; form-action 'self' https:\/\/community.onespan.com https:\/\/community-stg.onespan.com https:\/\/community-dev.onespan.com https:\/\/dev.onespan.com https:\/\/stg.onespan.com https:\/\/www.onespan.com https:\/\/secure.onespan.com https:\/\/*.build38.io https:\/\/auth.build38.io; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; connect-src 'self' https:\/\/*.clarity.ms https:\/\/*.company-target.com https:\/\/*.nr-data.net https:\/\/308-zmt-742.mktoresp.com https:\/\/308-zmt-742.mktoutil.com https:\/\/adservice.google.com https:\/\/analytics.google.com https:\/\/api.chilipiper.com https:\/\/api.intellimize.co https:\/\/audience.nrich.ai https:\/\/bat.bing.com https:\/\/cdn.cookielaw.org https:\/\/in.hotjar.com https:\/\/log.intellimize.co https:\/\/maps.googleapis.com https:\/\/region1.google-analytics.com https:\/\/region1.analytics.google.com https:\/\/s.yimg.com https:\/\/secure.onespan.com https:\/\/serve.nrich.ai https:\/\/stats.g.doubleclick.net https:\/\/tag.nrich.ai https:\/\/tracking.chilipiper.com https:\/\/translate.googleapis.com https:\/\/vc.hotjar.io https:\/\/*.hotjar.com wss:\/\/*.hotjar.com https:\/\/cdn.linkedin.oribi.io https:\/\/www.facebook.com https:\/\/www.google-analytics.com https:\/\/app.leandata.com https:\/\/js.zi-scripts.com https:\/\/ws.zoominfo.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/cs.lf-discover.com https:\/\/*.d41.co https:\/\/d41.co https:\/\/se-services.intellimize.co https:\/\/*.salesloft.com https:\/\/*.6sc.co https:\/\/secure.adnxs.com\/ https:\/\/content.hotjar.io https:\/\/metrics.hotjar.io https:\/\/epsilon.6sense.com https:\/\/px.ads.linkedin.com https:\/\/*.6sense.com https:\/\/tracking.g2crowd.com https:\/\/tracking-api.production.g2.com https:\/\/tracking-api.g2.com\/ https:\/\/cdnjs.cloudflare.com\/ https:\/\/geolocation.onetrust.com https:\/\/app.qualified.com\/ wss:\/\/ws8.qualified.com\/ https:\/\/*.qualified.com wss:\/\/*.qualified.com https:\/\/cdn.jsdelivr.net https:\/\/privacyportal.onetrust.com\/ https:\/\/www.googleadservices.com\/ https:\/\/googleads.g.doubleclick.net; font-src 'self' https:\/\/cdnjs.cloudflare.com https:\/\/fonts.gstatic.com https:\/\/use.fontawesome.com https:\/\/js.qualified.com https:\/\/*.qualified.com; child-src https:\/\/*.qualified.com; frame-src https:\/\/*.esignlive.com\/ https:\/\/*.onespan.com https:\/\/api.intellimize.co https:\/\/app.intellimize.co https:\/\/*.intellimizeio.com https:\/\/onespan.chilipiper.com https:\/\/apps.chilipiper.com https:\/\/app-abk.marketo.com https:\/\/bid.g.doubleclick.net https:\/\/boards.greenhouse.io https:\/\/player.vimeo.com https:\/\/sandbox.esignlive.com https:\/\/secure.onespan.com https:\/\/test.api.intellimize.co https:\/\/tpc.googlesyndication.com https:\/\/tribl.io https:\/\/vars.hotjar.com https:\/\/vimeo.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.youtube-nocookie.com https:\/\/*.youtube.com https:\/\/youtube.com https:\/\/*.prod.acquia-sites.com https:\/\/embed.ustudio.com\/ https:\/\/view.ceros.com\/ https:\/\/app.leandata.com https:\/\/optimize.google.com https:\/\/webikeo.fr\/ https:\/\/td.doubleclick.net\/ https:\/\/job-boards.greenhouse.io\/ https:\/\/www.g2.com\/ https:\/\/challenges.cloudflare.com\/ https:\/\/app.qualified.com\/ https:\/\/*.qualified.com; img-src 'self' data: blob: https:\/\/*.qualified.com; manifest-src 'self'; media-src https:\/\/assets.qualified.com https:\/\/*.qualified.com mediastream: https:\/\/*.onespan.com; worker-src 'self' blob:;","count":7},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/*.ticketplus.global https:\/\/code.jquery.com https:\/\/unpkg.com https:\/\/polyfill.io https:\/\/js.stripe.com https:\/\/sdk.mercadopago.com https:\/\/www.mercadopago.com https:\/\/live.decidir.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/maps.googleapis.com https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/cdn.smooch.io https:\/\/js-agent.newrelic.com https:\/\/static.cloudflareinsights.com https:\/\/challenges.cloudflare.com https:\/\/stackpath.bootstrapcdn.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/use.fontawesome.com; style-src 'self' 'unsafe-inline' https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/fonts.googleapis.com https:\/\/code.jquery.com https:\/\/unpkg.com https:\/\/*.ticketplus.global https:\/\/stackpath.bootstrapcdn.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/use.fontawesome.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/*.ticketplus.global https:\/\/ticketplus-assets.s3.sa-east-1.amazonaws.com https:\/\/cdn2.ticketplus.cl https:\/\/eb-core-development-uploads.s3.sa-east-1.amazonaws.com https:\/\/eb-core-livepass-com-ar-uploads.s3-sa-east-1.amazonaws.com https:\/\/documents-assets.s3.sa-east-1.amazonaws.com https:\/\/stackpath.bootstrapcdn.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/use.fontawesome.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:\/\/*.ticketplus.global https:\/\/ticketplus-assets.s3.sa-east-1.amazonaws.com https:\/\/cdn2.ticketplus.cl https:\/\/eb-core-development-uploads.s3.sa-east-1.amazonaws.com https:\/\/eb-core-livepass-com-ar-uploads.s3-sa-east-1.amazonaws.com https:\/\/documents-assets.s3.sa-east-1.amazonaws.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/js.stripe.com https:\/\/api.mercadopago.com https:\/\/sdk.mercadopago.com https:\/\/*.ticketplus.global https:\/\/*.sentry.io https:\/\/cdn.smooch.io https:\/\/*.nr-data.net https:\/\/challenges.cloudflare.com https:\/\/live.decidir.com https:\/\/maps.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/fonts.googleapis.com; frame-src 'self' https:\/\/js.stripe.com https:\/\/www.mercadopago.com https:\/\/secure-fields.mercadopago.com https:\/\/live.decidir.com https:\/\/open.spotify.com https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/www.google.com https:\/\/*.ticketplus.global https:\/\/challenges.cloudflare.com; frame-ancestors *; object-src 'none'; base-uri 'self'","count":7},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: *.oney.io *.staging.oney.io https:\/\/fonts.gstatic.com https:\/\/cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.hipay-tpp.com *.hipay.com *.googleapis.com *.weltpixel.com https:\/\/thinglink.com\/ https:\/\/app.usercentrics.eu\/ www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https:\/\/images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.hipay.com *.oney.io *.staging.oney.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/www.google.fr https:\/\/api.mapbox.com *.tile.openstreetmap.org https:\/\/widgets.trustedshops.com\/ https:\/\/integrations.etrusted.com\/ https:\/\/app.usercentrics.eu\/ *.facebook.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page https:\/\/maps.googleapis.com https:\/\/player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.oney.io *.staging.oney.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/cdnjs.cloudflare.com https:\/\/widgets.trustedshops.com\/ https:\/\/integrations.etrusted.com\/ https:\/\/cdn.thinglink.me\/ https:\/\/app.usercentrics.eu\/ https:\/\/www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com assets.braintreegateway.com *.hipay.com *.googleapis.com https:\/\/static.klaviyo.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/integrations.etrusted.com\/ tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com data: mpsnare.iesnare.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.hipay-tpp.com *.hipay.com wss:\/\/mpsnare.iesnare.com *.oney.io *.staging.oney.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/nominatim.openstreetmap.org https:\/\/integrations.etrusted.com\/ https:\/\/app.usercentrics.eu\/ https:\/\/api.usercentrics.eu\/ analytics.google.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":7},{"content-security-policy-report-only":" script-src   'self'   'unsafe-inline'   'unsafe-eval'   https:\/\/*.cloudflare.com\/   https:\/\/www.googletagmanager.com   https:\/\/www.google-analytics.com   https:\/\/www.google.com   https:\/\/www.gstatic.com   https:\/\/www.recaptcha.net;  style-src   'self'   https:\/\/*.cloudflare.com\/   'unsafe-inline';  img-src   'self'   data:   https:   https:\/\/www.google-analytics.com   https:\/\/www.googletagmanager.com;  font-src   'self'   data:   https:;  connect-src   'self'   https:\/\/www.google-analytics.com   https:\/\/region1.google-analytics.com   https:\/\/www.googletagmanager.com   https:\/\/www.google.com   https:\/\/www.recaptcha.net   https:\/\/*.xtl.nl;  frame-src   'self'   https:\/\/www.googletagmanager.com   https:\/\/www.google.com   https:\/\/www.recaptcha.net;  upgrade-insecure-requests; block-all-mixed-content; report-to https:\/\/www.arval.com\/log-report-uri\/csp;","count":7},{"content-security-policy-report-only":" default-src 'self' https:\/\/supersklep.pl https:\/\/*.supersklep.pl https:\/\/supersklep.cz https:\/\/*.supersklep.cz https:\/\/supersklep.sk https:\/\/*.supersklep.sk https:\/\/supersklep.ro https:\/\/*.supersklep.ro https:\/\/supersklep.hu https:\/\/*.supersklep.hu https:\/\/supersklep.bg https:\/\/*.supersklep.bg https:\/\/super-shop.com https:\/\/*.super-shop.com https:\/\/super-shop.ua https:\/\/*.super-shop.ua; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/supersklep.pl https:\/\/*.supersklep.pl https:\/\/supersklep.cz https:\/\/*.supersklep.cz https:\/\/supersklep.sk https:\/\/*.supersklep.sk https:\/\/supersklep.ro https:\/\/*.supersklep.ro https:\/\/supersklep.hu https:\/\/*.supersklep.hu https:\/\/supersklep.bg https:\/\/*.supersklep.bg https:\/\/super-shop.com https:\/\/*.super-shop.com https:\/\/super-shop.ua https:\/\/*.super-shop.ua https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/connect.facebook.net https:\/\/cdn.jsdelivr.net https:\/\/cdn-cookieyes.com https:\/\/widget.packeta.com https:\/\/mapa.gls-poland.com https:\/\/geowidget.inpost-group.com https:\/\/geowidget.easypack24.net https:\/\/api.exponea.com https:\/\/cdn.lightwidget.com https:\/\/static.payu.com https:\/\/capi-automation.s3.us-east-2.amazonaws.com https:\/\/analytics.tiktok.com https:\/\/www.glami.sk https:\/\/www.glami.cz https:\/\/www.glami.pl https:\/\/*.seznam.cz https:\/\/im9.cz https:\/\/pagead2.googlesyndication.com https:\/\/www.zbozi.cz https:\/\/cdn.allekurier.pl https:\/\/cdn.snadnevraceni.cz https:\/\/cdn.retururisimple.ro https:\/\/cs-ssgtm-631718707859.europe-central2.run.app https:\/\/translate.googleapis.com https:\/\/translate.google.com; style-src 'self' 'unsafe-inline' https:\/\/supersklep.pl https:\/\/*.supersklep.pl https:\/\/supersklep.cz https:\/\/*.supersklep.cz https:\/\/supersklep.sk https:\/\/*.supersklep.sk https:\/\/supersklep.ro https:\/\/*.supersklep.ro https:\/\/supersklep.hu https:\/\/*.supersklep.hu https:\/\/supersklep.bg https:\/\/*.supersklep.bg https:\/\/super-shop.com https:\/\/*.super-shop.com https:\/\/super-shop.ua https:\/\/*.super-shop.ua https:\/\/cdn.jsdelivr.net https:\/\/cdn-cookieyes.com https:\/\/widget.packeta.com https:\/\/geowidget.inpost-group.com https:\/\/geowidget.easypack24.net https:\/\/fonts.googleapis.com https:\/\/mapa.gls-poland.com https:\/\/static.payu.com https:\/\/www.gstatic.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/supersklep.pl https:\/\/*.supersklep.pl https:\/\/supersklep.cz https:\/\/*.supersklep.cz https:\/\/supersklep.sk https:\/\/*.supersklep.sk https:\/\/supersklep.ro https:\/\/*.supersklep.ro https:\/\/supersklep.hu https:\/\/*.supersklep.hu https:\/\/supersklep.bg https:\/\/*.supersklep.bg https:\/\/super-shop.com https:\/\/*.super-shop.com https:\/\/super-shop.ua https:\/\/*.super-shop.ua https:\/\/fonts.gstatic.com https:\/\/cdn-cookieyes.com https:\/\/mapa.gls-poland.com https:\/\/static.payu.com https:\/\/geowidget.easypack24.net; connect-src 'self' https:\/\/supersklep.pl https:\/\/*.supersklep.pl https:\/\/supersklep.cz https:\/\/*.supersklep.cz https:\/\/supersklep.sk https:\/\/*.supersklep.sk https:\/\/supersklep.ro https:\/\/*.supersklep.ro https:\/\/supersklep.hu https:\/\/*.supersklep.hu https:\/\/supersklep.bg https:\/\/*.supersklep.bg https:\/\/super-shop.com https:\/\/*.super-shop.com https:\/\/super-shop.ua https:\/\/*.super-shop.ua https:\/\/*.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/api.exponea.com https:\/\/ppapi.olzalogistic.net https:\/\/serv.meest.com https:\/\/widget.packeta.com https:\/\/mapa.gls-poland.com https:\/\/adeplus.gls-poland.com https:\/\/geowidget.inpost-group.com https:\/\/geowidget.easypack24.net https:\/\/www.facebook.com https:\/\/cdn-cookieyes.com https:\/\/cdn.jsdelivr.net https:\/\/static.payu.com https:\/\/secure.payu.com https:\/\/www.google.com https:\/\/google.com https:\/\/pagead2.googlesyndication.com https:\/\/ad.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/analytics.tiktok.com https:\/\/*.tiktokw.us https:\/\/*.seznam.cz https:\/\/credit-widget-config.payu.com https:\/\/*.easypack24.net https:\/\/osm.inpost.pl https:\/\/connect.facebook.net https:\/\/brxcdn.com https:\/\/*.brxcdn.com https:\/\/translate.googleapis.com https:\/\/translate-pa.googleapis.com https:\/\/www.google.pl https:\/\/www.google.cz https:\/\/www.google.sk https:\/\/www.google.ro https:\/\/www.google.hu https:\/\/www.google.bg https:\/\/www.google.com.ua https:\/\/www.google.de https:\/\/www.google.at https:\/\/www.google.fr https:\/\/www.google.co.uk https:\/\/www.google.it https:\/\/www.google.es https:\/\/www.google.nl https:\/\/cs-ssgtm-631718707859.europe-central2.run.app; frame-src 'self' https:\/\/supersklep.pl https:\/\/*.supersklep.pl https:\/\/supersklep.cz https:\/\/*.supersklep.cz https:\/\/supersklep.sk https:\/\/*.supersklep.sk https:\/\/supersklep.ro https:\/\/*.supersklep.ro https:\/\/supersklep.hu https:\/\/*.supersklep.hu https:\/\/supersklep.bg https:\/\/*.supersklep.bg https:\/\/super-shop.com https:\/\/*.super-shop.com https:\/\/super-shop.ua https:\/\/*.super-shop.ua https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.google.com https:\/\/td.doubleclick.net https:\/\/bid.g.doubleclick.net https:\/\/www.facebook.com https:\/\/widget.packeta.com https:\/\/*.inpost-group.com https:\/\/geowidget.easypack24.net https:\/\/mapa.gls-poland.com https:\/\/serv.meest.com https:\/\/cdn.lightwidget.com https:\/\/lightwidget.com https:\/\/secure.payu.com https:\/\/parcelshop.dhl.pl https:\/\/*.fls.doubleclick.net https:\/\/*.seznam.cz https:\/\/c.imedia.cz https:\/\/cs-ssgtm-631718707859.europe-central2.run.app https:\/\/challenges.cloudflare.com; media-src 'self' blob: https:\/\/supersklep.pl https:\/\/*.supersklep.pl https:\/\/supersklep.cz https:\/\/*.supersklep.cz https:\/\/supersklep.sk https:\/\/*.supersklep.sk https:\/\/supersklep.ro https:\/\/*.supersklep.ro https:\/\/supersklep.hu https:\/\/*.supersklep.hu https:\/\/supersklep.bg https:\/\/*.supersklep.bg https:\/\/super-shop.com https:\/\/*.super-shop.com https:\/\/super-shop.ua https:\/\/*.super-shop.ua; worker-src 'self' blob:; report-uri \/csp-report.php","count":7},{"content-security-policy-report-only":" default-src https: data:; script-src https: data: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline'; frame-ancestors 'self'; report-uri https:\/\/stoklasa.report-uri.io\/r\/default\/csp\/reportOnly","count":7},{"content-security-policy-report-only":" default-src 'self'; \t\t\tobject-src 'none'; \t\t\tframe-ancestors 'self';","count":7},{"content-security-policy-report-only":" default-src 'self' data: wss:\/\/enu3cdg6tvghrjuahpbe6c6w5i.appsync-api.eu-west-1.amazonaws.com\/graphql wss:\/\/enu3cdg6tvghrjuahpbe6c6w5i.appsync-realtime-api.eu-west-1.amazonaws.com\/graphql s3.eu-west-1.amazonaws.com\/uploads.knowbe4.eu\/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https:\/\/browser-intake-datadoghq.com\/ cdn.pendo.io data.pendo.io deepfake-content-write-production-eu-west-1.s3.eu-west-1.amazonaws.com deepfake-content-read-production-eu-west-1.s3.eu-west-1.amazonaws.com eai-agent-security-private-ai-production-eu-west-1.s3.amazonaws.com ccm-scorm-production-eu-west-1.s3.amazonaws.com ccm-courses-production-eu-west-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https:\/\/*.knowbe4.com https:\/\/*.kb4od.run https:\/\/*.ckeditor.com\/ https:\/\/*.launchdarkly.com\/ https:\/\/*.zopim.com\/ https:\/\/api-js.mixpanel.com https:\/\/api.mixpanel.com\/ https:\/\/cdnjs.cloudflare.com\/ https:\/\/code.highcharts.com\/ https:\/\/data.pendo.io\/ https:\/\/ekr.zdassets.com\/ https:\/\/ekr.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/embeddable\/config https:\/\/knowbe4.zendesk.com\/embeddable_blip https:\/\/knowbe4.zendesk.com\/frontendevents\/dl https:\/\/knowbe4.zendesk.com\/frontendevents\/pv https:\/\/s3.amazonaws.com\/development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/kmsat-development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/helpimg\/ https:\/\/s3.amazonaws.com\/helpimg-kmsat-development-us-east-1\/ https:\/\/helpimg.s3.amazonaws.com\/ https:\/\/static.zdassets.com\/ https:\/\/zendesk-eu.my.sentry.io\/ pendo-static-6167502888239104.storage.googleapis.com wss:\/\/*.zopim.com\/ wss:\/\/knowbe4.zendesk.com\/ ; frame-ancestors 'self' https:\/\/*.knowbe4.com https:\/\/*.kb4od.run ; child-src 'self' blob: ; connect-src 'self' data: blob: wss:\/\/enu3cdg6tvghrjuahpbe6c6w5i.appsync-api.eu-west-1.amazonaws.com\/graphql wss:\/\/enu3cdg6tvghrjuahpbe6c6w5i.appsync-realtime-api.eu-west-1.amazonaws.com\/graphql s3.eu-west-1.amazonaws.com\/uploads.knowbe4.eu\/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https:\/\/browser-intake-datadoghq.com\/ cdn.pendo.io data.pendo.io deepfake-content-write-production-eu-west-1.s3.eu-west-1.amazonaws.com deepfake-content-read-production-eu-west-1.s3.eu-west-1.amazonaws.com eai-agent-security-private-ai-production-eu-west-1.s3.amazonaws.com ccm-scorm-production-eu-west-1.s3.amazonaws.com ccm-courses-production-eu-west-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https:\/\/*.knowbe4.com https:\/\/*.kb4od.run https:\/\/*.ckeditor.com\/ https:\/\/*.launchdarkly.com\/ https:\/\/*.zopim.com\/ https:\/\/api-js.mixpanel.com https:\/\/api.mixpanel.com\/ https:\/\/cdnjs.cloudflare.com\/ https:\/\/code.highcharts.com\/ https:\/\/data.pendo.io\/ https:\/\/ekr.zdassets.com\/ https:\/\/ekr.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/embeddable\/config https:\/\/knowbe4.zendesk.com\/embeddable_blip https:\/\/knowbe4.zendesk.com\/frontendevents\/dl https:\/\/knowbe4.zendesk.com\/frontendevents\/pv https:\/\/s3.amazonaws.com\/development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/kmsat-development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/helpimg\/ https:\/\/s3.amazonaws.com\/helpimg-kmsat-development-us-east-1\/ https:\/\/helpimg.s3.amazonaws.com\/ https:\/\/static.zdassets.com\/ https:\/\/zendesk-eu.my.sentry.io\/ pendo-static-6167502888239104.storage.googleapis.com wss:\/\/*.zopim.com\/ wss:\/\/knowbe4.zendesk.com\/ ; frame-src 'self' blob: wss:\/\/enu3cdg6tvghrjuahpbe6c6w5i.appsync-api.eu-west-1.amazonaws.com\/graphql wss:\/\/enu3cdg6tvghrjuahpbe6c6w5i.appsync-realtime-api.eu-west-1.amazonaws.com\/graphql s3.eu-west-1.amazonaws.com\/uploads.knowbe4.eu\/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https:\/\/browser-intake-datadoghq.com\/ cdn.pendo.io data.pendo.io deepfake-content-write-production-eu-west-1.s3.eu-west-1.amazonaws.com deepfake-content-read-production-eu-west-1.s3.eu-west-1.amazonaws.com eai-agent-security-private-ai-production-eu-west-1.s3.amazonaws.com ccm-scorm-production-eu-west-1.s3.amazonaws.com ccm-courses-production-eu-west-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https:\/\/*.knowbe4.com https:\/\/*.kb4od.run https:\/\/*.ckeditor.com\/ https:\/\/*.launchdarkly.com\/ https:\/\/*.zopim.com\/ https:\/\/api-js.mixpanel.com https:\/\/api.mixpanel.com\/ https:\/\/cdnjs.cloudflare.com\/ https:\/\/code.highcharts.com\/ https:\/\/data.pendo.io\/ https:\/\/ekr.zdassets.com\/ https:\/\/ekr.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/embeddable\/config https:\/\/knowbe4.zendesk.com\/embeddable_blip https:\/\/knowbe4.zendesk.com\/frontendevents\/dl https:\/\/knowbe4.zendesk.com\/frontendevents\/pv https:\/\/s3.amazonaws.com\/development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/kmsat-development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/helpimg\/ https:\/\/s3.amazonaws.com\/helpimg-kmsat-development-us-east-1\/ https:\/\/helpimg.s3.amazonaws.com\/ https:\/\/static.zdassets.com\/ https:\/\/zendesk-eu.my.sentry.io\/ pendo-static-6167502888239104.storage.googleapis.com wss:\/\/*.zopim.com\/ wss:\/\/knowbe4.zendesk.com\/ android-webview-video-poster: https:\/\/player.vimeo.com https:\/\/*.ccm.knowbe4.com https:\/\/*.internal.knowbe4.com https:\/\/*.ccm.internal.knowbe4.com ; font-src 'self' data: fonts.gstatic.com helpimg.s3.amazonaws.com use.fontawesome.com use.typekit.net https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/twitter-bootstrap\/ ; img-src * 'self' blob: cid: data: file: android-webview-video-poster: https:\/\/cdn.mxpnl.com\/ https:\/\/v2assets.zopim.io\/ https:\/\/static.zdassets.com\/ app.pendo.io cdn.pendo.io data.pendo.io pendo-static-6167502888239104.storage.googleapis.com ; media-src 'self' about: blob: data: wss:\/\/enu3cdg6tvghrjuahpbe6c6w5i.appsync-api.eu-west-1.amazonaws.com\/graphql wss:\/\/enu3cdg6tvghrjuahpbe6c6w5i.appsync-realtime-api.eu-west-1.amazonaws.com\/graphql s3.eu-west-1.amazonaws.com\/uploads.knowbe4.eu\/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https:\/\/browser-intake-datadoghq.com\/ cdn.pendo.io data.pendo.io deepfake-content-write-production-eu-west-1.s3.eu-west-1.amazonaws.com deepfake-content-read-production-eu-west-1.s3.eu-west-1.amazonaws.com eai-agent-security-private-ai-production-eu-west-1.s3.amazonaws.com ccm-scorm-production-eu-west-1.s3.amazonaws.com ccm-courses-production-eu-west-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https:\/\/*.knowbe4.com https:\/\/*.kb4od.run https:\/\/*.ckeditor.com\/ https:\/\/*.launchdarkly.com\/ https:\/\/*.zopim.com\/ https:\/\/api-js.mixpanel.com https:\/\/api.mixpanel.com\/ https:\/\/cdnjs.cloudflare.com\/ https:\/\/code.highcharts.com\/ https:\/\/data.pendo.io\/ https:\/\/ekr.zdassets.com\/ https:\/\/ekr.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/embeddable\/config https:\/\/knowbe4.zendesk.com\/embeddable_blip https:\/\/knowbe4.zendesk.com\/frontendevents\/dl https:\/\/knowbe4.zendesk.com\/frontendevents\/pv https:\/\/s3.amazonaws.com\/development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/kmsat-development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/helpimg\/ https:\/\/s3.amazonaws.com\/helpimg-kmsat-development-us-east-1\/ https:\/\/helpimg.s3.amazonaws.com\/ https:\/\/static.zdassets.com\/ https:\/\/zendesk-eu.my.sentry.io\/ pendo-static-6167502888239104.storage.googleapis.com wss:\/\/*.zopim.com\/ wss:\/\/knowbe4.zendesk.com\/ ; object-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: wss:\/\/enu3cdg6tvghrjuahpbe6c6w5i.appsync-api.eu-west-1.amazonaws.com\/graphql wss:\/\/enu3cdg6tvghrjuahpbe6c6w5i.appsync-realtime-api.eu-west-1.amazonaws.com\/graphql s3.eu-west-1.amazonaws.com\/uploads.knowbe4.eu\/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https:\/\/browser-intake-datadoghq.com\/ cdn.pendo.io data.pendo.io deepfake-content-write-production-eu-west-1.s3.eu-west-1.amazonaws.com deepfake-content-read-production-eu-west-1.s3.eu-west-1.amazonaws.com eai-agent-security-private-ai-production-eu-west-1.s3.amazonaws.com ccm-scorm-production-eu-west-1.s3.amazonaws.com ccm-courses-production-eu-west-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https:\/\/*.knowbe4.com https:\/\/*.kb4od.run https:\/\/*.ckeditor.com\/ https:\/\/*.launchdarkly.com\/ https:\/\/*.zopim.com\/ https:\/\/api-js.mixpanel.com https:\/\/api.mixpanel.com\/ https:\/\/cdnjs.cloudflare.com\/ https:\/\/code.highcharts.com\/ https:\/\/data.pendo.io\/ https:\/\/ekr.zdassets.com\/ https:\/\/ekr.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/embeddable\/config https:\/\/knowbe4.zendesk.com\/embeddable_blip https:\/\/knowbe4.zendesk.com\/frontendevents\/dl https:\/\/knowbe4.zendesk.com\/frontendevents\/pv https:\/\/s3.amazonaws.com\/development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/kmsat-development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/helpimg\/ https:\/\/s3.amazonaws.com\/helpimg-kmsat-development-us-east-1\/ https:\/\/helpimg.s3.amazonaws.com\/ https:\/\/static.zdassets.com\/ https:\/\/zendesk-eu.my.sentry.io\/ pendo-static-6167502888239104.storage.googleapis.com wss:\/\/*.zopim.com\/ wss:\/\/knowbe4.zendesk.com\/ pendo-io-static.storage.googleapis.com pendo-static-6167502888239104.storage.googleapis.com use.typekit.net ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: data: wss:\/\/enu3cdg6tvghrjuahpbe6c6w5i.appsync-api.eu-west-1.amazonaws.com\/graphql wss:\/\/enu3cdg6tvghrjuahpbe6c6w5i.appsync-realtime-api.eu-west-1.amazonaws.com\/graphql s3.eu-west-1.amazonaws.com\/uploads.knowbe4.eu\/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https:\/\/browser-intake-datadoghq.com\/ cdn.pendo.io data.pendo.io deepfake-content-write-production-eu-west-1.s3.eu-west-1.amazonaws.com deepfake-content-read-production-eu-west-1.s3.eu-west-1.amazonaws.com eai-agent-security-private-ai-production-eu-west-1.s3.amazonaws.com ccm-scorm-production-eu-west-1.s3.amazonaws.com ccm-courses-production-eu-west-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https:\/\/*.knowbe4.com https:\/\/*.kb4od.run https:\/\/*.ckeditor.com\/ https:\/\/*.launchdarkly.com\/ https:\/\/*.zopim.com\/ https:\/\/api-js.mixpanel.com https:\/\/api.mixpanel.com\/ https:\/\/cdnjs.cloudflare.com\/ https:\/\/code.highcharts.com\/ https:\/\/data.pendo.io\/ https:\/\/ekr.zdassets.com\/ https:\/\/ekr.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/embeddable\/config https:\/\/knowbe4.zendesk.com\/embeddable_blip https:\/\/knowbe4.zendesk.com\/frontendevents\/dl https:\/\/knowbe4.zendesk.com\/frontendevents\/pv https:\/\/s3.amazonaws.com\/development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/kmsat-development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/helpimg\/ https:\/\/s3.amazonaws.com\/helpimg-kmsat-development-us-east-1\/ https:\/\/helpimg.s3.amazonaws.com\/ https:\/\/static.zdassets.com\/ https:\/\/zendesk-eu.my.sentry.io\/ pendo-static-6167502888239104.storage.googleapis.com wss:\/\/*.zopim.com\/ wss:\/\/knowbe4.zendesk.com\/ https:\/\/unpkg.com\/vue@2.6.14 pendo-io-static.storage.googleapis.com pendo-static-6167502888239104.storage.googleapis.com use.typekit.net https:\/\/cdn.pendo.io\/agent\/static\/365392a9-6608-44ef-443b-572eef771b95\/pendo.js ; style-src 'self' 'unsafe-inline' data: app.pendo.io cdn.pendo.io fonts.gstatic.com https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/twitter-bootstrap\/ pendo-static-6167502888239104.storage.googleapis.com use.typekit.net ; style-src-elem 'self' 'unsafe-inline' data: app.pendo.io cdn.pendo.io fonts.googleapis.com fonts.gstatic.com helpimg.s3.amazonaws.com cdnjs.cloudflare.com\/ajax\/libs\/font-awesome\/ cdnjs.cloudflare.com\/ajax\/libs\/twitter-bootstrap\/ p.typekit.net pendo-static-6167502888239104.storage.googleapis.com s3.amazonaws.com\/helpimg\/ use.fontawesome.com use.typekit.net www.java.com\/ga\/css\/print.css www.java.com\/ga\/css\/screen.css ; report-uri https:\/\/csp-report.browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pubf27996eb9977f34aa9f3376bd3939adc&dd-evp-origin=content-security-policy&ddsource=csp-report&app=kmsat&env=production-eu-west-1 ; worker-src 'self' blob: data: ;","count":7},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.klarnacdn.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com https:\/\/plumrocket.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors https:\/\/www.youtube.com\/ 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https:\/\/www.youtube.com\/ *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com * https:\/\/widget.trustpilot.com\/ *.weltpixel.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com https:\/\/plumrocket.com https:\/\/www.usaskateshop.com\/ *.googletagmanager.com *.doubleclick.net *.typeform.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/d1pna5l3xsntoj.cloudfront.net https:\/\/helloretailcdn.com https:\/\/banners.helloretailcdn.com * *.klarna.com *.klarnaevt.com *.klarnacdn.net https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com magefan.com cm.magefan.com *.disqus.com https:\/\/img.youtube.com maps.gstatic.com maps.googleapis.com https:\/\/usaskateshop-com.b-cdn.net\/ *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/core.helloretail.com https:\/\/d1pna5l3xsntoj.cloudfront.net https:\/\/helloretailcdn.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https:\/\/static.hotjar.com https:\/\/static.zdassets.com https:\/\/payments.worldpay.com https:\/\/cdn.clerk.io https:\/\/api.clerk.io https:\/\/ss.euroskateshop.de https:\/\/ss.euroskateshop.nl https:\/\/ss.euroskateshop.ch *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.disqus.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/d1pna5l3xsntoj.cloudfront.net https:\/\/helloretailcdn.com *.cash.app *.klarnacdn.net https:\/\/static.klaviyo.com assets.braintreegateway.com *.fontawesome.com applepay.cdn-apple.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https:\/\/cdn.usaskateshop.dk https:\/\/static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/core.helloretail.com https:\/\/helloretailcdn.com * *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":7},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com 'unsafe-inline' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.cloudflare.com *.twitter.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https:\/\/www.youtube.com http:\/\/www.sandbox.paypal.com *.twitter.com *.tawk.to 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.ytimg.com *.bing.com *.doubleclick.net *.google.com *.mastercard.com *.tawk.to data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.cloudflare.com *.twitter.com *.google-analytics.com *.gstatic.com *.fontawesome.com *.bing.com *.zopim.com *.tawk.to *.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.typekit.net *.bing.com *.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com *.zopim.com *.zopim.io *.tawk.to 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.google-analytics.com *.cloudflare.com *.twitter.com https:\/\/stats.g.doubleclick.net analytics.google.com *.avada.io *.tawk.to wss:\/\/*.tawk.to self unsafe-inline 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":7},{"content-security-policy-report-only":" block-all-mixed-content;default-src https:;script-src * 'self' https: 'unsafe-eval' 'unsafe-inline';style-src * 'self' https: 'unsafe-inline';connect-src * https: https:\/\/*.paynearme.com;manifest-src 'self';font-src * 'self' https:;form-action 'self' https:\/\/www.facebook.com https:\/\/accounts.google.com https:\/\/twitter.com https:\/\/login.microsoftonline.com;img-src * 'self' https: data:;media-src *;object-src 'none';frame-ancestors *;frame-src * https:\/\/*.paynearme.com;worker-src 'self';base-uri 'self';report-uri \/csp-report","count":7},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/*.dynatrace.com https:\/\/*.cookielaw.org https:\/\/*.usersnap.com https:\/\/*.calibermind.com https:\/\/*.hotjar.com https:\/\/*.googletagmanager.com https:\/\/*.b0e8.com https:\/\/*.doubleclick.net https:\/\/*.bing.com https:\/\/*.licdn.com https:\/\/*.redditstatic.com https:\/\/*.6sc.co https:\/\/*.influ2.com https:\/\/*.zoominfo.com https:\/\/*.d41.co https:\/\/*.stackadapt.com https:\/\/*.marketo.net; style-src 'self' 'unsafe-inline' https:\/\/*.cookielaw.org https:\/\/cdnjs.cloudflare.com; img-src 'self' data: https:\/\/*.dynatrace.com https:\/\/dt-cdn.net https:\/\/*.cookielaw.org https:\/\/*.reddit.com https:\/\/*.google.com https:\/\/*.google.at https:\/\/*.linkedin.com https:\/\/*.bing.com https:\/\/*.6sc.co; font-src 'self' data:; connect-src 'self' https:\/\/*.dynatrace.com https:\/\/*.bc0a.com https:\/\/*.cookielaw.org https:\/\/*.calibermind.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/unpkg.com https:\/\/*.google-analytics.com https:\/\/*.google.com https:\/\/*.doubleclick.net https:\/\/*.bing.com https:\/\/*.linkedin.com https:\/\/*.reddit.com https:\/\/*.stackadapt.com https:\/\/*.6sc.co https:\/\/*.adnxs.com https:\/\/*.influ2.com https:\/\/*.d41.co https:\/\/*.mktoresp.com https:\/\/*.zoominfo.com; frame-src 'self' https:\/\/*.googletagmanager.com https:\/\/*.youtube.com https:\/\/*.youtube-nocookie.com https:\/\/*.doubleclick.net; frame-ancestors 'self' *.dynatrace.org *.dynatrace.com *.dynatrace.cn; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'","count":6},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval' blob: data: https:\/\/googleads.g.doubleclick.net\/pagead\/viewthroughconversion\/ https:\/\/payments.google.com\/payments\/v4\/js\/integrator.js https:\/\/payments.sandbox.google.com\/payments\/v4\/js\/integrator.js https:\/\/translate.google.com\/translate_a\/element.js https:\/\/www.google-analytics.com\/analytics.js https:\/\/www.google-analytics.com\/gtm\/js https:\/\/www.googleadservices.com\/pagead\/conversion\/ https:\/\/www.youtube.com\/iframe_api https:\/\/youtube.googleapis.com\/s\/player\/ https:\/\/youtube.googleapis.com\/iframe_api https:\/\/ssl.gstatic.com\/support\/realtime\/operator\/ https:\/\/www.gstatic.com\/_\/mss\/boq-one-google\/_\/ https:\/\/www.gstatic.com\/og\/_\/js\/ https:\/\/apis.google.com\/js\/api.js https:\/\/apis.google.com\/js\/client.js https:\/\/maps.googleapis.com\/maps\/api\/js https:\/\/www.google.com\/tools\/feedback\/chat_load.js https:\/\/www.google.com\/tools\/feedback\/help_api.js https:\/\/www.google.com\/tools\/feedback\/load.js https:\/\/www.google.com\/tools\/feedback\/open.js https:\/\/www.google.com\/tools\/feedback\/open_to_help_guide_lazy.js https:\/\/www.gstatic.com\/feedback\/js\/ https:\/\/www.gstatic.com\/feedback\/js\/help\/prod\/service\/lazy.min.js https:\/\/www.gstatic.com\/inproduct_help\/api\/main.min.js https:\/\/www.gstatic.com\/inproduct_help\/chatsupport\/chatsupport_button_v2.js https:\/\/www.gstatic.com\/inproduct_help\/service\/lazy.min.js https:\/\/www.gstatic.com\/uservoice\/feedback\/client\/web\/live\/ https:\/\/www.gstatic.com\/uservoice\/surveys\/resources\/prod\/js\/survey\/ https:\/\/www.google.com\/js\/bg\/ https:\/\/www.googletagmanager.com\/gtag\/js https:\/\/www.googletagmanager.com\/gtag\/destination https:\/\/www.gstatic.com\/_\/mss\/boq-gstore\/_\/js\/k=boq-gstore.Gstore.en_US.aFwGeXkugkg.2021.O\/ https:\/\/apis.google.com\/_\/scs\/abc-static\/_\/js\/ https:\/\/maps.googleapis.com\/maps-api-v3\/api\/js\/ https:\/\/maps.googleapis.com\/maps\/vt https:\/\/maps.googleapis.com\/maps\/api\/js\/ https:\/\/maps.googleapis.com\/maps\/api\/place\/js\/ https:\/\/www.youtube.com\/s\/player\/ https:\/\/translate.googleapis.com\/_\/translate_http\/_\/js\/ https:\/\/payments.youtube.com\/payments\/v4\/js\/integrator.js https:\/\/payments.cloud.google\/payments\/v4\/js\/integrator.js;report-uri \/_\/Gstore\/cspreport\/fine-allowlist","count":6},{"content-security-policy-report-only":" base-uri 'self'; font-src 'self' data: https:\/\/assets.vw-mms.de; img-src 'self' https: blob: data: https:\/\/assets.vw-mms.de https:\/\/uploads.vw-mms.de; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/assets.vw-mms.de tools.euroland.com volkswagen.gomexlive.com volkswagen-newsroom.gomexlive.com stats.vw-mms.de www.youtube.com www.youtube-nocookie.com; style-src 'self' 'unsafe-inline' https:\/\/assets.vw-mms.de; default-src 'self'; media-src 'self' https: blob: data: https:\/\/uploads.vw-mms.de; connect-src 'self' blob: data: https:\/\/assets.vw-mms.de tools.eurolandir.com stats.vw-mms.de o4509546924408832.ingest.de.sentry.io; frame-src 'self' tools.eurolandir.com tools.euroland.com volkswagen.gomexlive.com volkswagen-newsroom.gomexlive.com embed.gomexlive.com player.gl-systemhaus.de de.vistream.online en.vistream.online www.vistream.online www.vw01-assets.com www.youtube.com www.youtube-nocookie.com; report-uri https:\/\/o4509546924408832.ingest.de.sentry.io\/api\/4509548617269328\/security\/?sentry_key=f70e804d43977980e79911505a9beabf","count":6},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval'   *.interactivebrokers.com   *.interactivebrokers.ca   *.interactivebrokers.com.hk   *.interactivebrokers.hk   *.interactivebrokers.ch   *.interactivebrokers.eu   *.interactivebrokers.ie   *.interactivebrokers.lu   *.interactivebrokers.hu   *.interactivebrokers.com.sg   *.interactivebrokers.co.uk   *.interactivebrokers.com.au   *.interactivebrokers.co.jp   *.interactivebrokers.co.in   *.ibkr.com   *.ibkr.com.cn   *.ibkrcampus.com   *.ibkrguides.com   *.clientam.com   *.interactiveadvisors.com   *.portfolioanalyst.com   *.go-mpulse.net   *.akstat.io   *.tradingview.com   bat.bing.com   *.taboola.com   googleads.g.doubleclick.net   www.googletagmanager.com   *.tiktok.com   *.quora.com   *.facebook.net   *.amazon-adsystem.com   *.ads-twitter.com   *.redditstatic.com   *.getlimy.ai   *.googleapis.com   *.google-analytics.com   *.gstatic.com   *.googleadservices.com   *.plaid.com   ; report-to csp-endpoint; report-uri \/response_handlers\/csplogger\/index.php","count":6},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.cookiefirst.com *.marketo.com *.marketo.net *.mktoresp.com *.bizible.com *.salesforce.com *.my.site.com *.salesforce-scrt.com tcpsoftware.my.site.com *.clarity.ms *.linkedin.com *.facebook.net *.youtube.com *.company-target.com snap.licdn.com bat.bing.com googleads.g.doubleclick.net www.googleadservices.com www.redditstatic.com tr.capterra.com tag.demandbase.com *.claydar.com d34r8q7sht0t9k.cloudfront.net *.leandata.com *.tcpsoftware.com go.tcpsoftware.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.marketo.com https:; font-src 'self' fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' *.google-analytics.com *.analytics.google.com *.cookiefirst.com consent.cookiefirst.com *.marketo.com *.mktoresp.com *.bizible.com *.salesforce.com *.salesforce-scrt.com tcpsoftware.my.salesforce-scrt.com *.clarity.ms *.company-target.com px.ads.linkedin.com bat.bing.com www.google.com *.doubleclick.net *.reddit.com tr.capterra.com tag-logger.demandbase.com api.claydar.com *.podscribe.com *.leandata.com wss:\/\/*.salesforce.com wss:\/\/*.salesforce-scrt.com chloe.tcpsoftware.net chloe-test.tcpsoftware.net *.tcpsoftware.com go.tcpsoftware.com; frame-src *.youtube.com *.marketo.com *.my.site.com *.company-target.com *.hubspot.com *.hsforms.com chloe.tcpsoftware.net chloe-test.tcpsoftware.net *.tcpsoftware.com; base-uri 'self'; form-action 'self' *.marketo.com *.salesforce.com *.hubspot.com *.hsforms.com; worker-src blob: 'self';","count":6},{"content-security-policy-report-only":" default-src 'self' wss: https:\/\/*.everviz.com https:\/\/app.everviz.com https:\/\/*.highcharts.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com *.xmcwtwco.com *.sitecorecloud.io *.willistowerswatson.com *.wtwco *.wtwco.com *.wtwco.cn https:\/\/*.brightcovecdn.com https:\/\/*.brightcove.com https:\/\/*.boltdns.net https:\/\/*.marketo.net https:\/\/*.facebook.com https:\/\/*.doubleclick.net https:\/\/*.infoblox.com https:\/\/*.cisco-secure.com https:\/\/*.mktoutil.com https:\/\/*.clarity.ms https:\/\/www.google.com https:\/\/www.google.co https:\/\/www.google.hn https:\/\/www.google.ps https:\/\/www.google.rs https:\/\/www.google.ad https:\/\/www.google.ca https:\/\/www.google.ch https:\/\/www.google.cl https:\/\/*.reddit.com https:\/\/*.outbrain.com https:\/\/*.twitter.com https:\/\/*.appier.net https:\/\/*.hubspot.com https:\/\/*.livechatinc.com https:\/\/*.branch.io https:\/\/*.privacymanager.io https:\/\/*.trendmicro.com https:\/\/*.bing.com https:\/\/*.cloudflare.com https:\/\/*.amazonaws.com https:\/\/*.brevo.com https:\/\/*.callrail.com https:\/\/*.cookie-script.com https:\/\/*.iubenda.com https:\/\/*.onetrust.com https:\/\/*.yahoo.com https:\/\/*.hotjar.io https:\/\/*.fullstory.com https:\/\/*.klaviyo.com https:\/\/*.googleapis.com https:\/\/*.gstatic.cn https:\/\/*.gstatic.com https:\/\/*.zscalertwo.net https:\/\/*.zscloud.net https:\/\/*.hs-scripts.com https:\/\/*.youtube.com https:\/\/*.mimecast.com https:\/\/*.google-analytics.com https:\/\/*.qualtrics.com https:\/\/siteimproveanalytics.com https:\/\/bat.bing.net https:\/\/cdn.cookielaw.org https:\/\/connect.facebook.net https:\/\/login.microsoftonline.com https:\/\/microsoftedge.microsoft.com https:\/\/players.brightcove.net https:\/\/edge.api.brightcove.com https:\/\/cdn.bc0a.com https:\/\/secure.brightcove.com https:\/\/snap.licdn.com https:\/\/static2.sharepointonline.com https:\/\/use.fontawesome.com https:\/\/use.typekit.net https:\/\/vjss.zencdn.net https:\/\/widgets.trustedshops.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/www.googletagservices.com https:\/\/www.recaptcha.net https:\/\/munchkin.marketo.net https:\/\/px.ads.linkedin.com https:\/\/*.coveo.com https:\/\/*.siteimproveanalytics.io https:\/\/*.mktoresp.com https:\/\/zuxydfcl.cdn.imgeng.in https:\/\/www.google.nl https:\/\/mediacdn.wtwco.com https:\/\/assets.adoberesources.net https:\/\/documentcloud.adobe.com *.adobe.io wss:\/\/*.adobe.io https:\/\/lh3.googleusercontent.com https:\/\/*.typekit.net data: blob: 'unsafe-inline' 'unsafe-eval'; report-uri","count":6},{"content-security-policy-report-only":" img-src https: blob: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/*.fcl.cloud https:\/\/*.flightcentre.com https:\/\/*.flightcentre.com.au https:\/\/*.flightcentre.co.nz https:\/\/*.flightcentre.co.za https:\/\/*.flightcentre.ca https:\/\/*.flightcentre.co.uk https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/www.youtube.com https:\/\/*.fullstory.com https:\/\/vxml4.plavxml.com https:\/\/*.nr-data.net https:\/\/*.usabilla.com http:\/\/*.usabilla.com https:\/\/*.newrelic.com https:\/\/d6tizftlrpuof.cloudfront.net https:\/\/cdnjs.cloudflare.com https:\/\/cdn.optimizely.com https:\/\/*.outbrain.com https:\/\/analytics.tiktok.com https:\/\/bat.bing.com https:\/\/cdn.abrankings.com https:\/\/connect.facebook.net https:\/\/edge.fullstory.com https:\/\/loader.wisepops.com https:\/\/wisepops.net https:\/\/s.pinimg.com https:\/\/snap.licdn.com https:\/\/googleads.g.doubleclick.net https:\/\/accounts.google.com https:\/\/*.pinterest.com https:\/\/*.evergage.com https:\/\/js.adsrvr.org https:\/\/static.criteo.net https:\/\/flightcentre-webchat.gotbot.co.za https:\/\/7226714.collect.igodigital.com https:\/\/cdn.pdst.fm https:\/\/*.hotjar.com https:\/\/tr.snapchat.com https:\/\/*.feefo.com https:\/\/koi-3qn5erhpry.marketingautomation.services https:\/\/cdn.jsdelivr.net https:\/\/*.stackla.com https:\/\/cdn.cookielaw.org https:\/\/sc-static.net https:\/\/developer.livehelpnow.net https:\/\/cdn.evgnet.com https:\/\/maps.googleapis.com https:\/\/sdk.joinsherpa.io https:\/\/cdn.wisepops.com https:\/\/*.quantserve.com https:\/\/*.livechatinc.com https:\/\/flightcentre.r-cubed.co.uk https:\/\/rules.quantcount.com https:\/\/*.criteo.com https:\/\/code.jquery.com https:\/\/*.creativecdn.com https:\/\/*.rokt.com https:\/\/*.mypurecloud.com.au https:\/\/s.yimg.com https:\/\/sp.analytics.yahoo.com *.feroot.com https:\/\/*.taboola.com https:\/\/*.redditstatic.com https:\/\/*.reddit.com https:\/\/utt.impactcdn.com https:\/\/fctgleisure.my.site.com https:\/\/fctgleisure--baudev.sandbox.my.site.com; style-src 'unsafe-inline' 'self' https:\/\/fonts.googleapis.com https:\/\/register.feefo.com https:\/\/cdn.cookielaw.org https:\/\/d6tizftlrpuof.cloudfront.net; connect-src https:\/\/*.fcl.cloud wss:\/\/*.fcl.cloud https:\/\/*.flightcentre.com https:\/\/*.flightcentre.com.au https:\/\/*.flightcentre.co.nz https:\/\/*.flightcentre.co.za https:\/\/*.flightcentre.ca https:\/\/*.flightcentre.co.uk https:\/\/*.fclmedia.com https:\/\/fcl-sydney-geo-7.ent.ap-southeast-2.aws.found.io https:\/\/flowise-dev.dse.fctg.global https:\/\/*.launchdarkly.com https:\/\/*.optimizely.com *.nr-data.net https:\/\/*.fullstory.com https:\/\/*.google-analytics.com https:\/\/*.google.com https:\/\/*.google.com.au https:\/\/*.google.ca https:\/\/*.google.co.nz https:\/\/*.google.co.za https:\/\/*.google.co.uk https:\/\/*.evergage.com https:\/\/analytics.tiktok.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/analytics.pangle-ads.com https:\/\/*.pinterest.com https:\/\/*.linkedin.com https:\/\/*.outbrain.com https:\/\/*.g.doubleclick.net https:\/\/wisepops.net https:\/\/*.wisepops.com https:\/\/*.feefo.com https:\/\/cdn.cookielaw.org https:\/\/developer.livehelpnow.net https:\/\/*.snapchat.com https:\/\/www.facebook.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/*.onetrust.com https:\/\/flightcentre.r-cubed.co.uk https:\/\/adservice.google.com https:\/\/www.google.com https:\/\/analytics.google.com https:\/\/www.googleadservices.com https:\/\/*.browser-intake-datadoghq.com https:\/\/*.criteo.com https:\/\/*.usabilla.com https:\/\/*.creativecdn.com https:\/\/*.mypurecloud.com.au wss:\/\/*.mypurecloud.com.au https:\/\/*.salesforce.com https:\/\/d1nojfewl3tku3.cloudfront.net\/assets https:\/\/maps.googleapis.com https:\/\/s.yimg.com *.feroot.com https:\/\/insight.adsrvr.org https:\/\/*.taboola.com https:\/\/*.reddit.com https:\/\/*.pinimg.com https:\/\/*.impact.com https:\/\/fctgleisure.my.site.com https:\/\/fctgleisure--baudev.sandbox.my.site.com https:\/\/fctgleisure.my.salesforce-scrt.com https:\/\/fctgleisure--baudev.sandbox.my.salesforce-scrt.com https:\/\/flightcentre.pxf.io https:\/\/*.impct.site; default-src https: blob: 'unsafe-inline' 'unsafe-eval' wss:\/\/*.flightcentre.com.au:*; font-src https: blob: data:; frame-ancestors 'self'; report-uri \/api\/csp_report","count":6},{"content-security-policy-report-only":" font-src www.paypalobjects.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ js.mollie.com *.sendcloud.sc *.jsdelivr.net *.belco.io https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/images.unsplash.com magefan.com cm.magefan.com https:\/\/www.mollie.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: ts.tradetracker.net www.magmodules.eu https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com https:\/\/player.vimeo.com js.mollie.com *.sendcloud.sc *.jsdelivr.net https:\/\/servicepoints.sendcloud.sc https:\/\/embed.sendcloud.sc *.hsforms.net *.hsforms.com *.google.com *.gstatic.com tm.tradetracker.net https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com cdn.belco.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com maxcdn.bootstrapcdn.com *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com *.belco.io https:\/\/www.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":6},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; media-src 'self' data: https:; worker-src 'self' blob:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'","count":6},{"content-security-policy-report-only":" default-src 'self' *.unrealengine.com *.epicgames.com *.epicgames.net cdn.cookielaw.org *.hcaptcha.com sentry.io *.youtube-nocookie.com epicgames-privacy.my.onetrust.com cloudflare.epicgamescdn.com *.launchdarkly.com player.vimeo.com edc-cdn.net cdn2.unrealengine.com maps.googleapis.com us-west-2-epicgames.graphassets.com d1ap1mz92jnks1.cloudfront.net cdnjs.cloudflare.com d3kjluh73b9h9o.cloudfront.net img.edc-cdn.net cdn1.epicgames.com connect.facebook.net *.realityscan.com kidsafe.com; style-src 'self' 'unsafe-inline' wasm-eval: fonts.googleapis.com *.unrealengine.com *.epicgames.com *.epicgames.net cdn.cookielaw.org *.hcaptcha.com sentry.io *.youtube-nocookie.com epicgames-privacy.my.onetrust.com cloudflare.epicgamescdn.com *.launchdarkly.com player.vimeo.com edc-cdn.net cdn2.unrealengine.com maps.googleapis.com us-west-2-epicgames.graphassets.com d1ap1mz92jnks1.cloudfront.net cdnjs.cloudflare.com d3kjluh73b9h9o.cloudfront.net img.edc-cdn.net cdn1.epicgames.com connect.facebook.net *.realityscan.com kidsafe.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.unrealengine.com *.epicgames.com *.epicgames.net cdn.cookielaw.org *.hcaptcha.com sentry.io *.youtube-nocookie.com epicgames-privacy.my.onetrust.com cloudflare.epicgamescdn.com *.launchdarkly.com player.vimeo.com edc-cdn.net cdn2.unrealengine.com maps.googleapis.com us-west-2-epicgames.graphassets.com d1ap1mz92jnks1.cloudfront.net cdnjs.cloudflare.com d3kjluh73b9h9o.cloudfront.net img.edc-cdn.net cdn1.epicgames.com connect.facebook.net *.realityscan.com kidsafe.com; script-src-elem 'self' 'unsafe-inline' blob: *.unrealengine.com *.epicgames.com *.epicgames.net cdn.cookielaw.org *.hcaptcha.com sentry.io *.youtube-nocookie.com epicgames-privacy.my.onetrust.com cloudflare.epicgamescdn.com *.launchdarkly.com player.vimeo.com edc-cdn.net cdn2.unrealengine.com maps.googleapis.com us-west-2-epicgames.graphassets.com d1ap1mz92jnks1.cloudfront.net cdnjs.cloudflare.com d3kjluh73b9h9o.cloudfront.net img.edc-cdn.net cdn1.epicgames.com connect.facebook.net *.realityscan.com kidsafe.com; font-src 'self' data: fonts.gstatic.com *.unrealengine.com *.epicgames.com *.epicgames.net cdn.cookielaw.org *.hcaptcha.com sentry.io *.youtube-nocookie.com epicgames-privacy.my.onetrust.com cloudflare.epicgamescdn.com *.launchdarkly.com player.vimeo.com edc-cdn.net cdn2.unrealengine.com maps.googleapis.com us-west-2-epicgames.graphassets.com d1ap1mz92jnks1.cloudfront.net cdnjs.cloudflare.com d3kjluh73b9h9o.cloudfront.net img.edc-cdn.net cdn1.epicgames.com connect.facebook.net *.realityscan.com kidsafe.com; connect-src 'self' data: maps.googleapis.com cdnml.global-cache.online *.unrealengine.com *.epicgames.com *.epicgames.net cdn.cookielaw.org *.hcaptcha.com sentry.io *.youtube-nocookie.com epicgames-privacy.my.onetrust.com cloudflare.epicgamescdn.com *.launchdarkly.com player.vimeo.com edc-cdn.net cdn2.unrealengine.com maps.googleapis.com us-west-2-epicgames.graphassets.com d1ap1mz92jnks1.cloudfront.net cdnjs.cloudflare.com d3kjluh73b9h9o.cloudfront.net img.edc-cdn.net cdn1.epicgames.com connect.facebook.net *.realityscan.com kidsafe.com; frame-src 'self' data: *.unrealengine.com *.epicgames.com *.epicgames.net cdn.cookielaw.org *.hcaptcha.com sentry.io *.youtube-nocookie.com epicgames-privacy.my.onetrust.com cloudflare.epicgamescdn.com *.launchdarkly.com player.vimeo.com edc-cdn.net cdn2.unrealengine.com maps.googleapis.com us-west-2-epicgames.graphassets.com d1ap1mz92jnks1.cloudfront.net cdnjs.cloudflare.com d3kjluh73b9h9o.cloudfront.net img.edc-cdn.net cdn1.epicgames.com connect.facebook.net *.realityscan.com kidsafe.com; frame-ancestors 'none'; img-src 'self' data: *.ytimg.com img.youtube.com maps.gstatic.com *.unrealengine.com *.epicgames.com *.epicgames.net cdn.cookielaw.org *.hcaptcha.com sentry.io *.youtube-nocookie.com epicgames-privacy.my.onetrust.com cloudflare.epicgamescdn.com *.launchdarkly.com player.vimeo.com edc-cdn.net cdn2.unrealengine.com maps.googleapis.com us-west-2-epicgames.graphassets.com d1ap1mz92jnks1.cloudfront.net cdnjs.cloudflare.com d3kjluh73b9h9o.cloudfront.net img.edc-cdn.net cdn1.epicgames.com connect.facebook.net *.realityscan.com kidsafe.com;","count":6},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.akstat.io p11.techlab-cdn.com trial-eum-clientnsv4-s.akamaihd.net trial-eum-clienttons-s.akamaihd.net c.go-mpulse.net s.go-mpulse.net *.algolianet.com us5azow6i2-dsn.algolia.net xfoi9ebbhr-dsn.algolia.net secure.adnxs.com bat.bing.com bat.bing.net d.btttag.com pearson3283191z.btttag.com pearson.blueconic.net pearson.sb.blueconic.net api.company-target.com s.company-target.com tag-logger.demandbase.com tag.demandbase.com googleads.g.doubleclick.net ad.doubleclick.net td.doubleclick.net *.fls.doubleclick.net connect.facebook.net analytics.formassembly.com pearson.tfaforms.net ade.googlesyndication.com fonts.gstatic.com pagead2.googlesyndication.com fonts.googleapis.com region1.google-analytics.com static.hotjar.com utt.impactcdn.com cdn.jsdelivr.net app.launchdarkly.com px.ads.linkedin.com snap.licdn.com i.liadm.com cdn.cookielaw.org bam.nr-data.net js-agent.newrelic.com geolocation.onetrust.com privacyportal-de.onetrust.com *.pearson.com pearson.com cdn.pdst.fm a.quora.com q.quora.com tag.rmp.rakuten.com alb.reddit.com pixel-config.reddit.com www.redditstatic.com pi.pardot.com sc-static.sc-static.net tr.snapchat.com tr6.snapchat.com pixels.spotify.com analytics-ipv6.tiktokw.us analytics.tiktok.com insight.adsrvr.org js.adsrvr.org static.ads-twitter.com analytics.twitter.com t.t.co pearson.esaas.inmoment.eu pearson.mcxplatform.de *.visualwebsiteoptimizer.com img.youtube.com pearson--projects.sandbox.my.site.com; frame-ancestors 'none';","count":6},{"content-security-policy-report-only":" default-src 'self';     script-src 'self' https: 'unsafe-inline' 'unsafe-eval';     style-src 'self' https: 'unsafe-inline';     img-src 'self' data: https:;     font-src 'self' data: https:;     connect-src 'self' https:;     frame-ancestors 'self';     object-src 'none';     base-uri 'self';     upgrade-insecure-requests;","count":6},{"content-security-policy-report-only":" default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'","count":6},{"content-security-policy-report-only":" default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; script-src-elem * 'unsafe-inline' https:\/\/www.googletagmanager.com blob: data:; style-src * 'unsafe-inline'; style-src-elem * 'unsafe-inline'; font-src * data: moz-extension:; img-src * data: blob:; media-src * data: blob:; connect-src * properties: data:; frame-src *; worker-src * blob:; report-uri https:\/\/sentry-new.public.mybestpro.com\/api\/8\/security\/?sentry_key=54be949d75fc07530648e0a189a26f35&sentry_environment=prod","count":6},{"content-security-policy-report-only":" default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":6},{"content-security-policy-report-only":" base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; report-uri \/csp-report; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: *.ivi.ru *.ivi.tv *.turkdizi.com ivi.ru ivi.tv turkdizi.com google.com *.google.com gstatic.com *.gstatic.com googletagmanager.com *.googletagmanager.com *.googleapis.com googlesyndication.com *.googlesyndication.com google-analytics.com *.google-analytics.com doubleclick.net *.doubleclick.net *.googleadservices.com www.googlecommerce.com yandex.ru *.yandex.ru yandex.net *.yandex.net yandex.st *.yandex.st yastat.net *.yastat.net yastatic.net *.yastatic.net yandex.com *.yandex.com yandexcloud.net *.yandexcloud.net yandex.by *.yandex.by yandex.kz *.yandex.kz mail.ru *.mail.ru tns-counter.ru *.tns-counter.ru doubleverify.com *.doubleverify.com s0.2mdn.net adriver.ru *.adriver.ru statad.ru *.statad.ru targetads.io *.targetads.io flocktory.com *.flocktory.com getshop.tv *.getshop.tv *.clarity.ms *.hotjar.com adfox.ru *.adfox.ru adsafeprotected.com *.adsafeprotected.com 5visions.com *.5visions.com adjust.com *.adjust.com ozon.ru *.ozon.ru bridgertb.tech *.bridgertb.tech serving-sys.ru *.serving-sys.ru cmediahub.ru *.cmediahub.ru weborama-tech.ru *.weborama-tech.ru digitaltarget.ru *.digitaltarget.ru mhverifier.ru *.mhverifier.ru adlooxtracking.ru *.adlooxtracking.ru adlooxtracking.com *.adlooxtracking.com telecid.ru *.telecid.ru tele2.ru *.tele2.ru telecomid.ru *.telecomid.ru teletarget.ru *.teletarget.ru cdnvideo.ru *.cdnvideo.ru beeline.ru *.beeline.ru moe.video *.moe.video otm-r.com *.otm-r.com punchmedia.ru *.punchmedia.ru skwstat.ru *.skwstat.ru stbid.ru *.stbid.ru videonow.ru *.videonow.ru utraff.com *.utraff.com acint.net *.acint.net betweendigital.com *.betweendigital.com betweendigital.ads.com lentainform.com *.lentainform.com code.moviead55.ru moviead55.ru cs-0.moevideo.biz moevideo.biz buzzoola.com *.buzzoola.com uma.media *.uma.media appsflyer.com *.appsflyer.com instreamvideo.ru *.instreamvideo.ru mobilebanner.ru *.mobilebanner.ru admetrica.ru *.admetrica.ru prodmp.ru *.prodmp.ru sync.adspend.space reichelcormier.bid *.reichelcormier.bid secure.adnxs.com adnxs.com ohmy.bid *.ohmy.bid ssl.hurra.com hurra.com bidvol.com *.bidvol.com adstreamer.ru *.adstreamer.ru adkernel.com *.adkernel.com republer.com sync.republer.com sync.viadata.store viadata.store sync.viavideo.digital viavideo.digital wi-fi.ru *.wi-fi.ru track.rutarget.ru rutarget.ru impressions.onelink.me onelink.me px170.mediahills.ru mediahills.ru mts.ru *.mts.ru digital-alliance.tech *.digital-alliance.tech admon.pro *.admon.pro adhight.net *.adhight.net getads.ru *.getads.ru vk.com *.vk.com connect.facebook.net facebook.com *.facebook.com *.skcrtxr.com api.mindbox.ru simbad.pro taglitics.com creatives.afp.ai cdn.al-adtech.com cdn.jsdelivr.net *.criteo.com image.sendsay.ru snap.licdn.com dap.digitalgov.gov bat.bing.com www.artfut.com cdn.cookielaw.org static.ads-twitter.com s.pinimg.com cdn-cookieyes.com cdn.taboola.com www.redditstatic.com *.ahrefs.com *.alicdn.com *.tiktok.com *.amazonaws.com *.cloudflare.com cdn.amplitude.com cdn.segment.com cdn.branch.io app.usercentrics.eu app.termly.io cdn.walkme.com s.go-mpulse.net cdn.moengage.com cdn.omniconvert.com siteimproveanalytics.com edge.fullstory.com cdn.rutarget.ru sb.scorecardresearch.com secure.quantserve.com c.amazon-adsystem.com cdn.mxpnl.com cdn.userway.org kp.apiget.ru static.pro-bm7.ru rus.glbbars.com api.cpatext.ru widgets.101apis.com images.uc.cn cdn.browsiprod.com unpkg.zhimg.com s.yimg.jp gtmpx.com r.gtmpx.com cdn.dv.tech zmstat.com coilita.com app-vault-static.intl.miui.com plaff-go.ru img.otv.cc mstat.acestream.net cdn.alsgp0.fds.api.mi-img.com ymqhq7yfu5.ru ymkm9druw0.ru","count":5},{"content-security-policy-report-only":" frame-ancestors 'self'; object-src 'none'; report-uri \/api\/csp-reporting","count":5},{"content-security-policy-report-only":" report-uri https:\/\/reporting.go-mpulse.net\/report\/FDSGP-LEB9B-T8Y2A-5V5ED-9WX2T","count":5},{"content-security-policy-report-only":" default-src 'self';  script-src 'self' https:\/\/assets.adobedtm.com https:\/\/www.googletagmanager.com https:\/\/*.newrelic.com https:\/\/*.liveperson.net https:\/\/*.lpsnmedia.net https:\/\/apps.bazaarvoice.com 'unsafe-inline' 'unsafe-eval';  style-src 'self' 'unsafe-inline';  img-src 'self' https: data:;  font-src 'self' https: data:; connect-src 'self' https:\/\/*.doubleclick.net https:\/\/*.liveperson.net wss:\/\/*.liveperson.net https:\/\/*.lpsnmedia.net https:\/\/bam.nr-data.net https:\/\/*.telstra.com https:\/\/*.telstra.com.au https:\/\/apps.bazaarvoice.com;  object-src 'none';  base-uri 'self';  report-uri https:\/\/csp-report-pr.aem.telstra.net\/report;","count":5},{"content-security-policy-report-only":" frame-ancestors 'self' https:\/\/*.yahooinc.com; object-src 'none'; script-src 'none'; report-uri https:\/\/csp.yahoo.com\/beacon\/csp?src=yahooinc;","count":5},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com cash-f.squarecdn.com https:\/\/apretailer.com.br 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.facebook.com *.facebook.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.us1.gigya.com *.openpay.mx *.openpay.co *.facebook.com *.facebook.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.opencontrol.mx *.kaptcha.com *.openpay.pe *.paynet.com.mx *.pagaleve.io *.pagaleve.com.br www.google-analytics.com unpkg.com googleads.g.doubleclick.net commerce.adobedtm.com magento-recs-sdk.adobe.net www.googleadservices.com www.gstatic.com *.google.com.br *.criteo.com *.doubleclick.net *.cloudfront.net *.nr-data.net *.enviou.com.br *.newrelic.com https:\/\/receiver.posclick.dinamize.com *.gigya-api.com *.panini.com.br https:\/\/apretailer.com.br c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.us1.gigya.com 'self' data: 'unsafe-inline' data: *.postimg.cc magefan.com cm.magefan.com *.facebook.com *.facebook.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.openpay.mx *.pagaleve.com.br unpkg.com commerce.adobedtm.com magento-recs-sdk.adobe.net www.gstatic.com *.google.com *.google.com.br *.panini.canto.global *.cloudfront.net *.doubleclick.net *.g.doubleclick.net *.ivitrack.com *.bidswitch.net *.criteo.com *.nr-data.net *.enviou.com.br *.newrelic.com https:\/\/receiver.posclick.dinamize.com *.gigya-api.com *.panini.com.br https:\/\/www.gravatar.com *.googleusercontent.com https:\/\/apretailer.com.br https:\/\/cdn.aplazo.mx *.adobedtm.com *.clarity.ms https:\/\/smartbmc.com.br https:\/\/ib.adnxs.com https:\/\/r.casalemedia.com https:\/\/ads.stickyadstv.com https:\/\/ad.360yield.com https:\/\/i.liadm.com https:\/\/contextual.media.net https:\/\/exchange.mediavine.com *.bing.com https:\/\/jadserve.postrelease.com https:\/\/sync.outbrain.com https:\/\/simage2.pubmatic.com https:\/\/trends.revcontent.com https:\/\/pixel.rubiconproject.com https:\/\/rtb-csync.smartadserver.com https:\/\/sync-t1.taboola.com https:\/\/criteo-sync.teads.tv https:\/\/criteo-partners.tremorhub.com https:\/\/ade.clmbtech.com https:\/\/eb2.3lift.com https:\/\/sync.1rx.io https:\/\/gum.criteo.com https:\/\/public-prod-dspcookiematching.dmxleo.com https:\/\/www.mercadopago.cl *.agkn.com *.targeting.unrulymedia.com *.dnzdns.com *.adgrx.com *.bidr.io *.yahoo.com *.emkt.dinamize.com *.dinamize.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https:\/\/rum.hlx.page chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.us1.gigya.com *.facebook.com *.facebook.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.s3.amazonaws.com *.openpay.co *.openpay.pe *.google-analytics.com *.google.com\/recaptcha\/ *.gstatic.com\/recaptcha\/ *.pagaleve.com.br analytics.tiktok.com *.clarity.ms unpkg.com www.gstatic.com *.google.com.br *.vendavalida.com.br *.zdassets.com *.criteo.com *.cloudfront.net *.enviou.com.br aprtn.com https:\/\/receiver.posclick.dinamize.com *.gigya-api.com *.panini.com.br https:\/\/apretailer.com.br *.metricool.com *.hotjar.com *.bing.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app downloads.mailchimp.com 'unsafe-inline' data: *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/apretailer.com.br assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.openpay.mx *.openpay.co *.facebook.com *.facebook.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.openpay.pe unpkg.com googleads.g.doubleclick.net commerce.adobedtm.com magento-recs-sdk.adobe.net www.gstatic.com *.google.com.br *.criteo.com *.vendavalida.com.br *.zendesk.com *.doubleclick.net *.us1.gigya.com *.cloudfront.net *.enviou.com.br https:\/\/receiver.posclick.dinamize.com *.gigya-api.com *.panini.com.br https:\/\/apretailer.com.br *.paniniadrenalyn.com pagead2.googlesyndication.com analytics.tiktok.com *.clarity.ms *.bing.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bam.nr-data.net googleads.g.doubleclick.net csm.us5.us.criteo.net commerce.adobedc.net https:\/\/apretailer.com.br *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":5},{"content-security-policy-report-only":" connect-src 'self' https:\/\/clerk-telemetry.com https:\/\/*.clerk-telemetry.com https:\/\/api.stripe.com https:\/\/maps.googleapis.com https:\/\/img.clerk.com https:\/\/images.clerkstage.dev https:\/\/*.protect.clerk.com:* clerk.clerk.com https:\/\/*.ingest.us.sentry.io https:\/\/*.ingest.sentry.io https:\/\/px.ads.linkedin.com https:\/\/snap.licdn.com https:\/\/www.googletagmanager.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/ad.doubleclick.net https:\/\/www.google.com https:\/\/static.ads-twitter.com https:\/\/analytics.twitter.com https:\/\/t.co https:\/\/alb.reddit.com https:\/\/pixel-config.reddit.com https:\/\/us.posthog.com https:\/\/api.dub.co https:\/\/d.to https:\/\/va.vercel-scripts.com https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/insights.algolia.io https:\/\/proxy.scalar.com https:\/\/registry.scalar.com https:\/\/api.scalar.com https:\/\/dapi.clerk.com; default-src 'self'; font-src 'self' https:\/\/fonts.scalar.com https:\/\/fonts.gstatic.com data:; form-action 'self'; frame-src 'self' https:\/\/challenges.cloudflare.com https:\/\/*.js.stripe.com https:\/\/js.stripe.com https:\/\/hooks.stripe.com https:\/\/*.protect.clerk.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/vimeo.com https:\/\/previews.clerkstage.dev https:\/\/*.clerkshowcase.com https:\/\/profound-falcon-32.clerk.accounts.dev; img-src 'self' https:\/\/img.clerk.com https:\/\/px.ads.linkedin.com https:\/\/www.googletagmanager.com https:\/\/googleads.g.doubleclick.net https:\/\/www.google.com https:\/\/www.google.ca https:\/\/www.google.co.uk https:\/\/www.google.co.in https:\/\/www.google.co.id https:\/\/www.google.co.ma https:\/\/www.google.com.ng https:\/\/www.google.com.bd https:\/\/www.google.com.ua https:\/\/www.google.com.my https:\/\/www.google.com.tw https:\/\/analytics.twitter.com https:\/\/t.co https:\/\/alb.reddit.com https:\/\/i.ytimg.com https:\/\/yt3.ggpht.com https:\/\/vercel.com data:; media-src 'self' https:\/\/*.vimeocdn.com; report-uri https:\/\/o449981.ingest.us.sentry.io\/api\/4509032994701312\/security\/?sentry_key=e1b27a6d9d80cfcd90930df90189f8a9; script-src 'self' 'unsafe-inline' https: http: https:\/\/*.js.stripe.com https:\/\/js.stripe.com https:\/\/maps.googleapis.com https:\/\/*.protect.clerk.com; style-src 'self' 'unsafe-inline' https:\/\/cdn.jsdelivr.net; worker-src 'self' blob:; report-to csp-endpoint","count":5},{"content-security-policy-report-only":" frame-ancestors 'self';","count":5},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/s4.ispring.ru https:\/\/st.yagla.ru https:\/\/*.mail.ru https:\/\/app.uiscom.ru https:\/\/mc.yandex.ru https:\/\/vk.ru https:\/\/*.jivosite.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/*.tildacdn.com https:\/\/unpkg.com https:\/\/bitrix.info; style-src 'self' 'unsafe-inline' https:\/\/*.jivosite.com https:\/\/*.tildacdn.com https:\/\/unpkg.com https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:\/\/*.mail.ru https:\/\/vk.ru https:\/\/*.jivosite.com https:\/\/*.tildacdn.com https:\/\/www.ispring.ru; font-src 'self' https:\/\/*.tildacdn.com https:\/\/fonts.gstatic.com; media-src 'self' https:\/\/*.mail.ru https:\/\/*.jivosite.com https:\/\/*.tildacdn.com; worker-src 'self' blob:; connect-src 'self' https:\/\/app.uiscom.ru https:\/\/mc.yandex.ru wss:\/\/mc.yandex.ru https:\/\/*.jivosite.com wss:\/\/*.jivosite.com https:\/\/*.mail.ru https:\/\/stat.tildaapi.com https:\/\/*.tildacdn.com; frame-src 'self' https:\/\/cdn4.ispringsolutions.com https:\/\/mc.yandex.ru; frame-ancestors 'self'; report-uri \/csp-report\/report-only","count":5},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/www.couriermail.com.au\/csp-reports","count":5},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https:\/\/*.google.com https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.googlesyndication.com https:\/\/*.googleadservices.com https:\/\/*.doubleclick.net https:\/\/*.adtrafficquality.google https:\/\/*.gstatic.com https:\/\/cdn.jsdelivr.net https:\/\/d3js.org; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/*.google.com https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.googlesyndication.com https:\/\/*.googleadservices.com https:\/\/*.doubleclick.net https:\/\/*.adtrafficquality.google https:\/\/*.gstatic.com; media-src 'self' blob: https:; frame-src 'self' https:\/\/*.google.com https:\/\/*.googlesyndication.com https:\/\/*.googleadservices.com https:\/\/*.doubleclick.net https:\/\/*.adtrafficquality.google; worker-src 'self' blob:","count":5},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.jivosite.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/diffuser-cdn.app-us1.com https:\/\/prism.app-us1.com https:\/\/s4.ispringsolutions.com https:\/\/s4.ispring.eu https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/bitrix.info; style-src 'self' 'unsafe-inline' https:\/\/*.jivosite.com https:\/\/fonts.googleapis.com; img-src 'self' https:\/\/*.jivosite.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com data: blob:; font-src 'self' https:\/\/fonts.gstatic.com; media-src 'self' https:\/\/*.jivosite.com https:\/\/www.youtube.com; worker-src 'self' blob:; connect-src 'self' https:\/\/*.jivosite.com wss:\/\/*.jivosite.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/tracker.clickfortify.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/stats.g.doubleclick.net; frame-src 'self' https:\/\/www.youtube.com https:\/\/cdn4.ispringsolutions.com https:\/\/ispringteam.ispring.com; frame-ancestors 'self'; report-uri \/csp-report\/report-only","count":5},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/connect.facebook.net https:\/\/www.google.com https:\/\/www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/connect.facebook.net; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.facebook.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'","count":5},{"content-security-policy-report-only":" default-src https: data:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline'; form-action 'self'; object-src 'none'; frame-ancestors 'none'; base-uri 'self'","count":5},{"content-security-policy-report-only":" default-src 'self' https: data: blob:; img-src 'self' https: data: blob: http:; script-src 'self' https: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https: wss:;","count":5},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.careem-pay.com data: checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.tabby.ai cdn.tabby.sa fonts.googleapis.com storage.googleapis.com applepay.cdn-apple.com cdn-sandbox.tamara.co cdn.tamara.co data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.b-cdn.net *.tap.company *.careem-pay.com www.facebook.com tr.snapchat.com checkout.tabby.ai checkout.tabby.sa applepay.cdn-apple.com pay.google.com https:\/\/www.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net https:\/\/images.unsplash.com *.b-cdn.net https:\/\/cdn.tap.company www.googletagmanager.com *.google-analytics.com www.googleadservices.com www.google.com www.google.ae www.google.com.kw www.google.com.sa www.google.com.qa www.google.com.bh ad.doubleclick.net googleads.g.doubleclick.net stats.g.doubleclick.net *.facebook.com analytics.tiktok.com *.snapchat.com checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.tabby.ai cdn.tabby.sa fonts.googleapis.com storage.googleapis.com *.tamara.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https:\/\/rum.hlx.page https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.b-cdn.net *.tap.company *.careem-pay.com *.cloudflare.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net connect.facebook.net analytics.tiktok.com sc-static.net tr.snapchat.com checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.segment.com www.google.com cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com *.tamara.co applepay.cdn-apple.com pay.google.com https:\/\/www.google.com https:\/\/www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.b-cdn.net *.tamara.co 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tamara.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.dev.tap.company *.tap.company geolocation-db.com https:\/\/www.google.com www.googletagmanager.com *.google-analytics.com analytics.google.com www.googleadservices.com connect.facebook.net *.facebook.com analytics.tiktok.com *.tiktok.com *.tiktokw.us *.snapchat.com sc-static.net ad.doubleclick.net googleads.g.doubleclick.net stats.g.doubleclick.net checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com *.tamara.co applepay.cdn-apple.com apple-pay-gateway.apple.com google.com pay.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":5},{"content-security-policy-report-only":" default-src 'self' https:\/\/fonts.gstatic.com; style-src-elem 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/ctrack.trafficjunky.net https:\/\/geo-tracker.smadex.com https:\/\/newassets.hcaptcha.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; script-src 'self' 'unsafe-inline' https:\/\/*.trustpilot.com https:\/\/*.googletagmanager.com https:\/\/mc.yandex.ru https:\/\/*.google-analytics.com https:\/\/*.youtube.com https:\/\/yandex.com https:\/\/yandex.ru https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.mightytips.com https:\/\/my.rtmark.net https:\/\/*.hybrid.ai https:\/\/*.g.doubleclick.net https:\/\/ctrack.trafficjunky.net https:\/\/geo-tracker.smadex.com https:\/\/challenges.cloudflare.com; img-src * data:; font-src 'self' https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/*.customer.io https:\/\/*.gist.build https:\/\/*.youtube.com https:\/\/mc.yandex.ru https:\/\/*.clariti.ws https:\/\/*.analytics.google.com https:\/\/*.google-analytics.com https:\/\/doubleclick.net https:\/\/*.googletagmanager.com https:\/\/mc.yandex.com https:\/\/mc.yandex.md https:\/\/yandexmetrica.com https:\/\/*.mightytips.com https:\/\/*.g.doubleclick.net https:\/\/ctrack.trafficjunky.net https:\/\/geo-tracker.smadex.com https:\/\/analytics.google.com https:\/\/challenges.cloudflare.com; frame-src 'self' https:\/\/*.trustpilot.com https:\/\/*.youtube.com https:\/\/*.instagram.com https:\/\/*.twitter.com https:\/\/*.yandex.com https:\/\/*.google.com https:\/\/my.rtmark.net https:\/\/*.hybrid.ai https:\/\/*.g.doubleclick.net https:\/\/ctrack.trafficjunky.net https:\/\/geo-tracker.smadex.com https:\/\/newassets.hcaptcha.com https:\/\/challenges.cloudflare.com; script-src-elem 'self' 'unsafe-inline' https:\/\/*.trustpilot.com https:\/\/*.customer.io https:\/\/*.gist.build https:\/\/*.instagram.com https:\/\/*.googletagmanager.com https:\/\/*.yandex.ru https:\/\/*.google-analytics.com https:\/\/*.twitter.com https:\/\/*.youtube.com https:\/\/mc.yandex.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/mc.yandex.ru https:\/\/*.mightytips.com https:\/\/my.rtmark.net https:\/\/*.hybrid.ai https:\/\/*.g.doubleclick.net https:\/\/ctrack.trafficjunky.net https:\/\/geo-tracker.smadex.com https:\/\/track.trackingtraffo.com https:\/\/www.hcaptcha.com https:\/\/challenges.cloudflare.com; frame-ancestors 'self'; report-uri \/cspreport.php;","count":5},{"content-security-policy-report-only":" default-src 'self' https:; script-src 'self' https: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data:; frame-src https:; frame-ancestors 'self'; font-src 'self' https: data:; report-uri \/report-csp-violation","count":5},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com cash-f.squarecdn.com *.googleapis.net 'self' data: *.fontawesome.com data: *.acsbapp.com *.bootstrapcdn.com *.cloudfare.com mediacdn.espssl.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * api.bazaarvoice.com stg.api.bazaarvoice.com *.facebook.com *.facebook.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com * display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.xtento.com *.facebook.com *.facebook.net *.pinterest.com *.hotjar.com www.google.com *.adyen.com *.addthisedge.com *.addthis.com *.doubleclick.net *.my.salesforce-sites.com *.secure.force.com *.force.com *.cdn-btsg.com www.commercepartnerhub.com *.adsrvr.org https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.googleapis.com *.tiktok.com www.apptrian.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com 'self' data: www.xtento.com cdn.xtento.com magefan.com cm.magefan.com *.disqus.com *.facebook.com *.facebook.net https:\/\/img.youtube.com facebook.com *.b0e8.com *.dynamicyield.com *.pinterest.com *.e.aa.online-metrix.net *.acsbapp.com *.cookielaw.org *.bing.com *.yahoo.com *.google.co.in google.co.in *.listrakbi.com all-clad.com *.all-clad.com emjcd.com *.emjcd.com *.dotomi.com *.espssl.com *.clarity.ms *.tagcommander.com *.adsrvr.org *.rubiconproject.com *.g.doubleclick.net *.elfsightcdn.com *.bazaarvoice.com mediacdn.espssl.com *.hotjar.com *.doubleclick.net butterly.com *.butterly-images.com http:\/\/butterly.com *.google.com *.cdn-btsg.com *.lagostina.ca lagostina.ca https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https:\/\/rum.hlx.page *.googleapis.com *.gstatic.com *.tiktok.com www.apptrian.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.iadvize.com www.xtento.com cdn.xtento.com *.disqus.com *.facebook.com *.facebook.net *.ugc.bazaarvoice.com www.upsellit.com *.listrakbi.com *.b0e8.com *.bc0a.com *.cookielaw.org *.dynamicyield.com *.tagcommander.com *.cloudflare.com *.yimg.com *.pinimg.com *.hotjar.com www.google.com *.mczbf.com analytics.tiktok.com *.acsbapp.com acsbapp.com *.salesforceliveagent.com *.force.com *.curalate.com *.noibu.com *.pinterest.com *.online-metrix.net *.bing.com *.bing.net *.vimeo.com *.amazonaws.com *.clarity.ms click2cart.com *.adsrvr.org *.aggregated-data.com *.cloudfront.net *.amazon-adsystem.com *.tkrconnector.com acds-events.adobe.io static.kyc.red shop.pe *.shop.pe addstrap-ui.addshoppers.com returns.parcellab.com cdn.parcellab.com gstatic.com cdn.cookielaw.org cdn.bc0a.com cdn1.b0e8.com service.force.com butterly.com *.moatads.com *.elfsight.com *.addthisedge.com *.addthis.com bam.nr-data.net acsbap.com *.acsbap.com *.salesforce.com *.bazaarvoice.com *.cdn-btsg.com acdn.adnxs.com *.northbeam.io https:\/\/cdn-scripts.signifyd.com https:\/\/cdn-scripts.signifyd.com\/api\/script-tag.js https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.magento-datasolutions.com *.magento-ds.com *.cash.app display.ugc.bazaarvoice.com *.googleapis.com *.fontawesome.com *.listrakbi.com *.ugc.bazaarvoice.com *.typekit.net service.force.com *.bootstrapcdn.com *.espssl.com *.cloudfront.net *.cloudfare.com *.addshoppers.com returns.parcellab.com cdn.parcellab.com *.bazaarvoice.com mediacdn.espssl.com *.hotjar.com *.doubleclick.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com www.apptrian.com edge.curalate.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com * *.googleapis.com *.tiktok.com www.apptrian.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.facebook.com *.facebook.net *.dynamicyield.com *.cookielaw.org *.g.doubleclick.net *.listrak.com *.listrakbi.com analytics.tiktok.com *.pinterest.com *.hotjar.com *.yimg.com google.co.in *.mczbf.com *.bc0a.com facebook.com *.acsbapp.com *.click2cart.com *.clarity.ms *.aggregated-data.com *.curalate.com *.noibu.com wss:\/\/input.noibu.com *.onetrust.com *.bing.com insight.adsrvr.org *.amazon-adsystem.com *.paa-reporting-advertising.amazon *.adsrvr.org shop.pe *.shop.pe cdn.cookielaw.org *.elfsight.com *.addthis.com mediacdn.espssl.com bam.nr-data.net fonts.googleapis.com *.doubleclick.net wss:\/\/*.hotjar.com acsbap.com *.acsbap.com *.elfsightcdn.com *.hotjar.io www.xtento.com butterly.com *.cdn-btsg.com www.google.com *.bazaarvoice.com *.fbcdn.net static.xx.fbcdn.net *.xx.fbcdn.net https:\/\/static.xx.fbcdn.net *.commercepartnerhub.com  wss:\/\/*.facebook.com *.all-clad.com https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com account.groupeseb.com *.salesforceliveagent.com *.salesforce.com *.force.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":5},{"content-security-policy-report-only":" default-src * 'unsafe-inline' data: blob:","count":5},{"content-security-policy-report-only":" font-src maxcdn.bootstrapcdn.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com www.google.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.authorize.net *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.certcapture.com connect.bolt.com connect-sandbox.bolt.com s3-us-west-1.amazonaws.com www.gstatic.com magefan.com cm.magefan.com *.disqus.com https:\/\/img.youtube.com mageside.com *.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.kaptcha.com *.disqus.com *.authorize.net *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net https:\/\/scripts.ltv.ai 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.certcapture.com maxcdn.bootstrapcdn.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com sessions.bugsnag.com *.kaptcha.com *.authorize.net www.googleapis.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":5},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/static.klaviyo.com *.fontawesome.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/fonts.gstatic.com static.payu.com maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.facebook.com *.facebook.net https:\/\/www.google.com https:\/\/creativecdn.com *.weltpixel.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com\/ landofcoder.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.wattswater.com *.backflowdirect.com *.wattswaterquality.com *.shopperapproved.com *.watts.com *.googletagmanager.com *.facebook.com *.facebook.net *.bing.com *.google.com *.clarity.ms http:\/\/www.w3.org https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.google.pl static.payu.com credit-widget-config.payu.com\/ magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.wattswater.com *.backflowdirect.com *.wattswaterquality.com *.sirv.com *.facebook.com *.facebook.net *.klaviyo.com *.mouseflow.com *.bing.com *.adform.net *.doubleclick.net *.clarity.ms *.hotjar.com https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/www.dwin1.com https:\/\/googleads.g.doubleclick.net secure.payu.com secure.snd.payu.com static.payu.com credit-widget-config.payu.com\/ landofcoder.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https:\/\/maxcdn.bootstrapcdn.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.wattswater.com *.backflowdirect.com *.wattswaterquality.com *.googleapis.com *.facebook.com *.facebook.net *.klaviyo.com *.bing.com *.doubleclick.net *.clarity.ms *.hotjar.com https:\/\/www.facebook.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com\/ landofcoder.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/411fcbf3-a854-402b-b3a6-331941eb1f2b.sansec.watch\/; report-to report-endpoint;","count":5},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/static.fixando.com\/ https:\/\/cdn.fixando.com\/ https:\/\/pics.fixando.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/www.googletagservices.com\/ https:\/\/www.googleadservices.com\/ https:\/\/fcm.googleapis.com\/ https:\/\/tpc.googlesyndication.com\/ https:\/\/pagead2.googlesyndication.com\/ https:\/\/adservice.google.com.pk\/ https:\/\/adservice.google.com.br\/ https:\/\/adservice.google.com.py\/ https:\/\/adservice.google.com.do\/ https:\/\/adservice.google.com\/ https:\/\/adservice.google.pt\/ https:\/\/adservice.google.nl\/ https:\/\/adservice.google.cl\/ https:\/\/adservice.google.it\/ https:\/\/adservice.google.pl\/ https:\/\/adservice.google.no\/ https:\/\/adservice.google.fr\/ https:\/\/adservice.google.bg\/ https:\/\/adservice.google.es\/ https:\/\/adservice.google.se\/ https:\/\/adservice.google.be\/ https:\/\/adservice.google.de\/ https:\/\/adservice.google.ch\/ https:\/\/adservice.google.hu\/ https:\/\/adservice.google.ie\/ https:\/\/adservice.google.lu\/ https:\/\/adservice.google.ru\/ https:\/\/adservice.google.be\/ https:\/\/adservice.google.co.uk\/ https:\/\/adservice.google.co.ao\/ https:\/\/adservice.google.co.in\/ https:\/\/partner.googleadservices.com\/ https:\/\/maps.googleapis.com\/ https:\/\/optimize.google.com\/ https:\/\/www.googleoptimize.com\/ https:\/\/www.gstatic.com\/ https:\/\/googleads.g.doubleclick.net\/ https:\/\/pubads.g.doubleclick.net\/ https:\/\/static.zdassets.com\/ https:\/\/widget-mediator.zopim.com\/ https:\/\/www.facebook.com\/ https:\/\/connect.facebook.net\/ https:\/\/static.hotjar.com\/ https:\/\/script.hotjar.com\/ https:\/\/cdn.jsdelivr.net\/ https:\/\/static.zdassets.com\/ https:\/\/d2wy8f7a9ursnm.cloudfront.net\/ https:\/\/apis.google.com\/ https:\/\/tagmanager.google.com\/ https:\/\/accounts.google.com\/ https:\/\/www.paypal.com\/ https:\/\/cdn.socket.io\/ https:\/\/widget.trustpilot.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/bucket.cdnwebcloud.com https:\/\/bat.bing.com https:\/\/www.clarity.ms https:\/\/www.google.com https:\/\/*.outbrain.com https:\/\/www.sandbox.paypal.com","count":5},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com https:\/\/*.gstatic.com *.googleapis.com data: *.sodatech.com *.sodatech.net cdn.livechatinc.com mediacdn.espssl.com viewer.byondxr.com use.fontawesome.com 'self' data: https:\/\/fonts.yieldify-production.com\/fonts\/100822\/e6e8821f-e1ad-4601-aaed-5b3386a4580b.otf https:\/\/*.hotjar.io https:\/\/*.yieldify-production.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com api.bazaarvoice.com stg.api.bazaarvoice.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com pal-test.adyen.com www.facebook.com http:\/\/www.facebook.com\/tr 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.adyen.com *.sharethis.com *.certcapture.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.ehappify.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.vimeo.com *.jsctool.com *.pinterest.com *.mmcagentur.at *.doubleclick.net *.facebook.com *.facebook.net *.demdex.net *.authorize.net *.googletagmanager.com *.xtento.com *.app-wallee.com *.waltpixel.com *.equitystory.com offer.slgnt.us vars.hotjar.com *.pepperjamnetwork.com services.listrak.com *.serverdata.net *.livechatinc.com *.lindtusa.com *.russellstover.com *.ghirardelli.com www.xtento.com https:\/\/app-wallee.com *.weltpixel.com https:\/\/*.ordergroove.com www.jsctool.com static.ogmystyle.com static2.ogmystyle.com www.mystyleplatform.com *.trustpilot.com geowidget.inpost.pl sandbox-easy-geowidget-sdk.easypack24.net widget.packeta.com https:\/\/odr.promo.dev\/ https:\/\/*.yieldify.com https:\/\/ohws.prospective.ch\/ https:\/\/tpc.googlesyndication.com\/ https:\/\/*.hotjar.io https:\/\/www.mainadv.com https:\/\/ad.ad-srv.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https:\/\/*.gstatic.com *.adyen.com *.sharethis.com *.googleapis.com *.certcapture.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.cloudfront.net *.amazonaws.com *.regalify.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com blob: lindt.test *.lindt.test maps.googleapis.com *.pinterest.com *.postcodeanywhere.co.uk *.klarna.com *.invibes.com *.b26net.com https:\/\/www.google-analytics.com *.googletagmanager.com *.teads.tv *.videostep.com *.facebook.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.taboola.com *.doubleclick.net *.outbrain.com *.adobedtm.com *.omtrdc.net *.demdex.net *.everesttech.net *.magentocommerce.com *.sodatech.com *.sodatech.net api.official-deals.co.uk api.official-coupons.com *.adsymptotic.com cdn.livechat-files.com cp.official-coupons.com cookie-cdn.cookiepro.com cp.official-deals.co.uk site-azp.slgnt.us ct.pinterest.com *.ads.linkedin.com cdn.polyfill.io offer.slgnt.us *.blob.core.windows.net s.pinimg.com snap.licdn.com mediacdn.espssl.com *.clarity.ms *.bing.com *.serverdata.net lindtna.test *.lindtna.test *.livechatinc.com mageside.com www.xtento.com cdn.xtento.com *.hsforms.net *.hsforms.com https:\/\/app-wallee.com d.ratepay.com viewer.byondxr.com s3.us-west-2.amazonaws.com showroom-media.byondxr.com media-optimization-service.byondxr.com *.byondxr.com *.listrakbi.com www.mystyleplatform.com static.mystyleplatform.com static2.mystyleplatform.com static2.ogmystyle.com mystyleplatform.s3.us-west-2.amazonaws.com https:\/\/www.unifaunonline.se https:\/\/*.tile.openstreetmap.org\/ https:\/\/redchamps.com 'self' data: geowidget.inpost.pl sandbox-easy-geowidget-sdk.easypack24.net widget.packeta.com http:\/\/lindt-hg65tr.your-printq.com https:\/\/*.cookiepro.com https:\/\/assets-v2.yieldify.com\/images\/189494\/2022\/4\/8\/55c67825-1f9d-438d-815a-43a437f03af2.png https:\/\/assets-v2.yieldify.com\/images\/189494\/2022\/4\/21\/54125dc1-8b51-4175-bd53-7d33e427cc41.gif https:\/\/www.lindt-eshopglobal.com\/ https:\/\/px.ads.linkedin.com\/ https:\/\/*.seznam.cz https:\/\/*.hotjar.io https:\/\/*.yieldify.com https:\/\/i.cdn.nrholding.net https:\/\/*.sendtric.com network-eu-a.bazaarvoice.com assets-v2.yieldify.com *.cookiepro.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https:\/\/rum.hlx.page *.sharethis.com *.googleapis.com *.attn.tv events.attentivemobile.com *.certcapture.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com widget.freshworks.com m2epro.freshdesk.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.pcapredict.com lindt.slgnt.eu maps.googleapis.com *.pinterest.com *.postcodeanywhere.co.uk *.cloudflare.com *.teads.tv *.r66net.com *.facebook.net *.googleadservices.com *.doubleclick.net *.cookiepro.com *.cloudfront.net *.videostep.com *.mfgroup.ch *.taboola.com *.outbrain.com *.adobedtm.com *.authorize.net *.unpkg.com *.fontawesome.com *.sodatech.net *.sodatech.com www.clarity.ms bat.bing.com *.b2c.com bt.fraud0.com container.pepperjam.com www.googleoptimize.com *.hotjar.com *.pepperjamnetwork.com *.revlifter.io site-azp.slgnt.us ct.pinterest.com *.ads.linkedin.com cdn.polyfill.io offer.slgnt.us *.blob.core.windows.net s.pinimg.com snap.licdn.com acsbapp.com cdn.noibu.com www.youtube.com *.upsellit.com *.livechatinc.com *.serverdata.net *.tiktok.com www.xtento.com cdn.xtento.com *.hsforms.net *.hsforms.com https:\/\/app-wallee.com https:\/\/gmtech.mfgroup.ch https:\/\/assets.secure.checkout.visa.com *.ordergroove.com https:\/\/www.googletagmanager.com tagmanager.google.com d.ratepay.com www.jsctool.com byondxr-viewer.byondxr.com web-apps.byondxr.com *.listrakbi.com *.listrak.com mystyleplatform.com www.mystyleplatform.com static.ogmystyle.com static2.ogmystyle.com d203yb14zlmxwn.cloudfront.net cdnjs.cloudflare.com cdn.jsdelivr.net use.fontawesome.com *.mczbf.com https:\/\/api.unifaun.com *.gstatic.com *.trustpilot.com geowidget.inpost.pl sandbox-easy-geowidget-sdk.easypack24.net widget.packeta.com https:\/\/static-eu.payments-amazon.com\/checkout.js https:\/\/*.yieldify.com https:\/\/www.googleoptimize.com\/optimize.js https:\/\/custom.yieldify.com\/v1\/100510\/100822\/3d9a49d0c2\/bundle.js https:\/\/snap.licdn.com\/li.lms-analytics\/insight.min.js https:\/\/tpc.googlesyndication.com\/sodar\/1s9mPOHO.js https:\/\/*.adform.net https:\/\/*.seznam.cz https:\/\/analytics.tiktok.com\/ https:\/\/*.hotjar.io https:\/\/*.pinimg.com https:\/\/*.daktela.com https:\/\/www.dwin1.com maps.google.com https:\/\/www.gstatic.com\/recaptcha static.r66net.net https:\/\/unbxd.s3.amazonaws.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app https:\/\/fonts.googleapis.com\/ *.sharethis.com *.googleapis.com *.certcapture.com display.ugc.bazaarvoice.com *.amazonaws.com widget.freshworks.com m2epro.freshdesk.com https:\/\/static.klaviyo.com assets.braintreegateway.com *.fonts.net *.postcodeanywhere.co.uk *.cloudfront.net *.cloudflare.com *.sodatech.com *.sodatech.net *.getfirebug.com cloud.typography.com *.serverdata.net *.myfonts.net *.russellstover.com https:\/\/app-wallee.com tagmanager.google.com d.ratepay.com *.listrakbi.com *.listrak.com use.fontawesome.com www.mystyleplatform.com static.ogmystyle.com static2.ogmystyle.com *.gstatic.com *.trustpilot.com geowidget.inpost.pl widget.packeta.com https:\/\/*.hotjar.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cloudfront.net *.serverdata.net *.livechatinc.com *.listrakbi.com www.lindt-eshopglobal.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * *.adyen.com *.sharethis.com *.googleapis.com *.attn.tv events.attentivemobile.com *.certcapture.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com widget.freshworks.com m2epro.freshdesk.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.postcodeanywhere.co.uk *.ratepay.com *.luckyorange.net *.cookiepro.com *.mfgroup.ch *.doubleclick.net *.visitors.live wss:\/\/in.visitors.live wss:\/\/visitors.live wss:\/\/in.visitors.live\/ wss:\/\/visitors.live\/ visitors.live *.taboola.com *.demdex.net *.omtrdc.net *.magento.com *.adobe.net *.adobedtm.com *.adobedc.net *.typekit.net *.magedevteam.com *.sodatech.com *.sodatech.net *.teads.tv www.sjwoe.com input.noibu.com wss:\/\/input.noibu.com\/pv_part in.hotjar.com www.facebook.com *.b2c.com bt.fraud0.com *.revlifter.com *.pepperjamnetwork.com *.revlifter.io site-azp.slgnt.us ct.pinterest.com *.ads.linkedin.com cdn.polyfill.io offer.slgnt.us s.pinimg.com snap.licdn.com *.acsbapp.com cdn.noibu.com https:\/\/maps.googleapis.com *.clarity.ms *.facebook.com *.serverdata.net *.livechatinc.com api.addressy.com *.listrakbi.com *.mczbf.com *.tiktok.com t.elasticsuite.io *.hsforms.net *.hsforms.com https:\/\/app-wallee.com https:\/\/assets.secure.checkout.visa.com *.ordergroove.com https:\/\/www.google-analytics.com d.ratepay.com www.jsctool.com *.byondxr.com api.byondxr.com s3.us-west-2.amazonaws.com https:\/\/*.criteo.com https:\/\/*.hotjar.io https:\/\/cdn.stickyadstv.com https:\/\/*.ads.linkedin.com https:\/\/snap.licdn.com https:\/\/*.r66net.com https:\/\/*.yieldify.com wss:\/\/*.hotjar.io https:\/\/geolocation.onetrust.com https:\/\/*.googleapis.com https:\/\/*.daktela.com https:\/\/cdn.tailwindcss.com analytics.google.com https:\/\/sgtm.lindt.se sgtm.lindt.se sgtm.lindt.dk www.google-analytics.com sgtm.lindt.cz sgtm.lindt.de sgtm.lindt.es sgtm.lindt.fr sgtm.lindt.it sgtm.lindt.hu sgtm.lindt.co.uk sgtm.lindt.com.nl sgtm.lindt.pl sgtm.lindt.at geolocation.onetrust.com sgtm.lindt.sk sgtm.lindt.fi 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.byondxr.com *.googleapis.com https:\/\/cdn.tailwindcss.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":5},{"content-security-policy-report-only":" upgrade-insecure-requests; default-src 'self' https:\/\/*.motorcar.com https:\/\/*.ebizautos.media; img-src *; script-src 'self' 'unsafe-inline' *; font-src *; media-src *; frame-src *; manifest-src 'self'; style-src 'self' 'unsafe-inline' *; connect-src https:\/\/*; object-src 'none'; worker-src 'none'; base-uri 'self'; report-uri https:\/\/ebizautos.report-uri.com\/r\/t\/csp\/reportOnly;","count":5},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.hotjar.com https:\/\/static.dhlecommerce.nl https:\/\/fonts.gstatic.com https:\/\/widgets.trustedshops.com *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https:\/\/pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.googletagmanager.com contact.robinhq.com *.multisafepay.com https:\/\/pay.google.com *.trustpilot.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com blackhole.lan:9000 bat.bing.com bat.bing.net https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com *.doofinder.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.etrusted.com magefan.com cm.magefan.com *.disqus.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/firebasestorage.googleapis.com *.sooqr.com *.spotlersearch.com *.multisafepay.com www.xtento.com cdn.xtento.com maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.google.bg *.googletagmanager.com\/ *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https:\/\/cdn.jsdelivr.net *.tiktok.com selfservice.robinhq.com robincontentdesktop.blob.core.windows.net az416426.vo.msecnd.net *.googleads.g.doubleclick.net *.googleadservices.com *.cloudfront.net assets.spotlersearchanalytics.com spotlersearchanalytics.com *.hotjar.com bat.bing.com www.clarity.ms scripts.clarity.ms https:\/\/static.dhlecommerce.nl *.doofinder.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com *.disqus.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.avada.io *.shopify.com *.sooqr.com *.spotlersearch.com *.multisafepay.com https:\/\/pay.google.com *.trustpilot.com www.xtento.com cdn.xtento.com maps.googleapis.com maps.google.apis.com cdn-4.convertexperiments.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https:\/\/static.dhlecommerce.nl https:\/\/maps.googleapis.com https:\/\/fonts.googleapis.com *.doofinder.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com https:\/\/static.klaviyo.com https:\/\/cdn.jsdelivr.net *.fontawesome.com https:\/\/fonts.bunny.net *.sooqr.com *.spotlersearch.com *.multisafepay.com *.trustpilot.com maps.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com dc.services.visualstudio.com *.visualwebsiteoptimizer.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com bat.bing.com bat.bing.net *.hotjar.com *.hotjar.io *.clarity.ms https:\/\/api-gw.dhlparcel.nl https:\/\/static.dhlecommerce.nl *.doofinder.com wss:\/\/*.doofinder.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/get.geojs.io *.avada.io *.sooqr.com *.spotlersearch.com *.multisafepay.com maps.googleapis.com maps.google.apis.com cdn-4.convertexperiments.com *.pay.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":5},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com cash-f.squarecdn.com https:\/\/*.gstatic.com *.googleapis.com data: *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.adyen.com *.instagram.com www.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com account.fetchify.com https:\/\/www.googletagmanager.com\/ *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https:\/\/*.gstatic.com *.adyen.com *.googleapis.com *.cdninstagram.com www.apptrian.com www.facebook.com *.trackedlink.net http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ flagpedia.net *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https:\/\/rum.hlx.page *.googleapis.com *.gstatic.com *.instagram.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ www.apptrian.com www.facebook.com connect.facebook.net graph.facebook.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ maps.googleapis.com *.reviews.io *.reviews.co.uk cdn.jsdelivr.net js-agent.newrelic.com bam.nr-data.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app https:\/\/fonts.googleapis.com\/ webchat.dotdigital.com webchat.staging.dotdigital.com cc-cdn.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com *.cloudfront.net *.reviews.io *.reviews.co.uk cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com www.apptrian.com www.facebook.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * *.adyen.com *.googleapis.com www.apptrian.com connect.facebook.net graph.facebook.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ www.gstatic.com maps.googleapis.com *.cloudfront.net *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":5},{"content-security-policy-report-only":" worker-src https:\/\/helmonline-hyva.dev.localhost helmonline.nl; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https:\/\/www.googletagmanager.com *.googleapis.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com consentcdn.cookiebot.com td.doubleclick.net www.googletagmanager.com *.criteo.com\/ www.xtento.com https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com js.mollie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https:\/\/images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.pon.bike images.pondigital.solutions *.google.nl *.google.com *.google.fr *.mailplus.nl imgsct.cookiebot.com *.bing.net *.bing.com pagead2.googlesyndication.com www.xtento.com cdn.xtento.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com magefan.com cm.magefan.com *.disqus.com https:\/\/img.youtube.com https:\/\/www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https:\/\/www.googletagmanager.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ www.facebook.com chimpstatic.com rum-static.pingdom.net rum-collector-2.pingdom.net consentcdn.cookiebot.com consent.cookiebot.com widget.thuiswinkel.org widget.thuiswinkel-cdn.org *.clarity.ms restapi.mailplus.nl www.googleoptimize.com googletagmanager.com *.googletagmanager.com *.bing.com *.criteo.com static.criteo.net *.mouseflow.com *.tiktok.com *.hotjar.com *.beslist.nl static.cloudflareinsights.com cdn.debugbear.com pagead2.googlesyndication.com static.widget.trengo.eu www.xtento.com cdn.xtento.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.disqus.com js.mollie.com pay.google.com applepay.cdn-apple.com https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/www.googletagmanager.com tagmanager.google.com *.googleapis.com *.typekit.net downloads.mailchimp.com https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.widget.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com devdocs.magento.com rum-collector-2.pingdom.net widgetcontent.thuiswinkel-cdn.org www.google.com *.clarity.ms consent.cookiebot.com consentcdn.cookiebot.com doubleclick.net *.bing.com *.criteo.com *.tiktok.com *.hotjar.com *.hotjar.io *.beslist.nl data.debugbear.com pagead2.googlesyndication.com api.widget.trengo.eu form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":5},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de js.mollie.com https:\/\/www.googletagmanager.com\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https:\/\/checkout.staging.devpayever.com https:\/\/checkout.payever.org *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com cdn.doofinder.com https:\/\/www.mollie.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ ratenkauf.easycredit.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com x.klarnacdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.doofinder.com js.mollie.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ ratenkauf.easycredit.de js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com maps.googleapis.com x.klarnacdn.net\/ www.gstatic.com www.google.com *.googleapis.com *.gstatic.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com x.klarnacdn.net www.gstatic.com\/recaptcha 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com *.fontawesome.com assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.doofinder.com wss:\/\/*.doofinder.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ ratenkauf.easycredit.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":5},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com cash-f.squarecdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.pinterest.com *.sendcloud.sc *.jsdelivr.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * *.trustedshops.com cdn.cookielaw.org res.cloudinary.com www.b2c-nfinity.com t.squeezely.tech cdn-icons-png.flaticon.com docker.creative-serving.com trkr.shoppingminds.net bam.nr-data.net *.googleapis.com *.etrusted.com *.pinterest.com bat.bing.com *.adyen.com *.facebook.com img.youtube.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org cdn.doofinder.com *.google.com *.google.co.uk *.google.ca b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com ts.tradetracker.net *.amazonaws.com blob: www.google.ge magefan.com cm.magefan.com *.disqus.com https:\/\/img.youtube.com www.sandbox.paypal.com www.magmodules.eu cdn.magmodules.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https:\/\/rum.hlx.page *.trustedshops.com squeezely.tech bat.bing.com *.etrusted.com *.kk-resources.com *.googleoptimize.com cdn.cookielaw.org l.getsitecontrol.com script.shoppingminds.com script.shoppingminds.net js-agent.newrelic.com bam.nr-data.net static.hotjar.com script.hotjar.com s2.getsitecontrol.com *.pinterest.com s.pinimg.com analytics.topdrinks.nl analytics.topdrinks.fr analytics.topdrinks.dk analytics.topdrinks.de analytics.topdrinks.at analytics.topdrinks.be unpkg.com cdn.jsdelivr.net commerce.adobe.net *.googletagmanager.com cdn.doofinder.com analytics.tiktok.com *.google.co.uk *.google.ca s7.addthis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com songbirdstag.cardinalcommerce.com tm.tradetracker.net *.trustpilot.com *.sendcloud.sc *.jsdelivr.net https:\/\/connect.facebook.net *.google.fr *.disqus.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app *.etrusted.com *.pinterest.com *.sendcloud.sc *.jsdelivr.net *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.youtube.com youtu.be www.youtube-nocookie.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * *.google.lk analytics.topdrinks.nl ws.hotjar.com wss:\/\/ws.hotjar.com content.hotjar.io analytics.topdrinks.fr analytics.topdrinks.dk analytics.topdrinks.de analytics.topdrinks.at analytics.topdrinks.be cdn.cookielaw.org geolocation.onetrust.com *.g.doubleclick.net l.getsitecontrol.com *.shoppingminds.net *.googleapis.com bam.nr-data.net cdn1.api.trustedshops.com pay.google.com privacyportal-de.onetrust.com vc.hotjar.io events.getsitectrl.com *.etrusted.com *.pinterest.com *.adyen.com maps.googleapis.com nominatim.openstreetmap.org *.onyourmap.com *.mapbox.com *.doofinder.com wss:\/\/*.doofinder.com analytics.tiktok.com ekr.zdassets.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.sendcloud.sc *.cdn.jsdelivr.net https:\/\/analytics.tiktok.com *.google.fr *.google.co.uk *.google.ca 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":5},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.oney.io *.staging.oney.io https:\/\/fonts.gstatic.com *.fontawesome.com https:\/\/geowidget.easypack24.net *.klarnacdn.net https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.hotjar.com pay.google.com *.google.com google.com www.gstatic.com *.googleapis.com *.google-analytics.com fonts.googleapis.com *.payu.com *.payu.com.pl static.payu.com secure.payu.com secure.snd.payu.com *.snd.payu.com merch-prod.snd.payu.com browser.sentry-cdn.com *.sentry-cdn.com sentry.advox.pl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com sandbox.przelewy24.pl secure.przelewy24.pl facebook.com *.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors pay.google.com www.facebook.com *.kinderkraft.fr kinderkraft.co.uk *.kinderkraft.pl kinderkraft.fr kinderkraft.pl *.trustpilot.com *.criteo.gum *.cookiebot.com ecommscript-integrationapp.trustpilot.com secure.payu.com methodurl.psp-solutions.com *.przelewy24.pl 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.hipay-tpp.com *.hipay.com *.googleapis.com consent.cookiebot.com consentcdn.cookiebot.com test.saferpay.com pay.google.com apm.przelewy24.pl *.przelewy24.pl *.espago.com secure.payu.com merch-prod.snd.payu.com https:\/\/geowidget-app.inpost.pl\/ https:\/\/sandbox-easy-geowidget.easypack24.net\/ *.klarna.com js.mollie.com payment-widget.przelewy24.pl secure.przelewy24.pl go.przelewy24.pl secure.espago.com *.facebook.com *.instagram.com *.hotjar.com *.criteo.com *.criteo.net *.kinderkraft.fr kinderkraft.fr kinderkraft.pl *.pinterest.com td.doubleclick.net hal9000.redintelligence.net kinderkraft.co.uk ecommscript-integrationapp.trustpilot.com widget.trustpilot.com *.trustpilot.com ecommplugins-trustboxpreview.trustpilot.com *.klarnaservices.com *.saferpay.com methodurl.psp-solutions.com https:\/\/methodurl.psp-solutions.com https:\/\/3dsecure.bnpparibas.pl\/ *.gstatic.com www.gstatic.com *.google-analytics.com fonts.gstatic.com fonts.googleapis.com *.payu.com *.payu.com.pl static.payu.com secure.snd.payu.com *.snd.payu.com browser.sentry-cdn.com *.sentry-cdn.com sentry.advox.pl 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.hipay.com *.googleapis.com *.oney.io *.staging.oney.io imgsct.cookiebot.com static.przelewy24.pl www.gstatic.com gstatic.com static.payu.com https:\/\/geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.klarna.com *.klarnaevt.com *.klarnacdn.net https:\/\/firebasestorage.googleapis.com https:\/\/www.mollie.com *.casalemedia.com *.taboola.com *.adform.net *.adscale.de *.addthis.com *.1rx.io *.toast.com *.krxd.net developers.google.com ade.googlesyndication.com *.ytimg.com www.google.pl kinderkraft.com pixel.wp.pl *.instagram.com *.payu.com *.hotjar.com *.criteo.com *.adobedtm.com *.doubleclick.net *.outbrain.com *.rubiconproject.com *.yahoo.com *.3lift.com *.smartadserver.com *.adnxs.com *.tapad.com *.360yield.com *.pubmatic.com *.media.net *.teads.tv *.bidswitch.net *.sharethrough.com *.smaato.net *.socdm.com *.advertising.com *.dable.io *.co.kr *.stickyadstv.com *.twiago.com *.omnitagjs.com *.liadm.com *.yieldmo.com *.postrelease.com *.revcontent.com *.mail.ru *.yieldlab.net *.rambler.ru *.bing.com *.openx.net *.nate.com *.mediawallahscript.com id5-sync.com *.rlcdn.com *.adingo.jp *.tremorhub.com *.yandex.ru *.aralego.com\/ *.ad-stir.com *.adtdp.com *.meba.kr *.turn.com *.dmxleo.com *.mediavine.com *.ivitrack.com *.smartclip.net *.emxdgt.com *.pinterest.com *.bluekai.com *.thebrighttag.com kinderkraft.pl *.user.com *.trustpilot.com *.trustpilot.net *.metaffiliation.com region1.analytics.google.com trk.datnova.com *.facebook.net server-side-tagging-vqegoo7bda-uc.a.run.app bcw.kinderkraft.fr widget.trustpilot.com images-static.trustpilot.com adservice.google.com pay.google.com *.google.com google.com *.google-analytics.com fonts.gstatic.com fonts.googleapis.com *.payu.com.pl secure.payu.com secure.snd.payu.com *.snd.payu.com merch-prod.snd.payu.com browser.sentry-cdn.com *.sentry-cdn.com sentry.advox.pl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.paypal.com *.googleapis.com *.oney.io *.staging.oney.io *.snrbox.com https:\/\/browser.sentry-cdn.com *.googletagmanager.com *.cookiebot.com cookiebot.com consent.cookiebot.com consentcdn.cookiebot.com cdn.chatsimple.ai *.chatsimple.ai cdn.expertise.ai *.expertise.ai *.i.posthog.com sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl secure.payu.com secure.snd.payu.com https:\/\/geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.avada.io js.mollie.com *.cux.io tag.facemyads.co bcw.kinderkraft.fr cdn.cookiehub.eu invitejs.trustpilot.com kinderkraft-staging.user.com *.user.com *.g.doubleclick.net *.adyen.com *.facebook.net pixel.wp.pl *.hotjar.com *.criteo.com *.criteo.net *.cloudflare.com *.clickcease.com *.pinimg.com *.googleoptimize.com *.kinderkraft.pl *.kinderkraft.fr *.kinderkraft.de *.kinderkraft.it *.kinderkraft.co.uk *.kinderkraft.es *.metaffiliation.com *.trustpilot.com *.bing.com *.clarity.ms *.taboola.com *.luigisbox.tech ct.pinterest.com kng.kinderkraft.at sha.kinderkraft.be bbd-tag.de s.retargeted.co apptracker.stream *.sddan.com trk.datnova.com js.cookieless-data.com ecommscript-integrationapp.trustpilot.com widget.trustpilot.com ecommplugins-trustboxpreview.trustpilot.com us-assets.i.posthog.com *.gstatic.com www.gstatic.com *.google-analytics.com fonts.gstatic.com fonts.googleapis.com *.payu.com *.payu.com.pl static.payu.com *.snd.payu.com merch-prod.snd.payu.com browser.sentry-cdn.com *.sentry-cdn.com sentry.advox.pl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.hipay.com *.googleapis.com *.snrcdn.net https:\/\/fonts.googleapis.com *.fontawesome.com *.easypack24.net easypack24.net https:\/\/geowidget.easypack24.net https:\/\/geowidget.inpost.pl *.klarnacdn.net https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.typekit.net cdn.cookiehub.eu *.instagram.com *.cloudflare.com cdn.luigisbox.tech widget.trustpilot.com *.trustpilot.com ecommplugins-trustboxpreview.trustpilot.com pay.google.com *.google.com google.com *.gstatic.com www.gstatic.com *.google-analytics.com fonts.gstatic.com *.payu.com *.payu.com.pl static.payu.com secure.payu.com secure.snd.payu.com *.snd.payu.com merch-prod.snd.payu.com browser.sentry-cdn.com *.sentry-cdn.com sentry.advox.pl 'self' 'unsafe-inline'; object-src ecommscript-integrationapp.trustpilot.com 'self' 'unsafe-inline'; media-src *.adobe.com data: mpsnare.iesnare.com *.googleapis.com cdn.expertise.ai *.expertise.ai https:\/\/geowidget.easypack24.net *.googlevideo.com cdn.chatsimple.ai 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.hipay-tpp.com *.hipay.com wss:\/\/mpsnare.iesnare.com *.oney.io *.staging.oney.io *.snrbox.com https:\/\/*.ingest.sentry.io *.cookiebot.com cookiebot.com consentcdn.cookiebot.com cdn.chatsimple.ai *.chatsimple.ai cdn.expertise.ai *.expertise.ai *.i.posthog.com sandbox.przelewy24.pl secure.przelewy24.pl wss:\/\/ws.przelewy24.pl wss:\/\/sandbox-ws.przelewy24.pl wss:\/\/secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com secure.payu.com merch-prod.snd.payu.com *.easypack24.net *.inpost.pl *.openstreetmap.org *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https:\/\/get.geojs.io *.avada.io ws: *.instagram.com googleads.g.doubleclick.net wss:\/\/ws3.hotjar.com *.kinderkraft.fr *.metaffiliation.com facebook.com server-side-tagging-vqegoo7bda-uc.a.run.app ecommscript-integrationapp.trustpilot.com region1.analytics.google.com kinderkraft-staging.user.com wss:\/\/kinderkraft-staging.user.com *.adyen.com yt2html5.com *.user.com stats.g.doubleclick.net wss:\/\/kinderkraft.user.com *.hotjar.com https:\/\/paypal.com paypal.com *.hotjar.io *.criteo.com wss:\/\/ws29.hotjar.com *.pinterest.com wss:\/\/ws11.hotjar.com google.pl sentry.io *.clarity.ms *.cux.io *.facebook.com *.google.pl wss:\/\/* *.openfpcdn.io *.google-analytics.com *.taboola.com *.luigisbox.tech *.bing.com wdg.kinderkraft.pl *.googleapis.com tvw.kinderkraft.co.uk analytics.tiktok.com *.kinderkraft.at *.kinderkraft.be bcw.kinderkraft.fr widget.trustpilot.com api.trustpilot.com ambcglobal.sc.omtrdc.net cdn.cookiehub.eu api.expertise.ai pagead2.googlesyndication.com us.i.posthog.com api.ipify.org *.przelewy24.pl *.gstatic.com www.gstatic.com fonts.gstatic.com fonts.googleapis.com *.payu.com *.payu.com.pl static.payu.com secure.snd.payu.com *.snd.payu.com browser.sentry-cdn.com *.sentry-cdn.com sentry.advox.pl 'self' 'unsafe-inline'; child-src *.instagram.com http: https: blob: 'self' 'unsafe-inline'; default-src kinderkraft.co.uk *.adyen.com *.instagram.com *.googleoptimize.com *.bing.com kinderkraft.pl ecommscript-integrationapp.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":5},{"content-security-policy-report-only":" default-src https:\/\/*.axa.ch blob: data: https:\/\/*.axa.ch; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.axa.ch https:\/\/www.googletagmanager.com https:\/\/cdn.cookielaw.org https:\/\/cdn.mouseflow.com https:\/\/maps.google.com https:\/\/maps.googleapis.com https:\/\/connect.facebook.net https:\/\/axa-winterthur.dimelochat.com https:\/\/pay.sandbox.datatrans.com https:\/\/pay.datatrans.com https:\/\/recaptcha.net https:\/\/www.google.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/bat.bing.com https:\/\/snap.licdn.com https:\/\/www.gstatic.com https:\/\/*.teads.tv https:\/\/*.survalyzer.swiss https:\/\/www.awin1.com https:\/\/lantern.roeyecdn.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/*.doubleclick.net https:\/\/*.adobe.com https:\/\/*.adobe.io https:\/\/*.microsoft.com https:\/\/*.fusedeck.com https:\/\/*.onetrust.com https:\/\/*.whatsapp.com https:\/\/*.cookielaw.org https:\/\/slsnlytcs.com; style-src 'self' 'unsafe-inline' https:\/\/*.axa.ch https:\/\/fonts.googleapis.com https:\/\/www.googletagmanager.com https:\/\/*.survalyzer.swiss https:\/\/*.visualwebsiteoptimizer.com https:\/\/app.vwo.com https:\/\/s3.amazonaws.com https:\/\/*.adobe.com https:\/\/*.microsoft.com; img-src 'self' data: blob: https:\/\/chart.googleapis.com https:\/\/*.axa.ch https:\/\/*.google.com https:\/\/*.google.ch https:\/\/maps.gstatic.com https:\/\/cdn.cookielaw.org https:\/\/stats.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/ad.doubleclick.net https:\/\/www.facebook.com https:\/\/www.googletagmanager.com https:\/\/i.ytimg.com https:\/\/px.ads.linkedin.com https:\/\/bat.bing.com https:\/\/d5cplpsrt2s33.cloudfront.net https:\/\/bat.bing.net https:\/\/maps.googleapis.com https:\/\/region1.google-analytics.com https:\/\/*.googlesyndication.com https:\/\/connect.facebook.net https:\/\/flagcdn.com https:\/\/px.ads.linkedin.com https:\/\/www.googleadservices.com https:\/\/www.gstatic.com https:\/\/*.teads.tv https:\/\/*.survalyzer.swiss https:\/\/www.google.ch https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com; font-src 'self' data: https:\/\/*.axa.ch https:\/\/fonts.gstatic.com https:\/\/cdn.mouseflow.com https:\/\/assets.merci-app.com; connect-src 'self' https:\/\/*.axa.ch https:\/\/gtm.axa.ch https:\/\/sgtm.axa.ch https:\/\/region1.analytics.google.com https:\/\/www.google.com https:\/\/*.tt.omtrdc.net https:\/\/europe.directline.botframework.com https:\/\/digitalassistantbot-acc.azurewebsites.net https:\/\/cdn.cookielaw.org wss:\/\/europe.directline.botframework.com https:\/\/googleads.g.doubleclick.net https:\/\/maps.googleapis.com https:\/\/stats.g.doubleclick.net https:\/\/region1.google-analytics.com https:\/\/o2.mouseflow.com https:\/\/www.google.ch https:\/\/selfadvisory-acc.azurewebsites.net https:\/\/*.onetrust.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/px.ads.linkedin.com https:\/\/*.service.signalr.net https:\/\/pagead2.googlesyndication.com https:\/\/*.in.applicationinsights.azure.com https:\/\/www.googleadservices.com https:\/\/www.google-analytics.com wss:\/\/*.service.signalr.net https:\/\/*.mouseflow.com https:\/\/api.trongrid.io https:\/\/digitalassistantbot.azurewebsites.net https:\/\/www.facebook.com https:\/\/*.teads.tv https:\/\/snap.licdn.com https:\/\/*.survalyzer.swiss https:\/\/*.googlesyndication.com https:\/\/*.google.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/www.googletagmanager.com https:\/\/fonts.googleapis.com; frame-src https:\/\/*.axa.ch https:\/\/td.doubleclick.net https:\/\/8141516.fls.doubleclick.net https:\/\/www.youtube.com https:\/\/pay.sandbox.datatrans.com https:\/\/pay.datatrans.com https:\/\/www.google.com\/recaptcha\/ https:\/\/recaptcha.google.com\/recaptcha\/ https:\/\/recaptcha.net https:\/\/www.googletagmanager.com https:\/\/*.survalyzer.swiss https:\/\/www.axa.ch https:\/\/trk.axa.ch https:\/\/sgtm.axa.ch https:\/\/*.mouseflow.com https:\/\/exactag.axa.ch https:\/\/*.fusedeck.net https:\/\/*.dimelochat.com https:\/\/*.doubleclick.net https:\/\/www.google.com https:\/\/*.teads.tv https:\/\/*.onetrust.com https:\/\/*.whatsapp.com; frame-ancestors 'self'; block-all-mixed-content ; report-uri https:\/\/www.acc.axa.ch\/servlets\/external\/csp-reports.csp","count":5},{"content-security-policy-report-only":" font-src www.paypalobjects.com *.feedbackcompany.com *.googleapis.com *.gstatic.com *.fontawesome.com 'self' data: https:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.feedbackcompany.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com *.addthis.com *.sendcloud.sc *.jsdelivr.net https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com https:\/\/d1pna5l3xsntoj.cloudfront.net https:\/\/helloretailcdn.com https:\/\/banners.helloretailcdn.com *.feedbackcompany.com 'self' data: https:\/\/images.unsplash.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ magefan.com cm.magefan.com *.disqus.com https:\/\/img.youtube.com *.amazonaws.com *.hsforms.net *.hsforms.com https:\/\/maps.gstatic.com https:\/\/imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https:\/\/core.helloretail.com https:\/\/d1pna5l3xsntoj.cloudfront.net https:\/\/helloretailcdn.com *.feedbackcompany.com https:\/\/maps.googleapis.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.disqus.com *.addthis.com https:\/\/z.moatads.com https:\/\/v1.addthisedge.com https:\/\/cdn.jsdelivr.net *.cloudflare.com\/ajax\/libs\/prototype\/1.7.3\/prototype.js *.sendcloud.sc *.jsdelivr.net *.hsforms.net *.hsforms.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https:\/\/d1pna5l3xsntoj.cloudfront.net https:\/\/helloretailcdn.com *.googleapis.com https:\/\/static.klaviyo.com https:\/\/cdn.jsdelivr.net *.fontawesome.com *.sendcloud.sc *.jsdelivr.net *.gstatic.com https:\/\/fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/core.helloretail.com https:\/\/helloretailcdn.com *.feedbackcompany.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com https:\/\/www.google.com *.pay.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http:\/\/localhost\/paynl\/csp\/report; report-to report-endpoint;","count":5},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/ic-seo.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com data:; img-src 'self' data: https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/www.google.com https:\/\/www.google.co.jp https:\/\/s.w.org; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.google.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/ic-seo.com https:\/\/region1.google-analytics.com; worker-src blob:; object-src 'none'; base-uri 'self'; form-action 'self';","count":5},{"content-security-policy-report-only":" block-all-mixed-content; report-uri https:\/\/events.ocdn.eu\/v2\/csp-report?_ac=events&_fv=www.onet.pl::APROD_BOT","count":4},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/domain-registry","count":4},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.akstat.io https:\/\/*.algolianet.com https:\/\/*.fls.doubleclick.net https:\/\/*.pearson.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/a.quora.com https:\/\/ad.doubleclick.net https:\/\/ade.googlesyndication.com https:\/\/alb.reddit.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/analytics.formassembly.com https:\/\/analytics.tiktok.com https:\/\/analytics.twitter.com https:\/\/api.company-target.com https:\/\/app.launchdarkly.com https:\/\/bam.nr-data.net https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/c.go-mpulse.net https:\/\/cdn.cookielaw.org https:\/\/cdn.jsdelivr.net https:\/\/cdn.pdst.fm https:\/\/cdn.sift.com https:\/\/connect.facebook.net https:\/\/d.btttag.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/geolocation.onetrust.com https:\/\/googleads.g.doubleclick.net https:\/\/hexagon-analytics.com https:\/\/i.liadm.com https:\/\/img.youtube.com https:\/\/insight.adsrvr.org https:\/\/js-agent.newrelic.com https:\/\/js.adsrvr.org https:\/\/p11.techlab-cdn.com https:\/\/pagead2.googlesyndication.com https:\/\/pearson--projects.sandbox.my.site.com https:\/\/pearson.blueconic.net https:\/\/pearson.com https:\/\/pearson.esaas.inmoment.eu https:\/\/pearson.mcxplatform.de https:\/\/pearson.sb.blueconic.net https:\/\/pearson.tfaforms.net https:\/\/pearson3283191z.btttag.com https:\/\/pi.pardot.com https:\/\/pixel-config.reddit.com https:\/\/pixels.spotify.com https:\/\/privacyportal-de.onetrust.com https:\/\/px.ads.linkedin.com https:\/\/q.quora.com https:\/\/region1.google-analytics.com https:\/\/s.company-target.com https:\/\/s.go-mpulse.net https:\/\/sc-static.sc-static.net https:\/\/secure.adnxs.com https:\/\/snap.licdn.com https:\/\/static.ads-twitter.com https:\/\/static.hotjar.com https:\/\/t.t.co https:\/\/tag-logger.demandbase.com https:\/\/tag.demandbase.com https:\/\/tag.rmp.rakuten.com https:\/\/td.doubleclick.net https:\/\/tr.snapchat.com https:\/\/tr6.snapchat.com https:\/\/trial-eum-clientnsv4-s.akamaihd.net https:\/\/trial-eum-clienttons-s.akamaihd.net https:\/\/us5azow6i2-dsn.algolia.net https:\/\/utt.impactcdn.com https:\/\/www.redditstatic.com https:\/\/xfoi9ebbhr-dsn.algolia.net; script-src 'nonce-V5F+zuruSxyR9eDrqFzWWFkt' 'strict-dynamic' 'unsafe-inline' https: https:\/\/*.go-mpulse.net; script-src-elem 'nonce-V5F+zuruSxyR9eDrqFzWWFkt' 'unsafe-inline' blob: https: https:\/\/*.go-mpulse.net; style-src 'self' 'unsafe-inline' data: https:\/\/*.pearson.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/cdn.cookielaw.org https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/pearson.com https:\/\/pearson--testbau.sandbox.my.site.com; style-src-attr 'unsafe-inline'; img-src 'self' data: blob: https:\/\/*.fls.doubleclick.net https:\/\/*.pearson.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/ad.doubleclick.net https:\/\/alb.reddit.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/analytics.tiktok.com https:\/\/analytics.twitter.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/cdn.cookielaw.org https:\/\/d.btttag.com https:\/\/fonts.gstatic.com https:\/\/googleads.g.doubleclick.net https:\/\/hexagon-analytics.com https:\/\/i.liadm.com https:\/\/i6.liadm.com https:\/\/id.rlcdn.com https:\/\/img.youtube.com https:\/\/insight.adsrvr.org https:\/\/pearson--projects.sandbox.my.site.com https:\/\/pearson.blueconic.net https:\/\/pearson.com https:\/\/pearson3283191z.btttag.com https:\/\/pi.pardot.com https:\/\/pixel-config.reddit.com https:\/\/pixels.spotify.com https:\/\/px.ads.linkedin.com https:\/\/region1.google-analytics.com https:\/\/sc-static.sc-static.net https:\/\/secure.adnxs.com https:\/\/segments.company-target.com https:\/\/static.ads-twitter.com https:\/\/t.t.co https:\/\/td.doubleclick.net https:\/\/tr.snapchat.com https:\/\/tr6.snapchat.com https:\/\/utt.impactcdn.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.linkedin.com https:\/\/www.redditstatic.com; font-src 'self' data: https:\/\/*.pearson.com https:\/\/cdn.cookielaw.org https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/pearson.com; connect-src 'self' https:\/\/*.adobeaemcloud.com https:\/\/*.akamaihd.net https:\/\/*.akstat.io https:\/\/*.algolianet.com https:\/\/*.go-mpulse.net https:\/\/*.pearson.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/a.quora.com https:\/\/ad.doubleclick.net https:\/\/alb.reddit.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/analytics.formassembly.com https:\/\/analytics.google.com https:\/\/analytics.tiktok.com https:\/\/analytics.twitter.com https:\/\/api-c-pgi.pearson.com https:\/\/api.company-target.com https:\/\/app.launchdarkly.com https:\/\/bam.nr-data.net https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/c.go-mpulse.net https:\/\/cdn.cookielaw.org https:\/\/cdn.pdst.fm https:\/\/cdn.sift.com https:\/\/connect.facebook.net https:\/\/dev.visualwebsiteoptimizer.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/geolocation.onetrust.com https:\/\/googleads.g.doubleclick.net https:\/\/hexagon-analytics.com https:\/\/i.liadm.com https:\/\/insight.adsrvr.org https:\/\/js-agent.newrelic.com https:\/\/js.adsrvr.org https:\/\/p11.techlab-cdn.com https:\/\/pagead2.googlesyndication.com https:\/\/pearson--projects.sandbox.my.site.com https:\/\/pearson--testbau.sandbox.my.salesforce-scrt.com https:\/\/pearson.blueconic.net https:\/\/pearson.com https:\/\/pearson.esaas.inmoment.eu https:\/\/pearson.mcxplatform.de https:\/\/pearson.sb.blueconic.net https:\/\/pearson.tfaforms.net https:\/\/pi.pardot.com https:\/\/pixels.spotify.com https:\/\/privacyportal-de.onetrust.com https:\/\/px.ads.linkedin.com https:\/\/q.quora.com https:\/\/region1.google-analytics.com https:\/\/s.company-target.com https:\/\/s.go-mpulse.net https:\/\/service-stg.pearson.com https:\/\/service.pearson.com https:\/\/snap.licdn.com https:\/\/static.hotjar.com https:\/\/stats.g.doubleclick.net https:\/\/t.t.co https:\/\/tag-logger.demandbase.com https:\/\/tag.demandbase.com https:\/\/tag.rmp.rakuten.com https:\/\/tr.snapchat.com https:\/\/tr6.snapchat.com https:\/\/us5azow6i2-dsn.algolia.net https:\/\/utt.impactcdn.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/xfoi9ebbhr-dsn.algolia.net https:\/\/pearson--testbau.sandbox.my.site.com https:\/\/*.c360a.salesforce.com; media-src 'self' blob: https:\/\/*.pearson.com https:\/\/pearson.com; frame-src 'self' https:\/\/*.pearson.com https:\/\/15344178.fls.doubleclick.net https:\/\/pearson--testbau.sandbox.my.site.com https:\/\/pearson.com https:\/\/s.company-target.com https:\/\/www.facebook.com https:\/\/www.googletagmanager.com; frame-ancestors 'none'; base-uri 'self'; object-src 'none';","count":4},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/unpkg.com https:\/\/acsbapp.com https:\/\/snap.licdn.com https:\/\/sc-static.net https:\/\/tr.snapchat.com https:\/\/maps.googleapis.com https:\/\/static.ads-twitter.com https:\/\/analytics.twitter.com https:\/\/connect.facebook.net https:\/\/cdn.cookielaw.org https:\/\/www.youtube.com https:\/\/static.addtoany.com https:\/\/cdnjs.cloudflare.com https:\/\/www.googletagmanager.com https:\/\/js-agent.newrelic.com https:\/\/geolocation.onetrust.com https:\/\/bam-cell.nr-data.net https:\/\/cdnsecakmi.kaltura.com https:\/\/cdnapisec.kaltura.com http:\/\/cdnapi.kaltura.com https:\/\/cfvod.kaltura.com https:\/\/www.google-analytics.com https:\/\/cdn.jsdelivr.net https:\/\/script.crazyegg.com https:\/\/static.cloudflareinsights.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/bam.nr-data.net https:\/\/hm.baidu.com\/hm.js https:\/\/www.clarity.ms https:\/\/www.googleadservices.com blob: https:\/\/vjs.zencdn.net\/5.0\/video.min.js https:\/\/analytics.tiktok.com; object-src 'self' 'unsafe-inline' 'unsafe-eval' https: data; style-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.cookielaw.org https:\/\/acsbapp.com https:\/\/sc-static.net https:\/\/tr.snapchat.com https:\/\/maps.googleapis.com  https:\/\/fonts.googleapis.com https:\/\/www.youtube.com https:\/\/static.addtoany.com https:\/\/cdnjs.cloudflare.com https:\/\/www.googletagmanager.com https:\/\/js-agent.newrelic.com https:\/\/geolocation.onetrust.com https:\/\/bam-cell.nr-data.net https:\/\/script.crazyegg.com https:\/\/static.cloudflareinsights.com https:\/\/cdnapisec.kaltura.com https:\/\/cfvod.kaltura.com https:\/\/vjs.zencdn.net\/5.0\/video-js.min.css https:\/\/analytics.tiktok.com; frame-ancestors 'self'","count":4},{"content-security-policy-report-only":" default-src 'self' https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; media-src 'self' https: blob: data:; object-src https: blob:; worker-src 'self' https: blob:; frame-src 'self' https: blob:; form-action 'self' https:; block-all-mixed-content; report-uri \/csp-violation-report","count":4},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: logger.scot.nhs.uk *.fontawesome.com use.typekit.net *.google.com *.google.co.uk *.googleapis.com themes.googleusercontent.com *.gstatic.com code.jquery.com yui.yahooapis.com *.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net unpkg.com *.twitter.com *.twimg.com *.youtube.com youtu.be *.ytimg.com www.youtube-nocookie.com player.vimeo.com i.vimeocdn.com cdn.jwplayer.com content.jwplatform.com prd.jwpltx.com *.jwpcdn.com *.jwpsrv.com *.civiccomputing.com cc.cdn.civiccomputing.com secure.gravatar.com public.tableau.com www.openstreetmap.org browser-update.org s.w.org www.geoplugin.net *.wp.com hcaptcha.com *.hcaptcha.com www.careopinion.org.uk www.patientopinion.org.uk assets.nhs.uk www.travelinescotland.com; worker-src 'self' www.google.com; frame-ancestors 'self'; base-uri 'self'; report-to csp-endpoint; report-uri https:\/\/web-reports.scot.nhs.uk\/api\/v1\/csp-report","count":4},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/pagead2.googlesyndication.com https:\/\/tagmanager.google.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/*.google.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/*.marketo.com https:\/\/*.mktoresp.com https:\/\/app-sjqe.marketo.com https:\/\/*.linkedin.com https:\/\/px.ads.linkedin.com https:\/\/snap.licdn.com https:\/\/connect.facebook.net https:\/\/*.facebook.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/*.zoominfo.com https:\/\/cdn.calibermind.com https:\/\/*.calibermind.com https:\/\/*.6sc.co https:\/\/*.6sense.com https:\/\/*.wistia.com https:\/\/*.wistia.net https:\/\/fast.wistia.com https:\/\/*.qualified.com https:\/\/*.qualified.io https:\/\/*.quillfeed.com https:\/\/*.onetrust.com https:\/\/cdn.cookielaw.org https:\/\/*.sentry.io https:\/\/*.ingest.sentry.io https:\/\/js.sentry-cdn.com https:\/\/*.cloudflare.com https:\/\/*.cloudflareinsights.com https:\/\/info.uplandsoftware.com https:\/\/cdn.jsdelivr.net https:\/\/*.clickcease.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/px4.ads.linkedin.com https:\/\/dc.ads.linkedin.com https:\/\/p.adsymptotic.com https:\/\/cdn.linkedin.oribi.io https:\/\/gw.linkedin.oribi.io https:\/\/sjs.bizographics.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/tagmanager.google.com https:\/\/*.onetrust.com https:\/\/cdn.cookielaw.org https:\/\/*.marketo.com https:\/\/*.mktoresp.com https:\/\/app-sjqe.marketo.com https:\/\/cdn.jsdelivr.net; img-src 'self' data: blob: https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/*.google-analytics.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/*.google.com https:\/\/pagead2.googlesyndication.com https:\/\/google.com https:\/\/*.g.doubleclick.net https:\/\/www.google.ad https:\/\/*.google.ad https:\/\/www.google.ae https:\/\/*.google.ae https:\/\/www.google.com.af https:\/\/*.google.com.af https:\/\/www.google.com.ag https:\/\/*.google.com.ag https:\/\/www.google.al https:\/\/*.google.al https:\/\/www.google.am https:\/\/*.google.am https:\/\/www.google.co.ao https:\/\/*.google.co.ao https:\/\/www.google.com.ar https:\/\/*.google.com.ar https:\/\/www.google.as https:\/\/*.google.as https:\/\/www.google.at https:\/\/*.google.at https:\/\/www.google.com.au https:\/\/*.google.com.au https:\/\/www.google.az https:\/\/*.google.az https:\/\/www.google.ba https:\/\/*.google.ba https:\/\/www.google.com.bd https:\/\/*.google.com.bd https:\/\/www.google.be https:\/\/*.google.be https:\/\/www.google.bf https:\/\/*.google.bf https:\/\/www.google.bg https:\/\/*.google.bg https:\/\/www.google.com.bh https:\/\/*.google.com.bh https:\/\/www.google.bi https:\/\/*.google.bi https:\/\/www.google.bj https:\/\/*.google.bj https:\/\/www.google.com.bn https:\/\/*.google.com.bn https:\/\/www.google.com.bo https:\/\/*.google.com.bo https:\/\/www.google.com.br https:\/\/*.google.com.br https:\/\/www.google.bs https:\/\/*.google.bs https:\/\/www.google.bt https:\/\/*.google.bt https:\/\/www.google.co.bw https:\/\/*.google.co.bw https:\/\/www.google.by https:\/\/*.google.by https:\/\/www.google.com.bz https:\/\/*.google.com.bz https:\/\/www.google.ca https:\/\/*.google.ca https:\/\/www.google.cd https:\/\/*.google.cd https:\/\/www.google.cf https:\/\/*.google.cf https:\/\/www.google.cg https:\/\/*.google.cg https:\/\/www.google.ch https:\/\/*.google.ch https:\/\/www.google.ci https:\/\/*.google.ci https:\/\/www.google.co.ck https:\/\/*.google.co.ck https:\/\/www.google.cl https:\/\/*.google.cl https:\/\/www.google.cm https:\/\/*.google.cm https:\/\/www.google.cn https:\/\/*.google.cn https:\/\/www.google.com.co https:\/\/*.google.com.co https:\/\/www.google.co.cr https:\/\/*.google.co.cr https:\/\/www.google.com.cu https:\/\/*.google.com.cu https:\/\/www.google.cv https:\/\/*.google.cv https:\/\/www.google.com.cy https:\/\/*.google.com.cy https:\/\/www.google.cz https:\/\/*.google.cz https:\/\/www.google.de https:\/\/*.google.de https:\/\/www.google.dj https:\/\/*.google.dj https:\/\/www.google.dk https:\/\/*.google.dk https:\/\/www.google.dm https:\/\/*.google.dm https:\/\/www.google.com.do https:\/\/*.google.com.do https:\/\/www.google.dz https:\/\/*.google.dz https:\/\/www.google.com.ec https:\/\/*.google.com.ec https:\/\/www.google.ee https:\/\/*.google.ee https:\/\/www.google.com.eg https:\/\/*.google.com.eg https:\/\/www.google.es https:\/\/*.google.es https:\/\/www.google.com.et https:\/\/*.google.com.et https:\/\/www.google.fi https:\/\/*.google.fi https:\/\/www.google.com.fj https:\/\/*.google.com.fj https:\/\/www.google.fm https:\/\/*.google.fm https:\/\/www.google.fr https:\/\/*.google.fr https:\/\/www.google.ga https:\/\/*.google.ga https:\/\/www.google.ge https:\/\/*.google.ge https:\/\/www.google.gg https:\/\/*.google.gg https:\/\/www.google.com.gh https:\/\/*.google.com.gh https:\/\/www.google.com.gi https:\/\/*.google.com.gi https:\/\/www.google.gl https:\/\/*.google.gl https:\/\/www.google.gm https:\/\/*.google.gm https:\/\/www.google.gr https:\/\/*.google.gr https:\/\/www.google.com.gt https:\/\/*.google.com.gt https:\/\/www.google.gy https:\/\/*.google.gy https:\/\/www.google.com.hk https:\/\/*.google.com.hk https:\/\/www.google.hn https:\/\/*.google.hn https:\/\/www.google.hr https:\/\/*.google.hr https:\/\/www.google.ht https:\/\/*.google.ht https:\/\/www.google.hu https:\/\/*.google.hu https:\/\/www.google.co.id https:\/\/*.google.co.id https:\/\/www.google.ie https:\/\/*.google.ie https:\/\/www.google.co.il https:\/\/*.google.co.il https:\/\/www.google.im https:\/\/*.google.im https:\/\/www.google.co.in https:\/\/*.google.co.in https:\/\/www.google.iq https:\/\/*.google.iq https:\/\/www.google.is https:\/\/*.google.is https:\/\/www.google.it https:\/\/*.google.it https:\/\/www.google.je https:\/\/*.google.je https:\/\/www.google.com.jm https:\/\/*.google.com.jm https:\/\/www.google.jo https:\/\/*.google.jo https:\/\/www.google.co.jp https:\/\/*.google.co.jp https:\/\/www.google.co.ke https:\/\/*.google.co.ke https:\/\/www.google.com.kh https:\/\/*.google.com.kh https:\/\/www.google.ki https:\/\/*.google.ki https:\/\/www.google.kg https:\/\/*.google.kg https:\/\/www.google.co.kr https:\/\/*.google.co.kr https:\/\/www.google.com.kw https:\/\/*.google.com.kw https:\/\/www.google.kz https:\/\/*.google.kz https:\/\/www.google.la https:\/\/*.google.la https:\/\/www.google.com.lb https:\/\/*.google.com.lb https:\/\/www.google.li https:\/\/*.google.li https:\/\/www.google.lk https:\/\/*.google.lk https:\/\/www.google.co.ls https:\/\/*.google.co.ls https:\/\/www.google.lt https:\/\/*.google.lt https:\/\/www.google.lu https:\/\/*.google.lu https:\/\/www.google.lv https:\/\/*.google.lv https:\/\/www.google.com.ly https:\/\/*.google.com.ly https:\/\/www.google.co.ma https:\/\/*.google.co.ma https:\/\/www.google.md https:\/\/*.google.md https:\/\/www.google.me https:\/\/*.google.me https:\/\/www.google.mg https:\/\/*.google.mg https:\/\/www.google.mk https:\/\/*.google.mk https:\/\/www.google.ml https:\/\/*.google.ml https:\/\/www.google.com.mm https:\/\/*.google.com.mm https:\/\/www.google.mn https:\/\/*.google.mn https:\/\/www.google.com.mt https:\/\/*.google.com.mt https:\/\/www.google.mu https:\/\/*.google.mu https:\/\/www.google.mv https:\/\/*.google.mv https:\/\/www.google.mw https:\/\/*.google.mw https:\/\/www.google.com.mx https:\/\/*.google.com.mx https:\/\/www.google.com.my https:\/\/*.google.com.my https:\/\/www.google.co.mz https:\/\/*.google.co.mz https:\/\/www.google.com.na https:\/\/*.google.com.na https:\/\/www.google.com.ng https:\/\/*.google.com.ng https:\/\/www.google.com.ni https:\/\/*.google.com.ni https:\/\/www.google.ne https:\/\/*.google.ne https:\/\/www.google.nl https:\/\/*.google.nl https:\/\/www.google.no https:\/\/*.google.no https:\/\/www.google.com.np https:\/\/*.google.com.np https:\/\/www.google.nr https:\/\/*.google.nr https:\/\/www.google.nu https:\/\/*.google.nu https:\/\/www.google.co.nz https:\/\/*.google.co.nz https:\/\/www.google.com.om https:\/\/*.google.com.om https:\/\/www.google.com.pa https:\/\/*.google.com.pa https:\/\/www.google.com.pe https:\/\/*.google.com.pe https:\/\/www.google.com.pg https:\/\/*.google.com.pg https:\/\/www.google.com.ph https:\/\/*.google.com.ph https:\/\/www.google.com.pk https:\/\/*.google.com.pk https:\/\/www.google.pl https:\/\/*.google.pl https:\/\/www.google.pn https:\/\/*.google.pn https:\/\/www.google.com.pr https:\/\/*.google.com.pr https:\/\/www.google.ps https:\/\/*.google.ps https:\/\/www.google.pt https:\/\/*.google.pt https:\/\/www.google.com.py https:\/\/*.google.com.py https:\/\/www.google.com.qa https:\/\/*.google.com.qa https:\/\/www.google.ro https:\/\/*.google.ro https:\/\/www.google.ru https:\/\/*.google.ru https:\/\/www.google.rw https:\/\/*.google.rw https:\/\/www.google.com.sa https:\/\/*.google.com.sa https:\/\/www.google.com.sb https:\/\/*.google.com.sb https:\/\/www.google.sc https:\/\/*.google.sc https:\/\/www.google.se https:\/\/*.google.se https:\/\/www.google.com.sg https:\/\/*.google.com.sg https:\/\/www.google.sh https:\/\/*.google.sh https:\/\/www.google.si https:\/\/*.google.si https:\/\/www.google.sk https:\/\/*.google.sk https:\/\/www.google.com.sl https:\/\/*.google.com.sl https:\/\/www.google.sn https:\/\/*.google.sn https:\/\/www.google.so https:\/\/*.google.so https:\/\/www.google.sm https:\/\/*.google.sm https:\/\/www.google.sr https:\/\/*.google.sr https:\/\/www.google.st https:\/\/*.google.st https:\/\/www.google.com.sv https:\/\/*.google.com.sv https:\/\/www.google.td https:\/\/*.google.td https:\/\/www.google.tg https:\/\/*.google.tg https:\/\/www.google.co.th https:\/\/*.google.co.th https:\/\/www.google.com.tj https:\/\/*.google.com.tj https:\/\/www.google.tl https:\/\/*.google.tl https:\/\/www.google.tm https:\/\/*.google.tm https:\/\/www.google.tn https:\/\/*.google.tn https:\/\/www.google.to https:\/\/*.google.to https:\/\/www.google.com.tr https:\/\/*.google.com.tr https:\/\/www.google.tt https:\/\/*.google.tt https:\/\/www.google.com.tw https:\/\/*.google.com.tw https:\/\/www.google.co.tz https:\/\/*.google.co.tz https:\/\/www.google.com.ua https:\/\/*.google.com.ua https:\/\/www.google.co.ug https:\/\/*.google.co.ug https:\/\/www.google.co.uk https:\/\/*.google.co.uk https:\/\/www.google.com.uy https:\/\/*.google.com.uy https:\/\/www.google.co.uz https:\/\/*.google.co.uz https:\/\/www.google.com.vc https:\/\/*.google.com.vc https:\/\/www.google.co.ve https:\/\/*.google.co.ve https:\/\/www.google.co.vi https:\/\/*.google.co.vi https:\/\/www.google.com.vn https:\/\/*.google.com.vn https:\/\/www.google.vu https:\/\/*.google.vu https:\/\/www.google.ws https:\/\/*.google.ws https:\/\/www.google.rs https:\/\/*.google.rs https:\/\/www.google.co.za https:\/\/*.google.co.za https:\/\/www.google.co.zm https:\/\/*.google.co.zm https:\/\/www.google.co.zw https:\/\/*.google.co.zw https:\/\/www.google.cat https:\/\/*.google.cat https:\/\/*.linkedin.com https:\/\/px.ads.linkedin.com https:\/\/snap.licdn.com https:\/\/connect.facebook.net https:\/\/*.facebook.com https:\/\/*.wistia.com https:\/\/*.wistia.net https:\/\/fast.wistia.com https:\/\/*.gravatar.com https:\/\/*.wp.com https:\/\/*.wordpress.com https:\/\/*.6sc.co https:\/\/*.6sense.com https:\/\/*.clickcease.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/px4.ads.linkedin.com https:\/\/dc.ads.linkedin.com https:\/\/p.adsymptotic.com https:\/\/cdn.linkedin.oribi.io https:\/\/gw.linkedin.oribi.io https:\/\/sjs.bizographics.com; font-src 'self' https:\/\/fonts.gstatic.com data:; connect-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/*.google-analytics.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/*.google.com https:\/\/pagead2.googlesyndication.com https:\/\/ad.doubleclick.net https:\/\/google.com https:\/\/*.g.doubleclick.net https:\/\/*.analytics.google.com https:\/\/www.google.ad https:\/\/*.google.ad https:\/\/www.google.ae https:\/\/*.google.ae https:\/\/www.google.com.af https:\/\/*.google.com.af https:\/\/www.google.com.ag https:\/\/*.google.com.ag https:\/\/www.google.al https:\/\/*.google.al https:\/\/www.google.am https:\/\/*.google.am https:\/\/www.google.co.ao https:\/\/*.google.co.ao https:\/\/www.google.com.ar https:\/\/*.google.com.ar https:\/\/www.google.as https:\/\/*.google.as https:\/\/www.google.at https:\/\/*.google.at https:\/\/www.google.com.au https:\/\/*.google.com.au https:\/\/www.google.az https:\/\/*.google.az https:\/\/www.google.ba https:\/\/*.google.ba https:\/\/www.google.com.bd https:\/\/*.google.com.bd https:\/\/www.google.be https:\/\/*.google.be https:\/\/www.google.bf https:\/\/*.google.bf https:\/\/www.google.bg https:\/\/*.google.bg https:\/\/www.google.com.bh https:\/\/*.google.com.bh https:\/\/www.google.bi https:\/\/*.google.bi https:\/\/www.google.bj https:\/\/*.google.bj https:\/\/www.google.com.bn https:\/\/*.google.com.bn https:\/\/www.google.com.bo https:\/\/*.google.com.bo https:\/\/www.google.com.br https:\/\/*.google.com.br https:\/\/www.google.bs https:\/\/*.google.bs https:\/\/www.google.bt https:\/\/*.google.bt https:\/\/www.google.co.bw https:\/\/*.google.co.bw https:\/\/www.google.by https:\/\/*.google.by https:\/\/www.google.com.bz https:\/\/*.google.com.bz https:\/\/www.google.ca https:\/\/*.google.ca https:\/\/www.google.cd https:\/\/*.google.cd https:\/\/www.google.cf https:\/\/*.google.cf https:\/\/www.google.cg https:\/\/*.google.cg https:\/\/www.google.ch https:\/\/*.google.ch https:\/\/www.google.ci https:\/\/*.google.ci https:\/\/www.google.co.ck https:\/\/*.google.co.ck https:\/\/www.google.cl https:\/\/*.google.cl https:\/\/www.google.cm https:\/\/*.google.cm https:\/\/www.google.cn https:\/\/*.google.cn https:\/\/www.google.com.co https:\/\/*.google.com.co https:\/\/www.google.co.cr https:\/\/*.google.co.cr https:\/\/www.google.com.cu https:\/\/*.google.com.cu https:\/\/www.google.cv https:\/\/*.google.cv https:\/\/www.google.com.cy https:\/\/*.google.com.cy https:\/\/www.google.cz https:\/\/*.google.cz https:\/\/www.google.de https:\/\/*.google.de https:\/\/www.google.dj https:\/\/*.google.dj https:\/\/www.google.dk https:\/\/*.google.dk https:\/\/www.google.dm https:\/\/*.google.dm https:\/\/www.google.com.do https:\/\/*.google.com.do https:\/\/www.google.dz https:\/\/*.google.dz https:\/\/www.google.com.ec https:\/\/*.google.com.ec https:\/\/www.google.ee https:\/\/*.google.ee https:\/\/www.google.com.eg https:\/\/*.google.com.eg https:\/\/www.google.es https:\/\/*.google.es https:\/\/www.google.com.et https:\/\/*.google.com.et https:\/\/www.google.fi https:\/\/*.google.fi https:\/\/www.google.com.fj https:\/\/*.google.com.fj https:\/\/www.google.fm https:\/\/*.google.fm https:\/\/www.google.fr https:\/\/*.google.fr https:\/\/www.google.ga https:\/\/*.google.ga https:\/\/www.google.ge https:\/\/*.google.ge https:\/\/www.google.gg https:\/\/*.google.gg https:\/\/www.google.com.gh https:\/\/*.google.com.gh https:\/\/www.google.com.gi https:\/\/*.google.com.gi https:\/\/www.google.gl https:\/\/*.google.gl https:\/\/www.google.gm https:\/\/*.google.gm https:\/\/www.google.gr https:\/\/*.google.gr https:\/\/www.google.com.gt https:\/\/*.google.com.gt https:\/\/www.google.gy https:\/\/*.google.gy https:\/\/www.google.com.hk https:\/\/*.google.com.hk https:\/\/www.google.hn https:\/\/*.google.hn https:\/\/www.google.hr https:\/\/*.google.hr https:\/\/www.google.ht https:\/\/*.google.ht https:\/\/www.google.hu https:\/\/*.google.hu https:\/\/www.google.co.id https:\/\/*.google.co.id https:\/\/www.google.ie https:\/\/*.google.ie https:\/\/www.google.co.il https:\/\/*.google.co.il https:\/\/www.google.im https:\/\/*.google.im https:\/\/www.google.co.in https:\/\/*.google.co.in https:\/\/www.google.iq https:\/\/*.google.iq https:\/\/www.google.is https:\/\/*.google.is https:\/\/www.google.it https:\/\/*.google.it https:\/\/www.google.je https:\/\/*.google.je https:\/\/www.google.com.jm https:\/\/*.google.com.jm https:\/\/www.google.jo https:\/\/*.google.jo https:\/\/www.google.co.jp https:\/\/*.google.co.jp https:\/\/www.google.co.ke https:\/\/*.google.co.ke https:\/\/www.google.com.kh https:\/\/*.google.com.kh https:\/\/www.google.ki https:\/\/*.google.ki https:\/\/www.google.kg https:\/\/*.google.kg https:\/\/www.google.co.kr https:\/\/*.google.co.kr https:\/\/www.google.com.kw https:\/\/*.google.com.kw https:\/\/www.google.kz https:\/\/*.google.kz https:\/\/www.google.la https:\/\/*.google.la https:\/\/www.google.com.lb https:\/\/*.google.com.lb https:\/\/www.google.li https:\/\/*.google.li https:\/\/www.google.lk https:\/\/*.google.lk https:\/\/www.google.co.ls https:\/\/*.google.co.ls https:\/\/www.google.lt https:\/\/*.google.lt https:\/\/www.google.lu https:\/\/*.google.lu https:\/\/www.google.lv https:\/\/*.google.lv https:\/\/www.google.com.ly https:\/\/*.google.com.ly https:\/\/www.google.co.ma https:\/\/*.google.co.ma https:\/\/www.google.md https:\/\/*.google.md https:\/\/www.google.me https:\/\/*.google.me https:\/\/www.google.mg https:\/\/*.google.mg https:\/\/www.google.mk https:\/\/*.google.mk https:\/\/www.google.ml https:\/\/*.google.ml https:\/\/www.google.com.mm https:\/\/*.google.com.mm https:\/\/www.google.mn https:\/\/*.google.mn https:\/\/www.google.com.mt https:\/\/*.google.com.mt https:\/\/www.google.mu https:\/\/*.google.mu https:\/\/www.google.mv https:\/\/*.google.mv https:\/\/www.google.mw https:\/\/*.google.mw https:\/\/www.google.com.mx https:\/\/*.google.com.mx https:\/\/www.google.com.my https:\/\/*.google.com.my https:\/\/www.google.co.mz https:\/\/*.google.co.mz https:\/\/www.google.com.na https:\/\/*.google.com.na https:\/\/www.google.com.ng https:\/\/*.google.com.ng https:\/\/www.google.com.ni https:\/\/*.google.com.ni https:\/\/www.google.ne https:\/\/*.google.ne https:\/\/www.google.nl https:\/\/*.google.nl https:\/\/www.google.no https:\/\/*.google.no https:\/\/www.google.com.np https:\/\/*.google.com.np https:\/\/www.google.nr https:\/\/*.google.nr https:\/\/www.google.nu https:\/\/*.google.nu https:\/\/www.google.co.nz https:\/\/*.google.co.nz https:\/\/www.google.com.om https:\/\/*.google.com.om https:\/\/www.google.com.pa https:\/\/*.google.com.pa https:\/\/www.google.com.pe https:\/\/*.google.com.pe https:\/\/www.google.com.pg https:\/\/*.google.com.pg https:\/\/www.google.com.ph https:\/\/*.google.com.ph https:\/\/www.google.com.pk https:\/\/*.google.com.pk https:\/\/www.google.pl https:\/\/*.google.pl https:\/\/www.google.pn https:\/\/*.google.pn https:\/\/www.google.com.pr https:\/\/*.google.com.pr https:\/\/www.google.ps https:\/\/*.google.ps https:\/\/www.google.pt https:\/\/*.google.pt https:\/\/www.google.com.py https:\/\/*.google.com.py https:\/\/www.google.com.qa https:\/\/*.google.com.qa https:\/\/www.google.ro https:\/\/*.google.ro https:\/\/www.google.ru https:\/\/*.google.ru https:\/\/www.google.rw https:\/\/*.google.rw https:\/\/www.google.com.sa https:\/\/*.google.com.sa https:\/\/www.google.com.sb https:\/\/*.google.com.sb https:\/\/www.google.sc https:\/\/*.google.sc https:\/\/www.google.se https:\/\/*.google.se https:\/\/www.google.com.sg https:\/\/*.google.com.sg https:\/\/www.google.sh https:\/\/*.google.sh https:\/\/www.google.si https:\/\/*.google.si https:\/\/www.google.sk https:\/\/*.google.sk https:\/\/www.google.com.sl https:\/\/*.google.com.sl https:\/\/www.google.sn https:\/\/*.google.sn https:\/\/www.google.so https:\/\/*.google.so https:\/\/www.google.sm https:\/\/*.google.sm https:\/\/www.google.sr https:\/\/*.google.sr https:\/\/www.google.st https:\/\/*.google.st https:\/\/www.google.com.sv https:\/\/*.google.com.sv https:\/\/www.google.td https:\/\/*.google.td https:\/\/www.google.tg https:\/\/*.google.tg https:\/\/www.google.co.th https:\/\/*.google.co.th https:\/\/www.google.com.tj https:\/\/*.google.com.tj https:\/\/www.google.tl https:\/\/*.google.tl https:\/\/www.google.tm https:\/\/*.google.tm https:\/\/www.google.tn https:\/\/*.google.tn https:\/\/www.google.to https:\/\/*.google.to https:\/\/www.google.com.tr https:\/\/*.google.com.tr https:\/\/www.google.tt https:\/\/*.google.tt https:\/\/www.google.com.tw https:\/\/*.google.com.tw https:\/\/www.google.co.tz https:\/\/*.google.co.tz https:\/\/www.google.com.ua https:\/\/*.google.com.ua https:\/\/www.google.co.ug https:\/\/*.google.co.ug https:\/\/www.google.co.uk https:\/\/*.google.co.uk https:\/\/www.google.com.uy https:\/\/*.google.com.uy https:\/\/www.google.co.uz https:\/\/*.google.co.uz https:\/\/www.google.com.vc https:\/\/*.google.com.vc https:\/\/www.google.co.ve https:\/\/*.google.co.ve https:\/\/www.google.co.vi https:\/\/*.google.co.vi https:\/\/www.google.com.vn https:\/\/*.google.com.vn https:\/\/www.google.vu https:\/\/*.google.vu https:\/\/www.google.ws https:\/\/*.google.ws https:\/\/www.google.rs https:\/\/*.google.rs https:\/\/www.google.co.za https:\/\/*.google.co.za https:\/\/www.google.co.zm https:\/\/*.google.co.zm https:\/\/www.google.co.zw https:\/\/*.google.co.zw https:\/\/www.google.cat https:\/\/*.google.cat https:\/\/*.marketo.com https:\/\/*.mktoresp.com https:\/\/app-sjqe.marketo.com https:\/\/*.linkedin.com https:\/\/px.ads.linkedin.com https:\/\/snap.licdn.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/*.zoominfo.com https:\/\/cdn.calibermind.com https:\/\/*.calibermind.com https:\/\/*.6sc.co https:\/\/*.6sense.com https:\/\/*.wistia.com https:\/\/*.wistia.net https:\/\/fast.wistia.com https:\/\/*.qualified.com https:\/\/*.qualified.io https:\/\/*.quillfeed.com https:\/\/*.onetrust.com https:\/\/cdn.cookielaw.org https:\/\/*.sentry.io https:\/\/*.ingest.sentry.io https:\/\/js.sentry-cdn.com https:\/\/*.cloudflare.com https:\/\/*.cloudflareinsights.com https:\/\/*.kinsta.cloud https:\/\/*.kinsta.com https:\/\/info.uplandsoftware.com https:\/\/*.clickcease.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/px4.ads.linkedin.com https:\/\/dc.ads.linkedin.com https:\/\/p.adsymptotic.com https:\/\/cdn.linkedin.oribi.io https:\/\/gw.linkedin.oribi.io https:\/\/sjs.bizographics.com https:\/\/*.ingest.us.sentry.io; frame-src 'self' https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/*.marketo.com https:\/\/*.mktoresp.com https:\/\/app-sjqe.marketo.com https:\/\/*.wistia.com https:\/\/*.wistia.net https:\/\/fast.wistia.com https:\/\/*.qualified.com https:\/\/*.qualified.io https:\/\/*.quillfeed.com https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/*.facebook.com https:\/\/info.uplandsoftware.com https:\/\/lottie.host https:\/\/*.secondstreetapp.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/upland.kapost.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:\/\/*.marketo.com https:\/\/*.mktoresp.com https:\/\/app-sjqe.marketo.com https:\/\/*.marketo.com https:\/\/*.mktoresp.com; worker-src 'self' blob:; manifest-src 'self'; media-src 'self' blob: https:\/\/*.wistia.com; report-uri https:\/\/o4507374201733120.ingest.us.sentry.io\/api\/4507431745945600\/security\/?sentry_key=b633ac4793a1242f8c1bffa453adde4c; report-to csp-endpoint","count":4},{"content-security-policy-report-only":" default-src 'self'; connect-src 'none'; script-src-elem https:\/\/sdk.privacy-center.org https:\/\/www.googletagmanager.com; style-src-elem https:\/\/cdn.jsdelivr.net; img-src 'self' https:\/\/assets-eu-01.kc-usercontent.com https:\/\/cdn-prod.ppg.com; report-to csp-endpoint","count":4},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' https:\/\/www.google-analytics.com https:\/\/brandcenter.flex.com; upgrade-insecure-requests;","count":4},{"content-security-policy-report-only":" default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:","count":4},{"content-security-policy-report-only":" default-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' http:\/\/localhost:8080 https:\/\/cms.dev.ecom.mueller.de https:\/\/cms.test.ecom.mueller.de https:\/\/cms.prod.ecom.mueller.de;","count":4},{"content-security-policy-report-only":" img-src https: data: blob:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline';","count":4},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/help.libyanspider.com; script-src-attr 'none'; style-src 'self'; img-src 'self' data: https:\/\/secure.gravatar.com; font-src 'self' data:; connect-src 'self'; frame-src 'self'; worker-src 'self' blob:; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/my.libyanspider.com; frame-ancestors 'self'; upgrade-insecure-requests","count":4},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net https:\/\/static.iadvize.com\/ https:\/\/media.flixfacts.com *.fontawesome.com applepay.cdn-apple.com https:\/\/fonts.gstatic.com *.alothemes.com *.magepow.com googlepay.cdn-google.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com https:\/\/www.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com https:\/\/static.addtoany.com https:\/\/www.google.com\/ https:\/\/service.loadbee.com\/ https:\/\/vars.hotjar.com\/ https:\/\/static.rolex.com\/ https:\/\/retailers.rolex.com\/ https:\/\/media.flixfacts.com *.webengage.co https:\/\/corners.rolex.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net https:\/\/static.iadvize.com\/ https:\/\/fstatic.iadvize.com\/ https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.google.co.in https:\/\/googleads.g.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/media.flixfacts.com https:\/\/m.media-amazon.com https:\/\/www.darwishholding.com\/ https:\/\/theqa.qa metrics.rolex.com maps.googleapis.com smetrics.rolex.com *.disqus.com *.alothemes.com *.magepow.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https:\/\/rum.hlx.page eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com https:\/\/cobrowsing-ha.iadvize.com\/ https:\/\/fstatic.iadvize.com\/ https:\/\/static.iadvize.com\/ https:\/\/halc.iadvize.com https:\/\/api.iadvize.com\/ https:\/\/static.addtoany.com https:\/\/www.google.com https:\/\/js-agent.newrelic.com https:\/\/bam.nr-data.net https:\/\/graph.facebook.com https:\/\/widgets.pinterest.com https:\/\/cdn.loadbee.com\/js\/loadbee_integration.js https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/static.rolex.com https:\/\/retailers.rolex.com http:\/\/media.flixfacts.com https:\/\/test-gateway.mastercard.com https:\/\/ap-gateway.mastercard.com\/ https:\/\/starpay-easy.starboss.biz\/ https:\/\/www.qpay.gov.qa\/ https:\/\/m.media-amazon.com https:\/\/connect.facebook.net https:\/\/analytics.tiktok.com\/ *.webengage.com applepay.cdn-apple.com https:\/\/corners.rolex.com maps.googleapis.com *.disqus.com *.alothemes.com *.magepow.com googlepay.cdn-google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com cdn.ampproject.org www.gstatic.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/halc.iadvize.com\/ https:\/\/static.iadvize.com\/ https:\/\/media.flixfacts.com https:\/\/test-gateway.mastercard.com https:\/\/ap-gateway.mastercard.com\/ https:\/\/starpay-easy.starboss.biz\/ https:\/\/www.qpay.gov.qa\/ *.fontawesome.com *.googleapis.com *.addtoany.com *.alothemes.com *.magepow.com assets.braintreegateway.com www.gstatic.com maxcdn.bootstrapcdn.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https:\/\/m.media-amazon.com https:\/\/media.flixfacts.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https:\/\/cobrowsing-ha.iadvize.com\/ https:\/\/halc.iadvize.com https:\/\/api.iadvize.com\/ https:\/\/static.iadvize.com\/ https:\/\/stats.g.doubleclick.net https:\/\/bam.nr-data.net https:\/\/availability.loadbee.com https:\/\/analytics.google.com https:\/\/in.hotjar.com https:\/\/vc.hotjar.io https:\/\/static.rolex.com https:\/\/retailers.rolex.com https:\/\/static.addtoany.com https:\/\/media.flixfacts.com https:\/\/stats.addtoany.com https:\/\/m.media-amazon.com c.webengage.com assets.adobedtm.com maps.googleapis.com http:\/\/dpm.demdex.net *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com cdn.ampproject.org *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":4},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/ajax.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com https:\/\/googleads.g.doubleclick.net https:\/\/accounts.google.com https:\/\/maps.googleapis.com https:\/\/connect.facebook.net https:\/\/analytics.tiktok.com https:\/\/s.pinimg.com https:\/\/ct.pinterest.com https:\/\/pixel.byspotify.com https:\/\/bat.bing.com https:\/\/*.criteo.com https:\/\/*.criteo.net https:\/\/js.stripe.com https:\/\/www.paypal.com https:\/\/js.braintreegateway.com https:\/\/static-na.payments-amazon.com https:\/\/cdn1.affirm.com https:\/\/sdk.helloextend.com https:\/\/appleid.cdn-apple.com https:\/\/widget.intercom.io https:\/\/js.intercomcdn.com https:\/\/www.roomvo.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/p.typekit.net https:\/\/accounts.google.com; img-src 'self' data: https:; font-src 'self' data: https:\/\/assets.rugimg.com https:\/\/fonts.gstatic.com https:\/\/p.typekit.net; frame-src https:\/\/player.vimeo.com https:\/\/www.youtube.com https:\/\/showroom.aftermkt.com https:\/\/account.rugs.com https:\/\/www.emjcd.com https:\/\/www.google.com https:\/\/accounts.google.com https:\/\/www.facebook.com https:\/\/ct.pinterest.com https:\/\/*.criteo.com https:\/\/*.criteo.net https:\/\/js.stripe.com https:\/\/www.paypal.com https:\/\/static-na.payments-amazon.com https:\/\/www.roomvo.com; connect-src 'self' https: https:\/\/chat.rugimg.com wss:\/\/chat.rugimg.com; media-src 'self' https:\/\/assets.rugimg.com; worker-src 'self' blob:","count":4},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.segment.com *.googletagmanager.com *.google-analytics.com js.appboycdn.com cdn.mouseflow.com; connect-src 'self' *.segment.com *.segment.io graphql.contentful.com *.ninetailed.co *.launchdarkly.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.vimeo.com *.vimeocdn.com *.braze.com *.one.app cdn.mouseflow.com *.app.link; img-src 'self' data: blob: *.ctfassets.net *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.vimeocdn.com; style-src 'self' 'unsafe-inline' use.fontawesome.com; font-src 'self' data: use.fontawesome.com; frame-src 'self' *.youtube.com *.youtube-nocookie.com *.vimeo.com *.ninetailed.io; media-src 'self' blob: data: *.ctfassets.net *.vimeo.com *.vimeocdn.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri https:\/\/csp-report.browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub4ebf0f2c2b22f7e232e33c048c5f3d2b&dd-evp-origin=content-security-policy&env=prod&ddsource=csp-report&ddtags=service:marketing-web","count":4},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval' blob: data: https:\/\/googleads.g.doubleclick.net\/pagead\/viewthroughconversion\/ https:\/\/translate.google.com\/translate_a\/element.js https:\/\/www.youtube.com\/iframe_api https:\/\/www.googletagmanager.com\/gtag\/js https:\/\/www.google-analytics.com\/analytics.js https:\/\/www.googletagmanager.com\/gtag\/destination https:\/\/www.gstatic.com\/_\/mss\/boq-one-google\/_\/ https:\/\/www.gstatic.com\/og\/_\/js\/ https:\/\/apis.google.com\/js\/api.js https:\/\/apis.google.com\/js\/client.js https:\/\/www.google.com\/tools\/feedback\/chat_load.js https:\/\/www.google.com\/tools\/feedback\/help_api.js https:\/\/www.google.com\/tools\/feedback\/load.js https:\/\/www.google.com\/tools\/feedback\/open.js https:\/\/www.google.com\/tools\/feedback\/open_to_help_guide_lazy.js https:\/\/www.gstatic.com\/feedback\/js\/ https:\/\/www.gstatic.com\/feedback\/js\/help\/prod\/service\/lazy.min.js https:\/\/www.gstatic.com\/inproduct_help\/api\/main.min.js https:\/\/www.gstatic.com\/inproduct_help\/chatsupport\/chatsupport_button_v2.js https:\/\/www.gstatic.com\/inproduct_help\/service\/lazy.min.js https:\/\/www.gstatic.com\/uservoice\/feedback\/client\/web\/live\/ https:\/\/www.gstatic.com\/uservoice\/surveys\/resources\/prod\/js\/survey\/ https:\/\/www.gstatic.com\/_\/mss\/boq-chrome-webstore\/_\/js\/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.6Itnhulhg-s.2018.O\/ https:\/\/apis.google.com\/_\/scs\/abc-static\/_\/js\/ https:\/\/www.youtube.com\/s\/player\/ https:\/\/translate.googleapis.com\/_\/translate_http\/_\/js\/;report-uri \/_\/ChromeWebStoreConsumerFeUi\/cspreport\/fine-allowlist","count":4},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline'   https:\/\/view.ceros.com   https:\/\/assets.investisdigital.com   https:\/\/*.hsforms.net   https:\/\/*.screen9.com   https:\/\/maps.googleapis.com   https:\/\/www.google.com   https:\/\/www.gstatic.com   https:\/\/www.googletagmanager.com   https:\/\/www.google-analytics.com   https:\/\/cdn.cookielaw.org; style-src 'self' 'unsafe-inline'   https:\/\/assets.investisdigital.com   https:\/\/*.screen9.com   https:\/\/fonts.googleapis.com   https:\/\/maps.googleapis.com   https:\/\/cdn.cookielaw.org; img-src 'self' data: blob:   https:\/\/edit.skanska.com   https:\/\/maps.gstatic.com   https:\/\/maps.googleapis.com   https:\/\/*.google-analytics.com   https:\/\/*.hsforms.net   https:\/\/*.hsforms.com   https:\/\/*.screen9.com   https:\/\/googleads.g.doubleclick.net   https:\/\/www.googleadservices.com   https:\/\/www.facebook.com   https:\/\/cdn.cookielaw.org; font-src 'self'   https:\/\/fonts.gstatic.com   https:\/\/assets.investisdigital.com   https:\/\/cdn.cookielaw.org; connect-src 'self'   https:\/\/*.hsforms.com   https:\/\/forms.hscollectedforms.net   https:\/\/hubspot-forms-static-embed.s3.amazonaws.com   https:\/\/assets.investisdigital.com   https:\/\/*.screen9.com   https:\/\/view.ceros.com   https:\/\/*.google-analytics.com   https:\/\/analytics.google.com   https:\/\/maps.googleapis.com   https:\/\/cdn.cookielaw.org   https:\/\/geolocation.onetrust.com; frame-src   https:\/\/view.ceros.com   https:\/\/*.hsforms.net   https:\/\/*.hsforms.com   https:\/\/www.google.com   https:\/\/td.doubleclick.net   https:\/\/googleads.g.doubleclick.net   https:\/\/www.googletagmanager.com   https:\/\/jobylon.com   https:\/\/*.jobylon.com   https:\/\/airtools-skanska.prod-mid-euw3.investis.com   https:\/\/*.screen9.com; media-src 'self'   https:\/\/*.screen9.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/*.hsforms.com; frame-ancestors 'self' https:\/\/edit.skanska.com;","count":4},{"content-security-policy-report-only":" default-src * data: blob: 'unsafe-inline' 'unsafe-eval';","count":4},{"content-security-policy-report-only":" default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; script-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: data: blob: wss:; media-src 'self' https: data: blob:; frame-src 'self' https: data: blob:; child-src 'self' https: data: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' https:; report-uri https:\/\/o1089883.ingest.us.sentry.io\/api\/4511026110398464\/security\/?sentry_key=aae109d819521ff1a232f8558352fe71","count":4},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com fonts.googleapis.com *.fontawesome.com data: https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com https:\/\/*.sovendus.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.adyen.com js.mollie.com https:\/\/vars.hotjar.com https:\/\/www.pinterest.fr https:\/\/www.pinterest.com https:\/\/www.google.com https:\/\/*.sovendus.com https:\/\/www.sovendus-benefits.com https:\/\/www.sovendus-campaign.com https:\/\/www.sovendus-connect.com https:\/\/www.sovendus-network.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.adyen.com *.bird.eu a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.openstreetmap.org maps.googleapis.com maps.gstatic.com https:\/\/cdn.flbx.io magefan.com cm.magefan.com https:\/\/www.mollie.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.google.fr *.ggpht.com *.googleapis.com https:\/\/maps.gstatic.com https:\/\/log.pinterest.com *.mondialtissus.fr *.mondialtissus.de *.mondialtissus.es *.mondialtissus.it *.mondialtissus.nl *.mondialtissus.se data: https:\/\/*.sovendus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https:\/\/www.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https:\/\/cdn.flbx.io *.getflowbox.com http:\/\/connect.getflowbox.com js.mollie.com https:\/\/sdk.privacy-center.org https:\/\/www.google-analytics.com https:\/\/www.analytics.google.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/wwww.paypalobjects.com https:\/\/s.ytimg.com https:\/\/maps.googleapis.com https:\/\/www.gstatic.com\/recaptcha https:\/\/js.mollie.com https:\/\/france.mondialtissus.fr https:\/\/cdnjs.cloudflare.com https:\/\/assets.pinterest.com https:\/\/static.zdassets.com https:\/\/ekr.zdassets.com https:\/\/apis.google.com https:\/\/mondialtissus.zendesk.com https:\/\/admin.mondialtissus.fr 'unsafe-inline' https:\/\/*.sovendus.com https:\/\/cdn.jsdelivr.net https:\/\/static-sb.com https:\/\/social-sb.com \thttps:\/\/cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https:\/\/fonts.googleapis.com 'unsafe-inline' https:\/\/*.sovendus.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adyen.com *.algolia.net https:\/\/*.algolia.net *.algolianet.com *.insights.algolia.io insights.algolia.io maps.googleapis.com https:\/\/*.amazonaws.com https:\/\/cdn.flbx.io https:\/\/connect.getflowbox.com http:\/\/connect.getflowbox.com https:\/\/www.google-analytics.com *.hotjar.com https:\/\/ekr.zdassets.com https:\/\/maps.googleapis.com https:\/\/mondialtissus.zendesk.com https:\/\/a.getflowbox.com https:\/\/*.sovendus.com https:\/\/www.sovendus-benefits.com https:\/\/www.sovendus-campaign.com https:\/\/www.sovendus-connect.com https:\/\/www.sovendus-network.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri https:\/\/d6tizftlrpuof.cloudfront.net 'self' 'unsafe-inline';","count":4},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/www.webfx.com 'unsafe-inline' 'unsafe-eval' https:\/\/*.google.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/googleads.g.doubleclick.net https:\/\/www.gstatic.com https:\/\/maps.googleapis.com https:\/\/www.youtube.com https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/bat.bing.com https:\/\/www.clarity.ms https:\/\/scripts.clarity.ms https:\/\/cdn.segment.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/loader.nutshell.com https:\/\/static.nlcdn.com https:\/\/x.clearbitjs.com https:\/\/reveal.clearbit.com https:\/\/tag.clearbitscripts.com https:\/\/cdn.madkudu.com https:\/\/js.adsrvr.org https:\/\/www.clickcease.com https:\/\/cdn.speedcurve.com https:\/\/d1b3llzbo1rqxo.cloudfront.net https:\/\/agent.marketingcloudfx.com https:\/\/cdn.leadmanagerfx.com https:\/\/www.leadmanagerfx.com https:\/\/assets.calendly.com https:\/\/fast.wistia.com https:\/\/fast.wistia.net https:\/\/platform.twitter.com https:\/\/platform.x.com https:\/\/www.instagram.com https:\/\/analytics.tiktok.com https:\/\/www.tiktok.com https:\/\/sf16-website-login.neutral.ttwstatic.com https:\/\/*.tiktokcdn-us.com https:\/\/client-registry.mutinycdn.com https:\/\/widget.clutch.co https:\/\/webfx.chilipiper.com https:\/\/challenges.cloudflare.com https:\/\/performance.radar.cloudflare.com https:\/\/widget.intercom.io https:\/\/a.omappapi.com https:\/\/js.hull.io https:\/\/cdn.datatables.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com https:\/\/embed.reddit.com; style-src 'self' 'unsafe-inline' https:\/\/calendly.com https:\/\/assets.calendly.com https:\/\/sf16-website-login.neutral.ttwstatic.com https:\/\/*.tiktokcdn-us.com https:\/\/fonts.googleapis.com https:\/\/www.gstatic.com https:\/\/cdn.datatables.net; img-src 'self' data: blob: https:\/\/www.googletagmanager.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/fonts.gstatic.com https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/c.bing.com https:\/\/*.clarity.ms https:\/\/px.ads.linkedin.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/s.w.org https:\/\/secure.gravatar.com https:\/\/fast.wistia.com https:\/\/embed-ssl.wistia.com https:\/\/syndication.twitter.com https:\/\/s3.amazonaws.com https:\/\/www.seo.com https:\/\/image.thum.io https:\/\/stats.g.doubleclick.net https:\/\/*.ytimg.com https:\/\/*.youtube.com https:\/\/fast.wistia.net https:\/\/useruploads.vwo.io https:\/\/i2.wp.com https:\/\/*.google.com https:\/\/*.google.ad https:\/\/*.google.ae https:\/\/*.google.com.af https:\/\/*.google.com.ag https:\/\/*.google.al https:\/\/*.google.am https:\/\/*.google.co.ao https:\/\/*.google.com.ar https:\/\/*.google.as https:\/\/*.google.at https:\/\/*.google.com.au https:\/\/*.google.az https:\/\/*.google.ba https:\/\/*.google.com.bd https:\/\/*.google.be https:\/\/*.google.bf https:\/\/*.google.bg https:\/\/*.google.com.bh https:\/\/*.google.bi https:\/\/*.google.bj https:\/\/*.google.com.bn https:\/\/*.google.com.bo https:\/\/*.google.com.br https:\/\/*.google.bs https:\/\/*.google.bt https:\/\/*.google.co.bw https:\/\/*.google.by https:\/\/*.google.com.bz https:\/\/*.google.ca https:\/\/*.google.cd https:\/\/*.google.cf https:\/\/*.google.cg https:\/\/*.google.ch https:\/\/*.google.ci https:\/\/*.google.co.ck https:\/\/*.google.cl https:\/\/*.google.cm https:\/\/*.google.cn https:\/\/*.google.com.co https:\/\/*.google.co.cr https:\/\/*.google.com.cu https:\/\/*.google.cv https:\/\/*.google.com.cy https:\/\/*.google.cz https:\/\/*.google.de https:\/\/*.google.dj https:\/\/*.google.dk https:\/\/*.google.dm https:\/\/*.google.com.do https:\/\/*.google.dz https:\/\/*.google.com.ec https:\/\/*.google.ee https:\/\/*.google.com.eg https:\/\/*.google.es https:\/\/*.google.com.et https:\/\/*.google.fi https:\/\/*.google.com.fj https:\/\/*.google.fm https:\/\/*.google.fr https:\/\/*.google.ga https:\/\/*.google.ge https:\/\/*.google.gg https:\/\/*.google.com.gh https:\/\/*.google.com.gi https:\/\/*.google.gl https:\/\/*.google.gm https:\/\/*.google.gr https:\/\/*.google.com.gt https:\/\/*.google.gy https:\/\/*.google.com.hk https:\/\/*.google.hn https:\/\/*.google.hr https:\/\/*.google.ht https:\/\/*.google.hu https:\/\/*.google.co.id https:\/\/*.google.ie https:\/\/*.google.co.il https:\/\/*.google.im https:\/\/*.google.co.in https:\/\/*.google.iq https:\/\/*.google.is https:\/\/*.google.it https:\/\/*.google.je https:\/\/*.google.com.jm https:\/\/*.google.jo https:\/\/*.google.co.jp https:\/\/*.google.co.ke https:\/\/*.google.com.kh https:\/\/*.google.ki https:\/\/*.google.kg https:\/\/*.google.co.kr https:\/\/*.google.com.kw https:\/\/*.google.kz https:\/\/*.google.la https:\/\/*.google.com.lb https:\/\/*.google.li https:\/\/*.google.lk https:\/\/*.google.co.ls https:\/\/*.google.lt https:\/\/*.google.lu https:\/\/*.google.lv https:\/\/*.google.com.ly https:\/\/*.google.co.ma https:\/\/*.google.md https:\/\/*.google.me https:\/\/*.google.mg https:\/\/*.google.mk https:\/\/*.google.ml https:\/\/*.google.com.mm https:\/\/*.google.mn https:\/\/*.google.com.mt https:\/\/*.google.mu https:\/\/*.google.mv https:\/\/*.google.mw https:\/\/*.google.com.mx https:\/\/*.google.com.my https:\/\/*.google.co.mz https:\/\/*.google.com.na https:\/\/*.google.com.ng https:\/\/*.google.com.ni https:\/\/*.google.ne https:\/\/*.google.nl https:\/\/*.google.no https:\/\/*.google.com.np https:\/\/*.google.nr https:\/\/*.google.nu https:\/\/*.google.co.nz https:\/\/*.google.com.om https:\/\/*.google.com.pa https:\/\/*.google.com.pe https:\/\/*.google.com.pg https:\/\/*.google.com.ph https:\/\/*.google.com.pk https:\/\/*.google.pl https:\/\/*.google.pn https:\/\/*.google.com.pr https:\/\/*.google.ps https:\/\/*.google.pt https:\/\/*.google.com.py https:\/\/*.google.com.qa https:\/\/*.google.ro https:\/\/*.google.ru https:\/\/*.google.rw https:\/\/*.google.com.sa https:\/\/*.google.com.sb https:\/\/*.google.sc https:\/\/*.google.se https:\/\/*.google.com.sg https:\/\/*.google.sh https:\/\/*.google.si https:\/\/*.google.sk https:\/\/*.google.com.sl https:\/\/*.google.sn https:\/\/*.google.so https:\/\/*.google.sm https:\/\/*.google.sr https:\/\/*.google.st https:\/\/*.google.com.sv https:\/\/*.google.td https:\/\/*.google.tg https:\/\/*.google.co.th https:\/\/*.google.com.tj https:\/\/*.google.tl https:\/\/*.google.tm https:\/\/*.google.tn https:\/\/*.google.to https:\/\/*.google.com.tr https:\/\/*.google.tt https:\/\/*.google.com.tw https:\/\/*.google.co.tz https:\/\/*.google.com.ua https:\/\/*.google.co.ug https:\/\/*.google.co.uk https:\/\/*.google.com.uy https:\/\/*.google.co.uz https:\/\/*.google.com.vc https:\/\/*.google.co.ve https:\/\/*.google.co.vi https:\/\/*.google.com.vn https:\/\/*.google.vu https:\/\/*.google.ws https:\/\/*.google.rs https:\/\/*.google.co.za https:\/\/*.google.co.zm https:\/\/*.google.co.zw https:\/\/*.google.cat; font-src 'self' data: https:\/\/fast.wistia.com https:\/\/fast.wistia.net https:\/\/fonts.gstatic.com; connect-src 'self' data: https:\/\/o4509242520240129.ingest.us.sentry.io https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/ad.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com https:\/\/maps.googleapis.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/*.clarity.ms https:\/\/px.ads.linkedin.com https:\/\/www.facebook.com https:\/\/t.marketingcloudfx.com https:\/\/cdn.leadmanagerfx.com https:\/\/tools.api.webfx.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/cdn.segment.com https:\/\/api.segment.io https:\/\/app.clearbit.com https:\/\/reveal.clearbit.com https:\/\/api.madkudu.com https:\/\/app.nutshell.com https:\/\/d1ae0zx28z2bae.cloudfront.net https:\/\/dcn1xzn2gj31y.cloudfront.net https:\/\/insight.adsrvr.org https:\/\/monitor.clickcease.com https:\/\/*.wistia.com https:\/\/fast.wistia.net https:\/\/*.litix.io https:\/\/analytics.tiktok.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/www.tiktok.com https:\/\/*.google.com https:\/\/*.google.ad https:\/\/*.google.ae https:\/\/*.google.com.af https:\/\/*.google.com.ag https:\/\/*.google.al https:\/\/*.google.am https:\/\/*.google.co.ao https:\/\/*.google.com.ar https:\/\/*.google.as https:\/\/*.google.at https:\/\/*.google.com.au https:\/\/*.google.az https:\/\/*.google.ba https:\/\/*.google.com.bd https:\/\/*.google.be https:\/\/*.google.bf https:\/\/*.google.bg https:\/\/*.google.com.bh https:\/\/*.google.bi https:\/\/*.google.bj https:\/\/*.google.com.bn https:\/\/*.google.com.bo https:\/\/*.google.com.br https:\/\/*.google.bs https:\/\/*.google.bt https:\/\/*.google.co.bw https:\/\/*.google.by https:\/\/*.google.com.bz https:\/\/*.google.ca https:\/\/*.google.cd https:\/\/*.google.cf https:\/\/*.google.cg https:\/\/*.google.ch https:\/\/*.google.ci https:\/\/*.google.co.ck https:\/\/*.google.cl https:\/\/*.google.cm https:\/\/*.google.cn https:\/\/*.google.com.co https:\/\/*.google.co.cr https:\/\/*.google.com.cu https:\/\/*.google.cv https:\/\/*.google.com.cy https:\/\/*.google.cz https:\/\/*.google.de https:\/\/*.google.dj https:\/\/*.google.dk https:\/\/*.google.dm https:\/\/*.google.com.do https:\/\/*.google.dz https:\/\/*.google.com.ec https:\/\/*.google.ee https:\/\/*.google.com.eg https:\/\/*.google.es https:\/\/*.google.com.et https:\/\/*.google.fi https:\/\/*.google.com.fj https:\/\/*.google.fm https:\/\/*.google.fr https:\/\/*.google.ga https:\/\/*.google.ge https:\/\/*.google.gg https:\/\/*.google.com.gh https:\/\/*.google.com.gi https:\/\/*.google.gl https:\/\/*.google.gm https:\/\/*.google.gr https:\/\/*.google.com.gt https:\/\/*.google.gy https:\/\/*.google.com.hk https:\/\/*.google.hn https:\/\/*.google.hr https:\/\/*.google.ht https:\/\/*.google.hu https:\/\/*.google.co.id https:\/\/*.google.ie https:\/\/*.google.co.il https:\/\/*.google.im https:\/\/*.google.co.in https:\/\/*.google.iq https:\/\/*.google.is https:\/\/*.google.it https:\/\/*.google.je https:\/\/*.google.com.jm https:\/\/*.google.jo https:\/\/*.google.co.jp https:\/\/*.google.co.ke https:\/\/*.google.com.kh https:\/\/*.google.ki https:\/\/*.google.kg https:\/\/*.google.co.kr https:\/\/*.google.com.kw https:\/\/*.google.kz https:\/\/*.google.la https:\/\/*.google.com.lb https:\/\/*.google.li https:\/\/*.google.lk https:\/\/*.google.co.ls https:\/\/*.google.lt https:\/\/*.google.lu https:\/\/*.google.lv https:\/\/*.google.com.ly https:\/\/*.google.co.ma https:\/\/*.google.md https:\/\/*.google.me https:\/\/*.google.mg https:\/\/*.google.mk https:\/\/*.google.ml https:\/\/*.google.com.mm https:\/\/*.google.mn https:\/\/*.google.com.mt https:\/\/*.google.mu https:\/\/*.google.mv https:\/\/*.google.mw https:\/\/*.google.com.mx https:\/\/*.google.com.my https:\/\/*.google.co.mz https:\/\/*.google.com.na https:\/\/*.google.com.ng https:\/\/*.google.com.ni https:\/\/*.google.ne https:\/\/*.google.nl https:\/\/*.google.no https:\/\/*.google.com.np https:\/\/*.google.nr https:\/\/*.google.nu https:\/\/*.google.co.nz https:\/\/*.google.com.om https:\/\/*.google.com.pa https:\/\/*.google.com.pe https:\/\/*.google.com.pg https:\/\/*.google.com.ph https:\/\/*.google.com.pk https:\/\/*.google.pl https:\/\/*.google.pn https:\/\/*.google.com.pr https:\/\/*.google.ps https:\/\/*.google.pt https:\/\/*.google.com.py https:\/\/*.google.com.qa https:\/\/*.google.ro https:\/\/*.google.ru https:\/\/*.google.rw https:\/\/*.google.com.sa https:\/\/*.google.com.sb https:\/\/*.google.sc https:\/\/*.google.se https:\/\/*.google.com.sg https:\/\/*.google.sh https:\/\/*.google.si https:\/\/*.google.sk https:\/\/*.google.com.sl https:\/\/*.google.sn https:\/\/*.google.so https:\/\/*.google.sm https:\/\/*.google.sr https:\/\/*.google.st https:\/\/*.google.com.sv https:\/\/*.google.td https:\/\/*.google.tg https:\/\/*.google.co.th https:\/\/*.google.com.tj https:\/\/*.google.tl https:\/\/*.google.tm https:\/\/*.google.tn https:\/\/*.google.to https:\/\/*.google.com.tr https:\/\/*.google.tt https:\/\/*.google.com.tw https:\/\/*.google.co.tz https:\/\/*.google.com.ua https:\/\/*.google.co.ug https:\/\/*.google.co.uk https:\/\/*.google.com.uy https:\/\/*.google.co.uz https:\/\/*.google.com.vc https:\/\/*.google.co.ve https:\/\/*.google.co.vi https:\/\/*.google.com.vn https:\/\/*.google.vu https:\/\/*.google.ws https:\/\/*.google.rs https:\/\/*.google.co.za https:\/\/*.google.co.zm https:\/\/*.google.co.zw https:\/\/*.google.cat; frame-src 'self' https:\/\/*.google.com https:\/\/google.com https:\/\/www.googletagmanager.com https:\/\/googleads.g.doubleclick.net https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/datawrapper.dwcdn.net https:\/\/form.jotform.com https:\/\/insight.adsrvr.org https:\/\/match.adsrvr.org https:\/\/www.facebook.com https:\/\/m.facebook.com https:\/\/platform.twitter.com https:\/\/platform.x.com https:\/\/www.instagram.com https:\/\/www.tiktok.com https:\/\/fast.wistia.com https:\/\/fast.wistia.net https:\/\/widget.clutch.co https:\/\/challenges.cloudflare.com https:\/\/embed.reddit.com; media-src 'self' blob: data: https:\/\/*.wistia.com https:\/\/fast.wistia.net https:\/\/embed-ssl.wistia.com https:\/\/embedwistia-a.akamaihd.net; worker-src 'self' blob:; child-src 'self' blob:; object-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:\/\/www.facebook.com https:\/\/webfx.com; manifest-src 'self'; report-uri https:\/\/o4509242520240129.ingest.us.sentry.io\/api\/4511672104386560\/security\/?sentry_key=439be7fd3bb36628cd79c8ef2c6abe64; report-to csp-endpoint; upgrade-insecure-requests","count":4},{"content-security-policy-report-only":" script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https:\/\/csp.withgoogle.com\/csp\/scaffolding\/ntdsgswbsc:55:0","count":4},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' https:\/\/www.google-analytics.com https:\/\/engage.supporthost.com data: blob:; script-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/engage.supporthost.com; style-src 'self' https:\/\/fonts.googleapis.com 'unsafe-inline'; font-src 'self' https:\/\/fonts.gstatic.com data:; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/engage.supporthost.com; frame-src 'self' https:\/\/www.google.com https:\/\/www.youtube-nocookie.com https:\/\/engage.supporthost.com; worker-src 'self' blob:; media-src 'self'; upgrade-insecure-requests","count":4},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com https:\/\/cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.authorize.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.google.co.uk maps.googleapis.com ossineshoes.com *.ossineshoes.com ossinework.com *.ossinework.com shoeco.shoes *.shoeco.shoes modernshoe.com *.modernshoe.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google-analytics.com *.googletagmanager.com *.gstatic.com maps.googleapis.com cdn.datatables.net https:\/\/cdnjs.cloudflare.com *.authorize.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.fontawesome.com cdn.datatables.net stackpath.bootstrapcdn.com maxcdn.bootstrapcdn.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googletagmanager.com *.doubleclick.net maps.googleapis.com ossineshoes.com *.ossineshoes.com ossinework.com *.ossinework.com shoeco.shoes *.shoeco.shoes modernshoe.com *.modernshoe.com *.authorize.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/ossineshoes.com\/csp-report; report-to report-endpoint;","count":4},{"content-security-policy-report-only":" default-src 'self'; report-uri https:\/\/security-headers.gtfsd.com\/api\/csp-report; report-to csp-endpoint","count":4},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cse.google.com https:\/\/js.hsforms.net https:\/\/platform-api.sharethis.com https:\/\/rebilly.github.io https:\/\/unpkg.com https:\/\/use.fontawesome.com https:\/\/ws.sharethis.com https:\/\/www.google.com platform.instagram.com platform.twitter.com; script-src-attr 'self'; style-src 'self' https:\/\/cdn.jsdelivr.net https:\/\/use.fontawesome.com; style-src-attr 'self'; frame-ancestors 'self'","count":4},{"content-security-policy-report-only":" font-src *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com https:\/\/cdnjs.cloudflare.com https:\/\/widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.xtento.com *.awin1.com *.zenaps.com *.fls.doubleclick.net js.mollie.com *.weltpixel.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.googletagmanager.com js.stripe.com m.stripe.network www.facebook.com www.google.com tally.so 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.xtento.com cdn.xtento.com https:\/\/images.unsplash.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.bird.eu https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/www.mollie.com *.disqus.com https:\/\/img.youtube.com https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.gstatic.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.gstatic.com *.facebook.com www.burdastyle.fr www.facebook.com bat.bing.com *.burdastyle.fr *.burdastyle.com *.abo-online.fr *.burdastyle.es *.burdastyle.pt *.burdastyle.uk *.burdastyle.nl *.burdastyle.dk *.burdastyle.se *.burdastyle.pl *.faitmain-magazine.fr maps.googleapis.com www.google.fr data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ www.xtento.com cdn.xtento.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/cdn.jsdelivr.net\/npm\/@ryangjchandler\/spruce@2.x.x\/dist\/spruce.umd.js *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com lantern.roeyecdn.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ js.mollie.com *.disqus.com *.addthis.com https:\/\/z.moatads.com https:\/\/v1.addthisedge.com https:\/\/cdn.jsdelivr.net *.avada.io https:\/\/cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com https:\/\/www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com static.klaviyo.com connect.facebook.net *.googletagmanager.com bat.bing.com js.stripe.com m.stripe.network analytics.tiktok.com static.cloudflareinsights.com static-tracking.klaviyo.com www.google.com www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https:\/\/static.klaviyo.com https:\/\/cdn.jsdelivr.net *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com maps.googleapis.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site *.google-analytics.com *.facebook.net *.a.klaviyo.com static-forms.klaviyo.com bat.bing.com m.stripe.com www.google.com www.google.fr region1.analytics.google.co 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":4},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval' blob: data: https:\/\/meet.google.com\/_\/scs\/mss-static\/_\/js\/ https:\/\/www.google.com\/recaptcha\/enterprise.js https:\/\/www.gstatic.com\/hangouts_echo_detector\/release\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.gstatic.com\/video_effects\/effects\/ https:\/\/www.gstatic.com\/meetings_p2p\/ https:\/\/www-onepick-opensocial.googleusercontent.com\/gadgets\/js\/rpc.js https:\/\/www.gstatic.com\/_\/mss\/boq-one-google\/_\/ https:\/\/www.gstatic.com\/og\/_\/js\/ https:\/\/apis.google.com\/js\/api.js https:\/\/apis.google.com\/js\/client.js https:\/\/www.google.com\/tools\/feedback\/chat_load.js https:\/\/www.google.com\/tools\/feedback\/help_api.js https:\/\/www.google.com\/tools\/feedback\/load.js https:\/\/www.google.com\/tools\/feedback\/open.js https:\/\/www.google.com\/tools\/feedback\/open_to_help_guide_lazy.js https:\/\/www.gstatic.com\/feedback\/js\/ https:\/\/www.gstatic.com\/feedback\/js\/help\/prod\/service\/lazy.min.js https:\/\/www.gstatic.com\/inproduct_help\/api\/main.min.js https:\/\/www.gstatic.com\/inproduct_help\/chatsupport\/chatsupport_button_v2.js https:\/\/www.gstatic.com\/inproduct_help\/service\/lazy.min.js https:\/\/www.gstatic.com\/uservoice\/feedback\/client\/web\/live\/ https:\/\/www.gstatic.com\/uservoice\/surveys\/resources\/prod\/js\/survey\/ https:\/\/meet.google.com\/meetsw.js https:\/\/meet.google.com\/devicesw.js https:\/\/meet.google.com\/notrodsw.js https:\/\/www.googletagmanager.com\/gtag\/js https:\/\/www.google-analytics.com\/analytics.js https:\/\/www.googletagmanager.com\/gtag\/destination https:\/\/meet.google.com\/_\/scs\/mss-static\/_\/js\/k=boq-rtc.MeetingsUi.en_US.4rRs9ou_HQ4.2020.O\/ https:\/\/apis.google.com\/_\/scs\/abc-static\/_\/js\/ https:\/\/www.gstatic.com\/recaptcha\/releases\/;report-uri \/_\/MeetingsUi\/cspreport\/fine-allowlist","count":4},{"content-security-policy-report-only":" default-src https:","count":4},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com *.facebook.com webchat.jdg.co.za *.jdg.co.za map.pargo.co.za 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'unsafe-inline' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com https:\/\/widgets.payflex.co.za oppwa.com *.oppwa.com *.peachpayments.com *.eu-west-1.amazonaws.com *.cloudflare.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.facebook.com *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za amcglobal.sc.omtrdc.net media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; style-src fonts.googleapis.com https:\/\/static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com https:\/\/widgets.payflex.co.za oppwa.com *.oppwa.com *.peachpayments.com *.cloudflare.com *.googleapis.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: https:\/\/statsjs.klevu.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; connect-src http:\/\/www.rookieusa.co.za\/ www.worldtimeapi.org geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/*.ingest.sentry.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com oppwa.com *.oppwa.com *.peachpayments.com *.testfreaks.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss:\/\/*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.nr-data.net *.what3words.com *.googleapis.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss:\/\/widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: 'self' 'unsafe-inline'; script-src www.worldtimeapi.org geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/browser.sentry-cdn.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com https:\/\/widgets.payflex.co.za https:\/\/partpayassets.blob.core.windows.net *.oppwa.com oppwa.com *.peachpayments.com worldtimeapi.org *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.newrelic.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.nr-data.net *.facebook.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network https:\/\/js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval';","count":4},{"content-security-policy-report-only":" font-src * data:;img-src * data:;frame-src\t'self'    *.sevenrooms.com    *.doubleclick.net     *.smartrecruiters.com     *.adyen.com     *.pinterest.com    *.googleadservices.com    *.google.com\t*.googletagmanager.com\t*.cardinalcommerce.com\tsevenrooms.com\t*.americanexpress.com\t*.securesuite.co.uk\tsecure7.arcot.com\t*.rsa3dsauth.co.uk\tmycardsecure.com\twww.mycardsecure.com\tdupe.com\t*.opentable.com.au;script-src    'self'\t*.curator.io \t*.google-analytics.com \t*.googletagmanager.com\t*.google.com\t*.licdn.com \t*.clarity.ms\t*.gstatic.com\t*.facebook.net\t*.pinimg.com\t*.smartrecruiters.com\t*.hotjar.com\tcdn-cookieyes.com    'unsafe-eval'    'unsafe-inline'\tdata:;script-src-elem\t'self'\t'unsafe-inline' \t*.facebook.net\t*.licdn.com\t*.google.com\t*.googletagmanager.com\thttps:\/\/www.googletagmanager.com\t*.googleadservices.com\t*.google-analytics.com\t*.gstatic.com\t*.smartrecruiters.com\t*.curator.io\t*.clarity.ms\t*.pinimg.com\t*.hotjar.com\tcdn-cookieyes.com;style-src-elem    'self'\t*.honey.io\t*.google.com    *.curator.io\t*.smartrecruiters.com\t*.facebook.net\t*.clarity.ms    'unsafe-inline';connect-src\t'self'    *.facebook.com\t*.google.com\t*.google-analytics.com\t*.googleapis.com\tmelprdwebsite.azurewebsites.net\tcrownkentico-prd-as-csearch.search.windows.net\t*.pinterest.com\t*.doubleclick.net    *.curator.io\t*.clarity.ms\t*.linkedin.com\t*.datatoolscloud.net.au\t*.hotjar.io\t*.googleadservices.com\t*.googletagmanager.com \t*.adyen.com\t*.cookieyes.com\tcdn-cookieyes.com\tws:\/\/localhost:12387\twss:\/\/ws.hotjar.com\thttps:\/\/www.google.com\/\tdata:;report-uri \/api\/logs\/csp-report;report-to csp-endpoint;","count":4},{"content-security-policy-report-only":" default-src 'none'; script-src 'self' 'unsafe-inline' https:\/\/fpt.mandm.com https:\/\/cdn-ukwest.onetrust.com https:\/\/widget.trustpilot.com https:\/\/js.klarna.com https:\/\/api.crm.mandmdirect.com https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/cdn.jsdelivr.net https:\/\/static.ads-twitter.com https:\/\/bat.bing.com; style-src 'self' 'unsafe-inline' https:\/\/widget.trustpilot.com; img-src * data: blob:; connect-src * ws: wss:; font-src 'self' data: blob:; frame-src 'self' https:\/\/widget.trustpilot.com https:\/\/cdn-ukwest.onetrust.com; frame-ancestors 'none'; form-action 'self'; worker-src 'self' blob:;","count":4},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.klarnacdn.net *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.certcapture.com *.cloudflare.com *.klarna.com *.youtube.com\/ accounts.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com landofcoder.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.certcapture.com *.cloudflare.com *.google.com *.google.co.in assets.braintreegateway.com *.googleusercontent.com *.lightemporium.com static.zipmoney.com.au static.zip.co *.awsstatic.com *.cdn.com *.s3.amazonaws.com *.maps.googleapis.com *.twitter.com *.usercentrics.eu ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.googleadservices.com *.google-analytics.com *.twimg.com *.ytimg.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.facebook.com https:\/\/www.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com c.paypal.com checkout.paypal.com t.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.certcapture.com *.cloudflare.com js.braintreegateway.com  *.paypalobjects.com *.paypal.com https:\/\/portal.sandbox.afterpay.com https:\/\/portal.afterpay.com https:\/\/static.afterpay.com bpi.zip.co *.google-analytics.com chimpstatic.com downloads.mailchimp.com *.klarna.com *.klarnacdn.net *.klarnaservices.com *.stripe.com *.trustedshops.com *.fontawesome.com *.maps.googleapis.com *.maps.gstatic.com *.trackedlink.net 'unsafe-eval' *.list-manage.com *.twitter.com *.twimg.com *.gstatic.com *.usercentrics.eu maps.googleapis.com accounts.google.com *.googleapis.com *.sharethis.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com landofcoder.com static.zip.co zip.co https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.certcapture.com *.cloudflare.com *.fontawesome.com downloads.mailchimp.com *.klarnacdn.net *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com accounts.google.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app cdn.jsdelivr.net api.lab.amplitude.com *.certcapture.com *.cloudflare.com api.braintreegateway.com *.dpm.demdex.net *.amcglobal.sc.omtrdc.net *.geostag.cardinalcommerce.com *.geo.cardinalcommerce.com https:\/\/1eafstag.cardinalcommerce.com https:\/\/1eaf.cardinalcommerce.com https:\/\/centinelapistag.cardinalcommerce.com https:\/\/centinelapi.cardinalcommerce.com *.google-analytics.com *.googleadservices.com https:\/\/analytics.google.com https:\/\/www.googletagmanager.com https:\/\/*.newrelic.com https:\/\/*.nr-data.net https:\/\/vimeo.com https:\/\/www.sandbox.paypal.com https:\/\/www.paypalobjects.com https:\/\/www.paypal.com https:\/\/pilot-payflowlink.paypal.com https:\/\/*.adobe.io https:\/\/performance.typekit.net https:\/\/*.sentry.io https:\/\/*.afterpay.com https:\/\/hbiq.net https:\/\/iq.afterpay-beta.com https:\/\/iq.afterpay.com https:\/\/*.cash.app https:\/\/*.klarnaevt.com https:\/\/*.klarnacdn.net https:\/\/*.klarna.com https:\/\/*.klarnaservices.com *.twitter.com https:\/\/*.twimg.com https:\/\/*.trackedlink.net https:\/\/*.ampproject.org https:\/\/*.google.co.in *.maps.gstatic.com *.maps.googleapis.com https:\/\/api.sandbox.braintreegateway.com https:\/\/client-analytics.braintreegateway.com https:\/\/client-analytics.sandbox.braintreegateway.com https:\/\/*.braintree-api.com https:\/\/*.cardinalcommerce.com https:\/\/*.stripe.com https:\/\/landofcoder.com https:\/\/dpe0djwch8671.cloudfront.net *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com *.twimg.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.co.in maps.googleapis.com accounts.google.com *.sharethis.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.link.com *.amazon.com landofcoder.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":4},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com *.fontawesome.com data: 'self' data: https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https:\/\/pinterest.com https:\/\/www.pinterest.com appleid.apple.com *.cleverreach.com 'self' connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com *.hotjar.com secure.pay1.de\/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.cloudfront.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/api.mapbox.com cdn.pay1.de x.klarnacdn.net m.media-amazon.com static-eu.payments-amazon.com *.hsforms.net *.hsforms.com 'self' data: https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com widgets.trustedshops.com mcstagingmedia.carou.com mcprodmedia.carou.com *.google.com www.google.com.ua ct.pinterest.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.googleapis.com *.gstatic.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com widget.freshworks.com m2epro.freshdesk.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com *.hotjar.com unsafe-inline *.hsforms.net *.hsforms.com https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com widgets.trustedshops.com bam.nr-data.net js-agent.newrelic *.ratepay.com js-agent.newrelic.com s.pinimg.com analytics.tiktok.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com *.bootstrapcdn.com maxcdn.bootstrapcdn.com\/ *.ratepay.com\/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com widget.freshworks.com m2epro.freshdesk.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com autocomplete2.postdirekt.de t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com *.hotjar.com wss:\/\/*.hotjar.com\/ bam.nr-data.net www.carou.com stats.g.doubleclick.net vc.hotjar.io ct.pinterest.com analytics.tiktok.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":4},{"content-security-policy-report-only":" upgrade-insecure-requests;","count":4},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com maxcdn.bootstrapcdn.com https:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com\/recaptcha\/ www.facebook.com platform.twitter.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.curopayments.net *.google-analytics.com *.googleapis.com 'self' data: www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google-analytics.com *.googleapis.com *.gstatic.com *.google.com\/recaptcha\/ connect.facebook.net twitter.com platform.twitter.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com maxcdn.bootstrapcdn.com https:\/\/fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.homoactive.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com 'self' ws: 'self' wss: *.pay.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/www.homoactive.com\/paynl\/csp\/report; report-to report-endpoint;","count":4},{"content-security-policy-report-only":" script-src-elem *.bestheating.com *.bestheating.ie *.bigbathroomshop.co.uk *.bigbathroomshop.ie *.hudsonreed.com *.magedev.co.uk *.magedev2.co.uk *.magedev3.co.uk *.magedev4.co.uk *.magedev5.co.uk *.magedev6.co.uk *.magedev7.co.uk *.magestage.co.uk *.mageweb.co.uk *.localdev.com *.ldgdev.co.uk *.adalyser.com *.payments-amazon.com capi-automation.s3.us-east-2.amazonaws.com *.cdn-apple.com *.appzi.io capi-automation.s3.us-east-2.amazonaws.com *.billiger.de billiger.de *.bing.com *.bing.net js.braintreegateway.com *.braintreegateway.com *.cardinalcommerce.com *.cloudfront.net *.digitalbridgehq.com *.doubleclick.net *.equalweb.com www.facebook.com connect.facebook.net *.avocet.io avocet.io *.gstatic.com *.google.com *.google.co.uk www.googleadservices.com www.google-analytics.com *.googleapis.com *.googlecommerce.com *.googlesyndication.com www.googletagmanager.com *.jsdelivr.net *.fabric-analytics.com *.growthbook.io *.gb-ingest.com s.kk-resources.com *.klarna.com *.klarnacdn.net *.klaviyo.com *.klevu.com secure.cimg.leguide.com intentclientscriptslon.s3.eu-west-2.amazonaws.com *.clarity.ms js-agent.newrelic.com bam.nr-data.net *.onetrust.com www.paypalobjects.com *.paypal.com services.postcodeanywhere.co.uk trues11114.pcapredict.com s.pinimg.com ct.pinterest.com *.salesforce.com *.force.com *.salesforceliveagent.com ldg.my.site.com ldg.my.salesforce-scrt.com host sgtm-production-bestheating-staging-bfs7ffnbjq-nw.a.run.app *.solutenetwork.com *.trafficguard.ai *.trustpilot.com unpkg.com 'unsafe-inline' app.vwo.com *.visualwebsiteoptimizer.com *.webgains.io *.webgains.com; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klarnacdn.net *.klevu.com *.ksearchnet.com *.bestheating.com *.bestheating.ie *.bigbathroomshop.co.uk *.bigbathroomshop.ie *.hudsonreed.com *.magedev.co.uk *.magedev2.co.uk *.magedev3.co.uk *.magedev4.co.uk *.magedev5.co.uk *.magedev6.co.uk *.magedev7.co.uk *.magestage.co.uk *.mageweb.co.uk *.localdev.com *.ldgdev.co.uk w.appzi.io *.equalweb.com *.googleusercontent.com *.sirv.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/hpp.worldpay.com\/app\/hpp-iframe\/integration\/wpg\/corporate https:\/\/secure-test.worldpay.com\/shopper\/3ds\/ddc.html https:\/\/secure.worldpay.com\/shopper\/3ds\/ddc.html https:\/\/payments-test.worldpay.com\/app\/hpp-iframe\/integration\/wpg\/corporate https:\/\/payments-live.hpp.apps.eu-west-1-7z55k.dev.msp.worldpay.io\/app\/hpp-iframe\/integration\/wpg\/corporate https:\/\/payments.worldpay.com\/app\/hpp-iframe\/integration\/wpg\/corporate 'self' 'unsafe-inline'; frame-ancestors https:\/\/pay.google.com\/ 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https:\/\/payments-test.worldpay.com\/app\/hpp-iframe\/integration\/wpg\/corporate https:\/\/payments.worldpay.com\/app\/hpp-iframe\/integration\/wpg\/corporate https:\/\/payments-live.hpp.apps.eu-west-1-7z55k.dev.msp.worldpay.io\/app\/hpp-iframe\/integration\/wpg\/corporate https:\/\/pay.google.com https:\/\/secure-test.worldpay.com https:\/\/hpp.worldpay.com\/ *.bestheating.com *.bestheating.ie *.bigbathroomshop.co.uk *.bigbathroomshop.ie *.hudsonreed.com *.magedev.co.uk *.magedev2.co.uk *.magedev3.co.uk *.magedev4.co.uk *.magedev5.co.uk *.magedev6.co.uk *.magedev7.co.uk *.magestage.co.uk *.mageweb.co.uk *.localdev.com *.ldgdev.co.uk *.equalweb.com *.google.com *.google.co.uk *.googlecommerce.com *.salesforce.com *.force.com *.salesforceliveagent.com ldg.my.site.com ldg.my.salesforce-scrt.com *.visualwebsiteoptimizer.com app.vwo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com osm.klarnaservices.com *.klarnaevt.com *.klarnacdn.net https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.bestheating.com *.bestheating.ie *.bigbathroomshop.co.uk *.bigbathroomshop.ie *.hudsonreed.com *.magedev.co.uk *.magedev2.co.uk *.magedev3.co.uk *.magedev4.co.uk *.magedev5.co.uk *.magedev6.co.uk *.magedev7.co.uk *.magestage.co.uk *.mageweb.co.uk *.localdev.com *.ldgdev.co.uk *.adalyser.com *.s3.eu-west-1.amazonaws.com *.bing.com *.bing.net *.cloudfront.net *.doubleclick.net *.equalweb.com www.facebook.com connect.facebook.net *.google.com *.google.co.uk www.google.es www.google.it www.google.fr www.google.de www.google.nl www.google.be www.google.at www.google.ie *.googlesyndication.com *.googleusercontent.com mwiassets.com https:\/\/intentclientscriptslon.s3.eu-west-2.amazonaws.com *.clarity.ms *.onetrust.com www.paypalobjects.com *.paypal.com services.postcodeanywhere.co.uk s.pinimg.com ct.pinterest.com *.salesforce.com *.force.com *.salesforceliveagent.com ldg.my.site.com ldg.my.salesforce-scrt.com *.sirv.com *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io *.jsdelivr.net *.fabric-analytics.com *.growthbook.io *.gb-ingest.com *.trafficguard.ai *.appzi.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.klarna.com *.klarnacdn.net *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ js.klevu.com *.ksearchnet.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com https:\/\/www.google.com\/recaptcha\/api.js *.gstatic.com *.cloudflare.com https:\/\/pay.google.com\/gp\/p\/js\/pay.js https:\/\/applepay.cdn-apple.com\/jsapi\/v1\/apple-pay-sdk.js https:\/\/payments.worldpay.com\/resources\/cse\/js\/worldpay-cse-1.0.2.min.js https:\/\/payments.worldpay.com\/resources\/hpp\/integrations\/embedded\/js\/hpp-embedded-integration-library.js https:\/\/d35p4vvdul393k.cloudfront.net\/sdk_library\/us\/stg\/ops\/pc_gsmpi_web_sdk.js https:\/\/d16i99j5zwwv51.cloudfront.net\/sdk_library\/us\/prd\/ops\/pc_gsmpi_web_sdk.js player.vimeo.com *.bestheating.com *.bestheating.ie *.bigbathroomshop.co.uk *.bigbathroomshop.ie *.hudsonreed.com *.magedev.co.uk *.magedev2.co.uk *.magedev3.co.uk *.magedev4.co.uk *.magedev5.co.uk *.magedev6.co.uk *.magedev7.co.uk *.magestage.co.uk *.mageweb.co.uk *.localdev.com *.ldgdev.co.uk *.adalyser.com *.payments-amazon.com capi-automation.s3.us-east-2.amazonaws.com *.appzi.io *.billiger.de billiger.de *.bing.com *.bing.net *.cardinalcommerce.com *.cloudfront.net *.digitalbridgehq.com *.doubleclick.net *.equalweb.com www.facebook.com connect.facebook.net *.avocet.io avocet.io *.google.com *.google.co.uk *.googleapis.com *.googlecommerce.com *.googlesyndication.com *.jsdelivr.net *.fabric-analytics.com *.growthbook.io *.gb-ingest.com s.kk-resources.com *.klaviyo.com *.klevu.com secure.cimg.leguide.com intentclientscriptslon.s3.eu-west-2.amazonaws.com *.clarity.ms js-agent.newrelic.com bam.nr-data.net *.onetrust.com www.paypalobjects.com *.paypal.com services.postcodeanywhere.co.uk trues11114.pcapredict.com s.pinimg.com ct.pinterest.com *.salesforce.com *.force.com *.salesforceliveagent.com ldg.my.site.com ldg.my.salesforce-scrt.com sgtm-production-bestheating-staging-bfs7ffnbjq-nw.a.run.app *.solutenetwork.com *.trafficguard.ai *.trustpilot.com unpkg.com app.vwo.com *.visualwebsiteoptimizer.com *.webgains.io *.webgains.com *.sirv.com https:\/\/js.klevu.com https:\/\/ldg.my.salesforce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klarnacdn.net https:\/\/static.klaviyo.com *.klevu.com *.ksearchnet.com assets.braintreegateway.com *.cloudflare.com https:\/\/fonts.googleapis.com\/css *.bestheating.com *.bestheating.ie *.bigbathroomshop.co.uk *.bigbathroomshop.ie *.hudsonreed.com *.magedev.co.uk *.magedev2.co.uk *.magedev3.co.uk *.magedev4.co.uk *.magedev5.co.uk *.magedev6.co.uk *.magedev7.co.uk *.magestage.co.uk *.mageweb.co.uk *.localdev.com *.ldgdev.co.uk *.equalweb.com www.googletagmanager.com *.gstatic.com *.klaviyo.com services.postcodeanywhere.co.uk *.salesforce.com *.force.com *.salesforceliveagent.com ldg.my.site.com ldg.my.salesforce-scrt.com *.typekit.net *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io *.jsdelivr.net *.fabric-analytics.com *.growthbook.io *.gb-ingest.com *.trafficguard.ai *.appzi.io *.sirv.com https:\/\/statsjs.klevu.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.bestheating.com *.bestheating.ie *.bigbathroomshop.co.uk *.bigbathroomshop.ie *.hudsonreed.com *.magedev.co.uk *.magedev2.co.uk *.magedev3.co.uk *.magedev4.co.uk *.magedev5.co.uk *.magedev6.co.uk *.magedev7.co.uk *.magestage.co.uk *.mageweb.co.uk *.localdev.com *.ldgdev.co.uk *.bing.com *.bing.net *.equalweb.com *.gstatic.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/www.google.com\/pay https:\/\/pay.google.com\/gp\/p\/web_manifest.json https:\/\/pay.google.com\/gp\/p\/payment_method_manifest.json https:\/\/pay.google.com\/ https:\/\/google.com\/pay *.worldpay.com https:\/\/hpp.worldpay.com\/app\/hpp\/135-0\/telemetry https:\/\/hpp.worldpay.com\/app\/hpp\/135-0\/payment\/paypalsmartbutton\/continue https:\/\/payments.worldpay.com\/app\/hpp\/135-0\/telemetry\/iframe *.bestheating.com *.bestheating.ie *.bigbathroomshop.co.uk *.bigbathroomshop.ie *.hudsonreed.com *.magedev.co.uk *.magedev2.co.uk *.magedev3.co.uk *.magedev4.co.uk *.magedev5.co.uk *.magedev6.co.uk *.magedev7.co.uk *.magestage.co.uk *.mageweb.co.uk *.localdev.com *.ldgdev.co.uk payments-eu.amazon.com *.appzi.io *.s3.eu-west-1.amazonaws.com *.execute-api.us-east-1.amazonaws.com *.bing.com *.bing.net payments.braintree-api.com cas.client.cardinaltrusted.com *.datadome.co *.digitalbridgehq.com eu.prd.impact.fixtuur.com *.fixtuur.io *.doubleclick.net *.equalweb.com *.facebook.com *.google.com *.google.co.uk www.google.es www.google.it www.google.fr www.google.de www.google.nl www.google.be www.google.at www.google.ie *.googleapis.com *.googlesyndication.com *.jsdelivr.net *.fabric-analytics.com *.growthbook.io *.gb-ingest.com *.inference.madewithintent.ai *.clarity.ms js-agent.newrelic.com bam.nr-data.net *.onetrust.com www.paypalobjects.com *.paypal.com s.pinimg.com ct.pinterest.com www.pinterest.com services.postcodeanywhere.co.uk region1.google-analytics.com *.salesforce.com *.force.com *.salesforceliveagent.com ldg.my.site.com ldg.my.salesforce-scrt.com *.samsung.com sgtm-production-bestheating-staging-bfs7ffnbjq-nw.a.run.app *.trafficguard.ai *.typekit.net *.webgains.io *.visualwebsiteoptimizer.com app.vwo.com *.sirv.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.onetrust.com 'self' 'unsafe-inline'; report-uri https:\/\/f4ea971e-20d9-420f-b92f-973abc905556.sansec.watch\/; report-to report-endpoint;","count":4},{"content-security-policy-report-only":" default-src 'self' data: wss:\/\/gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com\/graphql wss:\/\/gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com\/graphql s3.amazonaws.com\/uploads.knowbe4.com\/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https:\/\/browser-intake-datadoghq.com\/ cdn.pendo.io data.pendo.io deepfake-content-write-production-us-east-1.s3.amazonaws.com deepfake-content-read-production-us-east-1.s3.amazonaws.com eai-agent-security-private-ai-production-us-east-1.s3.amazonaws.com ccm-scorm-production-us-east-1.s3.amazonaws.com ccm-courses-production-us-east-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https:\/\/*.knowbe4.com https:\/\/*.kb4od.run https:\/\/*.ckeditor.com\/ https:\/\/*.launchdarkly.com\/ https:\/\/*.zopim.com\/ https:\/\/api-js.mixpanel.com https:\/\/api.mixpanel.com\/ https:\/\/cdnjs.cloudflare.com\/ https:\/\/code.highcharts.com\/ https:\/\/data.pendo.io\/ https:\/\/ekr.zdassets.com\/ https:\/\/ekr.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/embeddable\/config https:\/\/knowbe4.zendesk.com\/embeddable_blip https:\/\/knowbe4.zendesk.com\/frontendevents\/dl https:\/\/knowbe4.zendesk.com\/frontendevents\/pv https:\/\/s3.amazonaws.com\/development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/kmsat-development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/helpimg\/ https:\/\/s3.amazonaws.com\/helpimg-kmsat-development-us-east-1\/ https:\/\/helpimg.s3.amazonaws.com\/ https:\/\/static.zdassets.com\/ https:\/\/zendesk-eu.my.sentry.io\/ pendo-static-6167502888239104.storage.googleapis.com wss:\/\/*.zopim.com\/ wss:\/\/knowbe4.zendesk.com\/ ; frame-ancestors 'self' https:\/\/*.knowbe4.com https:\/\/*.kb4od.run ; child-src 'self' blob: ; connect-src 'self' data: blob: wss:\/\/gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com\/graphql wss:\/\/gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com\/graphql s3.amazonaws.com\/uploads.knowbe4.com\/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https:\/\/browser-intake-datadoghq.com\/ cdn.pendo.io data.pendo.io deepfake-content-write-production-us-east-1.s3.amazonaws.com deepfake-content-read-production-us-east-1.s3.amazonaws.com eai-agent-security-private-ai-production-us-east-1.s3.amazonaws.com ccm-scorm-production-us-east-1.s3.amazonaws.com ccm-courses-production-us-east-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https:\/\/*.knowbe4.com https:\/\/*.kb4od.run https:\/\/*.ckeditor.com\/ https:\/\/*.launchdarkly.com\/ https:\/\/*.zopim.com\/ https:\/\/api-js.mixpanel.com https:\/\/api.mixpanel.com\/ https:\/\/cdnjs.cloudflare.com\/ https:\/\/code.highcharts.com\/ https:\/\/data.pendo.io\/ https:\/\/ekr.zdassets.com\/ https:\/\/ekr.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/embeddable\/config https:\/\/knowbe4.zendesk.com\/embeddable_blip https:\/\/knowbe4.zendesk.com\/frontendevents\/dl https:\/\/knowbe4.zendesk.com\/frontendevents\/pv https:\/\/s3.amazonaws.com\/development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/kmsat-development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/helpimg\/ https:\/\/s3.amazonaws.com\/helpimg-kmsat-development-us-east-1\/ https:\/\/helpimg.s3.amazonaws.com\/ https:\/\/static.zdassets.com\/ https:\/\/zendesk-eu.my.sentry.io\/ pendo-static-6167502888239104.storage.googleapis.com wss:\/\/*.zopim.com\/ wss:\/\/knowbe4.zendesk.com\/ ; frame-src 'self' blob: wss:\/\/gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com\/graphql wss:\/\/gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com\/graphql s3.amazonaws.com\/uploads.knowbe4.com\/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https:\/\/browser-intake-datadoghq.com\/ cdn.pendo.io data.pendo.io deepfake-content-write-production-us-east-1.s3.amazonaws.com deepfake-content-read-production-us-east-1.s3.amazonaws.com eai-agent-security-private-ai-production-us-east-1.s3.amazonaws.com ccm-scorm-production-us-east-1.s3.amazonaws.com ccm-courses-production-us-east-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https:\/\/*.knowbe4.com https:\/\/*.kb4od.run https:\/\/*.ckeditor.com\/ https:\/\/*.launchdarkly.com\/ https:\/\/*.zopim.com\/ https:\/\/api-js.mixpanel.com https:\/\/api.mixpanel.com\/ https:\/\/cdnjs.cloudflare.com\/ https:\/\/code.highcharts.com\/ https:\/\/data.pendo.io\/ https:\/\/ekr.zdassets.com\/ https:\/\/ekr.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/embeddable\/config https:\/\/knowbe4.zendesk.com\/embeddable_blip https:\/\/knowbe4.zendesk.com\/frontendevents\/dl https:\/\/knowbe4.zendesk.com\/frontendevents\/pv https:\/\/s3.amazonaws.com\/development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/kmsat-development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/helpimg\/ https:\/\/s3.amazonaws.com\/helpimg-kmsat-development-us-east-1\/ https:\/\/helpimg.s3.amazonaws.com\/ https:\/\/static.zdassets.com\/ https:\/\/zendesk-eu.my.sentry.io\/ pendo-static-6167502888239104.storage.googleapis.com wss:\/\/*.zopim.com\/ wss:\/\/knowbe4.zendesk.com\/ android-webview-video-poster: https:\/\/player.vimeo.com https:\/\/*.ccm.knowbe4.com https:\/\/*.internal.knowbe4.com https:\/\/*.ccm.internal.knowbe4.com ; font-src 'self' data: fonts.gstatic.com helpimg.s3.amazonaws.com use.fontawesome.com use.typekit.net https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/twitter-bootstrap\/ ; img-src * 'self' blob: cid: data: file: android-webview-video-poster: https:\/\/cdn.mxpnl.com\/ https:\/\/v2assets.zopim.io\/ https:\/\/static.zdassets.com\/ app.pendo.io cdn.pendo.io data.pendo.io pendo-static-6167502888239104.storage.googleapis.com ; media-src 'self' about: blob: data: wss:\/\/gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com\/graphql wss:\/\/gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com\/graphql s3.amazonaws.com\/uploads.knowbe4.com\/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https:\/\/browser-intake-datadoghq.com\/ cdn.pendo.io data.pendo.io deepfake-content-write-production-us-east-1.s3.amazonaws.com deepfake-content-read-production-us-east-1.s3.amazonaws.com eai-agent-security-private-ai-production-us-east-1.s3.amazonaws.com ccm-scorm-production-us-east-1.s3.amazonaws.com ccm-courses-production-us-east-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https:\/\/*.knowbe4.com https:\/\/*.kb4od.run https:\/\/*.ckeditor.com\/ https:\/\/*.launchdarkly.com\/ https:\/\/*.zopim.com\/ https:\/\/api-js.mixpanel.com https:\/\/api.mixpanel.com\/ https:\/\/cdnjs.cloudflare.com\/ https:\/\/code.highcharts.com\/ https:\/\/data.pendo.io\/ https:\/\/ekr.zdassets.com\/ https:\/\/ekr.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/embeddable\/config https:\/\/knowbe4.zendesk.com\/embeddable_blip https:\/\/knowbe4.zendesk.com\/frontendevents\/dl https:\/\/knowbe4.zendesk.com\/frontendevents\/pv https:\/\/s3.amazonaws.com\/development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/kmsat-development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/helpimg\/ https:\/\/s3.amazonaws.com\/helpimg-kmsat-development-us-east-1\/ https:\/\/helpimg.s3.amazonaws.com\/ https:\/\/static.zdassets.com\/ https:\/\/zendesk-eu.my.sentry.io\/ pendo-static-6167502888239104.storage.googleapis.com wss:\/\/*.zopim.com\/ wss:\/\/knowbe4.zendesk.com\/ ; object-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: wss:\/\/gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com\/graphql wss:\/\/gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com\/graphql s3.amazonaws.com\/uploads.knowbe4.com\/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https:\/\/browser-intake-datadoghq.com\/ cdn.pendo.io data.pendo.io deepfake-content-write-production-us-east-1.s3.amazonaws.com deepfake-content-read-production-us-east-1.s3.amazonaws.com eai-agent-security-private-ai-production-us-east-1.s3.amazonaws.com ccm-scorm-production-us-east-1.s3.amazonaws.com ccm-courses-production-us-east-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https:\/\/*.knowbe4.com https:\/\/*.kb4od.run https:\/\/*.ckeditor.com\/ https:\/\/*.launchdarkly.com\/ https:\/\/*.zopim.com\/ https:\/\/api-js.mixpanel.com https:\/\/api.mixpanel.com\/ https:\/\/cdnjs.cloudflare.com\/ https:\/\/code.highcharts.com\/ https:\/\/data.pendo.io\/ https:\/\/ekr.zdassets.com\/ https:\/\/ekr.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/embeddable\/config https:\/\/knowbe4.zendesk.com\/embeddable_blip https:\/\/knowbe4.zendesk.com\/frontendevents\/dl https:\/\/knowbe4.zendesk.com\/frontendevents\/pv https:\/\/s3.amazonaws.com\/development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/kmsat-development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/helpimg\/ https:\/\/s3.amazonaws.com\/helpimg-kmsat-development-us-east-1\/ https:\/\/helpimg.s3.amazonaws.com\/ https:\/\/static.zdassets.com\/ https:\/\/zendesk-eu.my.sentry.io\/ pendo-static-6167502888239104.storage.googleapis.com wss:\/\/*.zopim.com\/ wss:\/\/knowbe4.zendesk.com\/ pendo-io-static.storage.googleapis.com pendo-static-6167502888239104.storage.googleapis.com use.typekit.net ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: data: wss:\/\/gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com\/graphql wss:\/\/gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com\/graphql s3.amazonaws.com\/uploads.knowbe4.com\/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https:\/\/browser-intake-datadoghq.com\/ cdn.pendo.io data.pendo.io deepfake-content-write-production-us-east-1.s3.amazonaws.com deepfake-content-read-production-us-east-1.s3.amazonaws.com eai-agent-security-private-ai-production-us-east-1.s3.amazonaws.com ccm-scorm-production-us-east-1.s3.amazonaws.com ccm-courses-production-us-east-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https:\/\/*.knowbe4.com https:\/\/*.kb4od.run https:\/\/*.ckeditor.com\/ https:\/\/*.launchdarkly.com\/ https:\/\/*.zopim.com\/ https:\/\/api-js.mixpanel.com https:\/\/api.mixpanel.com\/ https:\/\/cdnjs.cloudflare.com\/ https:\/\/code.highcharts.com\/ https:\/\/data.pendo.io\/ https:\/\/ekr.zdassets.com\/ https:\/\/ekr.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/ https:\/\/knowbe4.zendesk.com\/embeddable\/config https:\/\/knowbe4.zendesk.com\/embeddable_blip https:\/\/knowbe4.zendesk.com\/frontendevents\/dl https:\/\/knowbe4.zendesk.com\/frontendevents\/pv https:\/\/s3.amazonaws.com\/development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/kmsat-development.uploads.knowbe4.com\/ https:\/\/s3.amazonaws.com\/helpimg\/ https:\/\/s3.amazonaws.com\/helpimg-kmsat-development-us-east-1\/ https:\/\/helpimg.s3.amazonaws.com\/ https:\/\/static.zdassets.com\/ https:\/\/zendesk-eu.my.sentry.io\/ pendo-static-6167502888239104.storage.googleapis.com wss:\/\/*.zopim.com\/ wss:\/\/knowbe4.zendesk.com\/ https:\/\/unpkg.com\/vue@2.6.14 pendo-io-static.storage.googleapis.com pendo-static-6167502888239104.storage.googleapis.com use.typekit.net https:\/\/cdn.pendo.io\/agent\/static\/365392a9-6608-44ef-443b-572eef771b95\/pendo.js ; style-src 'self' 'unsafe-inline' data: app.pendo.io cdn.pendo.io fonts.gstatic.com https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/twitter-bootstrap\/ pendo-static-6167502888239104.storage.googleapis.com use.typekit.net ; style-src-elem 'self' 'unsafe-inline' data: app.pendo.io cdn.pendo.io fonts.googleapis.com fonts.gstatic.com helpimg.s3.amazonaws.com cdnjs.cloudflare.com\/ajax\/libs\/font-awesome\/ cdnjs.cloudflare.com\/ajax\/libs\/twitter-bootstrap\/ p.typekit.net pendo-static-6167502888239104.storage.googleapis.com s3.amazonaws.com\/helpimg\/ use.fontawesome.com use.typekit.net www.java.com\/ga\/css\/print.css www.java.com\/ga\/css\/screen.css ; report-uri https:\/\/csp-report.browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pubf27996eb9977f34aa9f3376bd3939adc&dd-evp-origin=content-security-policy&ddsource=csp-report&app=kmsat&env=production-us-east-1 ; worker-src 'self' blob: data: ;","count":4},{"content-security-policy-report-only":" default-src 'self' data: 'unsafe-eval' 'unsafe-inline' *.shopmetrics.com *.gigspot.com *.research-cloud.com https:\/\/*.jsdelivr.net https:\/\/unpkg.com https:\/\/*.unpkg.com https:\/\/*.googleapis.com https:\/\/*.google-analytics.com https:\/\/*.gstatic.com https:\/\/*.search.windows.net https:\/\/cdnjs.cloudflare.com https:\/\/code.jquery.com *.facebook.net *.facebook.com *.doubleclick.net *.googletagmanager.com *.bootstrapcdn.com *.typekit.net https:\/\/rmvelocityfrontend.blob.core.windows.net https:\/\/rec.i-say.com https:\/\/vcdn.blob.core.windows.net\/* https:\/\/cdn.vcdn.vc\/*; script-src 'self' data: 'unsafe-eval' 'unsafe-inline' *.shopmetrics.com *.gigspot.com *.research-cloud.com https:\/\/*.jsdelivr.net https:\/\/unpkg.com https:\/\/*.unpkg.com https:\/\/*.googleapis.com https:\/\/*.google-analytics.com https:\/\/*.gstatic.com https:\/\/*.search.windows.net https:\/\/cdnjs.cloudflare.com https:\/\/code.jquery.com *.facebook.net *.facebook.com *.doubleclick.net *.googletagmanager.com *.bootstrapcdn.com *.typekit.net https:\/\/rmvelocityfrontend.blob.core.windows.net; frame-src 'self' blob: *.shopmetrics.com *.gigspot.com *.research-cloud.com *.velocity.online https:\/\/www.googletagmanager.com *.youtube.com *.youtu.be; base-uri 'self'; form-action 'self' *.shopmetrics.com *.gigspot.com *.velocity.online; img-src * data: about: blob: filesystem: ma-file:; object-src 'none'; font-src 'self' data: *.shopmetrics.com *.bootstrapcdn.com *.typekit.net *.gstatic.com *.jsdelivr.net *.pstatic.net *.github.com;","count":4},{"content-security-policy-report-only":" font-src *.fontawesome.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io https:\/\/images.unsplash.com *.facebook.com https:\/\/www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com *.googletagmanager.com *.facebook.net *.avada.io js.mollie.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.google-analytics.com https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":4},{"content-security-policy-report-only":" default-src https:\/\/d3tw2v68rmxuj7.cloudfront.net; connect-src 'self' https: wss:\/\/*.zopim.com; font-src data: https:; frame-src https:\/\/js.stripe.com https:\/\/m.stripe.network https:\/\/www.google.com https:\/\/www.youtube.com https:\/\/googleads.g.doubleclick.net https:\/\/bid.g.doubleclick.net https:\/\/platform.twitter.com https:\/\/x.adroll.com https:\/\/15347100.fls.doubleclick.net https:\/\/td.doubleclick.net https:\/\/www.googletagmanager.com; img-src https:; media-src https:\/\/static.zdassets.com\/web_widget\/classic\/latest\/fda6cd35495c75f83508d9d2e77ee33d.mp3 https:\/\/d3tw2v68rmxuj7.cloudfront.net; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:\/\/cdn.jsdelivr.net https:\/\/d3tw2v68rmxuj7.cloudfront.net https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/ionicons\/4.5.6\/css\/ionicons.min.css https:\/\/use.typekit.net https:\/\/p.typekit.net; report-uri \/csp","count":4},{"content-security-policy-report-only":" font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com https:\/\/applepay.cdn-apple.com *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com v2.zopim.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googlesyndication.com *.twitter.com https:\/\/www.facebook.com www.googletagmanager.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com *.google.com *.doubleclick.net *.googlesyndication.com https:\/\/www.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/pay.google.com https:\/\/applepay.cdn-apple.com https:\/\/hostedfields-externalapi.alpha.buckaroo.aws https:\/\/hostedfields-externalapi.prod-pci.buckaroo.io https:\/\/up.cybersource.com https:\/\/assets.secure.checkout.visa.com https:\/\/src.mastercard.com *.twitter.com axi.maxiaxi.com *.pinterest.com *.addthis.com https:\/\/consentcdn.cookiebot.com *.fast.amc.demdex.net https:\/\/tr.snapchat.com https:\/\/www.facebook.com *.cookiebot.eu *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.com *.google.bg *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com validate.fishpig.co.uk magefan.com cm.magefan.com https:\/\/firebasestorage.googleapis.com https:\/\/static.buckaroo.nl https:\/\/www.buckaroo.nl https:\/\/www.paypalobjects.com https:\/\/pay.google.com https:\/\/developers.google.com https:\/\/applepay.cdn-apple.com https:\/\/up.cybersource.com https:\/\/assets.secure.checkout.visa.com https:\/\/src.mastercard.com https:\/\/redchamps.com ts.tradetracker.net www.magmodules.eu *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net *.maxiaxi.com bat.bing.com www.google.nl www.google.de www.google.fr www.google.es *.squeezely.tech squeezely.tech tm-tradetracker.net *.pinterest.com *.googleapis.com *.googleoptimize.com *.linkedin.com *.cookiebot.com *.etrusted.com *.adobedtm.com *.zendesk.com *.zdassets.com *.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.google.com *.google.bg *.googletagmanager.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.avada.io https:\/\/static.buckaroo.nl https:\/\/checkout.buckaroo.nl https:\/\/testcheckout.buckaroo.nl https:\/\/buckaroo.nl https:\/\/www.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/applepay.cdn-apple.com https:\/\/pay.google.com https:\/\/hostedfields-externalapi.alpha.buckaroo.aws https:\/\/hostedfields-externalapi.prod-pci.buckaroo.io https:\/\/up.cybersource.com https:\/\/flex.cybersource.com https:\/\/assets.secure.checkout.visa.com https:\/\/src.mastercard.com tm.tradetracker.net *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com app.aiden.cx js-agent.newrelic.com bam.nr-data.net rum-static.pingdom.net *.trustpilot.com *.zopim.com static.sooqr.com *.zdassets.com bat.bing.com static.buckaroo.nl *.squeezely.tech squeezely.tech tm-tradetracker.net *.maxiaxi.com *.clarity.ms *.googleoptimize.com *.zendesk.com bam.eu01.nr-data.net *.pinimg.com *.addthis.com *.addthisedge.com *.moatads.com *.hotjar.com *.hotjar.io *.licdn.com *.beslist.nl *.tiktok.com *.stripe.com *.cookiebot.com *.etrusted.com *.smooch.io *.pinterest.com *.convertexperiments.com d5yoctgpv4cpx.cloudfront.net *.cookiebot.eu tr.kickbite.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com https:\/\/static.buckaroo.nl https:\/\/checkout.buckaroo.nl https:\/\/testcheckout.buckaroo.nl *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu static.sooqr.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zendesk.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google-analytics.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com https:\/\/get.geojs.io *.avada.io https:\/\/static.buckaroo.nl wss:\/\/websockets.buckaroo.io\/ https:\/\/checkout.buckaroo.nl https:\/\/testcheckout.buckaroo.nl https:\/\/hostedfields-externalapi.alpha.buckaroo.aws https:\/\/hostedfields-externalapi.prod-pci.buckaroo.io https:\/\/applepay.buckaroo.io https:\/\/smp-paymentservices.apple.com *.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/pay.google.com https:\/\/auth.buckaroo.io https:\/\/clicktopay-externalapi.prod-pci.buckaroo.io https:\/\/up.cybersource.com https:\/\/flex.cybersource.com https:\/\/assets.secure.checkout.visa.com https:\/\/src.mastercard.com *.cloudflare.com *.twitter.com *.twimg.com bam.nr-data.net *.zdassets.com widget-mediator.zopim.com stats.g.doubleclick.net squeezely.tech cognito-identity.eu-central-1.amazonaws.com rum-collector-2.pingdom.net wss:\/\/widget-mediator.zopim.com *.maxiaxi.com *.clarity.ms *.googleapis.com *.googleoptimize.com *.googletagmanager.com *.pinterest.com measurement-api.criteo.com *.zendesk.com bam.eu01.nr-data.net *.addthis.com *.hotjar.com *.beslist.nl *.tiktok.com *.tiktokw.us app.aiden.cx *.hotjar.io wss:\/\/ws.hotjar.com analytics.pangle-ads.com googleads.g.doubleclick.net *.ads.linkedin.com *.cookiebot.com *.etrusted.com *.smooch.io *.convertexperiments.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com *.bing.com tr.kickbite.io wss:\/\/*.zendesk.com *.trustedshops.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.hotjar.com *.hotjar.io wss:\/\/*.hotjar.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":4},{"content-security-policy-report-only":" default-src 'self';   script-src 'self' 'unsafe-inline' 'unsafe-eval'     https:\/\/*.adobe.com     https:\/\/*.adobedtm.com     https:\/\/*.omtrdc.net     https:\/\/www.googletagmanager.com     https:\/\/www.google-analytics.com;   style-src 'self' 'unsafe-inline'     https:\/\/fonts.googleapis.com     https:\/\/use.typekit.net;   font-src 'self' data:     https:\/\/fonts.gstatic.com     https:\/\/use.typekit.net     https:\/\/p.typekit.net;   img-src 'self' data: blob:     https:\/\/*.adobe.com     https:\/\/*.omtrdc.net     https:\/\/www.google-analytics.com     https:\/\/www.googletagmanager.com;   connect-src 'self'     https:\/\/*.adobe.com     https:\/\/*.adobedtm.com     https:\/\/*.omtrdc.net     https:\/\/*.google-analytics.com     https:\/\/*.analytics.google.com;   frame-src 'self'     https:\/\/www.youtube.com     https:\/\/player.vimeo.com;   object-src 'none';   base-uri 'self';   frame-ancestors 'self';   form-action 'self';   upgrade-insecure-requests;   report-uri \/csp-violation-report;   report-to csp-endpoint","count":4},{"content-security-policy-report-only":" script-src-elem https:\/\/app-script.monsido.com https:\/\/heatmaps.monsido.com; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com data: https:\/\/maxcdn.bootstrapcdn.com https:\/\/use.typekit.net *.livechatinc.com *.brickworks.com.au *.googleapis.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.rendivo.com *.anzus.solutions 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com https:\/\/*.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com https:\/\/*.facebook.com paypal.com https:\/\/*.paypal.com https:\/\/secure.livechatinc.com\/ https:\/\/*.livechatinc.com\/ https:\/\/*.marketo.com *.brickworks.com.au https:\/\/*.fls.doubleclick.net https:\/\/ct.pinterest.com https:\/\/insight.adsrvr.org *.rendivo.com *.anzus.solutions c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src https:\/\/*.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com https:\/\/img.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/*.paypal.com https:\/\/*.zipmoney.com.au https:\/\/*.facebook.com *.data-dynamic.net https:\/\/amcglobal.sc.omtrdc.net https:\/\/via.placeholder.com\/ https:\/\/buildersacademy.com.au https:\/\/ik.imagekit.io\/ https:\/\/buildersacademy.edu.au https:\/\/australbricks.rendivo.com *.unsplash.com *.marketo.com *.marketo.net *.brickworks.com.au https:\/\/ib.adnxs.com https:\/\/t.co\/ https:\/\/analytics.twitter.com\/ https:\/\/*.google.com.au https:\/\/ct.pinterest.com https:\/\/sp.analytics.yahoo.com\/ https:\/\/pixel.quantserve.com\/ https:\/\/cdn.livechat-files.com\/ https:\/\/tracking.monsido.com https:\/\/www.urbanstone.com.au *.googleapis.com https:\/\/www.magezon.com *.widen.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.ecomm-nav.com https:\/\/*.zipmoney.com.au https:\/\/*.facebook.com *.zdassets.com *.barilliance.com *.barilliance.net chimpstatic.com snapui.searchspring.io https:\/\/*.livechatinc.com *.marketo.com *.marketo.net https:\/\/*.mktoresp.com *.brickworks.com.au https:\/\/bbp.style https:\/\/*.hotjar.com https:\/\/*.twitter.com https:\/\/*.ads-twitter.com *.gstatic.com https:\/\/*.pinimg.com https:\/\/connect.facebook.net https:\/\/vxml4.plavxml.com https:\/\/js.adsrvr.org https:\/\/acdn.adnxs.com https:\/\/secure.quantserve.com https:\/\/s.yimg.com https:\/\/rules.quantcount.com https:\/\/ucarecdn.com https:\/\/app-script.monsido.com https:\/\/heatmaps.monsido.com *.googleapis.com https:\/\/rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com data: https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/use.typekit.net https:\/\/p.typekit.net *.marketo.com *.marketo.net *.brickworks.com.au https:\/\/bbp.style maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: *.widen.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/*.cloudfront.net https:\/\/*.zip.co https:\/\/maps.googleapis.com https:\/\/stats.g.doubleclick.net https:\/\/s.yimg.com https:\/\/ct.pinterest.com https:\/\/*.google.com.au https:\/\/*.mktoresp.com https:\/\/heatmaps.monsido.com *.googleapis.com *.widen.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":4},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https:\/\/fonts.gstatic.com https:\/\/static-v.tawk.to https:\/\/embed.tawk.to *.fontawesome.com https:\/\/widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.googlesyndication.com *.tiktok.com https:\/\/va.tawk.to\/log https:\/\/facebook.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https:\/\/www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com\/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https:\/\/va.tawk.to https:\/\/js.mollie.com https:\/\/plugins.flockler.com https:\/\/web.swissnewsletter.ch\/ test.saferpay.com www.saferpay.com saferpay.com https:\/\/web.cmp.usercentrics.eu js.mollie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com https:\/\/images.unsplash.com https:\/\/www.facebook.com https:\/\/bat.bing.com https:\/\/consentmanager.mgr.consensu.org cdn.consentmanager.mgr.consensu.org https:\/\/widgets.trustedshops.com https:\/\/cdn.jsdelivr.net https:\/\/*.cloudfront.net https:\/\/static-v.tawk.to https:\/\/x.klarnacdn.net https:\/\/www.google.com https:\/\/www.google.pl https:\/\/www.google.de https:\/\/www.google.at https:\/\/www.google.dk https:\/\/www.google.hu https:\/\/www.google.cz https:\/\/www.google.ee https:\/\/www.google.fi https:\/\/www.google.hr https:\/\/www.google.it https:\/\/www.google.lt https:\/\/www.google.pt https:\/\/www.google.sk https:\/\/www.google.si https:\/\/www.google.es https:\/\/www.google.se https:\/\/embed.tawk.to https:\/\/fonts.gstatic.com https:\/\/static-eu.payments-amazon.com https:\/\/www.magezon.com test.saferpay.com www.saferpay.com saferpay.com https:\/\/app.usercentrics.eu https:\/\/*.cmp.usercentrics.eu https:\/\/*.usercentrics.eu https:\/\/www.mollie.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com\/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/embed.tawk.to https:\/\/static-v.tawk.to http:\/\/widgets.trustedshops.com https:\/\/cdn.jsdelivr.net https:\/\/bat.bing.com https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net https:\/\/cdn.mouseflow.com https:\/\/js.mollie.com https:\/\/x.klarnacdn.net https:\/\/scripts.luigisbox.tech https:\/\/cdn.luigisbox.tech\/knirps.js test.saferpay.com www.saferpay.com saferpay.com https:\/\/privacy-proxy.usercentrics.eu https:\/\/web.cmp.usercentrics.eu https:\/\/*.cmp.usercentrics.eu https:\/\/*.usercentrics.eu js.mollie.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/cdn.luigisbox.tech https:\/\/live.luigisbox.tech https:\/\/api.luigisbox.tech https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https:\/\/cdn.consentmanager.mgr.consensu.org https:\/\/cdn.jsdelivr.net https:\/\/fonts.googleapis.com https:\/\/embed.tawk.to https:\/\/typekit.net https:\/\/*.typekit.net *.fontawesome.com https:\/\/static.klaviyo.com https:\/\/scripts.luigisbox.tech https:\/\/cdn.luigisbox.tech https:\/\/live.luigisbox.tech https:\/\/api.luigisbox.tech https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' data: 'self' 'unsafe-inline'; media-src *.adobe.com https:\/\/embed.tawk.to 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/stats.g.doubleclick.net *.tawk.to wss:\/\/*.tawk.to https:\/\/www.sandbox.paypal.com https:\/\/eu.playground.klarnaevt.com https:\/\/www.facebook.com https:\/\/bat.bing.com https:\/\/o2.mouseflow.com https:\/\/live.luigisbox.tech https:\/\/api.luigisbox.com test.saferpay.com www.saferpay.com saferpay.com https:\/\/privacy-proxy.usercentrics.eu https:\/\/*.service.cmp.usercentrics.eu https:\/\/consent-api.service.consent.usercentrics.eu https:\/\/*.cmp.usercentrics.eu https:\/\/*.usercentrics.eu https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/scripts.luigisbox.tech https:\/\/cdn.luigisbox.tech https:\/\/api.luigisbox.tech *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":4},{"content-security-policy-report-only":" font-src fonts.gstatic.com *.googleapis.com *.gstatic.com data: https:\/\/www.googletagmanager.com *.fontawesome.com https:\/\/fonts.bunny.net applepay.cdn-apple.com use.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com api.payplug.com secure.payplug.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com magefan.com cm.magefan.com https:\/\/firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ cdn.ampproject.org raw.githubusercontent.com *.googleapis.com *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https:\/\/www.googletagmanager.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.avada.io *.shopify.com api.payplug.com applepay.cdn-apple.com https:\/\/cdn.payplug.com\/js\/integrated-payment\/ cdn.scalapay.com b2c-cdn.scalapay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com https:\/\/fonts.bunny.net use.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com cdn.ampproject.org *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":4},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de js.mollie.com https:\/\/www.googletagmanager.com\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https:\/\/checkout.staging.devpayever.com https:\/\/checkout.payever.org *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.doofinder.com https:\/\/www.mollie.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ ratenkauf.easycredit.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com x.klarnacdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.doofinder.com js.mollie.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ ratenkauf.easycredit.de js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/checkout.staging.devpayever.com https:\/\/checkout.payever.org *.trustpilot.com maps.googleapis.com x.klarnacdn.net\/ www.gstatic.com www.google.com *.googleapis.com *.gstatic.com cdn.doofinder.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com x.klarnacdn.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com *.fontawesome.com assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.doofinder.com wss:\/\/*.doofinder.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ ratenkauf.easycredit.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/checkout.staging.devpayever.com https:\/\/checkout.payever.org https:\/\/payments-third-party.staging.devpayever.com https:\/\/payments-third-party.payever.org maps.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":4},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com static.payu.com *.fontawesome.com https:\/\/widgets.trustedshops.com https:\/\/geowidget.easypack24.net https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: *.livechatinc.com https:\/\/td.doubleclick.net *.easypack24.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.braintreegateway.com *.paypal.com google.com *.google.com * *.packeta.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com\/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/geowidget-app.inpost.pl\/ https:\/\/sandbox-easy-geowidget.easypack24.net\/ *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.livechatinc.com https:\/\/consentcdn.cookiebot.com\/ api.ratingcaptain.com *.cookiebot.eu 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com * static.payu.com credit-widget-config.payu.com\/ https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.etrusted.com magefan.com cm.magefan.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com *.disqus.com https:\/\/firebasestorage.googleapis.com https:\/\/www.magezon.com *.hsforms.net *.hsforms.com 'self' data: https:\/\/maps.googleapis.com\/ https:\/\/maps.gstatic.com\/ https:\/\/developers.google.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com https:\/\/www.google.pl *.seznam.cz *.pricemania.sk https:\/\/imgsct.cookiebot.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.packeta.com secure.payu.com secure.snd.payu.com static.payu.com credit-widget-config.payu.com\/ https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.livechatinc.com *.livechat-static.com https:\/\/scripts.luigisbox.tech https:\/\/cdn.luigisbox.tech https:\/\/live.luigisbox.tech https:\/\/api.luigisbox.tech *.disqus.com *.avada.io *.shopify.com *.hsforms.net *.hsforms.com *.gstatic.com https:\/\/maps.googleapis.com\/ *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net https:\/\/www.googletagmanager.com *.seznam.cz https:\/\/pixel.biano.cz https:\/\/consent.cookiebot.com *.biano.sk *.biano.cz *.biano.ro https:\/\/consentcdn.cookiebot.com https:\/\/api.ratingcaptain.com *.absulo.ro *.sgtm.absulo.ro *.cookiebot.eu cdn.ablyft.com https:\/\/secure.payu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app *.googleapis.com *.fontawesome.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com https:\/\/geowidget.easypack24.net https:\/\/geowidget.inpost.pl *.livechatinc.com https:\/\/scripts.luigisbox.tech https:\/\/cdn.luigisbox.tech https:\/\/live.luigisbox.tech https:\/\/api.luigisbox.tech https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.tagmanager.google.com *.googletagmanager.com *.pricemania.sk *.easypack24.net 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/geowidget.easypack24.net *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com * *.packeta.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com\/ *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.easypack24.net *.inpost.pl *.openstreetmap.org *.livechatinc.com *.text.com https:\/\/scripts.luigisbox.tech https:\/\/cdn.luigisbox.tech https:\/\/live.luigisbox.tech https:\/\/api.luigisbox.tech https:\/\/get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https:\/\/maps.googleapis.com\/ *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app http:\/\/www.google-analytics.com *.googlesyndication.com *.biano.cz *.biano.sk *.biano.ro https:\/\/consentcdn.cookiebot.com googleads.g.doubleclick.net api.ratingcaptain.com *.cookiebot.eu 'self' 'unsafe-inline'; child-src *.livechatinc.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":4},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com  *.hotjar.com  *.klevu.com *.fontawesome.com maxcdn.bootstrapcdn.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.hotjar.com *.worldpay.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com\/  *.hotjar.com  *.youtube.com *.addthis.com js.mollie.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com *.klevu.com *.doubleclick.net https:\/\/www.mollie.com *.doofinder.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com magefan.com cm.magefan.com https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.gstatic.com *.googletagmanager.com  *.hotjar.com *.zdassets.com *.trackedlink.net *.addthis.com *.klevu.com *.trustpilot.com *.moatads.com *.addthisedge.com https:\/\/*.tawk.to js.mollie.com *.doofinder.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ connect.facebook.net *.googleadservices.com *.google-analytics.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.myfonts.net *.klevu.com *.typekit.net *.googleapis.com https:\/\/*.tawk.to *.fontawesome.com maxcdn.bootstrapcdn.com *.doofinder.com https:\/\/static.klaviyo.com https:\/\/fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.hotjar.com *.hotjar.io *.zdassets.com *.zopim.com *.doubleclick.net *.google-analytics.com https:\/\/*.tawk.to *.doofinder.com wss:\/\/*.doofinder.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":4},{"content-security-policy-report-only":" default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self';","count":4},{"content-security-policy-report-only":" default-src https: 'unsafe-inline' 'unsafe-eval'","count":4},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/ajax.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/code.jquery.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/unpkg.com https:\/\/vjs.zencdn.net https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/connect.facebook.net https:\/\/www.youtube.com https:\/\/s.ytimg.com https:\/\/player.pandavideo.com.br https:\/\/beyond.spalla.io https:\/\/embed.spalla.io https:\/\/*.converteai.net https:\/\/www.google.com https:\/\/www.gstatic.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com https:\/\/maxcdn.bootstrapcdn.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; worker-src 'self' blob:; connect-src 'self' wss: ws: https:\/\/api.pagar.me https:\/\/api.asaas.com https:\/\/api.getnet.com.br https:\/\/api.rede.com.br https:\/\/api.mercadopago.com https:\/\/app.hubspot.com https:\/\/www.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/api.whatsapp.com https:\/\/*.converteai.net https:\/\/license.vturb.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/player.pandavideo.com.br https:\/\/*.tv.pandavideo.com.br https:\/\/beyond.spalla.io https:\/\/embed.spalla.io https:\/\/drive.google.com https:\/\/*.converteai.net https:\/\/www.facebook.com https:\/\/www.googletagmanager.com https:\/\/www.google.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self' https:","count":4},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https:\/\/cms.staticone88.com http:\/\/api-gw-prod.com http:\/\/api-event-prod.com https:\/\/hotmatch.storeallinone.com https:\/\/api.bakogai.com\/gt-stats-be https:\/\/webchat.s1-tool.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' ws: wss: https:\/\/cms.staticone88.com http:\/\/api-gw-prod.com http:\/\/api-event-prod.com https:\/\/hotmatch.storeallinone.com https:\/\/api.bakogai.com\/gt-stats-be https:\/\/webchat.s1-tool.com; frame-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self'","count":4},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/ir-api.eqs.com https:\/\/assets.adobedtm.com https:\/\/tags-eu.tiqcdn.com https:\/\/www.youtube.com; style-src 'self' 'unsafe-inline' https:\/\/ir-api.eqs.com; img-src 'self' data: https:\/\/img.youtube.com https:\/\/*.adobeaemcloud.com; font-src 'self' https:\/\/ir-api.eqs.com; connect-src 'self' https:\/\/ir-api.eqs.com https:\/\/collect-eu-central-1.tealiumiq.com https:\/\/edge.adobedc.net https:\/\/*.data.adobedc.net https:\/\/tools.cms-eqs.com https:\/\/cdn.plyr.io https:\/\/*.adobeaemcloud.com https:\/\/www.telekom.com https:\/\/preview.telekom.com https:\/\/prod.telekom.com; frame-src 'self' https:\/\/www.youtube-nocookie.com; media-src 'self' https:\/\/*.adobeaemcloud.com; object-src 'none'; base-uri 'self'; form-action 'self';","count":3},{"content-security-policy-report-only":" frame-ancestors gofundme.com *.gofundme.com *.hopin.com pillar.io *.pillar.io takethemameal.com *.takethemameal.com kudoboard.com *.kudoboard.com werememberdev.com *.werememberdev.com weremember.com *.weremember.com forevermissed.com *.forevermissed.com fm-stage.com *.fm-stage.com fm-qa.com *.fm-qa.com giftwhale.com *.giftwhale.com giftwhale.test *.chirp.me chirp.me *.giveinkind.com giveinkind.com *.inkind.dev *.mrdev.com *.mrqa1.com *.mrtesting.com *.myregistrystaging.com *.myregistry.com test.caringbridge.cc feedback.caringbridge.org caringbridge.org *.caringbridge.org *.linktr.ee;","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' blob: https: https:\/\/fast.wistia.com https:\/\/fast.wistia.net; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: http: blob:; connect-src 'self' https:\/\/*.sanity.io wss:\/\/*.api.sanity.io https:\/\/cdn.growthbook.io https:\/\/api.growthbook.io https:\/\/*.wistia.com https:\/\/*.wistia.net wss:\/\/*.wistia.com wss:\/\/*.wistia.net https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/www.googletagmanager.com https:\/\/api.segment.io https:\/\/cdn.segment.com https:\/\/cdp.customer.io https:\/\/www.google.com https:\/\/*.doubleclick.net https:\/\/consentcdn.cookiebot.com https:\/\/px.ads.linkedin.com https:\/\/bat.bing.com https:\/\/pixel-config.reddit.com https:\/\/*.zi-scripts.com https:\/\/*.zoominfo.com https:\/\/a.usbrowserspeed.com https:\/\/api.usergems.com https:\/\/*.clarity.ms https:\/\/*.cloud.gist.build; frame-src 'self' https:\/\/fast.wistia.net https:\/\/*.wistia.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.loom.com https:\/\/player.vimeo.com https:\/\/*.growthbook.io https:\/\/*.doubleclick.net https:\/\/consentcdn.cookiebot.com; font-src 'self' data: https:; media-src 'self' https: http: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/track.customer.io; frame-ancestors 'self'; upgrade-insecure-requests; report-uri \/api\/csp-report; report-to csp-endpoint;","count":3},{"content-security-policy-report-only":" default-src 'self'; report-uri https:\/\/csp.loopia.se; connect-src 'self' https:\/\/*.analytics.google.com https:\/\/*.loopia.com https:\/\/*.loopia.no https:\/\/*.loopia.rs https:\/\/*.loopia.se https:\/\/accesswidget-log-receiver.acsbapp.com https:\/\/adservice.google.com https:\/\/analytics.google.com https:\/\/api-eu1.hubapi.com https:\/\/api.exponea.com https:\/\/api.infinario.com https:\/\/bat.bing.com https:\/\/cdn.iubenda.com https:\/\/consentcdn.cookiebot.com https:\/\/content.hotjar.io https:\/\/cta-eu1.hubspot.com https:\/\/eu-cdn.acsbapp.com https:\/\/eu.acsbapp.com https:\/\/idb.iubenda.com https:\/\/in.hotjar.com https:\/\/pagead2.googlesyndication.com https:\/\/px.ads.linkedin.com https:\/\/px4.ads.linkedin.com https:\/\/srv.motu-teamblue.services https:\/\/stats.g.doubleclick.net https:\/\/vc.hotjar.io https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/www.google.se; font-src 'self' https:\/\/*.loopia.com https:\/\/*.loopia.no https:\/\/*.loopia.rs https:\/\/*.loopia.se https:\/\/fonts.gstatic.com; form-action 'self' https:\/\/*.loopia.com https:\/\/*.loopia.no https:\/\/*.loopia.rs https:\/\/*.loopia.se https:\/\/bib.eway2pay.com https:\/\/payment.architrade.com https:\/\/ticket.siriusit.net https:\/\/www.facebook.com; frame-src 'self' https:\/\/*.facebook.com https:\/\/*.loopia.com https:\/\/*.loopia.no https:\/\/*.loopia.rs https:\/\/*.loopia.se https:\/\/5.ec1.vbus.apps.ladesk.com https:\/\/active24.ladesk.com https:\/\/cdn.hub-prod.team.blue https:\/\/consentcdn.cookiebot.com https:\/\/vars.hotjar.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/*.freshchat.com https:\/\/*.freshdesk.com; img-src 'self' data: https:\/\/*.loopia.com https:\/\/*.loopia.no https:\/\/*.loopia.rs https:\/\/*.loopia.se https:\/\/bat.bing.com https:\/\/googleads.g.doubleclick.net https:\/\/imgsct.cookiebot.com https:\/\/perf-eu1.hsforms.com https:\/\/px.ads.linkedin.com https:\/\/px4.ads.linkedin.com https:\/\/region1.analytics.google.com https:\/\/region1.google-analytics.com https:\/\/srv.motu-teamblue.services https:\/\/stats.g.doubleclick.net https:\/\/tbs.tradedoubler.com https:\/\/track-eu1.hubspot.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.google.se https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com; media-src 'self' https:\/\/*.loopia.com https:\/\/*.loopia.no https:\/\/*.loopia.rs https:\/\/*.loopia.se; object-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/*.loopia.com https:\/\/*.loopia.no https:\/\/*.loopia.rs https:\/\/*.loopia.se https:\/\/api.exponea.com https:\/\/api.infinario.com https:\/\/g.microsoft.com https:\/\/script.hotjar.com https:\/\/snap.licdn.com https:\/\/static.hotjar.com https:\/\/www.google.com https:\/\/www.google.se https:\/\/www.googletagmanager.com; script-src-elem 'self' 'unsafe-inline' https:\/\/*.freshchat.com https:\/\/*.freshdesk.com https:\/\/*.loopia.com https:\/\/*.loopia.no https:\/\/*.loopia.rs https:\/\/*.loopia.se https:\/\/active24.ladesk.com https:\/\/api.exponea.com https:\/\/bat.bing.com https:\/\/cdn.hub-prod.team.blue https:\/\/cdn.iubenda.com https:\/\/connect.facebook.net https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/cs.iubenda.com https:\/\/eu.acsbapp.com https:\/\/eu.fw-cdn.com https:\/\/googleads.g.doubleclick.net https:\/\/js-eu1.hs-analytics.net https:\/\/js-eu1.hs-banner.com https:\/\/js-eu1.hs-scripts.com https:\/\/js-eu1.hsadspixel.net https:\/\/js-eu1.hubspot.com https:\/\/pagead2.googlesyndication.com https:\/\/script.hotjar.com https:\/\/snap.licdn.com https:\/\/srv.isy-teamblue.services https:\/\/srv.motu-teamblue.services https:\/\/static.hotjar.com https:\/\/widget.trustpilot.com https:\/\/www.google.com https:\/\/www.google.se https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com; style-src 'self' 'unsafe-inline' https:\/\/*.loopia.com https:\/\/*.loopia.no https:\/\/*.loopia.rs https:\/\/*.loopia.se https:\/\/cdn.iubenda.com https:\/\/fonts.googleapis.com https:\/\/*.freshchat.com https:\/\/*.freshdesk.com","count":3},{"content-security-policy-report-only":" default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http:\/\/*.files.wordpress.com wss:\/\/www.hollywoodreporter.com; report-uri https:\/\/pmcuri.report-uri.com\/r\/d\/csp\/reportOnly","count":3},{"content-security-policy-report-only":" script-src 'self' 'unsafe-eval' 'unsafe-inline' *.byted-static.com *.bytedance.net *.bytegecko.com *.bytegoofy.com *.bytescm.com *.feishu-boe.cn *.feishu.cn *.feishucdn.com *.ibytedapm.com *.larksuite-boe.com *.larksuite.com *.larksuitecdn.com *.ocic-static.com *.snssdk.com https:\/\/bat.bing.com https:\/\/cdnjs.cloudflare.com https:\/\/hm.baidu.com https:\/\/res.wx.qq.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/zz.bdstatic.com; worker-src 'self' blob:; report-to csp-endpoint","count":3},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' https:\/\/gateway.api.axis.com https:\/\/ep1.adtrafficquality.google https:\/\/googleads.g.doubleclick.net https:\/\/ad.doubleclick.net https:\/\/axis.my.site.com https:\/\/axis.my.salesforce-scrt.com wss:\/\/ws.hotjar.com https:\/\/content.hotjar.io https:\/\/vc.hotjar.io https:\/\/metrics.hotjar.io https:\/\/bat.bing.com https:\/\/px.ads.linkedin.com https:\/\/www.google.com https:\/\/www.google.se https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/eventrouter.axis.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/help.axis.com https:\/\/whitepapers.axis.com https:\/\/widget-api.lifeinside.io; font-src 'self' data: https:\/\/www.axis.com https:\/\/widget.lifeinside.io; frame-src 'self' https:\/\/ep2.adtrafficquality.google https:\/\/www.google.com https:\/\/www.recaptcha.net https:\/\/www.global-comms.axis.com https:\/\/www.youtube.com https:\/\/sitedesigner.axis.com https:\/\/eventrouter.axis.com https:\/\/*.visualwebsiteoptimizer.com; img-src 'self' data: https:\/\/www.axis.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/clients1.google.com https:\/\/ep1.adtrafficquality.google https:\/\/googleads.g.doubleclick.net https:\/\/px.ads.linkedin.com https:\/\/www.linkedin.com https:\/\/www.facebook.com https:\/\/bat.bing.com https:\/\/*.visualwebsiteoptimizer.com; media-src 'self' https:\/\/www.axis.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/code.jquery.com https:\/\/cse.google.com\/cse.js https:\/\/www.google.com https:\/\/googletagmanager.com https:\/\/tagmanager.google.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/cse.google.com https:\/\/ep2.adtrafficquality.google https:\/\/www.recaptcha.net https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com https:\/\/www.axis.com https:\/\/www.apac-comms.axis.com https:\/\/www.emea-comms.axis.com https:\/\/www.americas-comms.axis.com https:\/\/pi.pardot.com https:\/\/www.youtube.com https:\/\/widget.lifeinside.io https:\/\/sitedesigner.axis.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/snap.licdn.com https:\/\/bat.bing.com https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net https:\/\/*.visualwebsiteoptimizer.com https:\/\/axis.my.site.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com; style-src 'self' 'unsafe-inline' https:\/\/www.google.com https:\/\/axis.my.site.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https:\/\/sitedesigner.axis.com\/;","count":3},{"content-security-policy-report-only":" default-src https: data: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; report-uri \/csp-violation-report-endpoint.php; report-to csp-endpoint","count":3},{"content-security-policy-report-only":" default-src 'self' *.pinduoduo.com *.pddpic.com *.yangkeduo.com *.pddugc.com *.pinduoduo.net *.v.smtcdns.net *.ourdvsss.com wss:\/\/*.pinduoduo.com wss:\/\/*.yangkeduo.com mapstyle.qpic.cn blob: data: 'unsafe-eval' 'unsafe-inline'; report-uri https:\/\/tc.pinduoduo.com\/x.gif","count":3},{"content-security-policy-report-only":" default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http:\/\/*.files.wordpress.com wss:\/\/wwd.com; report-uri https:\/\/pmcuri.report-uri.com\/r\/d\/csp\/reportOnly","count":3},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl\/about_google","count":3},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.ebizautos.com; img-src *; script-src 'self' 'unsafe-inline' *; font-src *; media-src *; frame-src *; manifest-src 'self'; style-src 'self' 'unsafe-inline' *; connect-src https:\/\/*; object-src 'none'; worker-src 'none'; base-uri 'self';","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/cdn-ukwest.onetrust.com\/scripttemplates\/ https:\/\/websdk.appsflyer.com\/ https:\/\/www.google.com\/recaptcha\/enterprise.js https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/js.hcaptcha.com\/ https:\/\/cdn.segment.com https:\/\/static.moonpay.com https:\/\/www.googletagmanager.com https:\/\/widget.trustpilot.com https:\/\/widget.intercom.io https:\/\/js.intercomcdn.com https:\/\/vercel.live; style-src 'self' 'unsafe-inline' https:\/\/newassets.hcaptcha.com https:\/\/vercel.live; object-src 'none'; base-uri 'self'; connect-src 'self' https:\/\/www.moonpay.com https:\/\/api.moonpay.com https:\/\/api.coingecko.com https:\/\/cdn-ukwest.onetrust.com https:\/\/geolocation.onetrust.com https:\/\/vitals.vercel-insights.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/logs.browser-intake-datadoghq.com https:\/\/cdn.segment.com https:\/\/otel-collector.moonpay.com https:\/\/otel-collector.moonpaycloud.com https:\/\/otel-collector.moonpay-staging.com https:\/\/cdn.sanity.io https:\/\/www.google.com\/recaptcha\/ https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/api-iam.eu.intercom.io https:\/\/widget.intercom.io https:\/\/nexus-europe-websocket.intercom.io wss:\/\/nexus-europe-websocket.intercom.io https:\/\/nexus-websocket-a.intercom.io wss:\/\/nexus-websocket-a.intercom.io https:\/\/vercel.live wss:\/\/ws-us3.pusher.com; font-src 'self' https:\/\/static.moonpay.com https:\/\/vercel.live https:\/\/assets.vercel.com; frame-src 'self' https:\/\/buy.moonpay.com https:\/\/sell.moonpay.com https:\/\/www.google.com https:\/\/www.google.com\/recaptcha\/ https:\/\/recaptcha.google.com\/recaptcha\/ https:\/\/newassets.hcaptcha.com\/ https:\/\/*.hcaptcha.com https:\/\/widget.trustpilot.com https:\/\/widget.intercom.io https:\/\/intercom-sheets.com https:\/\/vercel.live; img-src 'self' data: blob: https:\/\/cdn-ukwest.onetrust.com https:\/\/images.ctfassets.net https:\/\/payload-marketing.moonpay.com https:\/\/staging.moonpay-marketing-c337344.payloadcms.app https:\/\/static.moonpay.com https:\/\/cdn.sanity.io https:\/\/storage.googleapis.com https:\/\/js.intercomcdn.com https:\/\/static.intercomassets.com https:\/\/vercel.live https:\/\/vercel.com; manifest-src 'self'; media-src 'self' https:\/\/payload-marketing.moonpay.com https:\/\/staging.moonpay-marketing-c337344.payloadcms.app https:\/\/static.moonpay.com https:\/\/cdn.sanity.io https:\/\/storage.googleapis.com; worker-src 'self'; frame-ancestors 'none'; report-uri https:\/\/csp-report.browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub4f9819648cf6c369f00daa5b3a3a0ea7&dd-evp-origin=content-security-policy&ddsource=csp-report","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/dock.ui.bosch.tech https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/btm.bosch.com https:\/\/www.youtube.com https:\/\/maps.google.com; style-src 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'; connect-src 'self' https:\/\/search.internet.bosch.com https:\/\/bosch-i3-caas-api.e-spirit.cloud https:\/\/*.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/endpoint.chatbot-suite.bosch.tech https:\/\/maps.googleapis.com https:\/\/btm.bosch.com https:\/\/cx.bosch-so.com https:\/\/dock.ui.bosch.tech; font-src 'self' https:\/\/fonts.gstatic.com; frame-src 'self' https:\/\/www.youtube-nocookie.com https:\/\/www.youtube.com https:\/\/crdostaticwebsite337215.z6.web.core.windows.net https:\/\/crdopublicationswebsite.z6.web.core.windows.net; img-src 'self' data: https:\/\/assets.bosch.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/i.ytimg.com https:\/\/maps.google.com https:\/\/maps.gstatic.com; manifest-src 'self'; media-src 'self' https:\/\/assets.bosch.com; style-src-elem 'self' 'unsafe-inline' https:\/\/btm.bosch.com https:\/\/fonts.googleapis.com https:\/\/webchatplugins.blob.core.windows.net; worker-src 'none'; report-uri https:\/\/o4508243129991168.ingest.de.sentry.io\/api\/4508243155288144\/security\/?sentry_key=2f9480313f00b63a26560fd685315765; report-to csp-endpoint","count":3},{"content-security-policy-report-only":" require-trusted-types-for 'script';report-uri \/_\/Gstore\/cspreport","count":3},{"content-security-policy-report-only":" object-src 'none'; connect-src 'self' https:\/\/*.canadapost.ca https:\/\/*.canadapost-postescanada.ca https:\/\/*.postescanada-canadapost.ca https:\/\/*.cpggpc.ca https:\/\/www.google-analytics.com https:\/\/siteintercept.qualtrics.com https:\/\/www.facebook.com https:\/\/sslstats.canadapost.ca https:\/\/*.wistia.com https:\/\/dpm.demdex.net https:\/\/csi.gstatic.com https:\/\/adservice.google.com https:\/\/*.googlesyndication.com https:\/\/*.g.doubleclick.net https:\/\/maps.googleapis.com https:\/\/vmss.boldchat.com https:\/\/www.linkedin.com https:\/\/canadapost.tt.omtrdc.net https:\/\/services.postcodeanywhere.co.uk https:\/\/embedwistia-a.akamaihd.net https:\/\/cdn.cookielaw.org https:\/\/geolocation.onetrust.com https:\/\/px.ads.linkedin.com https:\/\/google.com https:\/\/www.google.com; font-src 'self' https:\/\/*.canadapost.ca https:\/\/*.canadapost-postescanada.ca https:\/\/*.postescanada-canadapost.ca https:\/\/fonts.gstatic.com https:\/\/*.arcgis.com; form-action 'self' https:\/\/*.canadapost-postescanada.ca https:\/\/*.postescanada-canadapost.ca https:\/\/*.canadapost.ca  https:\/\/*.epost.ca https:\/\/www.facebook.com https:\/\/google.com; frame-ancestors 'self' https:\/\/*.canadapost-postescanada.ca https:\/\/*.postescanada-canadapost.ca https:\/\/*.canadapost.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.canadapost.ca https:\/\/*.canadapost-postescanada.ca https:\/\/*.postescanada-canadapost.ca https:\/\/*.epost.ca https:\/\/*.cpggpc.ca https:\/\/www.adobetag.com https:\/\/assets.adobedtm.com https:\/\/siteintercept.qualtrics.com  https:\/\/zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/z.moatads.com https:\/\/static.ads-twitter.com https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.googletagservices.com https:\/\/*.google-analytics.com https:\/\/*.googleadservices.com https:\/\/www.gstatic.com https:\/\/*.googlesyndication.com https:\/\/adservice.google.com https:\/\/adservice.google.ca https:\/\/maps.googleapis.com https:\/\/cdn.ampproject.org https:\/\/*.doubleclick.net https:\/\/*.twitter.com https:\/\/cdn.syndication.twimg.com https:\/\/dpm.demdex.net https:\/\/*.wistia.com https:\/\/*.frontlinesvc.com https:\/\/*.arcgis.com https:\/\/www.linkedin.com https:\/\/vmss.boldchat.com https:\/\/sb.scorecardresearch.com https:\/\/www.rnengage.com https:\/\/sjs.bizographics.com https:\/\/www.instagram.com https:\/\/secure.adnxs.com https:\/\/app.five9.com https:\/\/cdn.cookielaw.org; style-src 'self' 'unsafe-inline' https:\/\/*.frontlinesvc.com https:\/\/fonts.googleapis.com https:\/\/translate.googleapis.com https:\/\/*.twitter.com https:\/\/*.canadapost.ca https:\/\/*.canadapost-postescanada.ca https:\/\/*.postescanada-canadapost.ca https:\/\/*.epost.ca https:\/\/*.arcgis.com https:\/\/*.arcgisonline.com https:\/\/app.five9.com;","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/widget.trustpilot.com https:\/\/prod.spline.design https:\/\/js.hs-scripts.com https:\/\/js.hs-analytics.net https:\/\/js.hsforms.net https:\/\/js.hscollectedforms.net https:\/\/js.hs-banner.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/*.supabase.co https:\/\/*.upstash.io https:\/\/prod.spline.design https:\/\/api.hubapi.com https:\/\/forms.hubspot.com https:\/\/js.hs-analytics.net; frame-src 'self' https:\/\/widget.trustpilot.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com; media-src 'self'; object-src 'none'; base-uri 'self'","count":3},{"content-security-policy-report-only":" default-src * data: ; script-src * 'unsafe-inline' 'unsafe-eval'  ; style-src * 'unsafe-inline' data: ; frame-ancestors 'none'; report-uri \/csp-violation-report-endpoint\/","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src-elem 'self' 'unsafe-inline' https:\/\/cdnjs.cloudflare.com https:\/\/tag.flvcdn.net https:\/\/saf-sc-protect.com https:\/\/hubspotonwebflow.com https:\/\/www.rentracks.jp https:\/\/b98.yahoo.co.jp https:\/\/ichisan.jp https:\/\/sc.lfeeder.com https:\/\/trc.taboola.com https:\/\/b99.yahoo.co.jp https:\/\/static.ads-twitter.com https:\/\/bat.bing.com https:\/\/s.yimg.jp https:\/\/platform.twitter.com https:\/\/d.line-scdn.net https:\/\/cdn.taboola.com https:\/\/m.vpadn.com https:\/\/funnel-assets.startappservice.com https:\/\/tools.refokus.com https:\/\/*.intercomcdn.com https:\/\/*.intercom.io https:\/\/*.jsdelivr.net https:\/\/js.hsforms.net https:\/\/*.visualwebsiteoptimizer.com https:\/\/snap.licdn.com https:\/\/connect.facebook.net https:\/\/tracking.g2crowd.com https:\/\/*.spideraf.com https:\/\/*.hscollectedforms.net https:\/\/*.hs-analytics.net https:\/\/*.hsadspixel.net https:\/\/*.hs-banner.com https:\/\/*.hubspot.com https:\/\/*.clarity.ms https:\/\/googleads.g.doubleclick.net https:\/\/*.hs-scripts.com https:\/\/*.webflow.com https:\/\/*.jetboost.io https:\/\/*.website-files.com https:\/\/www.googletagmanager.com https:\/\/*.googleapis.com https:\/\/*.jquery.com https:\/\/*.cloudfront.net https:\/\/cdn-cookieyes.com https:\/\/sp-trk.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.webflow.com https:\/\/www.googletagmanager.com https:\/\/*.googleapis.com https:\/\/*.jquery.com https:\/\/*.cloudfront.net https:\/\/cdn-cookieyes.com https:\/\/*.intercom.io https:\/\/sp-trk.com https:\/\/*.jetboost.io https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.cloudflare.com; style-src 'self' 'unsafe-inline' https:\/\/*; font-src 'self' data: https:\/\/*; img-src 'self' data: blob: https:\/\/*; connect-src 'self' https:\/\/*; frame-src 'self' https:\/\/*; worker-src 'self' blob:; object-src 'none'; report-uri https:\/\/saf-sitescan.com\/api\/csp-report\/4rjsitdq;","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/phrase.com https:\/\/*.googletagmanager.com https:\/\/www.googleadservices.com https:\/\/pagead2.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.gstatic.cn https:\/\/www.recaptcha.net https:\/\/www.youtube.com https:\/\/oxaewmwfp6.kameleoon.io https:\/\/cookie-cdn.cookiepro.com https:\/\/*.clarity.ms https:\/\/bat.bing.com https:\/\/js.hubspot.com https:\/\/js.hs-banner.com https:\/\/js.hs-analytics.net https:\/\/js.hs-scripts.com https:\/\/js.hsforms.net https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/pixel.byspotify.com https:\/\/tracking.g2crowd.com https:\/\/assets.apollo.io https:\/\/js.chilipiper.com https:\/\/boards.eu.greenhouse.io https:\/\/jobs.ashbyhq.com https:\/\/e.infogram.com https:\/\/platform.twitter.com; style-src 'self' 'unsafe-inline' https:\/\/phrase.com https:\/\/fonts.googleapis.com https:\/\/www.googletagmanager.com; img-src 'self' data: https:\/\/phrase.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com https:\/\/*.google.com https:\/\/cookie-cdn.cookiepro.com https:\/\/www.facebook.com https:\/\/forms-na1.hsforms.com https:\/\/perf-na1.hsforms.com https:\/\/track.hubspot.com https:\/\/px.ads.linkedin.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/c.bing.com https:\/\/ct.capterra.com https:\/\/*.clarity.ms https:\/\/i.ytimg.com https:\/\/js.chilipiper.com https:\/\/cdn-images-1.medium.com https:\/\/s.w.org https:\/\/phraseapp.com https:\/\/staging-phrasestagingpx-phrasedev.kinsta.cloud; font-src 'self' data: https:\/\/phrase.com https:\/\/fonts.gstatic.com; frame-src 'self' https:\/\/phrase.com https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.recaptcha.net https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/job-boards.eu.greenhouse.io https:\/\/jobs.ashbyhq.com https:\/\/forms.hsforms.com https:\/\/www.facebook.com https:\/\/player.bilibili.com https:\/\/phrase.chilipiper.com https:\/\/www.g2.com https:\/\/e.infogram.com https:\/\/www.linkedin.com https:\/\/platform.twitter.com; connect-src 'self' https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com https:\/\/ad.doubleclick.net https:\/\/*.google.com https:\/\/*.google.ad https:\/\/*.google.ae https:\/\/*.google.com.af https:\/\/*.google.com.ag https:\/\/*.google.al https:\/\/*.google.am https:\/\/*.google.co.ao https:\/\/*.google.com.ar https:\/\/*.google.as https:\/\/*.google.at https:\/\/*.google.com.au https:\/\/*.google.az https:\/\/*.google.ba https:\/\/*.google.com.bd https:\/\/*.google.be https:\/\/*.google.bf https:\/\/*.google.bg https:\/\/*.google.com.bh https:\/\/*.google.bi https:\/\/*.google.bj https:\/\/*.google.com.bn https:\/\/*.google.com.bo https:\/\/*.google.com.br https:\/\/*.google.bs https:\/\/*.google.bt https:\/\/*.google.co.bw https:\/\/*.google.by https:\/\/*.google.com.bz https:\/\/*.google.ca https:\/\/*.google.cd https:\/\/*.google.cf https:\/\/*.google.cg https:\/\/*.google.ch https:\/\/*.google.ci https:\/\/*.google.co.ck https:\/\/*.google.cl https:\/\/*.google.cm https:\/\/*.google.cn https:\/\/*.google.com.co https:\/\/*.google.co.cr https:\/\/*.google.com.cu https:\/\/*.google.cv https:\/\/*.google.com.cy https:\/\/*.google.cz https:\/\/*.google.de https:\/\/*.google.dj https:\/\/*.google.dk https:\/\/*.google.dm https:\/\/*.google.com.do https:\/\/*.google.dz https:\/\/*.google.com.ec https:\/\/*.google.ee https:\/\/*.google.com.eg https:\/\/*.google.es https:\/\/*.google.com.et https:\/\/*.google.fi https:\/\/*.google.com.fj https:\/\/*.google.fm https:\/\/*.google.fr https:\/\/*.google.ga https:\/\/*.google.ge https:\/\/*.google.gg https:\/\/*.google.com.gh https:\/\/*.google.com.gi https:\/\/*.google.gl https:\/\/*.google.gm https:\/\/*.google.gr https:\/\/*.google.com.gt https:\/\/*.google.gy https:\/\/*.google.com.hk https:\/\/*.google.hn https:\/\/*.google.hr https:\/\/*.google.ht https:\/\/*.google.hu https:\/\/*.google.co.id https:\/\/*.google.ie https:\/\/*.google.co.il https:\/\/*.google.im https:\/\/*.google.co.in https:\/\/*.google.iq https:\/\/*.google.is https:\/\/*.google.it https:\/\/*.google.je https:\/\/*.google.com.jm https:\/\/*.google.jo https:\/\/*.google.co.jp https:\/\/*.google.co.ke https:\/\/*.google.com.kh https:\/\/*.google.ki https:\/\/*.google.kg https:\/\/*.google.co.kr https:\/\/*.google.com.kw https:\/\/*.google.kz https:\/\/*.google.la https:\/\/*.google.com.lb https:\/\/*.google.li https:\/\/*.google.lk https:\/\/*.google.co.ls https:\/\/*.google.lt https:\/\/*.google.lu https:\/\/*.google.lv https:\/\/*.google.com.ly https:\/\/*.google.co.ma https:\/\/*.google.md https:\/\/*.google.me https:\/\/*.google.mg https:\/\/*.google.mk https:\/\/*.google.ml https:\/\/*.google.com.mm https:\/\/*.google.mn https:\/\/*.google.com.mt https:\/\/*.google.mu https:\/\/*.google.mv https:\/\/*.google.mw https:\/\/*.google.com.mx https:\/\/*.google.com.my https:\/\/*.google.co.mz https:\/\/*.google.com.na https:\/\/*.google.com.ng https:\/\/*.google.com.ni https:\/\/*.google.ne https:\/\/*.google.nl https:\/\/*.google.no https:\/\/*.google.com.np https:\/\/*.google.nr https:\/\/*.google.nu https:\/\/*.google.co.nz https:\/\/*.google.com.om https:\/\/*.google.com.pa https:\/\/*.google.com.pe https:\/\/*.google.com.pg https:\/\/*.google.com.ph https:\/\/*.google.com.pk https:\/\/*.google.pl https:\/\/*.google.pn https:\/\/*.google.com.pr https:\/\/*.google.ps https:\/\/*.google.pt https:\/\/*.google.com.py https:\/\/*.google.com.qa https:\/\/*.google.ro https:\/\/*.google.ru https:\/\/*.google.rw https:\/\/*.google.com.sa https:\/\/*.google.com.sb https:\/\/*.google.sc https:\/\/*.google.se https:\/\/*.google.com.sg https:\/\/*.google.sh https:\/\/*.google.si https:\/\/*.google.sk https:\/\/*.google.com.sl https:\/\/*.google.sn https:\/\/*.google.so https:\/\/*.google.sm https:\/\/*.google.sr https:\/\/*.google.st https:\/\/*.google.com.sv https:\/\/*.google.td https:\/\/*.google.tg https:\/\/*.google.co.th https:\/\/*.google.com.tj https:\/\/*.google.tl https:\/\/*.google.tm https:\/\/*.google.tn https:\/\/*.google.to https:\/\/*.google.com.tr https:\/\/*.google.tt https:\/\/*.google.com.tw https:\/\/*.google.co.tz https:\/\/*.google.com.ua https:\/\/*.google.co.ug https:\/\/*.google.co.uk https:\/\/*.google.com.uy https:\/\/*.google.co.uz https:\/\/*.google.com.vc https:\/\/*.google.co.ve https:\/\/*.google.co.vi https:\/\/*.google.com.vn https:\/\/*.google.vu https:\/\/*.google.ws https:\/\/*.google.rs https:\/\/*.google.co.za https:\/\/*.google.co.zm https:\/\/*.google.co.zw https:\/\/*.google.cat https:\/\/cookie-cdn.cookiepro.com https:\/\/geolocation.onetrust.com https:\/\/privacyportal.cookiepro.com https:\/\/eu-data.kameleoon.io https:\/\/*.clarity.ms https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/cta-service-cms2.hubspot.com https:\/\/forms.hsforms.com https:\/\/perf-na1.hsforms.com https:\/\/hubspot-forms-static-embed.s3.amazonaws.com https:\/\/px.ads.linkedin.com https:\/\/www.facebook.com https:\/\/pixels.spotify.com https:\/\/tracking-api.g2.com https:\/\/aplo-evnt.com https:\/\/phrase.chilipiper.com https:\/\/api.chilipiper.com https:\/\/tracking.chilipiper.com https:\/\/js.chilipiper.com https:\/\/noembed.com; media-src 'self' https:\/\/phrase.com https:\/\/*.hubspotusercontent-na1.net; object-src 'none'; base-uri 'self'; report-uri https:\/\/o319746.ingest.us.sentry.io\/api\/4511309638795264\/security\/?sentry_key=e21151de46e1f976858c58e3ca5cbef6; report-to csp-endpoint","count":3},{"content-security-policy-report-only":" default-src 'self' disney.okta.com sso.myid.disney.com *.oktacdn.com; connect-src 'self' disney.okta.com disney-admin.okta.com sso.myid.disney.com *.oktacdn.com *.mixpanel.com *.mapbox.com disney.kerberos.okta.com disney.mtls.okta.com *.authenticatorlocalprod.com:8769 http:\/\/localhost:8769 http:\/\/127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http:\/\/localhost:65111 http:\/\/127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http:\/\/localhost:65121 http:\/\/127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http:\/\/localhost:65131 http:\/\/127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http:\/\/localhost:65141 http:\/\/127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http:\/\/localhost:65151 http:\/\/127.0.0.1:65151 https:\/\/oinmanager.okta.com data: *.ingest.sentry.io https:\/\/cdn.jsdelivr.net\/sm\/; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' disney.okta.com sso.myid.disney.com *.oktacdn.com https:\/\/cdn.jsdelivr.net\/gh\/altcha-org\/altcha\/dist\/altcha.min.js https:\/\/cdn.jsdelivr.net\/gh\/altcha-org\/altcha@2.3.0\/dist\/altcha.min.js; style-src 'unsafe-inline' 'self' 'report-sample' disney.okta.com sso.myid.disney.com *.oktacdn.com; frame-src 'self' disney.okta.com disney-admin.okta.com sso.myid.disney.com login.okta.com *.vidyard.com com-okta-authenticator: api-5a45a87b.duosecurity.com; img-src 'self' disney.okta.com sso.myid.disney.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' disney.okta.com sso.myid.disney.com data: *.oktacdn.com fonts.gstatic.com; worker-src 'self' blob:; frame-ancestors 'self' https:\/\/data.disneystreaming.com https:\/\/data-staging.disneystreaming.com https:\/\/data-dev.disneystreaming.com https:\/\/outlooksts.disney.com","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/cdn.livechatinc.com https:\/\/cmp.dgtl5.app https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:\/\/*.livechatinc.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com; font-src 'self' data:; connect-src 'self' https:\/\/*.livechatinc.com wss:\/\/*.livechatinc.com https:\/\/cmp.dgtl5.app https:\/\/api.cmp.dgtl5.app https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com; frame-src https:\/\/secure.livechatinc.com https:\/\/*.livechatinc.com https:\/\/www.googletagmanager.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https:\/\/myservers.rapidswitch.com","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/bot.hostaan.fi https:\/\/cdnjs.cloudflare.com https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/www.google.fi https:\/\/connect.facebook.net https:\/\/support.hostaan.com https:\/\/widget.trustmary.com https:\/\/embed.trustmary.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https:\/\/fonts.googleapis.com https:\/\/www.gstatic.com https:\/\/cdnjs.cloudflare.com https:\/\/support.hostaan.com 'unsafe-inline' 'unsafe-eval'; font-src 'self' https:\/\/fonts.gstatic.com https:\/\/support.hostaan.com data:; connect-src 'self' https:\/\/bot.hostaan.fi https:\/\/region1.google-analytics.com https:\/\/embed.trustmary.io https:\/\/stats.g.doubleclick.net https:\/\/www.google-analytics.com https:\/\/*.facebook.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/region1.analytics.google.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/www.google.fi https:\/\/support.hostaan.com; media-src 'self' https:\/\/support.hostaan.com; img-src 'self' https:\/\/bot.hostaan.fi blob: data: https:\/\/www.googletagmanager.com https:\/\/fonts.gstatic.com https:\/\/translate.google.com https:\/\/widget.trustmary.com\/ https:\/\/d2nce6johdc51d.cloudfront.net https:\/\/lh3.googleusercontent.com https:\/\/www.google.se https:\/\/www.google.fi https:\/\/www.google.com https:\/\/stats.g.doubleclick.net https:\/\/www.google.fi https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/www.facebook.com https:\/\/support.hostaan.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.facebook.com https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/support.hostaan.com https:\/\/td.doubleclick.net; worker-src 'self' blob:; object-src 'none'; frame-ancestors 'self' https:\/\/www.hostaan.fi; report-uri https:\/\/n8n.ppweb.fi\/webhook\/da8630cf-3a65-402b-b95f-6fa58e667ed6;","count":3},{"content-security-policy-report-only":" default-src 'self' *; media-src 'self' * data: ; font-src 'self' * data: ; img-src 'self' data: blob: *; script-src * 'unsafe-inline' 'unsafe-eval' data: *; style-src 'self' 'unsafe-inline' *; worker-src 'self' * blob: ; report-uri \/api\/csp-violation","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/googleads.g.doubleclick.net https:\/\/connect.facebook.net https:\/\/js.zi-scripts.com https:\/\/unpkg.com\/web-vitals\/ https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/snap.licdn.com https:\/\/cdn.cookielaw.org https:\/\/cookie-cdn.cookiepro.com https:\/\/geolocation.onetrust.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/js.hsforms.net; style-src 'self' 'unsafe-inline' https:\/\/cdn.cookielaw.org https:\/\/*.hotjar.com; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:\/\/edge.api.flagsmith.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/ad.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/www.google.com https:\/\/px.ads.linkedin.com https:\/\/js.zi-scripts.com https:\/\/ws.zoominfo.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/cdn.cookielaw.org https:\/\/*.onetrust.com https:\/\/cookie-cdn.cookiepro.com https:\/\/privacyportal.cookiepro.com https:\/\/cdn.bfldr.com https:\/\/www.facebook.com https:\/\/api.hsforms.com https:\/\/forms.hsforms.com https:\/\/forms.hubspot.com https:\/\/*.hubspot.com https:\/\/*.typesense.net; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.acast.com https:\/\/td.doubleclick.net https:\/\/www.facebook.com; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/forms.hsforms.com https:\/\/forms.hubspot.com https:\/\/api.hsforms.com https:\/\/www.facebook.com; report-to csp-endpoint; report-uri \/api\/csp-report","count":3},{"content-security-policy-report-only":" default-src 'self';base-uri 'self';object-src 'none';form-action 'self';script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' 'report-sample' https:\/\/widget.intercom.io https:\/\/js.intercomcdn.com https:\/\/static.moonpay.com https:\/\/www.gstatic.com www.googletagmanager.com https:\/\/cdn.rudderlabs.com;style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/www.gstatic.com;font-src 'self' data: https:\/\/fonts.reown.com https:\/\/fonts.gstatic.com https:\/\/fonts.intercomcdn.com;img-src 'self' data: blob: https:;media-src 'self' data: blob: https:\/\/cdn.1inch.com;worker-src 'self' blob:;frame-src data: blob: 'self' https:\/\/challenges.cloudflare.com https:\/\/app.safe.global https:\/\/*.coinshift.xyz https:\/\/connect.trezor.io https:\/\/verify.walletconnect.com https:\/\/wallet-v2.blocto.app https:\/\/dapp-browser.apps.ledger.com https:\/\/1inch.cloudflareaccess.com https:\/\/buy.moonpay.com https:\/\/sdk.prod.innerworks.me https:\/\/verify.walletconnect.org https:\/\/connect.solflare.com https:\/\/subscribe-forms.beehiiv.com https:\/\/www.youtube.com https:\/\/chamberfi.com https:\/\/youtube.com;connect-src *, connect-src 'self' api.safe.global https:\/\/*.1inch.io wss:\/\/*.1inch.io https:\/\/*.1inch.com wss:\/\/*.1inch.com https:\/\/1inch-network.ghost.io api.lever.co https:\/\/*.ingest.us.sentry.io https:\/\/api-eu.mixpanel.com https:\/\/api.rudderstack.com https:\/\/cdn.rudderlabs.com https:\/\/*.walletconnect.org wss:\/\/*.walletconnect.org api.web3modal.org https:\/\/*.coinbase.com wss:\/\/www.walletlink.org https:\/\/www.walletlink.org https:\/\/*.ledger.com wss:\/\/*.ledger.com https:\/\/cloud-sync-backend.api.aws.prd.ldg-tech.com www.googletagmanager.com www.google-analytics.com analytics.google.com region1.analytics.google.com stats.g.doubleclick.net https:\/\/*.googleapis.com https:\/\/*.firebaseio.com wss:\/\/*.firebaseio.com https:\/\/sdk.prod.innerworks.me https:\/\/*.intercom.io wss:\/\/*.intercom.io https:\/\/*.intercomcdn.com ethereum.publicnode.com bsc-dataseed1.ninicoin.io polygon.drpc.org mainnet.optimism.io arb1.arbitrum.io rpc.gnosischain.com api.avax.network mainnet.era.zksync.io mainnet.base.org rpc.linea.build mainnet.unichain.org rpc.soniclabs.com rpc.mainnet.chain.robinhood.com rpc.monad.xyz evm.cronos.org rpc.hyperliquid.xyz api.merkl.xyz robinhoodchain.blockscout.com","count":3},{"content-security-policy-report-only":" default-src 'self' http: https: data: blob: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self';","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/cdn.jsdelivr.net https:\/\/*.clerk.accounts.dev https:\/\/clerk.multimango.com https:\/\/codimango.com https:\/\/*.codimango.com https:\/\/challenges.cloudflare.com https:\/\/vercel.live https:\/\/cdn.tailwindcss.com https:\/\/www.datadoghq-browser-agent.com; style-src 'self' 'unsafe-inline'; img-src 'self' https: manifold: oil: everstore: data: blob:; font-src 'self'; connect-src 'self' https:\/\/www.multimango.com https:\/\/*.clerk.accounts.dev https:\/\/*.clerk.com https:\/\/clerk.multimango.com https:\/\/codimango.com https:\/\/*.codimango.com https:\/\/www.codimango.com https:\/\/*.multimodal-agentic-generation-preview.mangovibe.net https:\/\/vitals.vercel-insights.com https:\/\/browser-intake-datadoghq.com https:\/\/*.browser-intake-datadoghq.com https:\/\/browser-intake-us3-datadoghq.com https:\/\/*.browser-intake-us3-datadoghq.com https:\/\/browser-intake-us5-datadoghq.com https:\/\/*.browser-intake-us5-datadoghq.com https:\/\/browser-intake-datadoghq.eu https:\/\/*.browser-intake-datadoghq.eu https:\/\/browser-intake-ap1-datadoghq.com https:\/\/*.browser-intake-ap1-datadoghq.com https:\/\/browser-intake-ap2-datadoghq.com https:\/\/*.browser-intake-ap2-datadoghq.com https:\/\/browser-intake-ddog-gov.com https:\/\/*.browser-intake-ddog-gov.com https:\/\/browser-intake-us2-ddog-gov.com https:\/\/*.browser-intake-us2-ddog-gov.com wss:\/\/*.clerk.accounts.dev https:\/\/multidatastore.s3.us-west-2.amazonaws.com https:\/\/multidatastore-public.s3.us-west-2.amazonaws.com https:\/\/multidatastore-private.s3.us-west-2.amazonaws.com wss:\/\/generativelanguage.googleapis.com wss:\/\/shortwave.facebook.com wss:\/\/*.vercel.run wss:\/\/*.metaaivm.com wss:\/\/*.nest-dev-proxy.internalmeta.com https:\/\/*.fbcdn.net https:\/\/*.cdninstagram.com https:\/\/*.fbsbx.com https:\/\/interngraph.intern.facebook.com https:\/\/api.llama.com https:\/\/nominatim.openstreetmap.org https:\/\/*.facebook.com:* https:\/\/www.instagram.com manifold: oil: everstore: blob:; media-src 'self' https:\/\/www.multimango.com https:\/\/cdn.multimango.com https:\/\/multidatastore.s3.us-west-2.amazonaws.com https:\/\/multidatastore-public.s3.us-west-2.amazonaws.com https:\/\/multidatastore-private.s3.us-west-2.amazonaws.com https:\/\/multidatastore.s3.amazonaws.com https:\/\/*.fbcdn.net https:\/\/*.xx.fbcdn.net https:\/\/interngraph.intern.facebook.com manifold: oil: everstore: data: blob:; frame-src 'self' https:\/\/vercel.live https:\/\/*.vercel.live https:\/\/challenges.cloudflare.com https:\/\/player.vimeo.com https:\/\/multidatastore.s3.us-west-2.amazonaws.com https:\/\/multidatastore-public.s3.us-west-2.amazonaws.com https:\/\/*.mangobox.net https:\/\/*.eks-prod.cf.aws.metafb.cloud https:\/\/*.nodebox.codesandbox.io https:\/\/*.desktop-sandoq.cf.aws.metafb.cloud https:\/\/*.sessions.sandoq.desktop-sandoq.cf.aws.metafb.cloud https:\/\/*.vercel.run https:\/\/ai-web-agents.edge.x2p.facebook.net https:\/\/*.arcada.app https:\/\/*.arena.site https:\/\/*.multimodal-agentic-generation-preview.mangovibe.net https:\/\/*.mangovibe.net https:\/\/hatch.ecto1.ai https:\/\/agent.meta.ai; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https:\/\/multimango.com https:\/\/*.multimango.com https:\/\/navibot.dev https:\/\/*.navibot.dev https:\/\/codimango.com https:\/\/*.codimango.com https:\/\/*.multimodal-agentic-generation-preview.mangovibe.net","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/accounts.google.com https:\/\/apis.google.com https:\/\/www.gstatic.com https:\/\/widget.intercom.io https:\/\/js.intercomcdn.com https:\/\/*.clarity.ms https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net https:\/\/vercel.live; style-src 'self' 'unsafe-inline' https:\/\/accounts.google.com; img-src 'self' data: blob: https:\/\/cdn.sanity.io https:\/\/static.the-qrcode-generator.com https:\/\/*.wp.com https:\/\/*.googleusercontent.com https:\/\/placehold.co https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/www.googletagmanager.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.google.co.in https:\/\/googleads.g.doubleclick.net https:\/\/js.intercomcdn.com https:\/\/static.intercomassets.com https:\/\/*.clarity.ms https:\/\/c.bing.com; font-src 'self' data: https:\/\/fonts.intercomcdn.com; media-src 'self' https:\/\/js.intercomcdn.com; connect-src 'self' https:\/\/cdn.sanity.io https:\/\/api-iam.intercom.io https:\/\/nexus-websocket-a.intercom.io wss:\/\/nexus-websocket-a.intercom.io https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/www.googletagmanager.com https:\/\/*.clarity.ms https:\/\/accounts.google.com https:\/\/ad.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/www.google.com https:\/\/www.google.co.in https:\/\/mpc2-prod-26-is5qnl632q-uc.a.run.app https:\/\/vercel.live; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/accounts.google.com https:\/\/widget.intercom.io https:\/\/vercel.live; frame-ancestors 'self'; form-action 'self' https:\/\/app.the-qrcode-generator.com https:\/\/the-qrcode-generator.com; base-uri 'self'; object-src 'none'; upgrade-insecure-requests","count":3},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' data: *.hockeystack.com *.marianatek.com *.cookielaw.org *.chilipiper.com *.googletagmanager.com *.google.com *.gstatic.com *.cloudflare.com *.youtube.com *.youtube-nocookie.com *.vimeo.com *.licdn.com *.facebook.net *.clarity.ms *.google-analytics.com *.hs-scripts.com *.doubleclick.net unpkg.com *.wistia.net;upgrade-insecure-requests;","count":3},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' data: cdn.privacy-mgmt.com maps.googleapis.com www.news.co.uk uk-script.dotmetrics.net *.google-analytics.com *.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com cdn.privacy-mgmt.com *.tiqcdn.com unpkg.com uk-script.dotmetrics.net *.scorecardresearch.com *.google-analytics.com *.googletagmanager.com *.brightcove.com; style-src 'self' 'unsafe-inline' data: use.fontawesome.com fonts.googleapis.com use.typekit.net maps.google.com unpkg.com; img-src 'self' data: *.googleapis.com *.gstatic.com *.google-analytics.com *.scorecardresearch.com *.news.co.uk www.news.co.uk *.dotmetrics.net newsuk.s3.amazonaws.com *.google.com s.w.org ps.w.org ts.w.org secure.gravatar.com www.gravatar.com; font-src 'self' data: fonts.gstatic.com; frame-src 'self' *.youtube.com *.vimeo.com *.brightcove.com cdn.privacy-mgmt.com;","count":3},{"content-security-policy-report-only":" default-src 'self';img-src * blob: data: px.ads.linkedin.com www.facebook.com *.doubleclick.net *.clarity.ms;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.amplitude.com *.bootstrapcdn.com *.typekit.net cdn.jsdelivr.net cdn.rlets.com cdnjs.cloudflare.com code.jquery.com js.hsforms.net www.googletagmanager.com *.mysanfordchart.org *.addthis.com *.adroll.com *.adsrvr.org *.ads-twitter.com *.clarity.ms *.cloudfront.net *.doubleclick.net *.fls.doubleclick.net formstack.com *.formstack.com *.formstack.io *.g.doubleclick.net *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.gstatic.com *.invocacdn.com *.liveperson.net *.lpsnmedia.net *.mpio.io onesignal.com *.onesignal.com *.qualtrics.com *.quantcount.com *.quantserve.com *.serving-sys.com *.simpli.fi *.siteintercept.qualtrics.com *.talentegy.com *.tvsquared.com *.twitter.com *.v.liveperson.net *.vimeo.com *.vimeocdn.com aa.agkn.com ajax.aspnetcdn.com assets.sitescdn.net az416426.vo.msecnd.net bat.bing.com cdn.mouseflow.com cdn.popt.in chimpstatic.com data.adxcel-ec2.com embed.typeform.com js.hsadspixel.net js.hs-analytics.net js.hs-banner.com js.hscollectedforms.net js.hsleadflows.net js.hs-scripts.com pixel.mathtag.com pixel.videohub.tv pnapi.invoca.net px.ads.linkedin.com s.amazon-adsystem.com s.pinimg.com s3.amazonaws.com\/checkout.squadup.com\/default\/css\/bootstrap-namespace.min.css script.crazyegg.com sc-static.net siteimproveanalytics.com snap.licdn.com static.addtoany.com static.cloud.coveo.com tags.srv.stackadapt.com tracking.logpostback.com transparency.nrchealth.com trkn.us v1.addthisedge.com www.buzzsprout.com www.groupexpro.com www.youtube.com www.ypo.education\/js\/jsembedcode.js z.moatads.com cdn.mxpnl.com js.hubspot.com *.snapchat.com *.instabot.io *.roobrik.com connect.facebook.net services.cattailsservices.com *.binaryfountain.com *.consumerism.pressganey.com;style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.fontawesome.com *.googleapis.com *.typekit.net cdn.jsdelivr.net cdnjs.cloudflare.com cloud.typography.com code.jquery.com www.googletagmanager.com *.mysanfordchart.org *.formstack.com *.formstack.io *.gstatic.com *.vimeocdn.com cdn.thinglink.me checkout.stripe.com formsprod.azureedge.net onesignal.com static.cloud.coveo.com tags.srv.stackadapt.com www.groupexpro.com www.youtube.com *.instabot.io services.cattailsservices.com *.consumerism.pressganey.com;font-src 'self' data: *.fontawesome.com *.typekit.com *.typekit.net cdn.jsdelivr.net cdnjs.cloudflare.com *.formstack.com *.gstatic.com *.googleusercontent.com static.cloud.coveo.com staticdev.cloud.coveo.com *.roobrik.com *.consumerism.pressganey.com;frame-src 'self' cdn.jsdelivr.net cdn.rlets.com cdnjs.cloudflare.com www.googletagmanager.com tools.sanfordhealthplan.com *.mysanfordchart.org *.addthis.com *.adsrvr.org *.c.liveperson.net *.doubleclick.net *.fls.doubleclick.net *.formstack.com *.g.doubleclick.net *.google.com *.ipcamlive.com *.lpsnmedia.net *.snapchat.com *.soundcloud.com *.stripe.com *.twitter.com *.v.liveperson.net vimeo.com *.vimeo.com *.youtube.com cdn.onesignal.com e.issuu.com fast.wistia.net forms.hsforms.com host.visualcalc.com js.hsadspixel.net js.hsforms.net pixel.mathtag.com players.brightcove.net static.addtoany.com www.buzzsprout.com www.pinterest.ca www.pinterest.co.uk www.pinterest.com www.pinterest.fr www.pinterest.it www.pinterest.ph ct.pinterest.com www.thinglink.com forms.hubspot.com *.roobrik.com *.cloudfront.net sanford.az1.qualtrics.com www.groupexpro.com;frame-ancestors 'self' *.mysanfordchart.org *.snapchat.com;connect-src 'self' *.amplitude.com cdn.jsdelivr.net cdn.rlets.com cdnjs.cloudflare.com cloud.typography.com code.jquery.com www.googletagmanager.com *.addthis.com *.adroll.com *.clarity.ms *.doubleclick.net *.g.doubleclick.net *.gannettdigital.com *.google.com *.analytics.google.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.gstatic.com *.linkedin.oribi.io onesignal.com *.onesignal.com *.pinterest.com *.quantcount.com *.reachlocalservices.com *.serving-sys.com *.snapchat.com *.squadup.com *.twitter.com *.vimeocdn.com *.z1.dca0.com api.hubapi.com az416426.vo.msecnd.net bat.bing.com dc.services.visualstudio.com *.hsforms.com *.hubspot.com js.hs-scripts.com hubspot-forms-static-embed.s3.amazonaws.com js.hsadspixel.net forms.hscollectedforms.net js.hscollectedforms.net n2.mouseflow.com pnapi.invoca.net sanfordhealth.formstack.com *.formstack.io usageanalytics.coveo.com *.cloud.coveo.com px.ads.linkedin.com snap.licdn.com sc-static.net api.sanfordhealth.org api-js.mixpanel.com *.instabot.io api.fbanalytics.org connect.facebook.net assets.sitescdn.net *.cloudfront.net siteimproveanalytics.com *.roobrik.com services.cattailsservices.com *.consumerism.pressganey.com;form-action 'self' *.fontawesome.com cdnjs.cloudflare.com *.sanfordhealthfoundation.org *.adroll.com *.doubleclick.net *.google.com *.google-analytics.com *.googleapis.com *.gstatic.com *.pinterest.com *.serving-sys.com *.snapchat.com *.vimeocdn.com api.hubapi.com forms.hsforms.com forms.hubspot.com hubspot-forms-static-embed.s3.amazonaws.com;media-src * data:;object-src 'none';worker-src 'self' blob: *.amplitude.com;report-uri https:\/\/csp-reporting.sanfordhealth.org\/;","count":3},{"content-security-policy-report-only":" default-src 'self'; img-src 'self' https:\/\/listafirme.ro https:\/\/secure.payu.ro\/images\/ https:\/\/*.ytimg.com https:\/\/flagcdn.com https:\/\/mdbootstrap.com https:\/\/img.youtube.com https:\/\/*.googleusercontent.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.google.com https:\/\/cdn.jsdelivr.net https:\/\/www.googletagmanager.com https:\/\/www.google.ro\/ https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com data:; frame-src https:\/\/listafirme.ro https:\/\/platform.listafirme.ro\/ https:\/\/www.youtube-nocookie.com https:\/\/www.youtube.com https:\/\/static.addtoany.com https:\/\/www.google.com https:\/\/accounts.google.com https:\/\/*.firebaseapp.com; script-src 'self' https:\/\/listafirme.ro https:\/\/secure.payu.ro\/ https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/listafirme.eu https:\/\/static.addtoany.com https:\/\/platform.listafirme.ro https:\/\/cdn.jsdelivr.net https:\/\/*.cloudflare.com 'unsafe-inline' 'wasm-unsafe-eval' https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/static.cloudflareinsights.com https:\/\/*.cookie-script.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com; style-src 'self' 'unsafe-inline' https:\/\/listafirme.ro https:\/\/*.cloudflare.com https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/www.googletagmanager.com; font-src 'self' https:\/\/listafirme.ro https:\/\/*.cloudflare.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com; connect-src 'self' https:\/\/listafirme.ro  https:\/\/platform.listafirme.ro https:\/\/*.googlevideo.com https:\/\/*.google.com https:\/\/*.google-analytics.com https:\/\/*.googlesyndication.com https:\/\/static.addtoany.com https:\/\/*.googleapis.com https:\/\/cloudflareinsights.com https:\/\/www.googletagmanager.com https:\/\/*.cookie-script.com https:\/\/www.googleadservices.com https:\/\/*.cloudflareinsights.com; object-src 'none'; base-uri 'self'; form-action 'self';","count":3},{"content-security-policy-report-only":" default-src 'self';form-action 'self'; object-src 'self'; frame-ancestors 'self'; connect-src 'self' ely-keskus.fi *.youtube.com *.tyomarkkinatori.fi *.ahtp.fi keha-matomo-sdg-qa-qa.azurewebsites.net *.cookiebot.com wss:\/\/*.tyomarkkinatori.fi *.elisa.fi wss:\/\/*.elisa.fi tetyomarkkinatori.boost.ai lukija.aimater.com fonts.gstatic.com data:; style-src 'self' 'unsafe-inline' *.elisa.fi fonts.googleapis.com *.youtube.com gstatic.com blob:; img-src * data: blob:; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' *.tyomarkkinatori.fi *.ahtp.fi *.elisa.fi lukija.aimater.com tetyomarkkinatori.boost.ai *.cookiebot.com keha-matomo-sdg-qa-qa.azurewebsites.net youtube.com blob:; frame-src 'self' data: feed.mikle.com *.elisadesk.com *.cookiebot.com *.youtube.com; media-src 'self' data: blob:; font-src 'self' data: fonts.gstatic.com; report-uri https:\/\/csp-report-fa-prod.azurewebsites.net\/api\/csp-report;","count":3},{"content-security-policy-report-only":" default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; report-uri https:\/\/csp-report.envytools.com","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com *.yotpo.com 'self' data: fonts.fanplayr.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com webpay3g.transbank.cl webpay3gint.transbank.cl *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.google.com.ar *.google.com.uy *.hotjar.com *.doubleclick.net www.mercadolibre.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https:\/\/sparta.cl\/ https:\/\/newbalance.cl\/ https:\/\/head.cl\/ https:\/\/spyder.cl\/ https:\/\/trekbikeschile.com\/ https:\/\/www.dynamicyield.org\/ku\/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com blob: gen.sendtric.com *.yotpo.com *.google.com *.google.com.ar *.google.com.uy *.facebook.com *.doubleclick.net sparta.cl newbalance.cl head.cl speedo.cl spyder.cl trekbikes.cl *.sparta.cl *.newbalance.cl *.head.cl *.speedo.cl *.spyder.cl *.trekbikes.cl www.mercadolibre.com www.mercadopago.cl 'self' data: *.googleapis.com *.yandex.ru *.retailrocket.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com cdn.fanplayr.com collect.fanplayr.com d38nbbai6u794i.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com widget.freshworks.com mcdn.retailrocket.net *.google.com.ar *.google.com.uy *.googleoptimize.com *.gstatic.com *.googletagmanager.com *.googleapis.com *.fanplayr.com *.facebook.net *.yotpo.com *.doubleclick.net *.magentosite.cloud *.freshworks.com *.hotjar.com *.retailrocket.net *.yandex.ru *.api.useinsider.com www.mercadopago.com www.mercadopago.cl sdk.mercadopago.com www.dynamicyield.org js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com analytics.tiktok.com www.tiktok.com business.tiktok.com https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/crypto-js\/4.2.0\/crypto-js.min.js 'unsafe-inline' cdn.fanplayr.com static.fanplayr.com d38nbbai6u794i.cloudfront.net my.fanplayr.com e1.fanplayr.com w1.fanplayr.com ajax.googleapis.com www.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com widget.freshworks.com *.googleapis.com sparta.cl newbalance.cl head.cl speedo.cl spyder.cl trekbikes.cl *.sparta.cl *.newbalance.cl *.head.cl *.speedo.cl *.spyder.cl *.trekbikes.cl *.yotpo.com *.fonts.net *.magentosite.cloud *.freshworks.com *.retailrocket.net assets.braintreegateway.com 'unsafe-inline' fonts.fanplayr.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com widget.freshworks.com mcdn.retailrocket.net *.google-analytics.com *.yotpo.com *.freshworks.com *.googleapis.com stats.g.doubleclick.net *.yandex.ru api.mercadopago.com events.mercadopago.com www.mercadolibre.com *.retailrocket.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com analytics.tiktok.com www.tiktok.com business.tiktok.com https:\/\/tagging.sparta.cl d38nbbai6u794i.cloudfront.net recommendations.fanplayr.com site-speed.fanplayr.com cdn.fanplayr.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/spartacl.report-uri.com\/r\/d\/csp\/reportOnly; report-to report-endpoint;","count":3},{"content-security-policy-report-only":" font-src www.paypalobjects.com cash-f.squarecdn.com fonts.gstatic.com all4running.nl *.all4running.nl all4running.be *.all4running.be 21run.com *.21run.com *.dhlparcel.nl https:\/\/widgets.trustedshops.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * all4running.nl *.all4running.nl all4running.be *.all4running.be 21run.com *.21run.com *.facebook.com *.facebook.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ * all4running.nl *.all4running.nl all4running.be *.all4running.be 21run.com *.21run.com *.doubleclick.net *.facebook.com *.facebook.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com * https:\/\/images.unsplash.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com *.imgix.net all4running.nl *.all4running.nl all4running.be *.all4running.be 21run.com *.21run.com maps.gstatic.com *.googleapis.com *.bing.com *.google.nl *.facebook.com *.facebook.net *.hsforms.net *.hsforms.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.bazaarvoice.com widgets.trustedshops.com 'self' data: data: 'self' 'unsafe-inline'; script-src www.google-analytics.com googleads.g.doubleclick.net www.googleadservices.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.hotjar.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.googletagmanager.com tagmanager.google.com all4running.nl *.all4running.nl all4running.be *.all4running.be 21run.com *.21run.com *.dhlparcel.nl *.googleapis.com *.bing.com *.facebook.com *.facebook.net https:\/\/player.vimeo.com\/api\/player.js cdn.belco.io *.hsforms.net *.hsforms.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.bazaarvoice.com widgets.trustedshops.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.cash.app tagmanager.google.com fonts.google.com all4running.nl *.all4running.nl all4running.be *.all4running.be 21run.com *.21run.com *.dhlparcel.nl https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.googletagmanager.com all4running.nl *.all4running.nl all4running.be *.all4running.be 21run.com *.21run.com *.dhlparcel.nl *.googleapis.com *.google.com *.doubleclick.net *.googlesyndication.com cdn.belco.io wss:\/\/chat.belco.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site *.bazaarvoice.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: https:\/\/fonts.gstatic.com *.stape.io *.fontawesome.com https:\/\/fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com d114hh0cykhyb0.cloudfront.net *.mida.so data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com google.com *.braintreegateway.com *.paypal.com *.google.com www.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.stape.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com superbrightleds.atlassian.net *.criteo.com *.criteo.net *.nr-data.net *.trustpilot.com *.pinimg.com *.pinterest.com *.licdn.com *.linkedin.com *.vwo.com *.facebook.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.trackedlink.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net *.stape.io https:\/\/firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/redchamps.com livehelpnow.net *.livehelpnow.net *.placeholder.com *.cloudfront.net *.trustkeeper.net *.trustwave.com *.digicert.com dis.criteo.com tags.bluekai.com secure.adnxs.com sync.ad-stir.com *.yahoo.com *.360yield.com *.3lift.com *.addthis.com *.adnxs.com *.adscale.de *.advertising.com *.agkn.com *.amazon-adsystem.com *.bbb.org *.bidswitch.net *.bing.com *.casalemedia.com *.clmbtech.com *.contextweb.com *.criteo.com *.demdex.net *.dmxleo.com matching.ivitrack.com *.krxd.net *.liadm.com mcprod.superbrightleds.com *.media.net exchange.mediavine.com partner.mediawallahscript.com *.omnitagjs.com *.outbrain.com *.postrelease.com *.pubmatic.com *.revcontent.com *.rlcdn.com *.rubiconproject.com *.sharethrough.com *.smaato.net *.socdm.com *.smartadserver.com *.stickyadstv.com *.taboola.com *.tapad.com *.teads.tv ad.tpmn.co.kr *.tremorhub.com *.turn.com *.yieldlab.net *.yieldmo.com *.zonos.com *.pinimg.com *.pinterest.com *.linkedin.com *.visualwebsiteoptimizer.com id5-sync.com a.twiago.com sync.1rx.io *.facebook.com bzr.openai.com *.mida.so data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https:\/\/cdn.jsdelivr.net\/npm\/@ryangjchandler\/spruce@2.x.x\/dist\/spruce.umd.js www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.doubleclick.net *.stape.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com superbrightleds.atlassian.net *.digicert.com *.criteo.net *.criteo.com *.zonos.com *.trustpilot.com *.iglobalstores.com *.mixpanel.com *.mxpnl.com *.pinimg.com *.pinterest.com *.googleoptimize.com pageimprove.io *.licdn.com *.linkedin.com *.visualwebsiteoptimizer.com *.vwo.com *.facebook.net *.livehelpnow.net *.bing.com bzrcdn.openai.com *.mida.so *.maxmind.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com webchat.dotdigital.com webchat.staging.dotdigital.com downloads.mailchimp.com https:\/\/fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com https:\/\/fonts.bunny.net *.stripe.network *.stripecdn.com *.amazon.com d114hh0cykhyb0.cloudfront.net http:\/\/localhost:* *.mida.so *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https:\/\/maps.googleapis.com https:\/\/player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com places.googleapis.com *.doubleclick.net *.googlesyndication.com *.stape.io https:\/\/get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.criteo.com *.zonos.com *.mixpanel.com *.pinimg.com *.pinterest.com pageimprove.io *.visualwebsiteoptimizer.com *.facebook.com bzr.openai.com *.mida.so *.mmapiws.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https:\/\/www.google-analytics.com; frame-src 'self' https:\/\/www.googletagmanager.com;","count":3},{"content-security-policy-report-only":" font-src *.gstatic.com mcstaging.iochile.cl mcstaging.magriffe.cl mcstaging.ashchile.cl www.iochile.cl www.magriffe.cl www.ashchile.cl *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.transbank.cl *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com *.newrelic.com *.herokuapp.com *.doubleclick.net\/ *.googleapis.com mcstaging.iochile.cl mcstaging.magriffe.cl mcstaging.ashchile.cl www.iochile.cl www.magriffe.cl www.ashchile.cl *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.google.com.ar *.instagram.com *.cdninstagram.com *.gstatic.com *.facebook.com *.newrelic.com *.clarity.ms *.bing.com *.googleapis.com mcstaging.iochile.cl mcstaging.magriffe.cl mcstaging.ashchile.cl www.iochile.cl www.magriffe.cl www.ashchile.cl www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/rum.hlx.page *.googleapis.com *.woowup.com *.herokuapp.com *.instagram.com *.facebook.net *.newrelic.com *.nr-data.net *.clarity.ms mcstaging.iochile.cl mcstaging.magriffe.cl mcstaging.ashchile.cl www.iochile.cl www.magriffe.cl www.ashchile.cl onesignal.com *.onesignal.com *.avada.io player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.herokuapp.com *.newrelic.com mcstaging.iochile.cl mcstaging.magriffe.cl mcstaging.ashchile.cl www.iochile.cl www.magriffe.cl www.ashchile.cl *.fontawesome.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.google.com.ar *.doubleclick.com *.doubleclick.net *.newrelic.com *.nr-data.net *.clarity.ms mcstaging.iochile.cl mcstaging.magriffe.cl mcstaging.ashchile.cl www.iochile.cl www.magriffe.cl www.ashchile.cl https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src mcstaging.iochile.cl mcstaging.magriffe.cl mcstaging.ashchile.cl www.iochile.cl www.magriffe.cl www.ashchile.cl 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.solidgate.com *.cdn-apple.com *.stackadapt.com *.cookielaw.org *.tiktok.com *.snapchat.com *.googletagmanager.com *.connect.facebook.net *.sc-static.net *.bing.com *.taboola.com https:\/\/s.axon.ai https:\/\/c.albss.com *.impactcdn.com *.rtbrain.app https:\/\/fast.ssqt.io *.applovin.com *.google.com *.paypal.com *.doubleclick.net *.googleadservices.com *.forter.com *.cloudfront.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' *.gstatic.com *.cdn-apple.com; img-src 'self' data: blob: https:; frame-src 'self' *.solidgate.com *.cdn-apple.com *.google.com *.paypal.com *.snapchat.com *.rtbrain.app; connect-src 'self' *.solidgate.com *.solidgate-dev.com *.stackadapt.com *.tiktok.com *.tiktokw.us *.snapchat.com *.amazonaws.com *.applovin.com *.eppo.cloud *.sentry.io *.onetrust.com *.cookielaw.org *.googleapis.com *.rtbrain.app *.googletagmanager.com https:\/\/connect.facebook.net https:\/\/www.facebook.com *.bing.com *.taboola.com *.paypal.com *.google.com *.asqq.io *.sjv.io *.pxf.io *.impactcdn.com *.impct.site *.browser-intake-datadoghq.com *.forter.com wss:\/\/*.forter.com *.cloudfront.net https:\/\/1.1.1.1 *.siteperformancetest.net https:\/\/siteperformancetest.net; worker-src 'self' blob:; object-src 'none'; report-uri https:\/\/csp-report.browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub693ad1773743e9192bc387fd4c7cb969&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Awellfunnel%2Cenv%3Aprod","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.certcapture.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com js.mollie.com www.xtento.com *.zuora.com *.worldpay.com theteachingcompanysalesllc.demdex.net *.pinterest.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com theteachingcompany.d1.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com https:\/\/images.unsplash.com https:\/\/www.mollie.com www.xtento.com cdn.xtento.com *.teach12.com *.thegreatcoursesplus.com prd.jwpltx.com *.pinterest.com bat.bing.com *.amazon-adsystem.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.certcapture.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com https:\/\/maps.googleapis.com *.avada.io js.mollie.com www.xtento.com cdn.xtento.com cdnjs.cloudflare.com *.fontawesome.com acsbap.com acsbapp.com *.acsbap.com *.acsbapp.com *.teach12.com *.tiqcdn.com cltgtstor001.blob.core.windows.net *.gstatic.com *.zuora.com *.worldpay.com *.jwpcdn.com analytics.tiktok.com *.bitmovin.com *.visioncritical.com bat.bing.com www.dwin1.com *.amazon-adsystem.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com display.ugc.bazaarvoice.com *.fontawesome.com cdnjs.cloudflare.com *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.teach12.com *.bitmovin.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.certcapture.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/get.geojs.io *.avada.io theteachingcompany.d1.sc.omtrdc.net *.fontawesome.com *.acsbap.com *.acsbapp.com *.bitmovin.com *.slgnt.us *.tgcmag.com *.thegreatcourses.com *.theplatform.com teachco-mp4.akamaized.net *.cloudfunctions.net *.pinterest.com analytics.tiktok.com *.tealiumiq.com *.amazon-adsystem.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/challenges.cloudflare.com https:\/\/wsrv.nl https:\/\/mc.yandex.ru https:\/\/mc.yandex.com https:\/\/mc.webvisor.com https:\/\/mc.webvisor.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:\/\/wsrv.nl https:\/\/image.tmdb.org https:\/\/s4.anilist.co https:\/\/yt3.googleusercontent.com https:\/\/*.googleusercontent.com https:\/\/i.ytimg.com https:\/\/i.imgur.com https:\/\/imgur.com https:\/\/i.ibb.co https:\/\/upload.wikimedia.org https:\/\/graph.facebook.com https:\/\/images.weserv.nl https:\/\/mc.yandex.ru https:\/\/mc.yandex.com https:\/\/mc.webvisor.com https:\/\/provider-static.plex.tv https:\/\/images.pluto.tv https:\/\/tvpnlogopus.samsungcloud.tv https:\/\/images.sr.roku.com https:\/\/xstreamcp-assets-msp.streamready.in https:\/\/canvas-lb.tubitv.com https:\/\/jiotvimages.cdn.jio.com https:\/\/dtil.tmsimg.com https:\/\/iptvx.one https:\/\/a.espncdn.com https:\/\/pbs.twimg.com https:\/\/www.lyngsat.com https:\/\/static.wikia.nocookie.net https:\/\/www.vivalivetv.com https:\/\/i.gyazo.com https:\/\/raw.githubusercontent.com https:\/\/github.com https:\/\/*.fbcdn.net https:\/\/english.cdn.zeenews.com https:\/\/india.mom-gmr.org; font-src 'self' data:; media-src 'self' blob: https:; frame-src 'self' https:\/\/embed.st https:\/\/*.embed.st https:\/\/2embed.cc https:\/\/*.2embed.cc https:\/\/2embed.skin https:\/\/*.2embed.skin https:\/\/2embed.org https:\/\/*.2embed.org https:\/\/vidsrc.in https:\/\/*.vidsrc.in https:\/\/vidsrc.cc https:\/\/*.vidsrc.cc https:\/\/vidsrc.icu https:\/\/*.vidsrc.icu https:\/\/vidsrc.net https:\/\/*.vidsrc.net https:\/\/vidlink.pro https:\/\/*.vidlink.pro https:\/\/autoembed.cc https:\/\/*.autoembed.cc https:\/\/autoembed.net https:\/\/*.autoembed.net https:\/\/superembed.stream https:\/\/*.superembed.stream https:\/\/multiembed.mov https:\/\/*.multiembed.mov https:\/\/vidbinge.to https:\/\/*.vidbinge.to https:\/\/embed.su https:\/\/*.embed.su https:\/\/smashystream.com https:\/\/*.smashystream.com https:\/\/vidfast.pro https:\/\/*.vidfast.pro https:\/\/mappletv.uk https:\/\/*.mappletv.uk https:\/\/www.fmovies.direct https:\/\/daddylive.eu https:\/\/*.daddylive.eu https:\/\/thetvapp.to https:\/\/*.thetvapp.to https:\/\/kaido.to https:\/\/*.kaido.to https:\/\/miruro.tv https:\/\/*.miruro.tv https:\/\/miruro.com https:\/\/*.miruro.com https:\/\/anicrush.to https:\/\/*.anicrush.to https:\/\/megaplay.buzz https:\/\/*.megaplay.buzz https:\/\/animeplay.cfd https:\/\/*.animeplay.cfd https:\/\/vidnest.fun https:\/\/*.vidnest.fun https:\/\/anilink.cc https:\/\/*.anilink.cc https:\/\/megavid.buzz https:\/\/*.megavid.buzz https:\/\/challenges.cloudflare.com https:\/\/www.youtube.com https:\/\/*.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/*.youtube-nocookie.com https:\/\/dlhd.pk https:\/\/*.dlhd.pk https:\/\/dlhd.sx https:\/\/*.dlhd.sx https:\/\/dlhd.so https:\/\/*.dlhd.so https:\/\/daddylive.sx https:\/\/*.daddylive.sx https:\/\/1ststreams.cfd https:\/\/*.1ststreams.cfd https:\/\/jimpenopisonline.online https:\/\/*.jimpenopisonline.online https:\/\/newkso.ru https:\/\/*.newkso.ru https:\/\/phantemlis.top https:\/\/*.phantemlis.top https:\/\/tv.garden https:\/\/*.tv.garden https:\/\/famelack.com https:\/\/*.famelack.com https:\/\/ustvgo.tv https:\/\/*.ustvgo.tv https:\/\/timetv.live https:\/\/*.timetv.live https:\/\/watchtvonline.cc https:\/\/*.watchtvonline.cc https:\/\/wwitv.com https:\/\/*.wwitv.com; connect-src 'self' wss: https: https:\/\/mc.yandex.ru https:\/\/mc.yandex.com https:\/\/mc.webvisor.com https:\/\/mc.webvisor.org; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; report-uri \/v1\/csp\/report","count":3},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.hotjar.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com https:\/\/challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.googletagmanager.com *.hotjar.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https:\/\/images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.ggpht.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.google-analytics.com *.google.com www.facebook.com *.hotjar.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/challenges.cloudflare.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.googletagmanager.com connect.facebook.net www.clarity.ms *.clarity.ms static.hotjar.com script.hotjar.com *.hsforms.net *.hsforms.com *.gstatic.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com maps.googleapis.com places.googleapis.com *.gstatic.com data: api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com www.google-analytics.com *.googletagmanager.com analytics.google.com www.facebook.com connect.facebook.net *.clarity.ms *.hotjar.com *.hotjar.io t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/www.theknightshop.com\/csp_report_watch;","count":3},{"content-security-policy-report-only":" default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; frame-ancestors 'self'; form-action 'self';","count":3},{"content-security-policy-report-only":" default-src 'self' data: blob: https:\/\/*.trustage.com https:\/\/*.trustagedem.com https:\/\/*.trustagedemo.com; connect-src 'self' data: properties: https:\/\/cmfglifeinsurance.us-6.evergage.com https:\/\/api.coralanalytic.com https:\/\/rp4.liadm.com https:\/\/trustageimages.azureedge.net https:\/\/bat.bing.com wss:\/\/127.0.0.1:2029\/ wss:\/\/chat-gw-de-na1.niceincontact.com https:\/\/pagead2.googlesyndication.com https:\/\/get663.com https:\/\/cm.trustage.com https:\/\/dd.binsiad.com https:\/\/www.google.de https:\/\/us.i.posthog.com wss:\/\/127.0.0.1:2028\/ https:\/\/www.google.fr https:\/\/events.binsiad.com https:\/\/www.google.pl wss:\/\/127.0.0.1:2026\/ wss:\/\/127.0.0.1:2021\/ wss:\/\/127.0.0.1:2020\/ wss:\/\/127.0.0.1:2024\/ wss:\/\/127.0.0.1:2023\/ wss:\/\/127.0.0.1:2025\/ wss:\/\/127.0.0.1:2022\/ https:\/\/connect.facebook.net https:\/\/safesearchinc.com https:\/\/px.ads.linkedin.com https:\/\/www.google.ca https:\/\/singleview.site https:\/\/statsdata.online https:\/\/gadstat.com https:\/\/www.gstatic.com https:\/\/analytics.google.com https:\/\/www.googleadservices.com https:\/\/logx.optimizely.com https:\/\/stats.g.doubleclick.net https:\/\/www.google.com https:\/\/www.google.co.uk https:\/\/ad.doubleclick.net https:\/\/bat.bing.net https:\/\/cunamutualdtc.my.salesforce-scrt.com https:\/\/bded8a3c6ae-1-1053047382554.us-central1.run.app https:\/\/aax-eu.amazon-adsystem.com https:\/\/googleads.g.doubleclick.net https:\/\/rp.liadm.com https:\/\/people.api.zetaglobal.net https:\/\/ara.paa-reporting-advertising.amazon https:\/\/k6-e4e4123be8e54363900a90353991ca93.ecs.us-west-1.on.aws https:\/\/c.amazon-adsystem.com https:\/\/eastus2-3.in.applicationinsights.azure.com https:\/\/s.amazon-adsystem.com https:\/\/*.google-analytics.com https:\/\/*.google.com https:\/\/*.linkedin.com https:\/\/*.niceincontact.com https:\/\/clientstream.launchdarkly.com\/ https:\/\/fonts.gstatic.com https:\/\/*.optimizely.com https:\/\/*.cunamutual.com https:\/\/www.nextinsure.com https:\/\/geolocation.onetrust.com https:\/\/privacyportal.onetrust.com https:\/\/*.googlesyndication.com https:\/\/*.trustage.com https:\/\/us-central1-adaptive-growth.cloudfunctions.net https:\/\/cdn.linkedin.oribi.io https:\/\/s.yimg.com https:\/\/*.doubleclick.net https:\/\/*.trustagedem.com https:\/\/*.trustagedemo.com https:\/\/*.oktacdn.com https:\/\/*.bing.com https:\/\/*.googleapis.com https:\/\/cunamutual.okta.com https:\/\/cdn.cookielaw.org https:\/\/cunamutual.oktapreview.com\/ https:\/\/*.googleadservices.com\/ https:\/\/*.qualtrics.com\/ https:\/\/dc.services.visualstudio.com\/ https:\/\/*.levelaccess.net https:\/\/www.googletagmanager.com https:\/\/facebook.com\/ https:\/\/*.segment.io https:\/\/*.segment.com https:\/\/*.permutive.com https:\/\/calc-backend-prod.herokuapp.com https:\/\/www.facebook.com https:\/\/eastus2-0.in.applicationinsights.azure.com https:\/\/*.api.boomtrain.com https:\/\/cunamutualdtc--democc.sandbox.my.salesforce-scrt.com https:\/\/cunamutualdtc.my.site.com https:\/\/*.c360a.salesforce.com; frame-ancestors 'self' https:\/\/trustage.com https:\/\/www.trustage.com https:\/\/*.optimizely.com https:\/\/*.trustagedem.com https:\/\/*.trustagedemo.com; frame-src 'self' nsb: https:\/\/trustage.com https:\/\/*.cdn.optimizely.com https:\/\/assets.l3harris.com http:\/\/8689224.fls.doubleclick.net https:\/\/redirect.isolation.zscaler.com http:\/\/10.180.0.184:15871 https:\/\/gateway.id.swg.umbrella.com https:\/\/static.deledao.com https:\/\/proxyerror.quad.com http:\/\/192.168.6.26:15871 https:\/\/172.20.16.1:8090 https:\/\/135.153.121.197:15871 http:\/\/10.10.20.81:15871 https:\/\/login.zscalerthree.net https:\/\/localhost:6543 http:\/\/10.1.2.228:15871 https:\/\/172.16.30.2:8090 https:\/\/pwm-image.trendmicro.com https:\/\/aax-eu.amazon-adsystem.com https:\/\/a25241461358.cdn.optimizely.com https:\/\/idprotect.trendmicro.com https:\/\/authenticate.ibotta.com http:\/\/10.22.21.92:15871 https:\/\/block.opendns.com https:\/\/pelican-secure-cloud.portal.banyanops.com https:\/\/192.168.20.250:8090 https:\/\/eun.dadco.com https:\/\/lsrelay-config-production.s3.amazonaws.com https:\/\/192.168.58.254:8090 http:\/\/acceptable-use-policy.s3-website-us-east-1.amazonaws.com http:\/\/172.25.120.157:15871 http:\/\/10.22.21.91:15871 https:\/\/gateway.zscloud.net https:\/\/sso.georgiasown.org http:\/\/10.21.21.91:15871 http:\/\/10.253.20.212:15871 http:\/\/10.10.22.46:15871 http:\/\/localhost.localdomain http:\/\/127.0.0.1:0 http:\/\/192.168.100.46:15871 https:\/\/zscaler.nml.com https:\/\/10.10.35.1:8090 http:\/\/10.0.16.73:15871 https:\/\/gateway.zscalerthree.net http:\/\/10.1.70.107:15871 https:\/\/i.liadm.com http:\/\/10.56.10.30:15871 https:\/\/block.sse.cisco.com http:\/\/wsa.ironport.gecu-ep.org http:\/\/10.1.5.129:15871 https:\/\/portal.bitglass.com https:\/\/safe.menlosecurity.com https:\/\/s.amazon-adsystem.com https:\/\/*.googlesyndication.com https:\/\/cunamutual.widen.net https:\/\/login.microsoftonline.com https:\/\/*.widencdn.net https:\/\/*.opendns.com https:\/\/*.optimizely.com https:\/\/www.youtube.com https:\/\/chase.hostedpaymentservice.net https:\/\/chase-var.hostedpaymentservice.net https:\/\/*.doubleclick.net https:\/\/*.trustage.com https:\/\/*.trustagedem.com https:\/\/*.trustagedemo.com https:\/\/*.oktacdn.com https:\/\/www.googletagmanager.com https:\/\/*.trustpilot.com\/ https:\/\/*.flashtalking.com https:\/\/*.google.com https:\/\/*.qualtrics.com https:\/\/*.affec.tv https:\/\/*.opendns.com https:\/\/www.facebook.com https:\/\/*.ceros.com https:\/\/home-c27.incontact.com https:\/\/*.polly.co https:\/\/web-modules-de-na1.niceincontact.com https:\/\/cunamutualdtc--democc.sandbox.my.site.com https:\/\/cunamutualdtc.my.site.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https:\/\/cmfglifeinsurance.us-6.evergage.com https:\/\/cdn.segment.com https:\/\/z7yj.82omyo.com https:\/\/googleads.g.doubleclick.net https:\/\/early.webawesome.com https:\/\/b-code.liadm.com https:\/\/live.rezync.com https:\/\/c.amazon-adsystem.com https:\/\/*.googlesyndication.com https:\/\/*.optimizely.com https:\/\/optimizely.s3.amazonaws.com https:\/\/cdn-assets-prod.s3.amazonaws.com https:\/\/static-demo.trustage.cloud https:\/\/*.trustage.com https:\/\/*.googleadservices.com https:\/\/*.trustagedem.com https:\/\/*.trustagedemo.com https:\/\/cdn.cookielaw.org https:\/\/*.signalintent.com https:\/\/*.google.com https:\/\/chase-var.hostedpaymentservice.net https:\/\/chase.hostedpaymentservice.net https:\/\/cdn.pdst.fm https:\/\/snap.licdn.com https:\/\/insurance.mediaalpha.com https:\/\/us-central1-adaptive-growth.cloudfunctions.net https:\/\/s.yimg.com https:\/\/*.facebook.net https:\/\/geolocation.onetrust.com https:\/\/cdn.linkedin.oribi.io https:\/\/privacyportal.onetrust.com https:\/\/*.google.com https:\/\/sp.analytics.yahoo.com https:\/\/*.linkedin.com https:\/\/www.pagespeed-mod.com https:\/\/*.google-analytics.com https:\/\/*.salesforceliveagent.com\/ https:\/\/*.oktacdn.com\/ https:\/\/*.trustpilot.com\/ https:\/\/*.gstatic.com\/ https:\/\/*.googletagmanager.com\/ https:\/\/az416426.vo.msecnd.net\/ https:\/\/*.levelaccess.net\/ https:\/\/*.qualtrics.com\/ https:\/\/www.googleoptimize.com https:\/\/bat.bing.com https:\/\/solutions.invocacdn.com https:\/\/pnapi.invoca.net https:\/\/*.affec.tv\/ https:\/\/*.evgnet.com\/ https:\/\/*.ceros.com https:\/\/home-c27.incontact.com https:\/\/secure.adnxs.com https:\/\/cdn.permutive.com https:\/\/trkn.us https:\/\/www.facebook.com https:\/\/cdn.c360a.salesforce.com\/ https:\/\/seal.digicert.com\/ https:\/\/*.boomtrain.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' blob: https:\/\/*.trustage.com https:\/\/c.amazon-adsystem.com https:\/\/3001.scriptcdn.net https:\/\/secured-pixel.com https:\/\/get663.com https:\/\/a.usbrowserspeed.com https:\/\/gc.kis.v2.scr.kaspersky-labs.com https:\/\/b-code.liadm.com https:\/\/cdn.binsiad.com https:\/\/cdn.browsiprod.com https:\/\/us-assets.i.posthog.com https:\/\/live.rezync.com https:\/\/siteintercept.qualtrics.com https:\/\/go.affec.tv https:\/\/app.shop.pe https:\/\/cdn.optimizely.com https:\/\/lottingem.com https:\/\/www.google-analytics.com https:\/\/s7.addthis.com https:\/\/zn6qfqur9sb2nvydt-cunamutualgroup.siteintercept.qualtrics.com https:\/\/embed.signalintent.com https:\/\/widget.trustpilot.com https:\/\/googleads.g.doubleclick.net https:\/\/cdn.boomtrain.com https:\/\/cmfglifeinsurance.us-6.evergage.com https:\/\/www.gstatic.com https:\/\/early.webawesome.com https:\/\/*.optimizely.com https:\/\/*.affec.tv\/ https:\/\/chase.hostedpaymentservice.net https:\/\/*.bing.com https:\/\/*.google.com https:\/\/*.doubleclick.net https:\/\/*.googleadservices.com https:\/\/*.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/*.googleadservices.com https:\/\/*.googlesyndication.com https:\/\/cdn.pdst.fm https:\/\/cdn.cookielaw.org https:\/\/snap.licdn.com https:\/\/*.qualtrics.com https:\/\/s.yimg.com https:\/\/*.salesforceliveagent.com https:\/\/*.facebook.com https:\/\/connect.facebook.net https:\/\/www.youtube.com https:\/\/bat.bing.com https:\/\/*.evgnet.com\/ https:\/\/*.levelaccess.net https:\/\/chase-var.hostedpaymentservice.net https:\/\/*.oktacdn.com https:\/\/www.googleoptimize.com https:\/\/*.trustpilot.com\/ https:\/\/az416426.vo.msecnd.net\/ https:\/\/solutions.invocacdn.com https:\/\/secure.adnxs.com https:\/\/cdn.permutive.com https:\/\/*.signalintent.coms https:\/\/*.segment.com https:\/\/*.ceros.coms https:\/\/cdn.c360a.salesforce.com\/ https:\/\/seal.digicert.com\/ https:\/\/tracking.intentsify.io\/ https:\/\/web-modules-de-na1.niceincontact.com\/ https:\/\/cunamutualdtc--democc.sandbox.my.site.com https:\/\/cunamutualdtc.my.site.com; style-src 'self' 'unsafe-inline' https:\/\/cmfglifeinsurance.us-6.evergage.com https:\/\/early.webawesome.com https:\/\/*.trustage.com https:\/\/*.trustagedem.com https:\/\/*.trustagedemo.com https:\/\/*.signalintent.com https:\/\/rsms.me https:\/\/*.googleapis.com https:\/\/*.google.com https:\/\/*.googlesyndication.com https:\/\/google.ca https:\/\/www.googleoptimize.com https:\/\/*.google-analytics.com https:\/\/*.trustpilot.com\/ https:\/\/www.youtube.com https:\/\/web-modules-de-na1.niceincontact.com  https:\/\/pwm-image.trendmicro.com https:\/\/cdn.honey.io https:\/\/www.gstatic.com\/ https:\/\/cunamutualdtc--democc.sandbox.my.site.com https:\/\/cunamutualdtc.my.site.com; style-src-elem 'self' 'unsafe-inline' https:\/\/cdnjs.cloudflare.com https:\/\/early.webawesome.com https:\/\/static.trustage.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: file: https: https:\/\/googleads.g.doubleclick.net https:\/\/seal.digicert.com https:\/\/www.facebook.com https:\/\/map.go.affec.tv https:\/\/px.ads.linkedin.com https:\/\/www.googleadservices.com https:\/\/cnv.event.prod.bidr.io https:\/\/cdn.cookielaw.org; font-src 'self' chrome-extension: ms-browser-extension: data: https:\/\/cmfglifeinsurance.us-6.evergage.com https:\/\/images.simplycodes.com https:\/\/cdnjs.cloudflare.com https:\/\/at.alicdn.com https:\/\/web-modules-de-na1.niceincontact.com https:\/\/use.typekit.net https:\/\/frontend-cdn.perplexity.ai https:\/\/www.slant.co https:\/\/static.shopback.com https:\/\/static.trustage.com https:\/\/static-demo.trustage.com https:\/\/fonts.gstatic.com https:\/\/rsms.me https:\/\/maxcdn.bootstrapcdn.com https:\/\/fonts.cdnfonts.com https:\/\/use.fontawesome.com https:\/\/static2.sharepointonline.com https:\/\/static.zip.co https:\/\/embed.signalintent.com https:\/\/appservice.azureedge.net\/; object-src 'self' https:\/\/go.polly.co https:\/\/insurance.polly.co https:\/\/a25241461358.cdn.optimizely.com; media-src 'self' https:\/\/d4qgj78fzsl5j.cloudfront.net; report-uri \/api\/csp\/report;","count":3},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/challenges.cloudflare.com https:\/\/cdnjs.cloudflare.com https:\/\/*.optimizely.com https:\/\/static.addtoany.com https:\/\/cdn.jsdelivr.net https:\/\/*.trustpilot.com https:\/\/unpkg.com https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.clarity.ms https:\/\/*.doubleclick.net https:\/\/*.googleadservices.com https:\/\/*.googleapis.com https:\/\/*.google.com https:\/\/elfsightcdn.com https:\/\/*.elfsightcdn.com https:\/\/*.elfsight.com https:\/\/*.tawk.to https:\/\/*.bing.com https:\/\/*.facebook.net https:\/\/c.webtrends-optimize.com https:\/\/pixel.byspotify.com https:\/\/*.tiktok.com https:\/\/sc-static.net https:\/\/*.wistia.net https:\/\/*.wistia.com https:\/\/*.snapchat.com https:\/\/*.sentry-cdn.com https:\/\/*.flywire.com; frame-src 'self' https:\/\/challenges.cloudflare.com https:\/\/*.cdn.optimizely.com https:\/\/static.addtoany.com https:\/\/widget.trustpilot.com https:\/\/*.youtube.com https:\/\/*.youtube-nocookie.com https:\/\/tr.snapchat.com https:\/\/*.wistia.net https:\/\/*.wistia.com https:\/\/*.facebook.com https:\/\/*.flywire.com https:\/\/*.kaplantestofenglish.com; frame-ancestors 'self'; base-uri 'self'; report-uri \/report-csp-violation; upgrade-insecure-requests","count":3},{"content-security-policy-report-only":" default-src 'self'; frame-ancestors 'self';","count":3},{"content-security-policy-report-only":" default-src 'none'; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/region1.google-analytics.com https:\/\/dgap.org https:\/\/createsend.com https:\/\/api.friendlycaptcha.com https:\/\/internationalepolitik.de https:\/\/static.elfsight.com https:\/\/core.service.elfsight.com https:\/\/universe-static.elfsightcdn.com https:\/\/matomo.dgap.org\/; font-src 'self' data: dgap.org https:\/\/player.podigee-cdn.net https:\/\/fonts.gstatic.com; frame-src 'self' https:\/\/dgap.org https:\/\/www.internationalepolitik.de https:\/\/www.ip-quarterly.com https:\/\/www.youtube-nocookie.com\/embed\/ https:\/\/e.issuu.com https:\/\/www.google.com https:\/\/player.podigee-cdn.net https:\/\/av.dgap.org https:\/\/av.internationalepolitik.de https:\/\/av.ip-quarterly.com https:\/\/matomo.dgap.org https:\/\/www.openstreetmap.org https:\/\/cloud.dgap.org https:\/\/audio.podigee-cdn.net https:\/\/sign.dgap.dev https:\/\/www.helpmundo.de https:\/\/www.helpdirect.org https:\/\/tube.dgap.org; img-src 'self' https:\/\/www.gstatic.com https:\/\/*.met.vgwort.de https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com data: dgap.org https:\/\/matomo.dgap.org https:\/\/images.podigee-cdn.net https:\/\/region1.google-analytics.com; manifest-src 'self'; media-src 'self' https:\/\/audio.podigee-cdn.net; prefetch-src 'self'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https:\/\/dgap.org https:\/\/matomo.dgap.org https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/internationalepolitik.de https:\/\/ip-quarterly.com https:\/\/js.createsend1.com https:\/\/player.podigee-cdn.net https:\/\/audio.podigee-cdn.net https:\/\/www.helpmundo.de https:\/\/www.helpdirect.org cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/www.google.com unpkg.com https:\/\/matomo.dgap.org\/; script-src-attr 'self' 'report-sample'; script-src-elem 'self' 'report-sample' 'unsafe-inline' https:\/\/dgap.org https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/matomo.dgap.org https:\/\/js.createsend1.com https:\/\/player.podigee-cdn.net https:\/\/audio.podigee-cdn.net https:\/\/www.helpmundo.de https:\/\/www.helpdirect.org https:\/\/static.elfsight.com https:\/\/core.service.elfsight.com https:\/\/universe-static.elfsightcdn.com cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/www.google.com unpkg.com; style-src 'self' 'report-sample' 'unsafe-inline' https:\/\/js.createsend1.com https:\/\/www.gstatic.com https:\/\/dgap.org https:\/\/player.podigee-cdn.net https:\/\/audio.podigee-cdn.net cdnjs.cloudflare.com https:\/\/cdnjs.cloudflare.com unpkg.com; style-src-attr 'self' 'report-sample' 'unsafe-inline'; style-src-elem 'self' 'report-sample' 'unsafe-inline' https:\/\/www.google.com https:\/\/dgap.org https:\/\/player.podigee-cdn.net https:\/\/audio.podigee-cdn.net cdnjs.cloudflare.com https:\/\/cdnjs.cloudflare.com unpkg.com; worker-src 'self' blob:; form-action 'self' https:\/\/www.createsend.com https:\/\/dgap.org; frame-ancestors 'self' https:\/\/dgap.org https:\/\/www.internationalepolitik.de https:\/\/www.ip-quarterly.com https:\/\/av.dgap.org https:\/\/av.internationalepolitik.de https:\/\/av.ip-quarterly.com https:\/\/sign.dgap.dev; report-uri \/en\/system\/reporting\/default; report-to default","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com *.fontawesome.com https:\/\/widgets.trustedshops.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.baktotaal.nl *.baktotaal.de *.baktotaal.com baktotaal.nl baktotaal.de baktotaal.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https:\/\/pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.multisafepay.com https:\/\/pay.google.com https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com challenges.cloudflare.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com *.criteo.com consentcdn.cookiebot.eu consentcdn.cookiebot.com *.facebook.com www.googletagmanager.com td.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io magefan.com cm.magefan.com *.multisafepay.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.etrusted.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com *.disqus.com https:\/\/firebasestorage.googleapis.com maps.gstatic.com ts.tradetracker.net www.magmodules.eu *.gstatic.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.baktotaal.nl *.baktotaal.de *.baktotaal.com *.cloudfront.net www.google.nl permalink.psinfoodservice.com www.facebook.com *.linkedin.com *.squeezely.tech *.bing.net *.criteo.com *.usercentrics.eu *.cookiebot.com *.bing.com *.clarity.ms pagead2.googlesyndication.com google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.multisafepay.com https:\/\/pay.google.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com https:\/\/cdnjs.cloudflare.com cdnjs.cloudflare.com *.disqus.com *.avada.io *.shopify.com challenges.cloudflare.com maps.googleapis.com www.gstatic.com tm.tradetracker.net *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com *.criteo.com *.criteo.net squeezely.tech instant.page *.licdn.com *.bing.com *.bing-int.com consent.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.com consentcdn.cookiebot.eu cdn.jsdelivr.net *.hotjar.com connect.facebook.net *.clarity.ms *.varify.io d5yoctgpv4cpx.cloudfront.net www.google.com pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com *.multisafepay.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/cdnjs.cloudflare.com cdnjs.cloudflare.com https:\/\/fonts.bunny.net www.gstatic.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.baktotaal.nl *.baktotaal.de *.baktotaal.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.multisafepay.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/get.geojs.io *.avada.io *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com *.baktotaal.nl *.baktotaal.de *.baktotaal.com *.criteo.com consentcdn.cookiebot.com consentcdn.cookiebot.eu *.bing.net *.bing.com *.varify.io *.clarity.ms www.facebook.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com pagead2.googlesyndication.com www.google.com google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self' https: data: blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:;","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https:\/\/www.facebook.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/plumrocket.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com www.google.com *.facebook.com *.dotdigital-pages.com *.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https:\/\/plumrocket.com *.weltpixel.com 'self' 'unsafe-inline'; img-src https:\/\/assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net https:\/\/www.facebook.com https:\/\/www.google.co.in https:\/\/cdn.hoolah.co https:\/\/scontent.cdninstagram.com\/ https:\/\/d27eqfoeueoniv.cloudfront.net https:\/\/amcglobal.sc.omtrdc.net https:\/\/dpm.demdex.net https:\/\/scontent-sin6-1.cdninstagram.com https:\/\/scontent-sin6-2.cdninstagram.com\/ https:\/\/scontent-sin6-3.cdninstagram.com https:\/\/scontent-sin6-4.cdninstagram.com *.clarity.ms *.bing.com *.trackedlink.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.dycdn.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-ds.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ https:\/\/connect.facebook.net *.tiktok.com *.cloudfront.net *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.paypal.com *.paypalobjects.com *.googleapis.com *.gstatic.com *.google.com www.facebook.com https:\/\/merchant.cdn.hoolah.co https:\/\/merchant.cdn.hoolah.co.net *.trackedweb.net *.hit-pay.com *.clarity.ms https:\/\/hit-pay.com\/hitpay.js https:\/\/am.freshrelevance.com\/ *.assets.adobedtm.com *.trackedlink.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.dycdn.net dn1i8v75r669j.cloudfront.net dkpklk99llpj0.cloudfront.net ds9p2a60lh6fp.cloudfront.net am.freshrelevance.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/merchant.cdn.hoolah.co https:\/\/cdn.hoolah.co https:\/\/cdnjs.cloudflare.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.sentry.io *.doubleclick.net *.facebook.net *.facebook.com https:\/\/web.facebook.com *.demdex.net *.omtrdc.net *.tiktok.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.paypal.com *.paypalobjects.com *.trackedweb.net https:\/\/melissa.com.sg\/fbe\/Pixel\/ProductInfoForAddToCart *.clarity.ms wss:\/\/am.freshrelevance.com\/ https:\/\/am.freshrelevance.com *.dycdn.net *.trackedlink.net *.dotdigital-pages.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com am.freshrelevance.com wss:\/\/am.freshrelevance.com wss:\/\/am.dycdn.net dn1i8v75r669j.cloudfront.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.analytics.google.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" frame-ancestors 'self' ; object-src 'none' ; report-uri https:\/\/cspreports.realpage.com\/api\/reports\/save\/report-only;","count":3},{"content-security-policy-report-only":" font-src *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.gstatic.com data: https:\/\/fonts.gstatic.com *.klarnacdn.net *.fontawesome.com https:\/\/fonts.bunny.net *.cloudflare.com *.bootstrapcdn.com *.commerce-connector.com *.typekit.net *\/csp\/report\/uri\/ *.hotjar.com *.hotjar.io *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com *.wahl.com *.userway.org *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de api.bazaarvoice.com stg.api.bazaarvoice.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/plumrocket.com *.wahl.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.stripe.com stripe.com *.link.com *.amazon.com *.wahl.com; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.bluesnap.com *.cardinalcommerce.com *.kaptcha.com *.sentry.io *.google.com *.gstatic.com google.com sandbox.bluesnap.com sandbox1.bluesnap.com sandbox2.bluesnap.com sandpay.bluesnap.com ws.bluesnap.com ws1.bluesnap.com ws2.bluesnap.com pay.bluesnap.com *.klarna.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com *.adsrvr.org *.hotjar.com *.hotjar.io *\/csp\/report\/uri\/ *.hubspot.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.paypal.com * https:\/\/plumrocket.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.wahl.com www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; style-src *.adobe.com *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app fonts.googleapis.com https:\/\/fonts.googleapis.com display.ugc.bazaarvoice.com sandbox.bluesnap.com sandbox1.bluesnap.com sandbox2.bluesnap.com sandpay.bluesnap.com ws.bluesnap.com ws1.bluesnap.com ws2.bluesnap.com pay.bluesnap.com *.cardinalcommerce.com *.kaptcha.com *.sentry.io *.google.com *.gstatic.com google.com api.addressy.com *.klarnacdn.net *.fontawesome.com https:\/\/fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.googleapis.com *.powerreviews.com getfirebug.com cdn.dnky.co webchat.dotdigital.com *.yotpo.com *.cloudflare.com *.bootstrapcdn.com *.wahlclipper.com *.jsdelivr.net *.postcodeanywhere.co.uk *.commerce-connector.com *.typekit.net *\/csp\/report\/uri\/ unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com www.gstatic.com cdn.weglot.com *.wahl.com *.userway.org 'self' 'unsafe-inline'; object-src *.wahl.com 'self' 'unsafe-inline'; media-src *.adobe.com *.wahl.com 'self' 'unsafe-inline'; manifest-src *.wahl.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com sandbox.bluesnap.com sandbox1.bluesnap.com sandbox2.bluesnap.com sandpay.bluesnap.com ws.bluesnap.com ws1.bluesnap.com ws2.bluesnap.com pay.bluesnap.com *.cardinalcommerce.com *.kaptcha.com *.sentry.io *.google.com *.gstatic.com *.amazonaws.com google.com api.addressy.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com https:\/\/get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com stats.g.doubleclick.net ct.pinterest.com *.google-analytics.com *.whatcounts.com siteanalytics.whatcounts.com https:\/\/siteanalytics.whatcounts.com *.amazonaws.com\/ *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.yotpo.com *.cloudflare.com *.powerreviews.com *.wahlclipper.com *.syndigo.com *.postcodeanywhere.co.uk wss:\/\/ws41.hotjar.com *.commerce-connector.com *\/csp\/report\/uri\/ wss:\/\/*.hotjar.com *.hotjar.com *.hotjar.io *.hubspot.com *.hubapi.com *.hs-banner.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.stripe.com klarna.com *.link.com x.clarity.ms cdn.cookielaw.org forms.hscollectedforms.net geolocation.onetrust.com api.userway.org cdn77.api.userway.org cdn.userway.org api.weglot.com cdn.weglot.com https:\/\/cdn-api-weglot.com *.wahl.com *.hsforms.net *.hsforms.com *.clarity.ms *.pcapredict.com static.hsappstatic.net ad.doubleclick.net pixel-config.reddit.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; base-uri *.wahl.com 'self' 'unsafe-inline'; script-src https:\/\/pxl.jivox.com https:\/\/secure.adnxs.com https:\/\/apps.bazaarvoice.com\/ cdn.weglot.com 0409890c10.translations.weglot.io assets.adobedtm.com *.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com 'self' 'unsafe-inline' sandbox.bluesnap.com sandbox1.bluesnap.com sandbox2.bluesnap.com sandpay.bluesnap.com ws.bluesnap.com ws1.bluesnap.com ws2.bluesnap.com pay.bluesnap.com *.cardinalcommerce.com *.kaptcha.com *.sentry.io *.google.com static.cloudflareinsights.com cdnjs.cloudflare.com google.com api.addressy.com *.klarna.com *.klarnacdn.net *.klarnaservices.com *.avada.io *.shopify.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com pay.google.com applepay.cdn-apple.com *.powerreviews.com js-agent.newrelic.com *.googletagmanager.com https:\/\/www.googletagmanager.com\/gtm.js bat.bing.com *.google-analytics.com *.googleoptimize.com https:\/\/www.googleoptimize.com\/optimize.js *.trustedsite.com *.cloudflare.com *.twitter.com *.fontawesome.com *.wahlclipper.com *.googleapis.com *.jsdelivr.net *.bluesnap.com *.webcollage.net *.syndigo.com *.adsrvr.org *.hotjar.com *.hotjar.io *.pcapredict.com *.postcodeanywhere.co.uk *.commerce-connector.com *.amazonaws.com\/ *\/csp\/report\/uri\/ *.redditstatic.com *.hs-scripts.com *.hscollectedforms.net *.hs-banner.com *.usemessages.com *.hs-analytics.net *.hsadspixel.net *.hsleadflows.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com www.clarity.ms cdn.cookielaw.org js.hubspot.com cdn.userway.org svht.tradedoubler.com swrap.tradedoubler.com *.wahl.com *.hsforms.net *.hsforms.com static.hsappstatic.net scripts.clarity.ms www.xtento.com cdn.xtento.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; img-src static.hsappstatic.net https:\/\/ad.doubleclick.net https:\/\/*.wahl.com https:\/\/wahl.com https:\/\/wahlusa.com https:\/\/wahlpro.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobedtm.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app https:\/\/images.unsplash.com *.gstatic.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com  *.google.com google.com sandbox.bluesnap.com sandbox1.bluesnap.com sandbox2.bluesnap.com sandpay.bluesnap.com ws.bluesnap.com ws1.bluesnap.com ws2.bluesnap.com pay.bluesnap.com services.postcodeanywhere.co.uk *.klarna.com *.klarnaevt.com *.klarnacdn.net https:\/\/firebasestorage.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/www.mollie.com *.essentialaccessibility.com *.wahlanimal.com  s.ytimg.com  *.google.com.mx  *.google-analytics.com ct.pinterest.com bat.bing.com *.google.co.in *.cloudflare.com *.wahlclipper.com *.powerreviews.com *.googletagmanager.com *.cloudfront.net *.webcollage.net *.syndigo.cloud *.postcodeanywhere.co.uk *\/csp\/report\/uri\/ *.reddit.com *.hsforms.com *.hubspot.com  *.google.com.in  *.payments-amazon.com\/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.gstatic.com c.clarity.ms cdn.cookielaw.org cdn.userway.org *.wahl.com *.magecomp.com *.google.com.ua *.google.com.br ad.doubleclick.net www.xtento.com cdn.xtento.com *.yotpo.com data: 'self' 'unsafe-inline'; default-src https:\/\/*.wahl.com https:\/\/wahl.com https:\/\/wahlusa.com https:\/\/wahlpro.com *.wahl.com 'self' 'unsafe-inline' 'unsafe-eval'; report-uri https:\/\/csp-reporting-service.com\/my-project\/endpoint; report-to report-endpoint;","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https:;","count":3},{"content-security-policy-report-only":" font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action *.googlesyndication.com *.clarity.ms *.google.com *.facebook.com  'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ bid.g.doubleclick.net *.youtube-nocookie.com www.google.com *.tbibank.ro consentcdn.cookiebot.com *.google.ro *.facebook.com *.mny.ro mny.ro *.weltpixel.com *.googletagmanager.com *.doubleclick.net  *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com https:\/\/images.unsplash.com *.tbicp.com *.tbibank.ro imgsct.cookiebot.com *.mny.ro *.google.ro *.clarity.ms *.bing.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com https:\/\/firebasestorage.googleapis.com flagpedia.net data: 'self' 'unsafe-inline'; script-src s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https:\/\/maps.googleapis.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.tbicp.com *.tbibank.ro consentcdn.cookiebot.com *.cookiebot.com *.google.ro *.clarity.ms *.aqurate.ai *.themarketer.com *.mny.ro *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.avada.io *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.google.ro *.fontawesome.com *.tagmanager.google.com *.googletagmanager.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.google.ro *.google.com *.mny.ro 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com consentcdn.cookiebot.com *.googlesyndication.com *.clarity.ms *.google.com google.com *.facebook.com *.aqurate.ai *.themarketer.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app https:\/\/get.geojs.io *.avada.io www.gstatic.com  *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/251703a9-46ab-4e4f-ab25-1de6ee452399.sansec.watch\/; report-to report-endpoint;","count":3},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.fontawesome.com data: static.nacongaming.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * api.bazaarvoice.com stg.api.bazaarvoice.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com * display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.google.com www.youtube.com amc.demdex.net vars.hotjar.com www.facebook.com static.nacongaming.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com network-eu-stg.bazaarvoice.com network-eu.bazaarvoice.com network-eu-a.bazaarvoice.com media.nacongaming.com scaleflex.ultrafast.io axeptio.imgix.net www.google.fr www.facebook.com static.nacongaming.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com network-eu.bazaarvoice.com network-eu-stg.bazaarvoice.com www.google.com www.gstatic.com script.hotjar.com static.hotjar.com connect.facebook.net anltc-v3.bigben.fr analytics.tiktok.com www.googleoptimize.com static.nacongaming.com static.axept.io anltc.bigben.fr 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app display.ugc.bazaarvoice.com *.fontawesome.com use.typekit.net p.typekit.net static.nacongaming.com 'self' 'unsafe-inline'; object-src static.nacongaming.com 'self' 'unsafe-inline'; media-src *.adobe.com static.nacongaming.com media.nacongaming.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com www.facebook.com in.hotjar.com www.google-analytics.com stats.g.doubleclick.net anltc-v3.bigben.fr axeptio.imgix.net static.nacongaming.com client.axept.io api.axept.io anltc.bigben.fr 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/js.stripe.com https:\/\/*.js.stripe.com https:\/\/checkout.stripe.com https:\/\/connect-js.stripe.com https:\/\/*.googleapis.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.website-files.com https:\/\/d3e54v103j8qbb.cloudfront.net https:\/\/*.onetrust.com https:\/\/*.cookielaw.org https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.iwoca.com https:\/\/widget.trustpilot.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/snap.licdn.com https:\/\/bat.bing.com https:\/\/cdn.amplitude.com https:\/\/www.redditstatic.com https:\/\/*.fullstory.com https:\/\/connect.facebook.net https:\/\/*.hs-scripts.com https:\/\/*.tiktok.com https:\/\/*.intercom.io https:\/\/*.hsadspixel.net https:\/\/*.hs-analytics.net https:\/\/*.hs-banner.com https:\/\/*.hubspot.com https:\/\/*.doubleclick.net https:\/\/*.intercomcdn.com https:\/\/*.online-metrix.net https:\/\/cdn.datatables.net https:\/\/www.datadoghq-browser-agent.com https:\/\/*.dwin1.com https:\/\/cdn.checkout.com https:\/\/tools.refokus.com https:\/\/sdk.onfido.com https:\/\/*.awin1.com https:\/\/snippet.maze.co; style-src 'self' 'unsafe-inline' https:\/\/*.googleapis.com https:\/\/*.website-files.com https:\/\/*.iwoca.com https:\/\/cdn.jsdelivr.net https:\/\/*.gstatic.com https:\/\/verify.iwoca.co.uk https:\/\/verify.iwoca.de https:\/\/sdk.onfido.com https:\/\/cdnjs.cloudflare.com; img-src 'self' data: blob: https:\/\/*.stripe.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/*.website-files.com https:\/\/uploads-ssl.webflow.com https:\/\/d3e54v103j8qbb.cloudfront.net https:\/\/*.onetrust.com https:\/\/*.cookielaw.org https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.reddit.com https:\/\/bat.bing.com https:\/\/www.facebook.com https:\/\/*.hubspot.com https:\/\/www.google.com https:\/\/www.google.fr https:\/\/*.hsforms.com https:\/\/*.ads.linkedin.com https:\/\/*.iwoca.com https:\/\/www.google.co.uk https:\/\/www.google.de https:\/\/*.online-metrix.net https:\/\/emailsignature.trustpilot.com https:\/\/providers-assets.truelayer.com; font-src 'self' data: https:\/\/*.gstatic.com https:\/\/*.website-files.com https:\/\/*.iwoca.com https:\/\/fonts.intercomcdn.com https:\/\/verify.iwoca.co.uk https:\/\/verify.iwoca.de https:\/\/cdnjs.cloudflare.com; connect-src 'self' https:\/\/api.stripe.com https:\/\/hooks.stripe.com https:\/\/checkout.stripe.com https:\/\/*.googleapis.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.doubleclick.net https:\/\/www.google.com wss:\/\/*.iwoca.co.uk wss:\/\/*.iwoca.de https:\/\/*.onetrust.com https:\/\/*.cookielaw.org https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.amplitude.com https:\/\/*.fullstory.com https:\/\/*.reddit.com https:\/\/www.facebook.com https:\/\/bat.bing.com https:\/\/*.hubspot.com https:\/\/*.hubapi.com https:\/\/*.intercom.io wss:\/\/*.intercom.io https:\/\/*.ads.linkedin.com https:\/\/*.tiktok.com https:\/\/*.tiktokw.us https:\/\/*.datadoghq.com https:\/\/*.browser-intake-datadoghq.com https:\/\/browser-intake-datadoghq.com https:\/\/*.iwoca.com  https:\/\/api.onfido.com https:\/\/*.online-metrix.net https:\/\/www.googleadservices.com https:\/\/pagead2.googlesyndication.com https:\/\/www.google.co.uk; frame-src 'self' https:\/\/js.stripe.com https:\/\/hooks.stripe.com https:\/\/checkout.stripe.com https:\/\/connect-js.stripe.com https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/widget.trustpilot.com https:\/\/www.googletagmanager.com https:\/\/*.online-metrix.net https:\/\/sdk.onfido.com https:\/\/*.awin1.com https:\/\/*.iwoca.com https:\/\/cdn.embedly.com https:\/\/jobs.ashbyhq.com https:\/\/e.infogram.com https:\/\/meetings.hubspot.com https:\/\/intercom-sheets.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/checkout.stripe.com; worker-src 'self' blob:; manifest-src 'self' https:\/\/*.iwoca.com; media-src 'self' https:\/\/*.intercomcdn.com https:\/\/*.website-files.com; report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub5026669e7744a3ed13bf57586a630b91&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service:gateway;","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/cdn.checkout.com data: checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.tabby.ai cdn.tabby.sa fonts.googleapis.com storage.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com *.alothemes.com *.magepow.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.ccavenue.ae 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/js.checkout.com *.klarna.com *.ccavenue.ae checkout.tabby.ai checkout.tabby.sa https:\/\/c.sharethis.mgr.consensu.org https:\/\/secure.ccavenue.ae 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.ccavenue.ae cdn.jsdelivr.net data: checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.tabby.ai cdn.tabby.sa fonts.googleapis.com storage.googleapis.com *.magentocommerce.com *.cloudfront.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu https:\/\/events.getxeno.com https:\/\/l.sharethis.com https:\/\/sharethis.com https:\/\/platform-cdn.sharethis.com *.facebook.com *.alothemes.com *.magepow.com *.tamara.co data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.magento-datasolutions.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/cdn.checkout.com *.klarnacdn.net *.ccavenue.ae *.moengage.com sc-static.net *.snapchat.com *.spotii.me apigoswirl.com cdn.jsdelivr.net checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.segment.com cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com *.cloudflare.com *.authorize.net *.braintreegateway.com *.ytimg.com *.paypal.com *.payments-amazon.com *.croapp.net https:\/\/sdk.getxeno.com https:\/\/unpkg.com https:\/\/cdn.jsdelivr.net https:\/\/buttons-config.sharethis.com https:\/\/platform-api.sharethis.com s7.addthis.com *.googletagmanager.com *.facebook.net *.alothemes.com *.magepow.com cdn.tamara.co maps.googleapis.com *.tamara.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https:\/\/cdn.checkout.com apigoswirl.com cdn.jsdelivr.net *.yotpo.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.alothemes.com *.magepow.com *.tamara.co 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tamara.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/js.checkout.com *.klarnaevt.com *.ccavenue.ae *.moengage.com sc-static.net *.snapchat.com *.spotii.me apigoswirl.com api.goswirl.live checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com *.cloudflare.com *.twitter.com *.twimg.com api.homesrusae.evinent.site homesrusaenew-api.evinent.site api.homesrusqa.evinent.site homesrusqanew-api.evinent.site api.momstore.evinent.site momstorenew-api.evinent.site api.carters.evinent.site https:\/\/api.getxeno.com https:\/\/events.getxeno.com https:\/\/l.sharethis.com https:\/\/sharethis.com ekr.zdassets.com\/ *.google-analytics.com *.alothemes.com *.magepow.com maps.googleapis.com *.tamara.co 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hubspot.com *.hs-scripts.com *.hs-analytics.net *.hsadspixel.net *.hs-banner.com *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.usemessages.com *.hubspotfeedback.com feedback.hubapi.com js.hscta.net static.hsappstatic.net *.hubspot.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspotusercontent-na1.net www.googletagmanager.com www.google-analytics.com *.chilipiper.com *.6sense.com *.6sc.co cdnjs.cloudflare.com play.goconsensus.com snap.licdn.com connect.facebook.net bat.bing.com *.clickcease.com *.capterra.com; style-src 'self' 'unsafe-inline' *.hubspot.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspotusercontent-na1.net cdn2.hubspot.net fonts.googleapis.com cdnjs.cloudflare.com; img-src 'self' data: *.hubspot.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspotusercontent-na1.net cdn2.hubspot.net no-cache.hubspot.com js.hscta.net *.hsforms.net *.hsforms.com *.hubspot.net www.google-analytics.com www.googletagmanager.com analytics.google.com www.google.com *.doubleclick.net www.googleadservices.com *.chilipiper.com *.6sc.co px.ads.linkedin.com www.facebook.com bat.bing.com; font-src 'self' data: fonts.gstatic.com cdnjs.cloudflare.com *.hubspotusercontent-na1.net; connect-src 'self' *.hubapi.com *.hubspot.com *.hubspotusercontent-na1.net *.hs-banner.com *.hscollectedforms.net *.hsforms.com *.hsforms.net js.hscta.net www.googletagmanager.com www.google-analytics.com analytics.google.com *.google-analytics.com www.google.com *.doubleclick.net www.googleadservices.com *.chilipiper.com *.6sense.com *.6sc.co play.goconsensus.com px.ads.linkedin.com www.facebook.com bat.bing.com snap.licdn.com *.clickcease.com *.capterra.com; frame-src 'self' *.hubspot.com *.hs-sites.com *.hubspot.net *.hsforms.net *.hsforms.com play.hubspotvideo.com www.youtube.com www.youtube-nocookie.com *.chilipiper.com *.saashr.com www.google.com google.com play.goconsensus.com; media-src 'self' data: *.hubspot.com *.hubspot.net *.hubspotusercontent-na1.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net; child-src *.hsforms.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self';","count":3},{"content-security-policy-report-only":" object-src 'none';","count":3},{"content-security-policy-report-only":" frame-ancestors 'self' elama.global *.elama.global elama.ru *.elama.ru mc.yandex.ru mc.webvisor.com mc.webvisor.org yastatic.net webvisor.com yandex.com yandex.ru *.yandex.com *.yandex.net *.yandex.ru;","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.olark.com mediacdn.espssl.com *.imi.chat *.frontiercoop.com *.facebook.com *.yotpo.com *.klevu.com *.ksearchnet.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.zopim.com *.zopim.io *.widen.net *.widencdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * destinilocators.com *.duosecurity.com *.olark.com *.frontiercoop.com *.yotpo.com www.google.com *.facebook.com *.googletagmanager.com *.weltpixel.com https:\/\/www.youtube.com http:\/\/www.sandbox.paypal.com *.twitter.com *.zendesk.com *.widen.net *.widencdn.net *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.certcapture.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com frontiercoop.widen.net *.olark.com lux.speedcurve.com mediacdn.espssl.com brxcdn.com *.frontiercoop.com cdn-cookieyes.com *.yotpo.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.facebook.com *.facebook.com *.yotpoapi.com *.snapchat.com *.klevu.com *.ksearchnet.com *.cloudflare.com *.klarna.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.com *.zopim.io *.doubleclick.net *.google.co.in *.mastercard.com *.widen.net *.widencdn.net *.reddit.com *.ads-twitter.com t.co *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-ds.com *.magento-datasolutions.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.certcapture.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com js-agent.newrelic.com bam.nr-data.net destinilocators.com *.olark.com cdn.speedcurve.com acsbapp.com s.pinimg.com bat.bing.com ct.pinterest.com *.exponea.com *.imi.chat *.frontiercoop.com cdn-cookieyes.com *.yotpo.com connect.facebook.net www.google.com *.byspotify.com js.klevu.com *.ksearchnet.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bing.com *.zopim.com *.zdassets.com *.zendesk.com *.widen.net *.widencdn.net *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com https:\/\/js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com assets.braintreegateway.com *.olark.com mediacdn.espssl.com *.imi.chat *.frontiercoop.com *.yotpo.com *.klevu.com *.ksearchnet.com 'unsafe-inline' *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.fontawesome.com *.bing.com *.widen.net *.widencdn.net *.tagmanager.google.com *.googletagmanager.com *.typeform.com https:\/\/statsjs.klevu.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.olark.com *.frontiercoop.com *.zopim.com *.zopim.io *.widen.net *.widencdn.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.magento-datasolutions.com *.magento-ds.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com bam.nr-data.net lux.speedcurve.com cdn.speedcurve.com *.speedcurve.com *.acsbapp.com acsbapp.com ct.pinterest.com bat.bing.com *.exponea.com facebook.com *.facebook.com *.imi.chat *.frontiercoop.com log.cookieyes.com *.yotpo.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.facebook.net *.cookieyes.com *.cdn-cookieyes.com *.spotify.com cdn-cookieyes.com px.ads.linkedin.com *.olark.com *.klevu.com *.ksearchnet.com *.cloudflare.com *.twitter.com *.twimg.com *.zdassets.com *.zopim.com *.zopim.io wss:\/\/widget-mediator.zopim.com *.google-analytics.com https:\/\/stats.g.doubleclick.net *.zendesk.com *.widen.net *.widencdn.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.olark.com *.frontiercoop.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/stats.afternorth.com https:\/\/maps.googleapis.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com; object-src 'none'; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; connect-src 'self' https:\/\/stats.afternorth.com https:\/\/maps.googleapis.com https:\/\/www.google-analytics.com; img-src 'self' data: https:\/\/i.realestatecreate.com https:\/\/maps1.dnr.state.mn.us https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com; font-src 'self' https:\/\/fonts.gstatic.com;","count":3},{"content-security-policy-report-only":" default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval';","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.websitebuilder.service.justice.gov.uk; style-src 'self' 'unsafe-inline' https:\/\/cdn.websitebuilder.service.justice.gov.uk; img-src 'self' data: https: https:\/\/cdn.websitebuilder.service.justice.gov.uk; font-src 'self' data: https:\/\/cdn.websitebuilder.service.justice.gov.uk; frame-ancestors 'self'; object-src 'none'","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com static.payu.com https:\/\/cdnjs.cloudflare.com https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com https:\/\/widgets.trustedshops.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com ewniosek.credit-agricole.pl sandbox.przelewy24.pl secure.przelewy24.pl wniosek.eraty.pl api.santanderconsumer.pl *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.instagram.com https:\/\/www.facebook.com https:\/\/accounts.google.com ewniosek.credit-agricole.pl *.googletagmanager.com pay.google.com apm.przelewy24.pl *.przelewy24.pl *.espago.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com\/ wniosek.eraty.pl https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com *.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cdninstagram.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https:\/\/ssl.ceneo.pl https:\/\/www.facebook.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com *.focusgarden.pl *.focus-garden.cz static.przelewy24.pl gstatic.com static.payu.com credit-widget-config.payu.com\/ https:\/\/*.google.pl https:\/\/*.bing.com *.wp.pl https:\/\/*.fbcdn.net https:\/\/*.facebook.com https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com *.hsforms.net *.hsforms.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.bing.com *.google.pl *.analytics.google.com *.bidswitch.net *.doubleclick.net *.pubmatic.com *.casalemedia.com *.criteo.com id5-sync.com *.360yield.com *.postrelease.com *.outbrain.com *.rubiconproject.com *.smartadserver.com *.taboola.com *.teads.tv *.tremorhub.com *.3lift.com *.yieldlab.net *.1rx.io *.agkn.com *.facebook.com *.facebook.net *.media.net *.cloudflare.com *.klarna.com *.googleadservices.com *.google.de *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.instagram.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https:\/\/*.ceneo.pl https:\/\/unpkg.com *.googletagmanager.com tagmanager.google.com sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl secure.payu.com secure.snd.payu.com static.payu.com credit-widget-config.payu.com\/ https:\/\/cdnjs.cloudflare.com https:\/\/*.criteo.com https:\/\/*.facebook.net https:\/\/*.hotjar.com *.pinimg.com *.bing.com https:\/\/*.pinimg.com *.favicdn.net *.onet.pl *.wp.pl *.tiktok.com *.startquestion.com *.clarity.ms https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com *.hsforms.net *.hsforms.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com sgtm.focusgarden.pl focusgarden.pl *.facebook.net *.googlesyndication.com *.criteo.com *.pinterest.com *.hotjar.com *.cloudflare.com *.cloudflareinsights.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com https:\/\/scripts.luigisbox.tech https:\/\/cdn.luigisbox.tech https:\/\/live.luigisbox.tech https:\/\/api.luigisbox.tech js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/accounts.google.com tagmanager.google.com fonts.google.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https:\/\/scripts.luigisbox.tech https:\/\/cdn.luigisbox.tech https:\/\/live.luigisbox.tech https:\/\/api.luigisbox.tech maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.facebook.net https:\/\/accounts.google.com ewniosek.credit-agricole.pl *.google-analytics.com *.analytics.google.com *.googletagmanager.com sandbox.przelewy24.pl secure.przelewy24.pl wss:\/\/ws.przelewy24.pl wss:\/\/sandbox-ws.przelewy24.pl wss:\/\/secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com\/ https:\/\/*.hotjar.com wss:\/\/*.hotjar.com https:\/\/*.hotjar.io *.tiktok.com *.pinterest.com *.startquestion.com *.wp.pl *.ocdn.eu *.onet.pl https:\/\/*.doubleclick.net api.santanderconsumer.pl wniosek.eraty.pl https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site sgtm.focusgarden.pl focusgarden.pl *.googlesyndication.com *.favicdn.net *.hotjar.com *.hotjar.io *.pinimg.com wss:\/\/ws.hotjar.com *.bing.com *.cloudflare.com *.twitter.com *.twimg.com https:\/\/scripts.luigisbox.tech https:\/\/cdn.luigisbox.tech https:\/\/live.luigisbox.tech https:\/\/api.luigisbox.tech api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com *.fontawesome.com https:\/\/fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com 'self' https:\/\/webpay3gint.transbank.cl https:\/\/webpay3g.transbank.cl https:\/\/www.facebook.com\/* pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com webpay3g.transbank.cl webpay3gint.transbank.cl 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: www.google.com https:\/\/player.vimeo.com https:\/\/www.youtube.com https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/www.youtube-nocookie.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us bat.bing.com *.bat.bing.com *.msn.com *.bing.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com blob: https:\/\/updates.themepunch.tools http:\/\/updates.themepunch.tools https:\/\/updates.themepunch-ext-a.tools http:\/\/updates.themepunch-ext-a.tools https:\/\/updates.themepunch-ext-b.tools http:\/\/updates.themepunch-ext-b.tools https:\/\/dev.sliderrevolution.com https:\/\/revolution.themepunch.com http:\/\/revolution5.themepunch.com http:\/\/pbs.twimg.com https:\/\/pbs.twimg.com http:\/\/scontent.cdninstagram.com https:\/\/img.youtube.com http:\/\/live.staticflickr.com https:\/\/live.staticflickr.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-datasolutions.com https:\/\/rum.hlx.page *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us www.google.com www.gstatic.com *.avada.io https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/546002994.collect.igodigital.com https:\/\/assets.adobedtm.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/player.vimeo.com https:\/\/www.youtube.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/fonts.googleapis.com http:\/\/fonts.googleapis.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com static.zdassets.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us https:\/\/dpm.demdex.net https:\/\/amcglobal.sc.omtrdc.net https:\/\/geostag.cardinalcommerce.com https:\/\/geo.cardinalcommerce.com https:\/\/1eafstag.cardinalcommerce.com https:\/\/1eaf.cardinalcommerce.com https:\/\/centinelapistag.cardinalcommerce.com https:\/\/centinelapi.cardinalcommerce.com https:\/\/commerce.adobedc.net https:\/\/analytics.google.com https:\/\/vimeo.com https:\/\/api.magento.com https:\/\/performance.typekit.net https:\/\/pilot-payflowlink.paypal.com https:\/\/commerce.adobe.io https:\/\/commerce.adobe.net *.paypal.com https:\/\/google.com *.google.com https:\/\/qa-api.magedevteam.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline' https:\/\/mercadopago.com.br https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/api.weatherbit.io https:\/\/www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com tk.santevet.com svts.santevet.com cdn.cookielaw.org widget.trustpilot.com assets.app.smart-tribune.com privacy.santevet.com privacy.santevet.be privacy.santevet.es privacy.santevet.de privacy.santevet.it privacy.bullebleue.fr privacy.jim-joe.fr ams.wpml.org www.google.com www.gstatic.com; worker-src 'self' blob:; connect-src 'self' www.googletagmanager.com tk.santevet.com svts.santevet.com *.google-analytics.com *.analytics.google.com cdn.cookielaw.org geolocation.onetrust.com *.smart-tribune.com privacy.santevet.com privacy.santevet.be privacy.santevet.es privacy.santevet.de privacy.santevet.it privacy.bullebleue.fr privacy.jim-joe.fr ams.wpml.org www.google.com santevet.com; frame-src 'self' www.youtube.com www.youtube-nocookie.com www.googletagmanager.com widget.trustpilot.com www.google.com; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' assets.app.smart-tribune.com cdnjs.cloudflare.com fonts.googleapis.com ams.wpml.org; font-src 'self' data: cdnjs.cloudflare.com fonts.gstatic.com; media-src 'self' videos.ctfassets.net; frame-ancestors 'self'; report-to csp-endpoint;","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cdn.jsdelivr.net cdn.almapay.com *.klarnacdn.net *.fontawesome.com https:\/\/fonts.gstatic.com *.almapay.com *.cloudflare.com *.trustpilot.com *.avis-verifies.com *.bing.com *.sc.omtrdc.net 'self' data: https:\/\/cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.nootidev.com admin.nootica.fr *.nootica.fr *.nootica.com *.nootica.es *.nootica.de *.nootica.it *.bandeja-shop.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.getalma.eu *.almapay.com\/ *.stripe.com\/ *.checkout.com\/ *.adyen.com\/ www.google.com *.hipay-tpp.com *.hipay.com *.googleapis.com *.klarna.com *.demdex.net *.hub-side.com *.nootidev.com admin.nootica.fr *.nootica.fr *.nootica.com *.nootica.es *.nootica.de *.nootica.it *.bandeja-shop.com *.sc.omtrdc.net 'self' data: *.addthis.com *.trustpilot.com sibautomation.com *.doubleclick.net *.weltpixel.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.hipay.com *.googleapis.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.google.com maps.googleapis.com *.google.fr *.doubleclick.net *.googletagmanager.com *.cloudflare.com https:\/\/cdn.klarna.com https:\/\/s.ytimg.com *.usercentrics.eu *.avis-verifies.com *.bing.com *.omtrdc.net *.demdex.net *.everesttech.net flagcdn.com *.nootidev.com *.nootica.fr *.nootica.com *.nootica.es *.nootica.de *.nootica.it *.bandeja-shop.com *.facebook.com *.reddit.com *.google-analytics.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com *.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn.jsdelivr.net www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.hipay-tpp.com mpsnare.iesnare.com *.paypal.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com http:\/\/127.0.0.1:35729 *.cloudflare.com *.google-analytics.com *.doubleclick.net *.google.fr *.googleapis.com *.googletagmanager.com *.googleoptimize.com *.trustpilot.com *.avis-verifies.com *.usercentrics.eu *.bing.com *.iesnare.com *.hipay.com 'self' data: *.addthis.com *.addthisedge.com *.moatads.com *.freshworks.com sibautomation.com *.skeepers.io umami.nootica.fr https:\/\/cdnjs.cloudflare.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com cdn.jsdelivr.net *.hipay.com *.googleapis.com *.klarnacdn.net https:\/\/use.fontawesome.com https:\/\/fonts.googleapis.com *.cloudflare.com *.typekit.net *.trustpilot.com *.avis-verifies.com *.usercentrics.eu *.bing.com *.sc.omtrdc.net 'self' data: https:\/\/cdnjs.cloudflare.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src data: mpsnare.iesnare.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.getalma.eu *.almapay.com *.hipay-tpp.com wss:\/\/mpsnare.iesnare.com *.googleapis.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https:\/\/olegnax.com *.google-analytics.com *.googlesyndication.com *.analytics.google.com *.doubleclick.net *.cloudflare.com *.bing.com *.demdex.net *.sc.omtrdc.net *.hipay.com 'self' data: ws: *.addthis.com *.brevo.com *.skeepers.io *.nootidev.com search.nootica.com search.bandeja-shop.com umami.nootica.fr *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" font-src www.paypalobjects.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net player.vimeo.com *.youtube.com https:\/\/www.google.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.google.com js.mollie.com *.sendcloud.sc *.jsdelivr.net https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net embed.pakketdienstqls.nl https:\/\/imgproxy.vendic.dev www.ghmparts.com https:\/\/images.ghmparts.com https:\/\/pagead2.googlesyndication.com https:\/\/www.google.nl https:\/\/www.google.de https:\/\/www.google.fr https:\/\/www.google.es https:\/\/www.google.it https:\/\/www.google.pt https:\/\/www.google.pl https:\/\/www.google.be https:\/\/www.google.co.uk https:\/\/www.facebook.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com https:\/\/images.unsplash.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com magefan.com cm.magefan.com *.disqus.com https:\/\/img.youtube.com *.sooqr.com *.spotlersearch.com https:\/\/www.mollie.com *.amazonaws.com epc.het-magazijn.com https:\/\/imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.disqus.com *.google.com *.sooqr.com *.spotlersearch.com spotlersearchanalytics.com js.mollie.com pay.google.com applepay.cdn-apple.com *.sendcloud.sc *.jsdelivr.net embed.pakketdienstqls.nl https:\/\/cdn.cookie-script.com https:\/\/static.cloudflareinsights.com https:\/\/d5yoctgpv4cpx.cloudfront.net https:\/\/pagead2.googlesyndication.com https:\/\/connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.fontawesome.com *.sooqr.com *.spotlersearch.com *.sendcloud.sc *.jsdelivr.net https:\/\/www.vizeo.nl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/ipinfo.io https:\/\/www.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.sooqr.com *.spotlersearch.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com https:\/\/pagead2.googlesyndication.com https:\/\/p2iqhncxyh.execute-api.eu-central-1.amazonaws.com https:\/\/www.google.nl https:\/\/www.google.de https:\/\/www.google.fr https:\/\/www.google.es https:\/\/www.google.it https:\/\/www.google.pt https:\/\/www.google.pl https:\/\/www.google.be https:\/\/www.google.co.uk googleads.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" font-src *.fontawesome.com *.gstatic.com\/ *.bootstrapcdn.com\/ https:\/\/analytics.google.com\/ https:\/\/www.googletagmanager.com\/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.googleapis.com\/ *.gstatic.com\/ https:\/\/analytics.google.com\/ https:\/\/www.googletagmanager.com\/ 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/maps.gstatic.com\/ *.googleapis.com\/ *.w3.org\/ https:\/\/analytics.google.com\/ *.cdn.place1seo.com\/ https:\/\/cdn.beedash.com\/ https:\/\/www.google.com\/ https:\/\/www.googletagmanager.com\/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.avada.io *.googleapis.com\/ https:\/\/analytics.google.com\/ https:\/\/googleads.g.doubleclick.net\/ https:\/\/www.googletagmanager.com\/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.googleapis.com\/ https:\/\/analytics.google.com\/ *.bootstrapcdn.com\/ https:\/\/www.googletagmanager.com\/ unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/get.geojs.io *.avada.io https:\/\/analytics.google.com\/ https:\/\/googleads.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ https:\/\/www.googletagmanager.com\/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.boxnow.gr *.boxnow.cy *.klarnacdn.net *.fontawesome.com https:\/\/fonts.bunny.net *.kalogirou.com *.adman.gr *.grxchange.gr http:\/\/trustmark.gr *.klarnaservices.com *.clarity.ms *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.octocom.ai data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com www.facebook.com www.youtube.com *.adman.gr *.grxchange.gr http:\/\/trustmark.gr *.klarnaservices.com *.clarity.ms *.twitter.com *.octocom.ai 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.google.com *.doubleclick.net www.facebook.com *.googlesyndication.com *.boxnow.gr *.boxnow.cy connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.cookiebot.com www.youtube.com *.contactpigeon.com *.skroutz.gr *.netsteps.net *.trust-servers.net https:\/\/www.googletagmanager.com *.adman.gr *.grxchange.gr http:\/\/trustmark.gr *.klarnaservices.com *.clarity.ms *.twitter.com *.octocom.ai 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'self' data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com www.youtube.com p.typekit.net validator.swagger.io *.gstatic.com *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.boxnow.gr *.boxnow.cy connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https:\/\/firebasestorage.googleapis.com www.google.gr *.cookiebot.com *.google-analytics.com maps.gstatic.com *.kalogirou.com *.contactpigeon.com *.sharethis.com *.klarnaservices.com *.netsteps.net *.trust-servers.net https:\/\/kalogirou.com https:\/\/kalogirou.com\/pub\/media\/ *.adman.gr *.grxchange.gr http:\/\/trustmark.gr *.clarity.ms *.cloudflare.com *.googleadservices.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.octocom.ai *.skroutz.gr data: 'self' 'unsafe-inline'; script-src www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ *.google.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.googleapis.com *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.boxnow.gr *.boxnow.cy connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.avada.io 'self' data: *.cookiebot.com *.googleadservices.com stats.g.doubleclick.net googleads.g.doubleclick.net *.kalogirou.com *.go-mpulse.net *.sharethis.com *.contactpigeon.com *.google.gr *.taboola.com *.skroutz.gr *.netsteps.net *.trust-servers.net *.adman.gr *.grxchange.gr http:\/\/trustmark.gr *.clarity.ms *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.octocom.ai 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.klarnacdn.net *.fontawesome.com https:\/\/fonts.bunny.net *.kalogirou.com www.youtube.com *.contactpigeon.com *.netsteps.net *.trust-servers.net *.adman.gr *.grxchange.gr http:\/\/trustmark.gr *.klarnaservices.com *.clarity.ms *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.octocom.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.google-analytics.com www.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.boxnow.gr *.boxnow.cy connect.facebook.net graph.facebook.com business.facebook.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https:\/\/get.geojs.io *.avada.io maps.googleapis.com stats.g.doubleclick.net googleads.g.doubleclick.net *.cookiebot.com *.kalogirou.com www.youtube.com *.go-mpulse.net *.sharethis.com *.contactpigeon.com eu.klarnaevt.com *.taboola.com *.akstat.io *.skroutz.gr *.netsteps.net *.trust-servers.net *.adman.gr *.grxchange.gr http:\/\/trustmark.gr *.clarity.ms *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.octocom.ai 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.contactpigeon.com *.googlesyndication.com *.netsteps.net *.trust-servers.net *.adman.gr *.grxchange.gr http:\/\/trustmark.gr *.klarnaservices.com *.clarity.ms 'self' 'unsafe-inline'; report-uri https:\/\/csp-reporting-service.com\/my-project\/endpoint; report-to report-endpoint;","count":3},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https:; form-action 'self'; report-uri \/api\/csp-report","count":3},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/brek.com https:\/\/*.brek.com https:\/\/cdn.staysignals.com https:\/\/stay-signals-cdn-git-dev-page-one-lab.vercel.app https:\/\/connect.facebook.net https:\/\/js.stripe.com https:\/\/*.stripe.com https:\/\/app.posthog.com https:\/\/*.posthog.com https:\/\/*.sentry.io https:\/\/vercel.live; script-src-elem 'self' 'unsafe-inline' https:\/\/brek.com https:\/\/*.brek.com https:\/\/cdn.staysignals.com https:\/\/stay-signals-cdn-git-dev-page-one-lab.vercel.app https:\/\/connect.facebook.net https:\/\/js.stripe.com https:\/\/*.stripe.com https:\/\/app.posthog.com https:\/\/*.posthog.com https:\/\/*.sentry.io https:\/\/vercel.live; connect-src 'self' https:\/\/brek.com https:\/\/*.brek.com https:\/\/api.vhrgateway.com https:\/\/api-dev.vhrgateway.com https:\/\/backend-dev-15973-9af2912b-33o5b7ll.onporter.run https:\/\/openfreemap.org https:\/\/*.openfreemap.org https:\/\/cdn.staysignals.com https:\/\/*.staysignals.com https:\/\/api.stripe.com https:\/\/r.stripe.com https:\/\/q.stripe.com https:\/\/m.stripe.network https:\/\/js.stripe.com https:\/\/*.stripe.com https:\/\/app.posthog.com https:\/\/us.i.posthog.com https:\/\/eu.i.posthog.com https:\/\/us-assets.i.posthog.com https:\/\/eu-assets.i.posthog.com https:\/\/*.posthog.com https:\/\/*.ingest.us.sentry.io https:\/\/*.sentry.io https:\/\/clh2em6mh0003mg0fodzo5fyy.d.jitsu.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/graph.facebook.com https:\/\/vercel.live https:\/\/vitals.vercel-analytics.com wss:\/\/ws-us3.pusher.com wss: http:\/\/localhost:* http:\/\/127.0.0.1:* ws:\/\/localhost:* ws:\/\/127.0.0.1:*; img-src 'self' data: blob: http: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; frame-src 'self' https:\/\/brek.com https:\/\/*.brek.com https:\/\/js.stripe.com https:\/\/hooks.stripe.com https:\/\/*.stripe.com https:\/\/www.youtube.com https:\/\/www.facebook.com https:\/\/vercel.live; worker-src 'self' blob:; report-uri \/api\/csp-report","count":3},{"content-security-policy-report-only":" script-src-elem 'self' 'unsafe-inline' assets.adobedtm.com *.cardinalcommerce.com local.behangwebshopm2.nl; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.bootstrapcdn.com data: *.fontawesome.com *.cloudflare.com fonts.googleapis.com *.googleapis.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https:\/\/pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.hotjar.com *.criteo.com https:\/\/consentcsn.cookiebot.com *.multisafepay.com https:\/\/pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.behangwebshop.nl *.cloudfront.net magefan.com cm.magefan.com https:\/\/firebasestorage.googleapis.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.bing.com *.clarity.ms *.cookiebot.com www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bs www.google.by www.google.ca www.google.ch www.google.cl www.google.co.ao www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zw www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.sc www.google.se www.google.si www.google.sk www.google.sn www.google.sr www.google.tn google.com *.googlesyndication.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com widget.thuiswinkel.org *.hotjar.com *.criteo.net *.criteo.com api.widget.trengo.eu static.widget.trengo.eu *.trustpilot.com bam-cell.nr-data.net vanerkel.zendesk.com static.zdassets.com chimpstatic.com *.cardinalcommerce.com *.authorize.net *.bing.com *.doubleclick.net https:\/\/*.cookiebot.eu *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com *.multisafepay.com https:\/\/pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.clarity.ms *.cloudflareinsights.com *.cookiebot.com *.googlesyndication.com *.zopim.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.bootstrapcdn.com *.fontawesome.com *.thuiswinkel-cdn.org *.googleapis.com https:\/\/fonts.bunny.net *.multisafepay.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.widget.trengo.eu static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com api.widget.trengo.eu *.thuiswinkel-cdn.org *.hotjar.com bam-cell.nr-data.net wss:\/\/ws17.hotjar.com *.google-analytics.com vanerkel.zendesk.com *.zdassets.com *.doubleclick.net *.zopim.com wss:\/\/widget-mediator.zopim.com https:\/\/*.cookiebot.eu https:\/\/get.geojs.io *.avada.io *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app *.bing.com *.clarity.ms *.cookiebot.com www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bs www.google.by www.google.ca www.google.ch www.google.cl www.google.co.ao www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.nz www.google.co.th www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zw www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hn www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kz www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.sr www.google.tn *.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/70340d24-235b-4990-9e78-f23006e4ffdf.sansec.watch\/; report-to report-endpoint;","count":3},{"content-security-policy-report-only":" font-src maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com *.paypal.com *.paypalobjects.com *.typekit.net *.gstatic.com applepay.cdn-apple.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.facebook.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.youtube-nocookie.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.chatbot.com ct.pinterest.com *.criteo.com *.criteo.net www.facebook.com shop4runners.cr.rlvs.co.uk www.awin1.com d.c.cdnsrv.de mea.shop4runners.com mea.shop4runners.eu mea.shop4runners.at mea.shop4runners.ch mea.shop4runners.fr mea.runnershub.de mea.runnershub.bg mea.runnershub.eu mea.barfuss-shop.de mea.barefoot-shop.com *.attrxs.de *.getblue.io *.sovendus.com *.sovendus-connect.com bid.g.doubleclick.net td.doubleclick.net www.googletagmanager.com *.ad-srv.net js.mollie.com *.paypal.com *.sandbox.paypal.com *.google.com google.com https:\/\/c.paypal.com *.loadbee.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com magefan.com cm.magefan.com https: www.googleadservices.com *.g.doubleclick.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.gstatic.com *.google.com *.google.de *.google.at *.google.ch *.google.eu *.google.fr https:\/\/images.unsplash.com https:\/\/www.mollie.com *.paypal.com *.sandbox.paypal.com https:\/\/api.mapbox.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ img.metaffiliation.com action.metaffiliation.com https:\/\/c.paypal.com https:\/\/b.stats.paypal.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.onefid.com maps.googleapis.com api.recova.ai assets.revlifter.io bat.bing.com cdn.chatbot.com *.consentmanager.net connect.facebook.net ct.pinterest.com s.pinimg.com *.criteo.com www.awin1.com www.dwin1.com the.sciencebehindecommerce.com www.ladenzeile.de tracking.s24.com d.c.cdnsrv.de smct.co s.uicdn.com *.attrxs.de *.gsitrix.com *.corporate-benefits.eu *.getblue.io *.wewomedia.com googleads.g.doubleclick.net www.google.com www.googleadservices.com www.google-analytics.com analytics.google.com *.googletagmanager.com tagmanager.google.com *.ad-srv.net js.mollie.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.google.com *.cdn-apple.com s7.addthis.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ action.metaffiliation.com img.metaffiliation.com google.com https:\/\/c.paypal.com *.loadbee.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src maxcdn.bootstrapcdn.com fonts.googleapis.com *.googletagmanager.com tagmanager.google.com https:\/\/static.klaviyo.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https:\/\/api.batteryincluded.io api.paypal.com maps.googleapis.com api.recova.ai devt.revlifter.com bat.bing.com bat.bing.net cdn.chatbot.com *.consentmanager.net www.facebook.com connect.facebook.net ct.pinterest.com www.pinterest.com *.criteo.com the.sciencebehindecommerce.com www.wepowerconnections.com tracking.s24.com mea.shop4runners.com mea.shop4runners.eu mea.shop4runners.at mea.shop4runners.ch mea.shop4runners.fr mea.runnershub.de mea.runnershub.bg mea.runnershub.eu mea.barfuss-shop.de mea.barefoot-shop.com r.nunami.ai *.gsitrix.com *.wewomedia.com *.sovendus.com *.sovendus-connect.com www.googleadservices.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.de *.google.at *.google.ch *.google.eu *.google.fr *.googlesyndication.com *.paypal.com *.sandbox.paypal.com ekr.zdassets.com\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ action.metaffiliation.com img.metaffiliation.com google.com *.loadbee.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" font-src www.paypalobjects.com https:\/\/js.klevu.com *.googleapis.com *.hotjar.com dhv2ziothpgrr.cloudfront.net *.klevu.com *.ksearchnet.com use.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com *.yotpo.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/plumrocket.com *.ometria.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com account.fetchify.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https:\/\/plumrocket.com *.hotjar.com https:\/\/9957200.fls.doubleclick.net https:\/\/danv01ao0kdr2.cloudfront.net https:\/\/dj3zaulksz6yg.cloudfront.net *.brandlock.io *.braintreegateway.com *.klarna.com https:\/\/accounts.google.com *.mention-me.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https:\/\/www.incontinencechoice.co.uk https:\/\/prod.choiceadmin.co.uk https:\/\/staging.choiceadmin.co.uk https:\/\/admin.vivactive.com https:\/\/trk.ometria.com *.brandlock.io https:\/\/www.google.com https:\/\/bat.bing.com https:\/\/pixel.quantserve.com https:\/\/www.facebook.com *.googleapis.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https:\/\/s3-eu-west-1.amazonaws.com dhv2ziothpgrr.cloudfront.net *.klevu.com *.ksearchnet.com *.yotpo.com swellrewards.com *.swellrewards.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/rum.hlx.page cc-cdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/cdn.ometria.com cdnjs.cloudflare.com https:\/\/js.klevu.com\/ https:\/\/bat.bing.com https:\/\/secure.quantserve.com https:\/\/www.gstatic.com https:\/\/connect.facebook.net https:\/\/dj3zaulksz6yg.cloudfront.net *.brandlock.io https:\/\/cdn-ukwest.onetrust.com https:\/\/geolocation.onetrust.com https:\/\/songbirdstag.cardinalcommerce.com https:\/\/www.googleoptimize.com https:\/\/cdn.oribi.io https:\/\/app.factors.ai https:\/\/rules.quantcount.com https:\/\/googleads.g.doubleclick.net https:\/\/www.clarity.ms https:\/\/www.clarity.ms\/tag\/ *.googleapis.com https:\/\/www.googletagmanager.com\/gtag\/js *.klarna.com *.klarnacdn.net x.klarnacdn.net https:\/\/accounts.google.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net https:\/\/tag.rmp.rakuten.com *.klevu.com *.ksearchnet.com *.mention-me.com *.yotpo.com swellrewards.com *.swellrewards.com https:\/\/js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cc-cdn.com assets.braintreegateway.com *.googleapis.com *.hotjar.com https:\/\/accounts.google.com https:\/\/www.gstatic.com dhv2ziothpgrr.cloudfront.net *.klevu.com *.ksearchnet.com *.yotpo.com swellrewards.com *.swellrewards.com fonts.googleapis.com maxcdn.bootstrapcdn.com https:\/\/statsjs.klevu.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https:\/\/payments.sandbox.braintree-api.com https:\/\/api.sandbox.braintreegateway.com https:\/\/origin-analytics-sand.sandbox.braintree-api.com\/ https:\/\/danv01ao0kdr2.cloudfront.net *.brandlock.io https:\/\/cdn-ukwest.onetrust.com https:\/\/privacyportal-uk.onetrust.com https:\/\/stats.g.doubleclick.net https:\/\/www.paypal.com https:\/\/geolocation.onetrust.com *.hotjar.com *.hotjar.io wss:\/\/*.hotjar.com https:\/\/api.factors.ai https:\/\/b.clarity.ms https:\/\/y.clarity.ms\/collect *.googleapis.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net https:\/\/accounts.google.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com *.klevu.com *.ksearchnet.com *.mention-me.com *.ometria.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/f720cf68-df7d-4a7b-a5e9-4e537ae99361.sansec.watch\/; report-to report-endpoint;","count":3},{"content-security-policy-report-only":" font-src *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com assets.braintreegateway.com pay.google.com play.google.com *.autopay.eu cdn.dnky.co webchat.dotdigital.com secure.payu.com merch-prod.snd.payu.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com validator.swagger.io www.apptrian.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com platnosci.bm.pl platnosci-accept.bm.pl www.gstatic.com *.autopay.eu static.payu.com *.gstatic.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com www.apptrian.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.autopay.eu pay.google.com *.google-analytics.com *.googletagmanager.com r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net cdn.dnky.co api.comapi.com webchat.dotdigital.com *.avada.io secure.payu.com secure.snd.payu.com https:\/\/www.googletagmanager.com tagmanager.google.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.autopay.eu *.googleapis.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com tagmanager.google.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com assets.braintreegateway.com www.apptrian.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.google-analytics.com r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net api.comapi.com webchat.dotdigital.com https:\/\/get.geojs.io *.avada.io secure.payu.com merch-prod.snd.payu.com https:\/\/www.google-analytics.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.cookielaw.org https:\/\/*.doubleclick.net https:\/\/*.onetrust.com https:\/\/www.google-analytics.com;    img-src * data: ;   script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdnjs.cloudflare.com https:\/\/*.googleapis.com https:\/\/www.gstatic.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/cdn.cookielaw.org https:\/\/aq.flippenterprise.net https:\/\/www.google-analytics.com https:\/\/*.doubleclick.net;    style-src 'self' 'unsafe-inline' ;   font-src 'self' 'unsafe-inline' data:;    connect-src 'self' https:\/\/*.google.com https:\/\/www.google-analytics.com https:\/\/*.doubleclick.net https:\/\/cdn.cookielaw.org https:\/\/*.onetrust.com https:\/\/*.googleapis.com;   upgrade-insecure-requests;","count":3},{"content-security-policy-report-only":" worker-src blob:; font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com fonts.gstatic.com *.kxcdn.com *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.google.com *.instagram.com *.doubleclick.net *.facebook.com *.googlesyndication.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com google.com *.klarna.com landofcoder.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cdninstagram.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com google.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ apis.google.com *.instagram.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.googleapis.com google.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com s7.addthis.com landofcoder.com https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com google.com *.kxcdn.com downloads.mailchimp.com *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com https:\/\/www.paypal.com\/xoplatform\/logger\/api\/logger cdn.ampproject.org *.kxcdn.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com ekr.zdassets.com\/ landofcoder.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http:\/\/csp-reporting-service.com\/my-project\/endpoint; report-to report-endpoint;","count":3},{"content-security-policy-report-only":" font-src https:\/\/www.gstatic.com *.dhlparcel.nl https:\/\/widgetcontent.thuiswinkel-cdn.org https:\/\/widget.thuiswinkel-cdn.org https:\/\/fonts.gstatic.com *.fontawesome.com *.gstatic.com 'self' data: https:\/\/widgets.trustedshops.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ bid.g.doubleclick.net *.googletagmanager.com *.doubleclick.net *.voegenshop.nl https:\/\/widgets.trustedshops.com www.xtento.com https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com js.mollie.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https:\/\/belco-prod.s3-eu-central-1.amazonaws.com https:\/\/images.unsplash.com *.google.com *.google.nl *.mailcampaigns.nl *.cloudflare.com *.voegenshop.nl *.etrusted.com https:\/\/widgetcontent.thuiswinkel-cdn.org https:\/\/widget.thuiswinkel-cdn.org *.doubleclick.net www.xtento.com cdn.xtento.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ magefan.com cm.magefan.com *.disqus.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com https:\/\/img.youtube.com https:\/\/www.mollie.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: www.google.com.ua https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https:\/\/cdn.belco.io https:\/\/maps.googleapis.com *.dhlparcel.nl *.google-analytics.com *.mailcampaigns.nl *.cookiecode.nl *.clarity.ms *.cloudflare.com https:\/\/consent.studio https:\/\/widget.thuiswinkel.org https:\/\/widget.thuiswinkel-cdn.org https:\/\/cloud.umami.is www.xtento.com cdn.xtento.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.disqus.com https:\/\/cdn.jsdelivr.net *.belco.io https:\/\/browser.sentry-cdn.com *.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.hsforms.net *.hsforms.com *.gstatic.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https:\/\/*.googleapis.com *.dhlparcel.nl *.cloudflare.com *.etrusted.com https:\/\/widgetcontent.thuiswinkel-cdn.org https:\/\/widget.thuiswinkel-cdn.org https:\/\/static.klaviyo.com https:\/\/cdn.jsdelivr.net https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.fontawesome.com *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com wss:\/\/chat.belco.io https:\/\/cdn.belco.io https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.doubleclick.net *.cookiecode.nl *.google.com *.voegenshop.nl https:\/\/consent.studio https:\/\/widgetcontent.thuiswinkel-cdn.org https:\/\/gateway.umami.is https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.belco.io https:\/\/*.ingest.sentry.io https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com https:\/\/client.crisp.chat https:\/\/plugin-magento-ui.glopalservice.com *.fontawesome.com https:\/\/fonts.bunny.net *.cloudflare.com fonts.gstatic.com\/ maxcdn.bootstrapcdn.com https:\/\/cdnjs.cloudflare.com https:\/\/applepay.cdn-apple.com applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https:\/\/pinterest.com https:\/\/www.pinterest.com appleid.apple.com p.monetico-services.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ * ct.pinterest.com *.payplug.com *.dalenys.com https:\/\/applepay.cdn-apple.com api-qa.payplug.com secure-qa.payplug.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * https:\/\/images.unsplash.com https:\/\/image.crisp.chat *.google.com *.google.fr *.google.ie *.jardindupicvert.com *.jardindupicvert.com.localhost *.promessedefleurs.com *.promessedefleurs.com.localhost cl.avis-verifies.com ct.pinterest.com bat.bing.com www.google.com.vn https:\/\/cdn-redirector.glopal.com https:\/\/plugin-magento-ui.glopalservice.com https:\/\/firebasestorage.googleapis.com https:\/\/secure-magenta.dalenys.com bzr.openai.com https:\/\/redchamps.com *.openstreetmap.fr *.openstreetmap.org unpkg.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/client.crisp.chat *.google.com *.google.fr *.google.ie *.googletagmanager.com *.googleadservices.com cl.avis-verifies.com bat.bing.com s.pinimg.com https:\/\/cdn-redirector.glopal.com https:\/\/plugin-magento-ui.glopalservice.com cdn-renderer.glopalstore.com *.avada.io *.shopify.com https:\/\/cdnjs.cloudflare.com https:\/\/secure-magenta.dalenys.com https:\/\/applepay.cdn-apple.com api-qa.payplug.com cdn.payplug.com https:\/\/cdn.payplug.com cdn-qa.payplug.com https:\/\/cdn-qa.payplug.com *.clarity.ms bzrcdn.openai.com https:\/\/unpkg.com\/pwacompat 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https:\/\/client.crisp.chat https:\/\/cdn-redirector.glopal.com https:\/\/plugin-magento-ui.glopalservice.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/secure-magenta.dalenys.com unpkg.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/client.crisp.chat wss:\/\/client.relay.crisp.chat https:\/\/plugins.crisp.chat *.doubleclick.net *.jardindupicvert.com *.jardindupicvert.com.localhost *.promessedefleurs.com *.promessedefleurs.com.localhost ct.pinterest.com https:\/\/api-plugin-facade.glopalservice.com https:\/\/cognito-idp.eu-west-1.amazonaws.com api.glopaltranslator.com https:\/\/get.geojs.io *.avada.io *.clarity.ms c.bing.com bzr.openai.com bzrcdn.openai.com *.openstreetmap.org *.arcgis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src cl.avis-verifies.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src * 'unsafe-inline' 'unsafe-eval'; style-src 'unsafe-inline'; script-src 'none' 'report-sample'; connect-src 'none'; form-action 'none'; frame-src 'none'; worker-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests; block-all-mixed-content; report-uri https:\/\/csp.threatview.app\/report;","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com *.authorize.net *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io connect.bolt.com connect-sandbox.bolt.com s3-us-west-1.amazonaws.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-datasolutions.com https:\/\/rum.hlx.page connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com *.plugins.emarsys.net *.scarabresearch.com *.authorize.net *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.magento-datasolutions.com *.magento-ds.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com sessions.bugsnag.com *.scarabresearch.com *.eservice.emarsys.net *.authorize.net *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" font-src *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paymentexpress.com *.windcave.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com www.xtento.com *.paymentexpress.com *.windcave.com *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.xtento.com cdn.xtento.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com https:\/\/firebasestorage.googleapis.com flagpedia.net *.yotpo.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ www.xtento.com cdn.xtento.com https:\/\/rum.hlx.page chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https:\/\/browser.sentry-cdn.com *.livechatinc.com *.livechat-static.com *.avada.io *.shopify.com *.gstatic.com maps.googleapis.com *.yotpo.com https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src downloads.mailchimp.com *.livechatinc.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com https:\/\/*.ingest.sentry.io *.livechatinc.com *.text.com https:\/\/get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.yotpo.com 'self' 'unsafe-inline'; child-src *.livechatinc.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" font-src www.paypalobjects.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https:\/\/pay.google.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com www.google.com https:\/\/*.dpdconnect.nl youtube.com *.doubleclick.net *.multisafepay.com https:\/\/pay.google.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com https:\/\/firebasestorage.googleapis.com flagpedia.net www.jmpbonderdelen.nl www.jmpbonderdelen.be www.jmpbparts.com www.jmpbteile.de www.jmpbteile.at www.jmpbdele.dk 'self' data: *.google.nl *.multisafepay.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ https:\/\/*.dpdconnect.nl *.avada.io *.shopify.com player.vimeo.com *.gstatic.com maps.googleapis.com *.multisafepay.com https:\/\/pay.google.com https:\/\/www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.googleapis.com *.multisafepay.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.google-analytics.com *.doubleclick.net *.google.com google.com *.googlesyndication.com *.googleadservices.com *.google.nl *.multisafepay.com https:\/\/www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self'; img-src *","count":3},{"content-security-policy-report-only":" default-src https: wss:\/\/ws.varq.net wss:\/\/wst.varq.net wss:\/\/wst2.varq.net; script-src https: http: 'unsafe-eval' 'unsafe-inline'; style-src https: http: 'unsafe-inline'; img-src https: http: data:; font-src https: http: data:;","count":3},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https:\/\/cdn.riverty.design\/ https:\/\/static.dhlecommerce.nl https:\/\/fonts.gstatic.com https:\/\/www.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com uc8.tv www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ bid.g.doubleclick.net *.braintreegateway.com *.paypal.com google.com *.google.com uc8.tv https:\/\/documents.riverty.com\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com https:\/\/www.googletagmanager.com\/ js.mollie.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.paypal.com *.typekit.net *.gstatic.com https:\/\/cdn.myafterpay.com\/ uc8.tv https:\/\/cdn.riverty.design\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/images.unsplash.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ https:\/\/firebasestorage.googleapis.com https:\/\/www.magezon.com https:\/\/www.mollie.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com uc8.tv https:\/\/cdn.myafterpay.com\/ https:\/\/cdn.bnpl.riverty.io\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/static.dhlecommerce.nl https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/cdn.jsdelivr.net *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com *.googletagmanager.com *.snrcdn.net *.snrbox.com *.ekomiapps.de www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/static.dhlecommerce.nl https:\/\/maps.googleapis.com https:\/\/fonts.googleapis.com https:\/\/static.klaviyo.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.fontawesome.com https:\/\/fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com uc8.tv https:\/\/cdn.myafterpay.com\/ https:\/\/documents.myafterpay.com\/ https:\/\/documents.riverty.com\/ https:\/\/www.afterpay.nl\/ https:\/\/cdn.bnpl.riverty.io\/ https:\/\/trace-api.newrelic.com\/ https:\/\/distributions.crowdin.net\/ https:\/\/api.crowdin.com\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/api-gw.dhlparcel.nl https:\/\/static.dhlecommerce.nl https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ https:\/\/get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/static.hivebrite.com https:\/\/*.hivebrite.com https:\/\/*.cloudfront.net https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/www.gstatic.com https:\/\/api.mapbox.com https:\/\/*.launchdarkly.com https:\/\/assets.zendesk.com https:\/\/static.zdassets.com https:\/\/*.zendesk.com https:\/\/widget.intercom.io https:\/\/*.intercomcdn.com https:\/\/app.planhat.com https:\/\/*.usejimo.com https:\/\/cdn.walkme.com https:\/\/consent.cookiebot.com https:\/\/*.cookiebot.com https:\/\/connect.facebook.net https:\/\/assets2.omniapp.co https:\/\/hivebrite-external.embed-omniapp.co; style-src 'self' 'unsafe-inline' https: data:; font-src 'self' data: https:\/\/static.hivebrite.com https:\/\/fonts.gstatic.com https:\/\/fonts.bunny.net; connect-src 'self' https:\/\/*.hivebrite.com https:\/\/*.cloudfront.net https:\/\/*.launchdarkly.com wss:\/\/*.launchdarkly.com https:\/\/*.ably.net wss:\/\/*.ably.net https:\/\/*.ably.io wss:\/\/*.ably.io https:\/\/*.datadoghq.com https:\/\/*.datadoghq.eu https:\/\/*.sentry.io https:\/\/*.sendbird.com wss:\/\/*.sendbird.com https:\/\/maps.googleapis.com https:\/\/api.mapbox.com https:\/\/*.tiles.mapbox.com https:\/\/www.google-analytics.com https:\/\/*.intercom.io wss:\/\/*.intercom.io https:\/\/app.planhat.com https:\/\/*.usejimo.com https:\/\/*.omniapp.co https:\/\/*.zendesk.com https:\/\/*.zopim.com https:\/\/*.zdassets.com https:\/\/api.klipy.com https:\/\/graph.facebook.com https:\/\/*.facebook.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; frame-src 'self' https:; worker-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' us.hivebrite.com; form-action 'self' https:; report-uri \/csp-reports","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.googleapis.com cdnjs.cloudflare.com cloud.typography.com https:\/\/fonts.gstatic.com *.fontawesome.com https:\/\/use.typekit.net https:\/\/p.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com www.facebook.com https:\/\/seo.mageplaza.com https:\/\/plumrocket.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com www.googletagmanager.com www.google.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com assets.bounceexchange.com vars.hotjar.com www.facebook.com imgs.signifyd.com h.online-metrix.net vendor1.leasestation.com amc.demdex.net nsg.symantec.com https:\/\/www.google.com newassets.hcaptcha.com js.mollie.com https:\/\/plumrocket.com *.weltpixel.com www.xtento.com https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/images.unsplash.com *.googleapis.com *.gstatic.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com www.google.co.in brsrvr.com www.facebook.com *.cdnwidget.com u.cdnwidget.com bat.bing.com nsg.symantec.com events.bouncex.net pippio.com p.brsrvr.com connect.facebook.net imgs.signifyd.com events.cdnwidget.com api.bounceexchange.com https:\/\/cm.g.doubleclick.net amc.demdex.net *.e.aa.online-metrix.net staging.powr-flite.com https:\/\/px.ads.linkedin.com https:\/\/www.linkedin.com *.google.com https:\/\/fei.pro-market.net https:\/\/c.clarity.ms https:\/\/um.simpli.fi https:\/\/c.bing.com https:\/\/eb2.3lift.com https:\/\/simplifi.partners.tremorhub.com https:\/\/pixel.tapad.com https:\/\/aa.agkn.com https:\/\/sync.intentiq.com https:\/\/loadm.exelator.com https:\/\/sync.bfmio.com https:\/\/stags.bluekai.com https:\/\/bcp.crwdcntrl.net https:\/\/ce.lijit.com https:\/\/idsync.rlcdn.com https:\/\/sync.search.spotxchange.com https:\/\/ib.adnxs.com https:\/\/googleads.g.doubleclick.net https:\/\/pixel.rubiconproject.com https:\/\/us-u.openx.net https:\/\/d.agkn.com https:\/\/bam.nr-data.net maps.googleapis.com maps.gstatic.com https:\/\/www.mollie.com www.xtento.com cdn.xtento.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com assets.adobedtm.com *.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-datasolutions.com *.magento-ds.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/rum.hlx.page https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/cdn.jsdelivr.net\/npm\/@ryangjchandler\/spruce@2.x.x\/dist\/spruce.umd.js www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.googleapis.com www.gstatic.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com events.bouncex.net api.bounceexchange.com events.bouncex.com rec.smartlook.com script.hotjar.com static.hotjar.com script.crazyegg.com connect.facebook.net vendor1.quickspark.com nsg.symantec.com bat.bing.com tag.bounceexchange.com assets.bounceexchange.com cdn.brcdn.com imgs.signifyd.com www.google.com cdns.brsrvr.com bam.nr-data.net js-agent.newrelic.com mc.s10.exacttarget.com www.dwin1.com www.clarity.ms https:\/\/browser.sentry-cdn.com hcaptcha.com https:\/\/cdn.cookielaw.org https:\/\/tag.simpli.fi https:\/\/i.simpli.fi https:\/\/snap.licdn.com https:\/\/ws.zoominfo.com polyfill-fastly.io maps.googleapis.com js.mollie.com pay.google.com applepay.cdn-apple.com www.xtento.com cdn.xtento.com https:\/\/cdn-scripts.signifyd.com https:\/\/cdn-scripts.signifyd.com\/api\/script-tag.js https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https:\/\/static.klaviyo.com display.ugc.bazaarvoice.com vendor1.quickspark.com events.bouncex.net stats.g.doubleclick.net www.google-analytics.com cdnjs.cloudflare.com cloud.typography.com https:\/\/fonts.googleapis.com *.fontawesome.com https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/cloud.typography.com https:\/\/static-tracking.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.googleapis.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com bat.bing.com script.crazyegg.com events.bouncex.net stats.g.doubleclick.net manager.eu.smartlook.cloud in.hotjar.com *.dxpapi.com core.dxpapi.com imgs.signifyd.com bt.signifyd.com:11103 data.cdnbasket.net ids.cdnwidget.com pd.cdnwidget.com page.cdnbasket.net\/ view.cdnbasket.net bam.nr-data.net vc.hotjar.io *.clarity.ms https:\/\/*.ingest.sentry.io https:\/\/cdn.cookielaw.org *.hotjar.com https:\/\/content.hotjar.io https:\/\/csmetrics.hotjar.com https:\/\/ws.zoominfo.com https:\/\/analytics.google.com https:\/\/cdn.linkedin.oribi.io maps.googleapis.com https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com hcaptcha.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.cookielaw.org https:\/\/*.onetrust.com https:\/\/*.logrocket.io https:\/\/*.lr-ingest.io https:\/\/*.logr-in.com https:\/\/*.formstack.com https:\/\/shrss-ranxu.formstack.com https:\/\/www.google.com https:\/\/www.gstatic.com blob:; style-src 'self' 'unsafe-inline' https:\/\/*.cookielaw.org https:\/\/*.formstack.com https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:\/\/picsum.photos https:\/\/*.formstack.com https:\/\/*.cookielaw.org https:\/\/*.logrocket.io https:\/\/www.gstatic.com; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/*.logrocket.io https:\/\/*.lr-ingest.io https:\/\/*.lr-in.com https:\/\/*.logr-in.com https:\/\/*.formstack.com https:\/\/shrss-ranxu.formstack.com https:\/\/geolocation.onetrust.com https:\/\/*.cookielaw.org; frame-src 'self' https:\/\/*.formstack.com https:\/\/www.google.com https:\/\/www.gstatic.com; frame-ancestors 'self'; worker-src 'self' blob:; base-uri 'self'; form-action 'self' https:\/\/*.formstack.com; object-src 'none'","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https:\/\/fonts.gstatic.com *.fontawesome.com https:\/\/www.google.com https:\/\/www.gstatic.com *.alothemes.com *.magepow.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com https:\/\/webpay3gint.transbank.cl webpay3g.transbank.cl webpay3gint.transbank.cl *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: https:\/\/www.google.com http:\/\/www.google.com https:\/\/www.facebook.com https:\/\/web.facebook.com https:\/\/bid.g.doubleclick.net *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.google.cl https:\/\/maps.gstatic.com https:\/\/maps.googleapis.com https:\/\/cdn.pushcrew.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/googleads.g.doubleclick.net https:\/\/pushcrew.com *.alothemes.com *.magepow.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com commerce.adobe.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-ds.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com https:\/\/www.google.cl https:\/\/cdn.pushcrew.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/fonts.googleapis.com https:\/\/maps.googleapis.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net http:\/\/www.google.com https:\/\/tracking.krip.cl https:\/\/js-agent.newrelic.com https:\/\/bam.nr-data.net https:\/\/cdn.fitit.ai *.googleapis.com *.gstatic.com *.alothemes.com *.magepow.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https:\/\/fonts.googleapis.com https:\/\/cdn.pushcrew.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/cdn.fitit.ai *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com *.alothemes.com *.magepow.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.net *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com qa-api.magedevteam.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com https:\/\/stats.g.doubleclick.net https:\/\/www.google-analytics.com https:\/\/bam.nr-data.net https:\/\/www.facebook.com https:\/\/api.bciplus.cl https:\/\/maps.googleapis.com https:\/\/pushcrew.com https:\/\/firebase.googleapis.com https:\/\/firebaseremoteconfig.googleapis.com https:\/\/us-central1-fitit-a5bde.cloudfunctions.net https:\/\/firebaselogging-pa.googleapis.com http:\/\/dpm.demdex.net https:\/\/www.google.com https:\/\/www.gstatic.com *.alothemes.com *.magepow.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.cloudflare.com *.twitter.com https:\/\/www.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com https:\/\/fonts.gstatic.com https:\/\/widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https:\/\/pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.twitter.com https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com js.mollie.com *.multisafepay.com https:\/\/pay.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io imgsct.cookiebot.com *.trackedlink.net *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com https:\/\/www.mollie.com *.multisafepay.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net consent.cookiebot.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com https:\/\/*.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com js.mollie.com *.multisafepay.com https:\/\/pay.google.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com https:\/\/app.aiden.cx 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.multisafepay.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.multisafepay.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" font-src data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src 'self' 'unsafe-inline'; img-src data: 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; frame-ancestors 'self' https:\/\/facebook.com https:\/\/www.facebook.com https:\/\/business.facebook.com https:\/\/*.facebook.com; object-src 'none'; form-action 'self'; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:","count":3},{"content-security-policy-report-only":" Content-Security-Policy-Report-Only: default-src * 'unsafe-inline' 'unsafe-eval'; style-src 'unsafe-inline'; script-src 'none' 'report-sample'; connect-src 'none'; form-action 'none'; frame-src 'none'; worker-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests; block-all-mixed-content; report-uri https:\/\/csp.threatview.app\/report; report-to threatview","count":3},{"content-security-policy-report-only":" default-src *;script-src 'unsafe-inline' 'unsafe-eval' *;style-src 'unsafe-inline' *;connect-src * blob:;report-uri https:\/\/cdn.website-start.de\/app\/reporting\/policyviolation\/submit","count":3},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com https:\/\/*.hotjar.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com https:\/\/*.hotjar.com magefan.com cm.magefan.com https:\/\/www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/chat.africasatellite.com https:\/\/chat.americansatellite.com https:\/\/chat.americansatellite.us https:\/\/chat.asiasatellite.co https:\/\/chat.australiasatellite.co https:\/\/chat.australiasatellite.com https:\/\/chat.canadasatellite.ca https:\/\/chat.canadasatellite.com https:\/\/chat.europasatellite.com https:\/\/chat.latinsatelital.com https:\/\/chat.playamaya.mx https:\/\/chat.robotsafrica.com https:\/\/chat.robotsasia.com https:\/\/chat.robotsaustralia.co https:\/\/chat.robotscanada.com https:\/\/chat.robotseuropa.com https:\/\/chat.robotsinternational.com https:\/\/chat.robotslatam.com https:\/\/chat.robotsusa.com https:\/\/chat.satcorp.pa https:\/\/chat.satelliterentals.ca https:\/\/chat.ultra99.com https:\/\/chat.universalrv.ca js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/*.hotjar.com 'unsafe-inline' https:\/\/chat.africasatellite.com https:\/\/chat.americansatellite.com https:\/\/chat.americansatellite.us https:\/\/chat.asiasatellite.co https:\/\/chat.australiasatellite.co https:\/\/chat.australiasatellite.com https:\/\/chat.canadasatellite.ca https:\/\/chat.canadasatellite.com https:\/\/chat.europasatellite.com https:\/\/chat.latinsatelital.com https:\/\/chat.playamaya.mx https:\/\/chat.robotsafrica.com https:\/\/chat.robotsasia.com https:\/\/chat.robotsaustralia.co https:\/\/chat.robotscanada.com https:\/\/chat.robotseuropa.com https:\/\/chat.robotsinternational.com https:\/\/chat.robotslatam.com https:\/\/chat.robotsusa.com https:\/\/chat.satcorp.pa https:\/\/chat.satelliterentals.ca https:\/\/chat.ultra99.com https:\/\/chat.universalrv.ca *.fontawesome.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/chat.africasatellite.com https:\/\/chat.americansatellite.com https:\/\/chat.americansatellite.us https:\/\/chat.asiasatellite.co https:\/\/chat.australiasatellite.co https:\/\/chat.australiasatellite.com https:\/\/chat.canadasatellite.ca https:\/\/chat.canadasatellite.com https:\/\/chat.europasatellite.com https:\/\/chat.latinsatelital.com https:\/\/chat.playamaya.mx https:\/\/chat.robotsafrica.com https:\/\/chat.robotsasia.com https:\/\/chat.robotsaustralia.co https:\/\/chat.robotscanada.com https:\/\/chat.robotseuropa.com https:\/\/chat.robotsinternational.com https:\/\/chat.robotslatam.com https:\/\/chat.robotsusa.com https:\/\/chat.satcorp.pa https:\/\/chat.satelliterentals.ca https:\/\/chat.ultra99.com https:\/\/chat.universalrv.ca wss:\/\/chat.africasatellite.com wss:\/\/chat.americansatellite.com wss:\/\/chat.americansatellite.us wss:\/\/chat.asiasatellite.co wss:\/\/chat.australiasatellite.co wss:\/\/chat.australiasatellite.com wss:\/\/chat.canadasatellite.ca wss:\/\/chat.canadasatellite.com wss:\/\/chat.europasatellite.com wss:\/\/chat.latinsatelital.com wss:\/\/chat.playamaya.mx wss:\/\/chat.robotsafrica.com wss:\/\/chat.robotsasia.com wss:\/\/chat.robotsaustralia.co wss:\/\/chat.robotscanada.com wss:\/\/chat.robotseuropa.com wss:\/\/chat.robotsinternational.com wss:\/\/chat.robotslatam.com wss:\/\/chat.robotsusa.com wss:\/\/chat.satcorp.pa wss:\/\/chat.satelliterentals.ca wss:\/\/chat.ultra99.com wss:\/\/chat.universalrv.ca api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" font-src https:\/\/cdn.checkout.com *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com https:\/\/fonts.gstatic.com *.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors 'self' *.maksekeskus.ee *.test.maksekeskus.ee localhost *.local *.scandipwa.cloud *.readymage.com sportland.com *.sportland.com sportland.lv *.sportland.lv sportland.ee *.sportland.ee sportland.lt *.sportland.lt sportland.fi *.sportland.fi sportland.pl *.sportland.pl sportland.de *.sportland.de 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com https:\/\/js.checkout.com *.klarna.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' *.maksekeskus.ee *.test.maksekeskus.ee c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.google.com https:\/\/optimize.google.com https:\/\/play.google.com localhost *.local *.scandipwa.cloud *.readymage.com sportland.com *.sportland.com sportland.lv *.sportland.lv sportland.ee *.sportland.ee sportland.lt *.sportland.lt sportland.fi *.sportland.fi sportland.pl *.sportland.pl sportland.de *.sportland.de js.driftt.com *.freshchat.com *.snapchat.com *.askly.me www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.openstreetmap.org https:\/\/map.plugins.itella.com magefan.com cm.magefan.com *.maksekeskus.ee *.test.maksekeskus.ee https:\/\/maps.omnivasiunta.lt www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com static.przelewy24.pl www.gstatic.com gstatic.com https:\/\/www.google-analytics.com https:\/\/optimize.google.com *.googleapis.com *.gstatic.com www.google.lv localhost *.local *.scandipwa.cloud *.readymage.com sportland.com *.sportland.com sportland.lv *.sportland.lv sportland.ee *.sportland.ee sportland.lt *.sportland.lt sportland.fi *.sportland.fi sportland.pl *.sportland.pl sportland.de *.sportland.de *.cloudfront.net *.snapchat.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/cdn.checkout.com *.klarnacdn.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/unpkg.com s7.addthis.com 'self' *.maksekeskus.ee *.test.maksekeskus.ee data: js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl *.google.com www.googleoptimize.com *.google-analytics.com *.googleapis.com js.driftt.com *.freshchat.com inte.searchnode.io *.sitescdn.net *.fibbl.com *.hotjar.com sc-static.net *.snapchat.com *.googlesyndication.com *.translatewise.com *.bloomreach.com *.exponea.com *.sizebay.technology www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https:\/\/cdn.checkout.com https:\/\/unpkg.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.google.com https:\/\/www.google-analytics.com https:\/\/fonts.googleapis.com *.typekit.net *.freshchat.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/js.checkout.com *.klarnaevt.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/geocode.arcgis.com ekr.zdassets.com\/ 'self' *.maksekeskus.ee *.test.maksekeskus.ee api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com sandbox.przelewy24.pl secure.przelewy24.pl wss:\/\/sandbox-ws.przelewy24.pl wss:\/\/secure-ws.przelewy24.pl apple-pay-gateway.apple.com *.fibblar.com *.fibbl.com www.gstatic.com *.google-analytics.com *.googleapis.com *.g.doubleclick.net *.scandipwa.cloud *.readymage.com *.sportland.com *.sportland.lv *.sportland.ee *.sportland.lt *.sportland.fi *.sportland.pl *.sportland.de blob: *.hotjar.com *.googlesyndication.com *.translatewise.com https:\/\/play.google.com *.bloomreach.com *.exponea.com *.sizebay.technology 'self' 'unsafe-inline'; child-src 'self' *.maksekeskus.ee *.test.maksekeskus.ee assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' www.facebook.com stats.g.doubleclick.net *.oribi.io www.google-analytics.com csp.withgoogle.com cdn.jsdelivr.net data:; frame-src 'self' 52.186.34.239 www.facebook.com *.aquawater.com *.youtube.com *.google.com www.googletagmanager.com; img-src 'self' www.linkedin.com t.co analytics.twitter.com www.google-analytics.com px.ads.linkedin.com www.facebook.com i.ytimg.com *.google.com www.googleapis.com *.gstatic.com *.aquaamerica.com data:; script-src 'self' 'unsafe-hashes' 'unsafe-inline' 'unsafe-eval' snap.licdn.com connect.facebook.net *.googletagmanager.com code.jquery.com *.google.com cdn.jsdelivr.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com https:\/\/www.google.com; script-src-attr 'self' 'unsafe-hashes' 'unsafe-inline'; script-src-elem 'self' 'unsafe-hashes' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google.com *.gstatic.com snap.licdn.com connect.facebook.net code.jquery.com cdn.jsdelivr.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com https:\/\/www.google.com; style-src 'self' 'unsafe-hashes' 'unsafe-inline' hello.myfonts.net www.google.com cdn.jsdelivr.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com; style-src-attr 'self' 'unsafe-hashes' 'unsafe-inline'; frame-ancestors 'self'; report-uri \/csp-report","count":3},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' https:\/\/dev.visualwebsiteoptimizer.com https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/region1.analytics.google.com https:\/\/pagead2.googlesyndication.com https:\/\/ad.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/*.clarity.ms https:\/\/consentcdn.cookiebot.com https:\/\/dpm.demdex.net https:\/\/tr.snapchat.com https:\/\/tr6.snapchat.com https:\/\/px.ads.linkedin.com https:\/\/bat.bing.net https:\/\/ws.zoominfo.com https:\/\/js.zi-scripts.com https:\/\/siteintercept.qualtrics.com https:\/\/ib.adnxs.com https:\/\/endpoint-app.cognigy.ai https:\/\/www.google.com; font-src 'self' https:\/\/font.circlekeurope.com data:; frame-src 'self' https:\/\/consentcdn.cookiebot.com https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/*.fls.doubleclick.net https:\/\/circlek.demdex.net https:\/\/tr.snapchat.com; img-src 'self' data: blob: https:\/\/www.google-analytics.com https:\/\/slim-prod.cksites-prod.alpaque.net https:\/\/maps.gstatic.com https:\/\/maps.googleapis.com https:\/\/imgsct.cookiebot.com https:\/\/www.googletagmanager.com https:\/\/c.clarity.ms https:\/\/www.facebook.com https:\/\/tr.snapchat.com https:\/\/px.ads.linkedin.com https:\/\/dpm.demdex.net https:\/\/cm.everesttech.net https:\/\/c.bing.com https:\/\/bat.bing.net https:\/\/ade.googlesyndication.com https:\/\/pagead2.googlesyndication.com https:\/\/ad.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/ib.adnxs.com https:\/\/tr.lfeeder.com https:\/\/www.google.com https:\/\/www.google.pl https:\/\/www.google.de https:\/\/www.google.be https:\/\/www.google.nl https:\/\/www.google.dk https:\/\/www.google.se https:\/\/www.google.ie https:\/\/www.google.lu https:\/\/www.google.ca; media-src 'self' data:; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/maps.googleapis.com https:\/\/assets.adobedtm.com https:\/\/websdk.appsflyer.com https:\/\/connect.facebook.net https:\/\/*.clarity.ms https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/snap.licdn.com https:\/\/sc-static.net https:\/\/tr.snapchat.com https:\/\/s2.adform.net https:\/\/track.adform.net https:\/\/*.siteintercept.qualtrics.com https:\/\/ws-assets.zoominfo.com https:\/\/js.zi-scripts.com https:\/\/sc.lfeeder.com https:\/\/pi.pardot.com https:\/\/go.circlek.ie https:\/\/go.circlek.dk https:\/\/googleads.g.doubleclick.net https:\/\/bat.bing.com https:\/\/acdn.adnxs.com https:\/\/analytics.trackingb2b.com https:\/\/cdnjs.cloudflare.com https:\/\/www.buyatab.com; script-src-elem 'self' 'report-sample' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/maps.googleapis.com https:\/\/assets.adobedtm.com https:\/\/websdk.appsflyer.com https:\/\/connect.facebook.net https:\/\/*.clarity.ms https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/snap.licdn.com https:\/\/sc-static.net https:\/\/tr.snapchat.com https:\/\/s2.adform.net https:\/\/track.adform.net https:\/\/*.siteintercept.qualtrics.com https:\/\/ws-assets.zoominfo.com https:\/\/js.zi-scripts.com https:\/\/sc.lfeeder.com https:\/\/pi.pardot.com https:\/\/go.circlek.ie https:\/\/go.circlek.dk https:\/\/googleads.g.doubleclick.net https:\/\/bat.bing.com https:\/\/acdn.adnxs.com https:\/\/analytics.trackingb2b.com https:\/\/cdnjs.cloudflare.com https:\/\/www.buyatab.com; style-src 'self' 'report-sample' 'unsafe-inline' https:\/\/cdnjs.cloudflare.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":3},{"content-security-policy-report-only":" font-src *.fontawesome.com https:\/\/fonts.bunny.net https:\/\/widgets.trustedshops.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https:\/\/pay.google.com 'self'; frame-src bid.g.doubleclick.net https:\/\/www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.multisafepay.com https:\/\/pay.google.com https:\/\/widget.trustpilot.com https:\/\/vars.hotjar.com facebook.com *.doubleclick.net https:\/\/www.google.com https:\/\/www.googletagmanager.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https:\/\/images.unsplash.com magefan.com cm.magefan.com https:\/\/firebasestorage.googleapis.com *.multisafepay.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.google.nl *.bing.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ widget.freshworks.com m2epro.freshdesk.com https:\/\/browser.sentry-cdn.com https:\/\/maps.googleapis.com *.avada.io *.cloudflare.com\/ajax\/libs\/prototype\/1.7.3\/prototype.js *.multisafepay.com https:\/\/pay.google.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com https:\/\/cdnjs.cloudflare.com https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/*.hotjar.com https:\/\/widget.trustpilot.com *.bing.com https:\/\/www.youtube.com\/iframe_api https:\/\/www.youtube.com\/s\/player\/ https:\/\/img.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https:\/\/fonts.bunny.net *.multisafepay.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.google-analytics.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.youtube.com *.youtube-nocookie.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com widget.freshworks.com m2epro.freshdesk.com https:\/\/*.ingest.sentry.io https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/get.geojs.io *.avada.io *.multisafepay.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site https:\/\/region1.google-analytics.com *.doubleclick.net *.hotjar.com wss:\/\/*.hotjar.com *.google.com *.bing.com bam.nr-data.net google.com www.google.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'","count":3},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com data: 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.usercentrics.eu *.sibforms.com https:\/\/www.googletagmanager.com\/ *.facebook.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com www.xtento.com *.criteo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.trustedshops.com *.usercentrics.eu *.clarity.ms *.bing.com bat.bing.net *.facebook.com *.doubleclick.net www.google.de www.google.at www.google.ch www.google.pl http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ *.cdninstagram.com maps.googleapis.com flagpedia.net cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com *.google.de *.google.pl *.google.com *.adscale.de fh-118116076e9a4c2a96a99fbb70bea2a0.ecs.us-west-2.on.aws *.smartadserver.com *.outbrain.com *.3lift.com *.fwmrm.net *.yieldmo.com *.openx.net *.360yield.com *.creativecdn.com *.33across.com *.seedtag.com sync.go.sonobi.com fast.nexx360.io simage2.pubmatic.com *.adform.net *.inmobi.com *.dmxleo.com sync.adtech.ink *.bidswitch.net *.casalemedia.com *.criteo.com *.id5-sync.com id5-sync.com *.postrelease.com *.teads.tv *.tremorhub.com *.1rx.io *.media.net *.pubmatic.com *.mediavine.com *.taboola.com *.yieldlab.net *.agkn.com *.unrulymedia.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/shopify.admetrics.events https:\/\/v6.shopify.admetrics.events *.googleapis.com *.trustedshops.com *.usercentrics.eu *.clarity.ms *.bing.com *.taboola.com *.brevo.com sibautomation.com *.dynamicyield.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ player.vimeo.com connect.facebook.net cdnjs.cloudflare.com maps.googleapis.com *.gstatic.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com *.hsforms.net *.hsforms.com www.xtento.com cdn.xtento.com *.criteo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.gstatic.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/shopify.admetrics.events https:\/\/v6.shopify.admetrics.events *.googleapis.com *.cloudfront.net *.usercentrics.eu *.trustedshops.com *.clarity.ms *.bing.com bat.bing.net *.taboola.com *.brevo.com *.doubleclick.net www.google.de www.google.at www.google.ch www.google.pl *.dynamicyield.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ maps.googleapis.com www.gstatic.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com t.elasticsuite.io *.hsforms.net *.hsforms.com region1.analytics.google.com *.creativecdn.com bded8a3c6ae-1-1053047382554.us-central1.run.app fh-118116076e9a4c2a96a99fbb70bea2a0.ecs.us-west-2.on.aws 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com https:\/\/fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.chase.hostedpaymentservice.net *.chase-var.hostedpaymentservice.net *.google.com *.mkt.dynamics.com *.azureedge.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.certcapture.com https:\/\/www.google.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.chase.hostedpaymentservice.net *.chase-var.hostedpaymentservice.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https:\/\/images.unsplash.com *.googleapis.com *.certcapture.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com *.whoson.com *.nexcesscdn.net placehold.co *.amazonaws.com *.6sc.co *.facebook.com *.bing.com *.clarity.ms *.google.co.in *.idexcorp.com cdn-cookieyes.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/cdn.jsdelivr.net\/npm\/@ryangjchandler\/spruce@2.x.x\/dist\/spruce.umd.js *.googleapis.com *.gstatic.com *.certcapture.com https:\/\/js.stripe.com https:\/\/www.google.com\/recaptcha\/api.js https:\/\/www.gstatic.com\/recaptcha\/releases\/Trd6gj1dhC_fx0ma_AWHc1me\/recaptcha__en.js *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.chase.hostedpaymentservice.net *.chase-var.hostedpaymentservice.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com tagmanager.google.com *.whoson.com *.kbmax.com *.jotfor.ms *.acsbapp.com acsbapp.com *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.googleadservices.com *.google-analytics.com *.doubleclick.net *.paypalobjects.com *.ytimg.com *.googleapis.com  *.vimeo.com *.omtrdc.net *.jsdelivr.net *.stripe.com *.6sc.co *.facebook.net *.inventive52intuitive.com *.clarity.ms *.pardot.com *.idexcorp.com cdn-cookieyes.com *.cloudfront.net *.mkt.dynamics.com *.azureedge.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com https:\/\/fonts.googleapis.com maxcdn.bootstrapcdn.com assets.braintreegateway.com tagmanager.google.com fonts.google.com *.typekit.net *.whoson.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.idexcorp.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.googleapis.com *.certcapture.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.chase.hostedpaymentservice.net *.chase-var.hostedpaymentservice.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.acsbapp.com *.doubleclick.net *.6sc.co *.googlesyndication.com *.clarity.ms *.google.co.in *.facebook.com *.cookieyes.com cdn-cookieyes.com *.idexcorp.com *.mkt.dynamics.com *.azureedge.net *.events.data.microsoft.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https:\/\/www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/cdn.amplitude.com https:\/\/cdn-4.convertexperiments.com https:\/\/js-agent.newrelic.com https:\/\/connect.facebook.net https:\/\/js.stripe.com https:\/\/accounts.google.com https:\/\/apis.google.com https:\/\/googleads.g.doubleclick.net https:\/\/appleid.cdn-apple.com https:\/\/www.redditstatic.com https:\/\/bzrcdn.openai.com https:\/\/js.appboycdn.com https:\/\/js.hsforms.net https:\/\/js.hs-scripts.com https:\/\/js.hs-analytics.net https:\/\/js.hubspot.com https:\/\/js.hs-banner.com https:\/\/js.hsadspixel.net https:\/\/us-assets.i.posthog.com https:\/\/*.firebaseio.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/sc-static.net https:\/\/tr.snapchat.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/cdn.amplitude.com https:\/\/cdn-4.convertexperiments.com https:\/\/js-agent.newrelic.com https:\/\/connect.facebook.net https:\/\/js.stripe.com https:\/\/accounts.google.com https:\/\/apis.google.com https:\/\/googleads.g.doubleclick.net https:\/\/appleid.cdn-apple.com https:\/\/www.redditstatic.com https:\/\/bzrcdn.openai.com https:\/\/js.appboycdn.com https:\/\/js.hsforms.net https:\/\/js.hs-scripts.com https:\/\/js.hs-analytics.net https:\/\/js.hubspot.com https:\/\/js.hs-banner.com https:\/\/js.hsadspixel.net https:\/\/us-assets.i.posthog.com https:\/\/*.firebaseio.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/sc-static.net https:\/\/tr.snapchat.com; style-src 'self' 'unsafe-inline' https:\/\/use.fontawesome.com https:\/\/fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https:\/\/use.fontawesome.com https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; manifest-src 'self'; connect-src 'self' https:\/\/first-table.firebaseio.com wss:\/\/first-table.firebaseio.com https:\/\/bam.nr-data.net https:\/\/api.stripe.com https:\/\/stellate.firsttable.net wss:\/\/stellate.firsttable.net https:\/\/api.firsttable.net wss:\/\/api.firsttable.net https:\/\/argus.firsttable.net https:\/\/api2.amplitude.com https:\/\/api.lab.amplitude.com https:\/\/sr-client-cfg.amplitude.com https:\/\/api-sr.amplitude.com https:\/\/cdn.amplitude.com https:\/\/cdn.growthbook.io https:\/\/us1.gb-ingest.com https:\/\/*.gb-ingest.com https:\/\/sdk.iad-07.braze.com https:\/\/*.firebaseio.com wss:\/\/*.firebaseio.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/ad.doubleclick.net https:\/\/www.googleadservices.com https:\/\/www.google.co.nz https:\/\/www.google.com.au https:\/\/www.google.co.uk https:\/\/www.google.ie https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/accounts.google.com https:\/\/appleid.apple.com https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/*.algolia.io https:\/\/*.metrics.convertexperiments.com https:\/\/logs.convertexperiments.com https:\/\/*.signals.convertexperiments.com https:\/\/cdn-4.convertexperiments.com https:\/\/api.mapbox.com https:\/\/events.mapbox.com https:\/\/vitals.vercel-insights.com https:\/\/firsttable.bamboohr.com https:\/\/api.hubapi.com https:\/\/*.hubspot.com https:\/\/us.i.posthog.com https:\/\/us-assets.i.posthog.com https:\/\/pixel-config.reddit.com https:\/\/bzrcdn.openai.com https:\/\/bzr.openai.com wss:\/\/ws.hotjar.com https:\/\/ws.hotjar.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/tr.snapchat.com https:\/\/tr6.snapchat.com; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/js.stripe.com https:\/\/hooks.stripe.com https:\/\/accounts.google.com https:\/\/appleid.apple.com https:\/\/tr.snapchat.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.facebook.com https:\/\/m.facebook.com https:\/\/www.tiktok.com https:\/\/embed.tiktok.com https:\/\/player.vimeo.com https:\/\/js.hsforms.net https:\/\/*.firebaseio.com; worker-src 'self' blob: https:\/\/www.googletagmanager.com; report-to csp-endpoint; report-uri \/api\/csp-report","count":3},{"content-security-policy-report-only":" font-src *.klarnacdn.net *.fontawesome.com https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ www.google.com https:\/\/www.paypal.com https:\/\/hostedfields-externalapi.alpha.buckaroo.aws https:\/\/hostedfields-externalapi.prod-pci.buckaroo.io *.klarna.com js.mollie.com *.sendcloud.sc *.jsdelivr.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/images.unsplash.com https:\/\/portal.payconiq.com https:\/\/static.buckaroo.nl https:\/\/www.paypalobjects.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https:\/\/www.mollie.com *.amazonaws.com https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.gstatic.com www.magmodules.eu *.squeezely.tech https:\/\/maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ https:\/\/static.buckaroo.nl https:\/\/checkout.buckaroo.nl https:\/\/testcheckout.buckaroo.nl https:\/\/buckaroo.nl https:\/\/www.paypal.com https:\/\/hostedfields-externalapi.alpha.buckaroo.aws https:\/\/hostedfields-externalapi.prod-pci.buckaroo.io *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com js.mollie.com *.sendcloud.sc *.jsdelivr.net https:\/\/www.googletagmanager.com https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com squeezely.tech www.squeezely.tech *.squeezely.tech polyfill.io cdn.cookie-script.com gallery.cevoid.com inc.fotobehang.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https:\/\/checkout.buckaroo.nl https:\/\/testcheckout.buckaroo.nl *.klarnacdn.net *.fontawesome.com *.sendcloud.sc *.jsdelivr.net https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com wss:\/\/websocketservice-externalapi.prod.buckaroo.io https:\/\/static.buckaroo.nl wss:\/\/websockets.buckaroo.io\/ https:\/\/checkout.buckaroo.nl https:\/\/testcheckout.buckaroo.nl https:\/\/hostedfields-externalapi.alpha.buckaroo.aws https:\/\/hostedfields-externalapi.prod-pci.buckaroo.io https:\/\/applepay.buckaroo.io https:\/\/www.paypal.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.trustedshops.com *.etrusted.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com squeezely.tech *.squeezely.tech 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.fontawesome.com https:\/\/fonts.gstatic.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com *.petm2.com *.staging.petm2.com *.petiteamelie.nl *.petiteamelie.fr *.petiteamelie.de *.petiteamelie.co.uk *.petiteamelie.com *.petiteamelie.be 'self' data: https:\/\/widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.monetico-services.com *.petm2.com *.staging.petm2.com *.petiteamelie.nl *.petiteamelie.fr *.petiteamelie.de *.petiteamelie.co.uk *.petiteamelie.com *.petiteamelie.be www.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https:\/\/pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.monetico-services.com https:\/\/www.googletagmanager.com\/ js.mollie.com *.addthis.com *.multisafepay.com https:\/\/pay.google.com static.addtoany.com *.cookiebot.com consentcdn.cookiebot.com *.pinterest.com ssgtm.petiteamelie.nl ssgtm.petiteamelie.co.uk ssgtm.petiteamelie.fr ssgtm.petiteamelie.de ssgtm.petiteamelie.be www.googletagmanager.com pay.google.com www.google.com www.facebook.com ct.pinterest.com tr.snapchat.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ https:\/\/www.mollie.com magefan.com cm.magefan.com *.alothemes.com *.magepow.com *.multisafepay.com *.petm2.com *.staging.petm2.com *.petiteamelie.nl *.petiteamelie.fr *.petiteamelie.de *.petiteamelie.co.uk *.petiteamelie.com *.petiteamelie.be *.facebook.com integrations.etrusted.com *.google.pl *.google.com *.bing.com *.cookiebot.com *.clarity.ms *.doubleclick.net region1.analytics.google.com widgets.trustedshops.com media.multisafepay.com testmedia.multisafepay.com www.gstatic.com cdn.flbx.io bat.bing.com cdn.luigisbox.com tr.snapchat.com lantern.roeye.com ssgtm.petiteamelie.nl ssgtm.petiteamelie.co.uk ssgtm.petiteamelie.fr ssgtm.petiteamelie.de ssgtm.petiteamelie.be adservice.google.com *.cloudinary.com bat.bing.net *.hsforms.net *.hsforms.com 'self' data: https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/scripts.luigisbox.tech https:\/\/cdn.luigisbox.tech https:\/\/live.luigisbox.tech https:\/\/api.luigisbox.tech js.mollie.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.avada.io *.alothemes.com *.magepow.com *.multisafepay.com https:\/\/pay.google.com *.petm2.com *.staging.petm2.com *.petiteamelie.nl *.petiteamelie.fr *.petiteamelie.de *.petiteamelie.co.uk *.petiteamelie.com *.petiteamelie.be www.clarity.ms scripts.clarity.ms connect.getflowbox.com static.addtoany.com cdn-4.convertexperiments.com assets.voyado.com *.cookiebot.com *.beslist.nl *.pinimg.com *.bing.com integrations.etrusted.com widgets.trustedshops.com scripts.luigisbox.tech cdn.luigisbox.tech connect.facebook.net script.crazyegg.com analytics.tiktok.com ct.pinterest.com www.google.com www.gstatic.com pay.google.com pay.multisafepay.com ingest.promptwatch.com js-agent.newrelic.com consent.cookiebot.com consentcdn.cookiebot.com bat.bing.com www.dwin1.com sc-static.net lantern.roeyecdn.com tr.snapchat.com *.hsforms.net *.hsforms.com *.gstatic.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com fonts.gstatic.com https:\/\/scripts.luigisbox.tech https:\/\/cdn.luigisbox.tech https:\/\/live.luigisbox.tech https:\/\/api.luigisbox.tech *.fontawesome.com *.googleapis.com *.addtoany.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com *.multisafepay.com *.petm2.com *.staging.petm2.com *.petiteamelie.nl *.petiteamelie.fr *.petiteamelie.de *.petiteamelie.co.uk *.petiteamelie.com *.petiteamelie.be cdn.luigisbox.tech pay.multisafepay.com integrations.etrusted.com *.gstatic.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ *.petm2.com *.staging.petm2.com *.petiteamelie.nl *.petiteamelie.fr *.petiteamelie.de *.petiteamelie.co.uk *.petiteamelie.com *.petiteamelie.be cdn.flbx.io res.cloudinary.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.monetico-services.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ https:\/\/scripts.luigisbox.tech https:\/\/cdn.luigisbox.tech https:\/\/live.luigisbox.tech https:\/\/api.luigisbox.tech *.addthis.com https:\/\/get.geojs.io *.avada.io http:\/\/dpm.demdex.net *.alothemes.com *.magepow.com *.multisafepay.com *.petm2.com *.staging.petm2.com *.petiteamelie.nl *.petiteamelie.fr *.petiteamelie.de *.petiteamelie.co.uk *.petiteamelie.com *.petiteamelie.be testapi.multisafepay.com connect.facebook.net *.google-analytics.com *.googlesyndication.com *.staging.voyado.com *.clarity.ms *.doubleclick.net *.pinterest.com *.pinimg.com *.cookiebot.com t1.voyado.com script.crazyegg.com region1.analytics.google.com gateway.getflowbox.com a.getflowbox.com connect.getflowbox.com integrations.etrusted.com live.luigisbox.tech ingest.promptwatch.com *.bing.com analytics.tiktok.com ct.beslist.nl analytics-ipv6.tiktokw.us bam.eu01.nr-data.net consentcdn.cookiebot.com play.google.com api.luigisbox.com ssgtm.petiteamelie.nl ssgtm.petiteamelie.co.uk ssgtm.petiteamelie.fr ssgtm.petiteamelie.de ssgtm.petiteamelie.be tr.snapchat.com tr6.snapchat.com bat.bing.net getflowbox.com api.kolsquare.com kolsquare.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.google.com www.youtube.com js-agent.newrelic.com *.petm2.com *.staging.petm2.com *.petiteamelie.nl *.petiteamelie.fr *.petiteamelie.de *.petiteamelie.co.uk *.petiteamelie.com *.petiteamelie.be static.addtoany.com pay.multisafepay.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" frame-ancestors 'self' *.volusion.com;default-src 'none'","count":3},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com https:\/\/*.gstatic.com *.moca-bike.com *.urage.com *.eoto-objects.com *.stepbystep-schulranzen.com *.coocazoo.com *.hama.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com https:\/\/widgets.trustedshops.com *.stape.io 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.adyen.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.moca-bike.com *.urage.com *.eoto-objects.com *.stepbystep-schulranzen.com *.coocazoo.com *.hama.com https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com app.usercentrics.eu *.stape.io 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * https:\/\/*.gstatic.com *.adyen.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com cdn.scarabresearch.com *.moca-bike.com *.urage.com *.eoto-objects.com *.stepbystep-schulranzen.com *.coocazoo.com *.hama.com *.disqus.com https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com orbitvu.co *.orbitvu.co https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.etrusted.com media.brand-distribution.com widgets.trustedshops.com app.usercentrics.eu privacy-proxy-server.usercentrics.eu uct.service.usercentrics.eu *.stape.io www.facebook.com connect.facebook.com www.google.de piwik.hama.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net https:\/\/userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https:\/\/userlike-cdn-umm.b-cdn.net\/ cdn.scarabresearch.com *.moca-bike.com *.urage.com *.eoto-objects.com *.stepbystep-schulranzen.com *.coocazoo.com *.hama.com *.kameleoon.com *.kameleoon.io *.kameleoon.eu *.kameleoon.net *.disqus.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com orbitvu.co *.orbitvu.co https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com widgets.trustedshops.com aggregator.service.usercentrics.eu app.usercentrics.eu api.usercentrics.eu graphql.usercentrics.eu privacy-proxy.usercentrics.eu consent-api.service.consent.usercentrics.eu *.stape.io connect.facebook.com connect.facebook.net www.google.com www.google.de piwik.hama.com *.hsforms.net *.hsforms.com https:\/\/app.usercentrics.eu https:\/\/privacy-proxy.usercentrics.eu 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https:\/\/fonts.googleapis.com\/ *.googleapis.com *.googletagmanager.com *.moca-bike.com *.urage.com *.eoto-objects.com *.stepbystep-schulranzen.com *.coocazoo.com *.hama.com fast.fonts.net *.kameleoon.com *.kameleoon.io *.kameleoon.eu *.kameleoon.net https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.orbitvu.co https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com hello.myfonts.net *.stape.io *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.stepbystep-schulranzen.com *.coocazoo.com *.hama.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.adyen.com *.doubleclick.net *.googlesyndication.com https:\/\/www.merchant-center-analytics.goog https:\/\/userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https:\/\/api.userlike.com *.moca-bike.com *.urage.com *.eoto-objects.com *.stepbystep-schulranzen.com *.coocazoo.com *.hama.com https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.orbitvu.cloud *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site aggregator.service.usercentrics.eu app.usercentrics.eu api.usercentrics.eu graphql.usercentrics.eu privacy-proxy.usercentrics.eu consent-api.service.consent.usercentrics.eu *.stape.io connect.facebook.com connect.facebook.net www.google.com www.google.de piwik.hama.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.moca-bike.com *.urage.com *.eoto-objects.com *.stepbystep-schulranzen.com *.coocazoo.com *.hama.com *.kameleoon.com *.kameleoon.io *.kameleoon.eu *.kameleoon.net *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" font-src *.googleapis.com *.gstatic.com data: *.stape.io *.fontawesome.com https:\/\/fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.google.com *.certcapture.com account.fetchify.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.xtento.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com *.certcapture.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com magefan.com cm.magefan.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io https:\/\/img.youtube.com https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.certcapture.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.doubleclick.net *.stape.io *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.certcapture.com downloads.mailchimp.com cc-cdn.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com https:\/\/fonts.bunny.net unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.certcapture.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk *.google-analytics.com *.google.com *.doubleclick.net *.googlesyndication.com https:\/\/www.merchant-center-analytics.goog *.stape.io https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.gstatic.com https:\/\/www.google.com; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com; img-src 'self' data: https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/secure.gravatar.com; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/stats.g.doubleclick.net; frame-src 'self' https:\/\/www.google.com https:\/\/maps.google.com https:\/\/www.youtube.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https:\/\/www.tisda.nl\/csp-report.php;","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/connect.facebook.net https:\/\/*.hotjar.com https:\/\/*.clarity.ms https:\/\/snap.licdn.com https:\/\/widget.tabnav.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/analytics.synaxon.com https:\/\/stackpath.bootstrapcdn.com https:\/\/*.gstatic.com https:\/\/*.adform.net https:\/\/*.google.com https:\/\/www.youtube.com https:\/\/*.googlesyndication.com https:\/\/*.twitter.com https:\/\/widget.tabnav.com; style-src 'self' 'unsafe-inline' https:\/\/*.gstatic.com https:\/\/stackpath.bootstrapcdn.com; img-src 'self' data: 'self' data: https: https:\/\/*.gstatic.com https:\/\/px.ads.linkedin.com https:\/\/widgets.kununu.com https:\/\/www.facebook.com https:\/\/*.google.com https:\/\/www.googletagmanager.com; font-src 'self' data: https:\/\/*.gstatic.com https:\/\/static2.sharepointonline.com https:\/\/*.wp.com; connect-src 'self' https:\/\/px.ads.linkedin.com https:\/\/region1.google-analytics.com https:\/\/*.google.com https:\/\/www.googletagmanager.com https:\/\/www.youtube-nocookie.com https:\/\/*.clarity.ms https:\/\/analytics.synaxon.com https:\/\/web-api.synaxon.de https:\/\/www.facebook.com https:\/\/www.google-analytics.com https:\/\/region1.analytics.google.com https:\/\/*.adform.net https:\/\/*.doubleclick.net https:\/\/www.googleadservices.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/analytics.google.com https:\/\/*.googlesyndication.com https:\/\/widget-config.tabnav.com; media-src 'self'; frame-src https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/*.google.com https:\/\/www.googletagmanager.com https:\/\/www.youtube.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; report-uri \/csp-report-endpoint;","count":3},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https:\/\/cms.staticnet88.com https:\/\/v2.flashcore.net http:\/\/gw-3423 http:\/\/api-event-prod.com https:\/\/hotmatch.storeallinone.com https:\/\/api.bakogai.com\/gt-stats-be https:\/\/webchat.s1-tool.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' ws: wss: https:\/\/cms.staticnet88.com https:\/\/v2.flashcore.net http:\/\/gw-3423 http:\/\/api-event-prod.com https:\/\/hotmatch.storeallinone.com https:\/\/api.bakogai.com\/gt-stats-be https:\/\/webchat.s1-tool.com; frame-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self'","count":3},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl\/android","count":2},{"content-security-policy-report-only":" object-src 'none'; media-src 'self' assets.mozilla.net videos.cdn.mozilla.net www.firefox.com www.mozilla.org; frame-src 'self' accounts.firefox.com www.google-analytics.com www.googletagmanager.com www.youtube-nocookie.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google-analytics.com *.googletagmanager.com cdn.transcend.io google-analytics.com googletagmanager.com pa.firefox.com s.ytimg.com tagmanager.google.com transcend-cdn.com www.firefox.com www.youtube.com; style-src 'self' 'unsafe-inline' cdn.transcend.io transcend-cdn.com www.firefox.com; form-action 'self' https:\/\/accounts.firefox.com\/ https:\/\/basket.mozilla.org; base-uri 'none'; img-src 'self' *.google-analytics.com *.googletagmanager.com data: google-analytics.com googletagmanager.com www.firefox.com www.mozilla.org; connect-src 'self' *.analytics.google.com *.google-analytics.com *.googletagmanager.com analytics.google.com basket.mozilla.org cdn.transcend.io google-analytics.com googletagmanager.com gtm-dev.springfield.moz.works gtm.firefox.com gtm.springfield.moz.works https:\/\/accounts.firefox.com\/ https:\/\/basket.mozilla.org o1069899.ingest.sentry.io o1069899.ingest.us.sentry.io o1069899.sentry.io pa.firefox.com telemetry.transcend.io telemetry.us.transcend.io transcend-cdn.com www.firefox.com; default-src 'self' www.firefox.com; upgrade-insecure-requests; frame-ancestors 'none'; font-src 'self' www.firefox.com","count":2},{"content-security-policy-report-only":" default-src 'self' wwwv2.tailscale.com;\tscript-src 'self' wwwv2.tailscale.com bat.bing.com cdn.rudderlabs.com www.google-analytics.com www.googletagmanager.com www.google.com js.hs-scripts.com js.hs-banner.com js.hubspot.com js.hs-analytics.com *.hsforms.net unpkg.com snap.licdn.com www.redditstatic.com https:\/\/bwa.marketplace.awsstatic.com widget.kapa.ai https:\/\/*.optimizely.com;\tconnect-src 'self' wwwv2.tailscale.com login.tailscale.com bat.bing.com analytics.google.com www.google-analytics.com cdn.sanity.io unpkg.com *.rudderstack.com *.hubspot.com www.redditstatic.com pixel-config.reddit.com px.ads.linkedin.com https:\/\/medley.prod.irtysh.dubai.aws.dev proxy.kapa.ai kapa-widget-proxy-la7dkmplpq-uc.a.run.app metrics.kapa.ai https:\/\/*.optimizely.com wss:\/\/*.optimizely.com;\timg-src 'self' wwwv2.tailscale.com cdn.sanity.io lh3.googleusercontent.com www.google-analytics.com *.hsforms.com alb.reddit.com px.ads.linkedin.com bat.bing.com track.hubspot.com https:\/\/cdn.optimizely.com;\tstyle-src https:\/\/*.optimizely.com 'unsafe-inline';\tfont-src 'self' https:\/\/*.optimizely.com;\tframe-ancestors 'none';\tform-action 'self' wwwv2.tailscale.com;\tbase-uri 'self' wwwv2.tailscale.com;\tblock-all-mixed-content;\tobject-src 'self' wwwv2.tailscale.com;\treport-to csp-endpoint;\treport-uri https:\/\/login.tailscale.com\/csp-report;","count":2},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' *.mythad.com https:\/\/*.kwai-pro.com http:\/\/*.kwai-pro.com http:\/\/*.kwai.net https:\/\/*.kwai.net *.kwai.com *.snackvideo.in *.kwai.me *.kwai.app *.kwimgs.com *.yximgs.com *.cloudfront.net *.kuaishou.com https:\/\/*.gifshow.com http:\/\/*.gifshow.com https:\/\/log-sdk.ksapisrv.com https:\/\/www.googletagmanager.com https:\/\/gifshow-static.download.ks-cdn.com https:\/\/static3.avast.com https:\/\/translate.google.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com https:\/\/connect.facebook.net www.google-analytics.com hm.baidu.com m.snackvideo.com http:\/\/*.ap4r.com https:\/\/*.ap4r.com https:\/\/*.typekit.net http:\/\/*.typekit.net ak-sgp-pic.snackvideo.in tx-sgp-pic.snackvideo.in ws-sgp-pic.snackvideo.in g-us-kampic.golden49.net g-us-kamcdn.golden49.net m.kwai.com sentry.kuaishou.com https:\/\/cdn.jsdelivr.net https:\/\/at.alicdn.com https:\/\/www.facebook.com https:\/\/snap.licdn.com https:\/\/px.ads.linkedin.com https:\/\/cdn.linkedin.oribi.io https:\/\/www.linkedin.com https:\/\/*.google.com https:\/\/*.google-analytics.com https:\/\/*.doubleclick.net asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;img-src http: https: asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;connect-src http: https: asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;report-uri https:\/\/csplog.kwai-pro.com\/log\/kwai\/wwwkwai","count":2},{"content-security-policy-report-only":" default-src data: 'self' blob: 'unsafe-inline' 'unsafe-eval' *.nesine.com wss:\/\/*.nesine.com *.google.com *.google.com.tr *.googletagmanager.com *.google-analytics.com *.support.google.com *.doubleclick.net *.googleadservices.com *.microsoft.com *.apple.com *.facebook.com *.facebook.net connect.facebook.net *.betsolutions.com *.ertgaming.com *.yahoo.com *.newrelic.com *.twitter.com *.instagram.com *.youtube.com *.ytimg.com *.aboutcookies.org *.mobilproses.com *.omnitagjs.com *.outbrain.com *.nr-data.net *.bidswitch.net wss:\/\/*.sportradar.com *.sportradar.com *.akamaized.net *.performfeeds.com *.betradar.com *.dge.imggaming.com tjktv.ercdn.net *.tjk.org *.broadage.com *.pubmatic.com *.mediavine.com *.demdex.net *.krxd.net *.thebrighttag.com *.tremorhub.com *.adnxs.com *.casalemedia.com *.360yield.com *.media.net *.rubiconproject.com *.sharethrough.com *.smartadserver.com *.teads.tv *.3lift.com *.emxdgt.com *.sync.com *.ivitrack.com *.yieldmo.com *.yieldlab.net *.imgarena.com *.liderform.com.tr *.googleapis.com *.googlevideo.com *.gstatic.com *.azureedge.net *.semasio.net *.7platform.net *.7platform.com *.7platform.live *.nsoft-cdn.com *.launchdigi.net *.106digital.com *.gameturboz.cloud *.turboexplorer.online *.1rx.io *.adsrvr.org aa.agkn.com *.postrelease.com *.revcontent.com *.rqtrk.eu *.bing.com *.smaato.net *.narrative.io *.socdm.com *.mediawallahscript.com *.liadm.com *.stickyadstv.com *.linkedin.com *.rlcdn.com *.dable.io *.adingo.jp *.twiago.com *.bluekai.com *.crwdcntrl.net *.hs.llnwd.net *.ucweb.com *.dengage.com *.playbetman.com *.turbolabs.online *.aleaplay.com *.ondigitalocean.app *.turbogg4u.online *.turbodiscovery.xyz *.ofmicropod.com *.dengagecdn.com launchdigi.net *.eskimi.com *.tiktok.com *.rsc.cdn77.org *.igamemedia.com *.castr.net data.widgets.sir.sportradar.com *.inseincvirtuals.com wss:\/\/data.widgets.sir.sportradar.com wss:\/\/*.sportradar.com wss:\/\/*.akamaized.net cdn.alsgp0.fds.api.mi-img.com apm-rum-sgp.inf.miui.com infragrid.v.network metrics-dre.dt.dbankcloud.cn cdn-uicons.flaticon.com *.cloudfront.net *.mobilproses.com *.codezania.com https:\/\/shunnedstudios.com\/ https:\/\/106gamesgalaxsys.online https:\/\/www.millipiyangoonline.com\/ *.gtechgames.com *.7777gaming.tech *.7777gaming.xyz *.7777gaming.com.tr www.google.de www.google.com.cy www.google.nl www.google.fr www.google.co.uk www.google.iq www.google.ca www.google.pt www.google.ch www.google.bg www.google.az www.google.it www.google.no www.google.se www.google.com.sa www.google.com.qa www.google.ru www.google.be www.google.com.kw www.google.co.tz www.google.ro www.google.hu www.google.ba www.google.at www.google.rs *.millipiyangoonline.com www.google.dk www.google.co.uz www.google.dz www.google.es www.google.pl www.google.com.ly www.googletagmanager.com digital.millipiyangoonline.com www.google.at www.google.hu www.google.ro www.google.ru www.google.be *.gametech.tr dbox1.sisalsanstech.com www.millipiyangoonline.com pagead2.googlesyndication.com https:\/\/bulten.sm.mncdn.com sisal.queue-it.net football.playbook-fusion.com api.bettorvideo.infront.sport *.clarity.ms; img-src * data:; report-uri \/csp\/cspreport\/","count":2},{"content-security-policy-report-only":" default-src https: 'unsafe-inline' 'unsafe-eval' 'self' data:; img-src 'self' *.eff.org data:; report-uri https:\/\/sentry.eff.org\/api\/2\/security\/?sentry_key=f1118ad37b5e4afbabe3487ca42fe73e","count":2},{"content-security-policy-report-only":" default-src 'self'; style-src 'self' 'unsafe-inline' https:\/\/use.typekit.net; object-src 'none'; base-uri 'self'; worker-src 'none'; connect-src 'self' https:\/\/collect.datas3ntinel.com;","count":2},{"content-security-policy-report-only":" block-all-mixed-content ; report-uri \/csp-report","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/whoas.xyz; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https: wss:; media-src 'self' https: blob:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" default-src 'self';base-uri 'self';connect-src 'self' data: https: wss:\/\/keepalive.gotinder.com wss:\/\/keepalive.ue1.d1.tstaging.com;script-src 'nonce-YtYG2sCHG08sFpAWWRJoiQ==' 'strict-dynamic' 'unsafe-hashes' 'unsafe-eval' 'wasm-unsafe-eval' 'sha256-PLCxbpHSwAa8+W198R1KQQ9UDCexTvYy4z4YmCg21NM=' 'unsafe-inline';style-src 'self' 'unsafe-inline' blob: https:\/\/*.googleapis.com https:\/\/accounts.google.com;frame-src 'self' https:;frame-ancestors 'self';form-action 'self' https:;object-src 'none';img-src 'self' data: blob: https:;media-src 'self' data: https:;font-src 'self' data: https:;manifest-src 'self' https:","count":2},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/rt.phantom.app\/csp","count":2},{"content-security-policy-report-only":" default-src 'unsafe-inline' 'unsafe-eval' * data: blob:","count":2},{"content-security-policy-report-only":" frame-ancestors 'self' https:\/\/webflow.com https:\/\/*.webflow.com https:\/\/app.intellimize.com; connect-src 'self' https:\/\/webflow.com https:\/\/*.webflow.com https:\/\/d1otoma47x30pg.cloudfront.net https:\/\/d3e54v103j8qbb.cloudfront.net https:\/\/daks2k3a4ib2z.cloudfront.net https:\/\/dhygzobemt712.cloudfront.net https:\/\/cdn.prod.website-files.com https:\/\/code-components.website-files.com https:\/\/webflow-assets.s3.us-east-1.amazonaws.com https:\/\/browser-intake-datadoghq.com https:\/\/statsigapi.net https:\/\/beyondwickedmapping.org https:\/\/cloudflare-dns.com https:\/\/featureassets.org https:\/\/prodregistryv2.org https:\/\/api.segment.io https:\/\/www.google-analytics.com https:\/\/*.clarity.ms https:\/\/050-lkc-745.mktoresp.com https:\/\/050-lkc-745.mktoutil.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/cdn.dreamdata.cloud https:\/\/grsm.io https:\/\/partnerlinks.io https:\/\/pixel-config.reddit.com https:\/\/*.ads.linkedin.com https:\/\/q.quora.com https:\/\/tracking.goentri.com https:\/\/api.claydar.com https:\/\/api.goentri.com https:\/\/assetsconfigcdn.org https:\/\/api.intellimize.co https:\/\/api.knock.app https:\/\/api.sprig.com https:\/\/app.clearbit.com https:\/\/app.pendo.io https:\/\/content-6312168775680000.static.pendo.io https:\/\/data.pendo.io https:\/\/log.intellimize.co wss:\/\/api.knock.app https:\/\/*.doubleclick.net https:\/\/www.facebook.com https:\/\/*.google.com https:\/\/www.googleadservices.com https:\/\/www.googleservices.com https:\/\/cdn.birdie.so https:\/\/cf.birdie.so https:\/\/sock.birdie.so https:\/\/sockr.birdie.so wss:\/\/sock.birdie.so wss:\/\/sockr.birdie.so https:\/\/*.px-cdn.net https:\/\/*.px-client.net https:\/\/*.px-cloud.net https:\/\/*.pxchk.net https:\/\/c.6sc.co https:\/\/ipv6.6sc.co https:\/\/telemetry.us.transcend.io https:\/\/transcend-cdn.com https:\/\/tzm.px-cloud.net https:\/\/distillery.wistia.com https:\/\/embed-cloudfront.wistia.com https:\/\/fast.wistia.com https:\/\/pipedream.wistia.com https:\/\/app.qualified.com wss:\/\/ws7.qualified.com https:\/\/webflow-prod-assets.s3.amazonaws.com https:\/\/webflow-tmp-csv-import-production.s3.amazonaws.com https:\/\/*.google-analytics.com https:\/\/*.googlesyndication.com https:\/\/www.googletagmanager.com https:\/\/www.google.ad https:\/\/www.google.ae https:\/\/www.google.al https:\/\/www.google.at https:\/\/www.google.az https:\/\/www.google.ba https:\/\/www.google.be https:\/\/www.google.bg https:\/\/www.google.bj https:\/\/www.google.by https:\/\/www.google.ca https:\/\/www.google.ch https:\/\/www.google.cl https:\/\/www.google.co.cr https:\/\/www.google.co.id https:\/\/www.google.co.il https:\/\/www.google.co.in https:\/\/www.google.co.jp https:\/\/www.google.co.ke https:\/\/www.google.co.kr https:\/\/www.google.co.ma https:\/\/www.google.co.nz https:\/\/www.google.co.th https:\/\/www.google.co.ug https:\/\/www.google.co.uk https:\/\/www.google.co.uz https:\/\/www.google.co.za https:\/\/www.google.co.zm https:\/\/www.google.com.ar https:\/\/www.google.com.au https:\/\/www.google.com.bd https:\/\/www.google.com.br https:\/\/www.google.com.co https:\/\/www.google.com.cy https:\/\/www.google.com.ec https:\/\/www.google.com.eg https:\/\/www.google.com.gh https:\/\/www.google.com.hk https:\/\/www.google.com.kw https:\/\/www.google.com.mx https:\/\/www.google.com.ng https:\/\/www.google.com.np https:\/\/www.google.com.ph https:\/\/www.google.com.pk https:\/\/www.google.com.pr https:\/\/www.google.com.qa https:\/\/www.google.com.sa https:\/\/www.google.com.sg https:\/\/www.google.com.sv https:\/\/www.google.com.tj https:\/\/www.google.com.tr https:\/\/www.google.com.tw https:\/\/www.google.com.ua https:\/\/www.google.com.uy https:\/\/www.google.com.vn https:\/\/www.google.cz https:\/\/www.google.de https:\/\/www.google.dk https:\/\/www.google.ee https:\/\/www.google.es https:\/\/www.google.fi https:\/\/www.google.fr https:\/\/www.google.ga https:\/\/www.google.ge https:\/\/www.google.gl https:\/\/www.google.gr https:\/\/www.google.hr https:\/\/www.google.hu https:\/\/www.google.ie https:\/\/www.google.it https:\/\/www.google.kg https:\/\/www.google.kz https:\/\/www.google.lk https:\/\/www.google.lt https:\/\/www.google.lu https:\/\/www.google.lv https:\/\/www.google.md https:\/\/www.google.mg https:\/\/www.google.mk https:\/\/www.google.mu https:\/\/www.google.mw https:\/\/www.google.my https:\/\/www.google.nl https:\/\/www.google.no https:\/\/www.google.pe https:\/\/www.google.pl https:\/\/www.google.pt https:\/\/www.google.ro https:\/\/www.google.rs https:\/\/www.google.ru https:\/\/www.google.se https:\/\/www.google.si https:\/\/www.google.sk https:\/\/www.google.tn; style-src 'self' 'unsafe-inline' https:\/\/webflow.com https:\/\/*.webflow.com https:\/\/d1otoma47x30pg.cloudfront.net https:\/\/d3e54v103j8qbb.cloudfront.net https:\/\/daks2k3a4ib2z.cloudfront.net https:\/\/dhygzobemt712.cloudfront.net https:\/\/accounts.google.com https:\/\/fonts.googleapis.com https:\/\/go.webflow.com https:\/\/app.pendo.io https:\/\/cdn.birdie.so https:\/\/cdn.jsdelivr.net https:\/\/cdn.pendo.io https:\/\/content-6312168775680000.static.pendo.io https:\/\/cdn.prod.website-files.com https:\/\/code-components.website-files.com https:\/\/transcend-cdn.com https:\/\/www.gstatic.com; img-src 'self' data: https:\/\/webflow.com https:\/\/*.webflow.com https:\/\/d1otoma47x30pg.cloudfront.net https:\/\/d3e54v103j8qbb.cloudfront.net https:\/\/daks2k3a4ib2z.cloudfront.net https:\/\/dhygzobemt712.cloudfront.net https:\/\/cdn.prod.website-files.com https:\/\/code-components.website-files.com https:\/\/connect.facebook.com https:\/\/*.ads.linkedin.com https:\/\/*.doubleclick.net https:\/\/www.facebook.com https:\/\/*.google.com https:\/\/webflow-assets.s3.us-east-1.amazonaws.com https:\/\/www.googleadservices.com https:\/\/www.google.ad https:\/\/www.google.ae https:\/\/www.google.al https:\/\/www.google.at https:\/\/www.google.az https:\/\/www.google.ba https:\/\/www.google.be https:\/\/www.google.bg https:\/\/www.google.bj https:\/\/www.google.by https:\/\/www.google.ca https:\/\/www.google.ch https:\/\/www.google.cl https:\/\/www.google.co.cr https:\/\/www.google.co.id https:\/\/www.google.co.il https:\/\/www.google.co.in https:\/\/www.google.co.jp https:\/\/www.google.co.ke https:\/\/www.google.co.kr https:\/\/www.google.co.ma https:\/\/www.google.co.nz https:\/\/www.google.co.th https:\/\/www.google.co.ug https:\/\/www.google.co.uk https:\/\/www.google.co.uz https:\/\/www.google.co.za https:\/\/www.google.co.zm https:\/\/www.google.com.ar https:\/\/www.google.com.au https:\/\/www.google.com.bd https:\/\/www.google.com.br https:\/\/www.google.com.co https:\/\/www.google.com.cy https:\/\/www.google.com.ec https:\/\/www.google.com.eg https:\/\/www.google.com.gh https:\/\/www.google.com.hk https:\/\/www.google.com.kw https:\/\/www.google.com.mx https:\/\/www.google.com.ng https:\/\/www.google.com.np https:\/\/www.google.com.ph https:\/\/www.google.com.pk https:\/\/www.google.com.pr https:\/\/www.google.com.qa https:\/\/www.google.com.sa https:\/\/www.google.com.sg https:\/\/www.google.com.sv https:\/\/www.google.com.tj https:\/\/www.google.com.tr https:\/\/www.google.com.tw https:\/\/www.google.com.ua https:\/\/www.google.com.uy https:\/\/www.google.com.vn https:\/\/www.google.cz https:\/\/www.google.de https:\/\/www.google.dk https:\/\/www.google.ee https:\/\/www.google.es https:\/\/www.google.fi https:\/\/www.google.fr https:\/\/www.google.ga https:\/\/www.google.ge https:\/\/www.google.gl https:\/\/www.google.gr https:\/\/www.google.hr https:\/\/www.google.hu https:\/\/www.google.ie https:\/\/www.google.it https:\/\/www.google.kg https:\/\/www.google.kz https:\/\/www.google.lk https:\/\/www.google.lt https:\/\/www.google.lu https:\/\/www.google.lv https:\/\/www.google.md https:\/\/www.google.mg https:\/\/www.google.mk https:\/\/www.google.mu https:\/\/www.google.mw https:\/\/www.google.my https:\/\/www.google.nl https:\/\/www.google.no https:\/\/www.google.pe https:\/\/www.google.pl https:\/\/www.google.pt https:\/\/www.google.ro https:\/\/www.google.rs https:\/\/www.google.ru https:\/\/www.google.se https:\/\/www.google.si https:\/\/www.google.sk https:\/\/www.google.tn https:\/\/webflow-assets-studio-temp-prod.s3.amazonaws.com https:\/\/*.webflow.com https:\/\/account-assets.knock.app https:\/\/alb.reddit.com https:\/\/analytics.twitter.com https:\/\/app.pendo.io https:\/\/b.6sc.co https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/cdn.pendo.io https:\/\/content-6312168775680000.static.pendo.io https:\/\/data.pendo.io https:\/\/embed-ssl.wistia.com https:\/\/fast.wistia.com https:\/\/fonts.gstatic.com https:\/\/i.ytimg.com https:\/\/messenger-assets.qualified.com https:\/\/q.quora.com https:\/\/quickchart.io https:\/\/webflow.itsoffbrand.io https:\/\/www.googletagmanager.com; report-uri https:\/\/webflow.report-uri.com\/r\/t\/csp\/reportOnly","count":2},{"content-security-policy-report-only":" script-src 'self' dl.frontapp.com static.cloudflareinsights.com padlet.net maps.googleapis.com apis.google.com ta-echo.padlet.com api.commandbar.com cdn.commandbar.com app.getbeamer.com challenges.cloudflare.com embed.cloudflarestream.com cdn.usefathom.com blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' padlet.net fonts.googleapis.com cdn.commandbar.com app.getbeamer.com 'unsafe-inline'; font-src 'self' padlet.net fonts.gstatic.com data:; report-uri https:\/\/padlet.com\/csp-report;","count":2},{"content-security-policy-report-only":" default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http:\/\/*.files.wordpress.com wss:\/\/www.billboard.com; report-uri https:\/\/pmcuri.report-uri.com\/r\/d\/csp\/reportOnly","count":2},{"content-security-policy-report-only":" default-src 'self' data: blob: https:\/\/067-umd-991.mktoresp.com https:\/\/accounts.google.com https:\/\/analytics.google.com https:\/\/api.amplitude.com https:\/\/bi-beta.pst.tech https:\/\/bi.pst.tech https:\/\/e.postman.com https:\/\/bifrost-https-v4.gw.postman.com https:\/\/blog.postman.com https:\/\/dl.pstmn.io https:\/\/eo2kpuahxhuvgexlueall7gqzq0fihon.lambda-url.us-east-1.on.aws https:\/\/events.gw.postman.com https:\/\/events.rm-api.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/identity.getpostman-beta.com https:\/\/identity.getpostman.com https:\/\/lp.postman.com https:\/\/munchkin.marketo.net https:\/\/pages.getpostman.com https:\/\/public.slidesharecdn.com https:\/\/px.ads.linkedin.com https:\/\/px4.ads.linkedin.com https:\/\/manifest.webmanifest https:\/\/ms1frkqnsp7r.statuspage.io https:\/\/run.pstmn.io https:\/\/skills-assets.pstmn.io https:\/\/st-ar.cdn.postman.com https:\/\/static.cloudflareinsights.com https:\/\/stats.g.doubleclick.net https:\/\/td.doubleclick.net https:\/\/voyager.postman.com https:\/\/web.postman.com https:\/\/www.googletagmanager.com https:\/\/www.slideshare.net https:\/\/snap.licdn.com https:\/\/www.google.com https:\/\/youtube.com https:\/\/*.youtube.com https:\/\/*.ytimg.com https:\/\/www.linkedin.com\/px\/ https:\/\/www.postman.com https:\/\/snap.licdn.com\/ https:\/\/worldtimeapi.org https:\/\/maps.google.com https:\/\/*.mountain.com https:\/\/dx.mountain.com https:\/\/px.mountain.com https:\/\/gs.mountain.com https:\/\/44.238.122.172 https:\/\/100.20.58.101 https:\/\/35.85.84.151 https:\/\/44.228.85.26 https:\/\/34.215.155.61 https:\/\/35.160.46.251 https:\/\/52.71.121.170 https:\/\/18.210.229.244 https:\/\/44.212.189.233 https:\/\/3.212.39.155 https:\/\/52.22.50.55 https:\/\/54.156.2.105 https:\/\/bam.nr-data.net https:\/\/js-agent.newrelic.com https:\/\/res.cloudinary.com https:\/\/mkt.cdn.postman.com https:\/\/api.mapbox.com https:\/\/events.mapbox.com https:\/\/api.fpjs.io https:\/\/cdn.amplitude.com https:\/\/api2.amplitude.com https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/bat.bing.com https:\/\/js.qualified.com wss:\/\/ws.qualified.com wss:\/\/ws2.qualified.com https:\/\/app.qualified.com https:\/\/api.company-target.com https:\/\/segments.company-target.com https:\/\/tag.demandbase.com https:\/\/tag-logger.demandbase.com https:\/\/s.company-target.com https:\/\/alb.reddit.com https:\/\/www.redditstatic.com https:\/\/pixel-config.reddit.com https:\/\/*.hotjar.io https:\/\/*.hotjar.com wss:\/\/ws.hotjar.com https:\/\/cdn.segment.com https:\/\/api.cdp.postman.com https:\/\/api.segment.io https:\/\/evs.cdp.postman.com https:\/\/www.influ2.com https:\/\/t.influ2.com https:\/\/*.usbrowserspeed.com https:\/\/pxl.growth-channel.net https:\/\/tags.srv.stackadapt.com https:\/\/job-boards.greenhouse.io https:\/\/transcend-cdn.com https:\/\/telemetry.us.transcend.io https:\/\/unpkg.com\/launchdarkly-js-client-sdk@3.8.1 https:\/\/app.launchdarkly.com\/ https:\/\/events.launchdarkly.com https:\/\/tally.so\/ https:\/\/postman.outgrow.us\/ https:\/\/api-n.outgrow.co https:\/\/t.co\/ https:\/\/analytics.twitter.com https:\/\/static.ads-twitter.com\/uwt.js https:\/\/id.rlcdn.com https:\/\/cdn.cr-relay.com https:\/\/api.cr-relay.com https:\/\/cdn.vector.co https:\/\/api.vector.co https:\/\/*.liadm.com\/ https:\/\/*.ip-api.com https:\/\/accretivemedia.go2cloud.org https:\/\/fast.wistia.net https:\/\/fast.wistia.com https:\/\/embed-ssl.wistia.com https:\/\/distillery.wistia.com https:\/\/pipedream.wistia.com https:\/\/embed-cloudfront.wistia.com https:\/\/postman.cdn.prismic.io https:\/\/static.cdn.prismic.io https:\/\/postman.prismic.io https:\/\/browser.sentry-cdn.com https:\/\/o1224273.ingest.us.sentry.io 'unsafe-inline' 'unsafe-eval'; form-action 'self'; base-uri 'self';","count":2},{"content-security-policy-report-only":" default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http:\/\/*.files.wordpress.com wss:\/\/deadline.com; report-uri https:\/\/pmcuri.report-uri.com\/r\/d\/csp\/reportOnly","count":2},{"content-security-policy-report-only":" \tdefault-src 'self' *.wp.com;\timg-src data: https:;\tscript-src 'unsafe-inline' 'unsafe-eval' blob: https:;\tstyle-src 'unsafe-inline' https:;\tfont-src data: https:;\tmedia-src blob: https:;\tframe-src https:;\tobject-src 'none';\tconnect-src https:;","count":2},{"content-security-policy-report-only":" default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: http: https:; connect-src 'self' https: data: blob:; frame-src 'self' https:; font-src 'self' data: https:; media-src 'self' data: blob: https:; worker-src 'self' blob: data:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-to csp-endpoint; report-uri https:\/\/report.centralcsp.com\/6a82d540a43e5200d889ecb9","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; connect-src 'self' https:\/\/gw.api.helsinki.fi https:\/\/consentcdn.cookiebot.com https:\/\/consent.cookiebot.com https:\/\/*.usercentrics.eu https:\/\/*.g.doubleclick.net https:\/\/*.g.doubleclick.net:443 https:\/\/www.google.com:443 https:\/\/*.google.com https:\/\/*.google.com:443 https:\/\/*.google.fi https:\/\/fonts.googleapis.com https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com *.googlesyndication.com *.google-analytics.com www.googletagmanager.com www.google.com https:\/\/analytics.twitter.com https:\/\/t.co https:\/\/www.facebook.com https:\/\/px.ads.linkedin.com *.siteimprove.com *.cludo.com *.frosmo.com https:\/\/matomo.it.helsinki.fi https:\/\/sentry-external.it.helsinki.fi *.mouseflow.com https:\/\/*.giosg.com https:\/\/*.giosgusercontent.com wss:\/\/service.giosg.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/*.mux.com; img-src 'self' data: https:\/\/gw.api.helsinki.fi http:\/\/imgsct.cookiebot.com\/ https:\/\/*.usercentrics.eu https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com https:\/\/*.google.fi www.googletagmanager.com https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/t.co https:\/\/analytics.twitter.com https:\/\/px.ads.linkedin.com:443 https:\/\/px.ads.linkedin.com px.ads.linkedin.com https:\/\/*.siteimproveanalytics.io *.frosmo.com https:\/\/studies.helsinki.fi unitube.it.helsinki.fi https:\/\/matomo.it.helsinki.fi https:\/\/*.giosgusercontent.com https:\/\/dvcf59enpgt5y.cloudfront.net https:\/\/i.ytimg.com s3.eu-central-1.amazonaws.com; object-src 'none'; frame-ancestors 'self'; media-src blob:; font-src 'self' data: cdn.mouseflow.com cdn.jsdelivr.net fonts.gstatic.com; style-src 'self' 'unsafe-inline' *.cludo.com https:\/\/*.giosg.com https:\/\/*.giosgusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com cdn.jsdelivr.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/consentcdn.cookiebot.com https:\/\/consent.cookiebot.com https:\/\/*.usercentrics.eu https:\/\/www.googletagmanager.com https:\/\/snap.licdn.com https:\/\/static.ads-twitter.com https:\/\/connect.facebook.net https:\/\/siteimproveanalytics.com *.siteimprove.net *.cludo.com fi1.frosmo.com *.fi1.frosmo.com d2oarllo6tn86.cloudfront.net https:\/\/matomo.it.helsinki.fi https:\/\/cdn.mouseflow.com https:\/\/*.giosg.com https:\/\/*.giosgusercontent.com https:\/\/*.interactionbuilder.giosg.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/cdn.unibuddy.co cdn.jsdelivr.net https:\/\/www.youtube.com:443 https:\/\/www.youtube.com; frame-src https:\/\/*.giosg.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/etapahtuma.fi https:\/\/www.youtube.com https:\/\/youtube.com https:\/\/app.powerbi.com https:\/\/unitube.it.helsinki.fi https:\/\/www.openstreetmap.org https:\/\/openstreetmap.org https:\/\/www.seismo.helsinki.fi https:\/\/seismo.helsinki.fi https:\/\/unibuddy.co https:\/\/tiedekulmamedia.helsinki.fi https:\/\/kartta.paikkatietoikkuna.fi https:\/\/satelliitti.laji.fi https:\/\/open.spotify.com https:\/\/monicoast.masinotek.eu https:\/\/w.soundcloud.com https:\/\/playlist.megaphone.fm https:\/\/vys-infografiikka-23.it.helsinki.fi https:\/\/player.vimeo.com; child-src https:\/\/etapahtuma.fi https:\/\/www.youtube.com https:\/\/youtube.com https:\/\/app.powerbi.com https:\/\/unitube.it.helsinki.fi https:\/\/www.openstreetmap.org https:\/\/openstreetmap.org https:\/\/www.seismo.helsinki.fi https:\/\/seismo.helsinki.fi https:\/\/unibuddy.co https:\/\/tiedekulmamedia.helsinki.fi https:\/\/kartta.paikkatietoikkuna.fi https:\/\/satelliitti.laji.fi https:\/\/open.spotify.com https:\/\/monicoast.masinotek.eu https:\/\/w.soundcloud.com https:\/\/playlist.megaphone.fm https:\/\/vys-infografiikka-23.it.helsinki.fi https:\/\/player.vimeo.com; report-uri https:\/\/sentry-external.it.helsinki.fi\/api\/59\/security\/?sentry_key=14961b491c841553fbbeca8fc3dad37a&sentry_environment=main; report-to default","count":2},{"content-security-policy-report-only":" default-src 'none'; script-src icq.com c.icq.com cicq.org 1l-hit.mail.ru www.google-analytics.com buddyicon.foto.mail.ru www.googletagmanager.com top-fwz1.mail.ru 'sha256-DKOsdd00IXAHc7qK64HiC18YrB2K4SfiH8Sl6A9aFyg=' 'sha256-u4WiMVZhYDdCrFwB8Zn3gLba1EI3pqIlFYWFZfXJl2I=' 'sha256-ynzJCJTMBeZF6kbmzoI2rC+vDRozRAHxsPfAruxve88=' 'sha256-j51JRkq0bwz97Hd\/1wJQsIy6\/aX9cz16Xyp+M8FshTA=' 'self'; style-src c.icq.com icq.com cicq.org 'self' 'unsafe-inline'; img-src data: icq.com c.icq.com cicq.org api.icq.net www.google-analytics.com buddyicon.foto.mail.ru files.icq.com files.imgsmail.ru u.icq.net u.myteam.vmailru.net ub.icq.net ub.myteam.vmailru.net swa.icq.com stats.g.doubleclick.net 'self'; media-src data: icq.com c.icq.com cicq.org api.icq.net www.google-analytics.com files.icq.com api.icq.net files.imgsmail.ru u.icq.net u.myteam.vmailru.net ub.icq.net ub.myteam.vmailru.net 'self'; font-src icq.com c.icq.com cicq.org 'self'; connect-src privacy.icq.com icq.com top-fwz1.mail.ru 'self'; report-uri \/system\/error","count":2},{"content-security-policy-report-only":" frame-ancestors 'self'; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" default-src 'self' cdnweb.sbermobile.ru; frame-src https:\/\/cdn.rutarget.ru\/ https:\/\/api.flocktory.com https:\/\/mc.yandex.ru https:\/\/tag.rutarget.ru\/ ; style-src 'unsafe-inline' 'self' fonts.googleapis.com cdnweb.sbermobile.ru; font-src 'self' cdnweb.sbermobile.ru data: fonts.gstatic.com ; connect-src 'self' https:\/\/yandexmetrica.com:*\/ *.sbermarketing.ru uaas.yandex.ru ad.adriver.ru api.flocktory.com kraken.rambler.ru https:\/\/*.mc.yandex.ru\/ https:\/\/stats.g.doubleclick.net\/ https:\/\/suggestions.dadata.ru\/ https:\/\/suggest-maps.yandex.ru\/ https:\/\/ymetrica1.com\/ https:\/\/www.google-analytics.com\/ https:\/\/unpkg.com\/ https:\/\/stats.g.doubleclick.net\/ https:\/\/mc.yandex.ru\/ https:\/\/*.sberbank.ru\/ https:\/\/sa.online.sberbank.ru:8098\/; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnweb.sbermobile.ru *.yandex.net *.trbcdn.net  top-fwz1.mail.ru api.flocktory.com *.top100.ru *.adriver.ru px.adhigh.net cdn.rutarget.ru yastatic.net *.maps.yandex.net suggest-maps.yandex.ru api-maps.yandex.ru *.otm-r.com www.google-analytics.com ajax.googleapis.com fonts.googleapis.com *.mc.yandex.ru mc.yandex.ru nlb-clickstream.sberbank.ru sp.otm-r.com stats.g.doubleclick.net www.google-analytics.com www.google.ru www.googletagmanager.com ; img-src 'self' data: www.gstatic.com cdnweb.sbermobile.ru adservings.ru api.flocktory.com top-fwz1.mail.ru kraken.rambler.ru api-maps.yandex.ru *.maps.yandex.net *.mc.yandex.com *.mc.yandex.ru mc.yandex.ru *.googleusercontent.com www.googletagmanager.com www.google.ru www.google.com www.google-analytics.com *.otm-r.com yandex.ru; base-uri 'self' cdnweb.sbermobile.ru; form-action 'self'; frame-ancestors 'none'","count":2},{"content-security-policy-report-only":" frame-src 'self' syndicatedsearch.goog *.google.com *.youtube.com vimeo.com *.vimeo.com *.podbean.com static.addtoany.com *.blackbaudhosting.com js.createsend1.com *.createsend.com *.payments.blackbaud.com payments.blackbaud.com\/Checkout\/bbCheckout.2.0.js; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-eval' *.googleadservices.com app.purechat.com app-script.monsido.com connect.facebook.net cdnjs.cloudflare.com static.addtoany.com polyfill.io *.googletagmanager.com *.google-analytics.com *.google.com www.gstatic.com cdn.jsdelivr.net *.hotjar.com *.gtranslate.net *.blackbaudhosting.com js.createsend1.com www.createsend.com *.googleapis.com *.payments.blackbaud.com payments.blackbaud.com\/Checkout\/bbCheckout.2.0.js https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com https:\/\/www.google.com; script-src-elem 'self' 'unsafe-inline' *.googleadservices.com app.purechat.com app-script.monsido.com connect.facebook.net cdnjs.cloudflare.com static.addtoany.com polyfill.io *.googletagmanager.com *.google-analytics.com *.google.com www.gstatic.com cdn.jsdelivr.net *.hotjar.com *.gtranslate.net *.blackbaudhosting.com js.createsend1.com *.createsend.com www.createsend.com *.googleapis.com *.payments.blackbaud.com payments.blackbaud.com\/Checkout\/bbCheckout.2.0.js *.simpli.fi https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com https:\/\/www.google.com; style-src 'self' 'report-sample' 'unsafe-inline' *.googleapis.com *.gstatic.com *.createsend1.com *.createsend.com *.blackbaudhosting.com *.payments.blackbaud.com payments.blackbaud.com\/Checkout\/bbCheckout.2.0.js cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com; worker-src 'self'; base-uri 'self'; form-action 'self' www.createsend.com js.createsend1.com *.blackbaudhosting.com *.nla.gov.au *.payments.blackbaud.com payments.blackbaud.com\/Checkout\/bbCheckout.2.0.js; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" connect-src 'self' https:\/\/*.maryland.gov https:\/\/*.maryland.dev wss:\/\/*.maryland.gov https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.clarity.ms; report-uri \/report-csp-violation","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/n8n.io data: 'unsafe-inline'; script-src 'self' 'sha256-4pl9dZH8ght2nZ3AX1mV23mwuukxsklzULVnAeIEKbg=' https:\/\/cdn.jsdelivr.net\/npm\/@webcomponents\/webcomponentsjs@2.0.0\/webcomponents-loader.js https:\/\/www.unpkg.com\/lit@2.0.0-rc.2\/polyfill-support.js https:\/\/cdn.jsdelivr.net\/npm\/@n8n_io\/n8n-demo-component@latest\/n8n-demo.bundled.js https:\/\/*.googletagmanager.com https:\/\/www.gstatic.cn https:\/\/www.gstatic.com https:\/\/www.recaptcha.net https:\/\/static.cloudflareinsights.com\/beacon.min.js\/ static.cloudflareinsights.com https:\/\/checkout.paddle.com\/api\/2.0\/prices\/; img-src 'self' data: https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/n8niostorageaccount.blob.core.windows.net https:\/\/www.gstatic.cn https:\/\/www.gstatic.com https:\/\/www.recaptcha.net https:\/\/gravatar.com\/avatar\/; media-src https:\/\/n8niostorageaccount.blob.core.windows.net; connect-src 'self' https:\/\/api.n8n.io\/ https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/www.gstatic.cn https:\/\/www.gstatic.com https:\/\/www.recaptcha.net; frame-src https:\/\/jobs.ashbyhq.com https:\/\/n8n-preview-service.internal.n8n.cloud https:\/\/www.recaptcha.net https:\/\/challenges.cloudflare.com https:\/\/www.linkedin.com https:\/\/buy.paddle.com https:\/\/security-hub.pages.dev; frame-ancestors 'none'; object-src 'none'","count":2},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri \/csp_report","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.cookielaw.org https:\/\/optly.heap.io https:\/\/www.googleoptimize.com https:\/\/www.googletagmanager.com https:\/\/cdn.us.heap-api.com https:\/\/marketo.clearbit.com https:\/\/*.wistia.net https:\/\/js.chilipiper.com https:\/\/js.driftt.com https:\/\/*.clearbit.com https:\/\/app-ab33.marketo.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdn.cookielaw.org https:\/\/*.ctfassets.net; img-src 'self' data: https:\/\/*.ctfassets.net https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/*.wistia.net https:\/\/heapanalytics.com https:\/\/*.clearbit.com https:\/\/*.doubleclick.net; connect-src 'self' https:\/\/*.contentful.com https:\/\/*.heap-api.com https:\/\/heapanalytics.com https:\/\/www.google-analytics.com https:\/\/*.wistia.net https:\/\/*.doubleclick.net https:\/\/*.cookielaw.org https:\/\/app-ab33.marketo.com; font-src 'self' data: https:\/\/fonts.gstatic.com; frame-src 'self' https:\/\/*.wistia.net https:\/\/*.marketo.com https:\/\/*.chilipiper.com; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self'; form-action 'self' https:\/\/*.marketo.com; frame-ancestors 'self'; media-src 'self' https:\/\/*.wistia.net blob:; object-src 'none'","count":2},{"content-security-policy-report-only":" default-src 'self'; font-src data: https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/composer.apps.nonprod.cf.dmtech.cloud; script-src 'self' https:\/\/*.bazaarvoice.com https:\/\/app.usercentrics.eu https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/composer.apps.nonprod.cf.dmtech.cloud https:\/\/d2pqvatijh75rn.cloudfront.net https:\/\/exc.mm.dm.de https:\/\/mpsnare.iesnare.com https:\/\/omt.dm.de https:\/\/tags.tiqcdn.com https:\/\/web.cmp.usercentrics.eu https:\/\/www.dm.de https:\/\/www.google.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com https:\/\/www.gstatic.com\/recaptcha\/; worker-src 'self' blob:; connect-src 'self' https:\/\/*.bazaarvoice.com https:\/\/aggregator.service.usercentrics.eu https:\/\/api.mapbox.com https:\/\/api.usercentrics.eu https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/browser-intake-datadoghq.eu https:\/\/cart-recos.services.dmtech.com https:\/\/cdcs.usercentrics.eu https:\/\/collect.tealiumiq.com https:\/\/consent-api.service.consent.usercentrics.eu https:\/\/consent-rt-ret.service.consent.usercentrics.eu https:\/\/consents.usercentrics.eu https:\/\/content-preview.apps.prod.gcp.dmtech.cloud https:\/\/d2pqvatijh75rn.cloudfront.net https:\/\/direct-collect.dy-api.eu https:\/\/direct.dy-api.eu https:\/\/dmpay-gateway.services.dmtech.com https:\/\/dy-api.eu https:\/\/editorial-content.dm-static.com https:\/\/events.mapbox.com https:\/\/exc.mm.dm.de https:\/\/frontend-tracking-infra-service.services.dmtech.com https:\/\/graphql.usercentrics.eu https:\/\/insights.algolia.io https:\/\/logs.browser-intake-datadoghq.eu https:\/\/maut-prod.services.dmtech.com https:\/\/maut-rls.nonprod.services.dmtech.com https:\/\/mpsnare.iesnare.com https:\/\/my-products-api.services.dmtech.com https:\/\/omacs.services.dmtech.com https:\/\/omc.dm.de https:\/\/predictive-shopping-service.services.dmtech.com https:\/\/product-based-recos.services.dmtech.com https:\/\/product-search.services.dmtech.com https:\/\/product-semantic-search.services.dmtech.com https:\/\/rcom-eu.dynamicyield.com https:\/\/recos-as-a-service.services.dmtech.com https:\/\/region1.google-analytics.com https:\/\/retail-media.services.dmtech.com https:\/\/rum.browser-intake-datadoghq.eu https:\/\/s2s.adjust.com https:\/\/signin.dm.de https:\/\/sos-prod.availability.services.dmtech.com https:\/\/staedtetour.dm-fb2.de https:\/\/stars.services.dmtech.com https:\/\/storage.googleapis.com\/gift-card-builder-emergency-disabled-bucket\/ https:\/\/store-data-service.services.dmtech.com https:\/\/store-order-service.services.dmtech.com https:\/\/v1.api.service.cmp.usercentrics.eu https:\/\/www.google-analytics.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/zoe-shop-proxy-prod.services.dmtech.com https:\/\/kuba-prod.services.dmtech.com https:\/\/zoe-shop-proxy-prod.services.dmtech.com https:\/\/cartnext.services.dmtech.com https:\/\/dmcsm-proxy.prod.services.dmtech.com https:\/\/zoe-shop-proxy-prod.services.dmtech.com https:\/\/customer-helpcenter-prod.services.dmtech.com https:\/\/paint-prod.services.dmtech.com https:\/\/content.services.dmtech.com https:\/\/content-search-service-preview.apps.prod.gcp.dmtech.cloud https:\/\/content-search-service.services.dmtech.com https:\/\/products.dm.de https:\/\/pds-import-prod.apps.prod.gcp.dmtech.cloud https:\/\/shopping-list-prod.services.dmtech.com; media-src 'self'; style-src 'self' 'unsafe-inline' https:\/\/*.bazaarvoice.com https:\/\/api.tiles.mapbox.com https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/composer.apps.nonprod.cf.dmtech.cloud; form-action 'self' https:\/\/*.bazaarvoice.com https:\/\/apps.bazaarvoice.com https:\/\/checkout.dm.de https:\/\/giftcard-checkout.dm.de\/api\/checkout https:\/\/signin.dm.de; img-src 'self' blob: data: https:\/\/*.bazaarvoice.com https:\/\/app.usercentrics.eu https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/cdn-eu.dynamicyield.com https:\/\/composer.apps.nonprod.cf.dmtech.cloud https:\/\/content-preview.apps.prod.gcp.dmtech.cloud https:\/\/d2pqvatijh75rn.cloudfront.net https:\/\/editorial-content.dm-static.com https:\/\/exc.mm.dm.de https:\/\/i.ytimg.com https:\/\/images.podigee-cdn.net https:\/\/img.usercentrics.eu https:\/\/img.youtube.com\/ https:\/\/media.dm-static.com https:\/\/photos-eu.bazaarvoice.com https:\/\/products.dm-static.com https:\/\/uct.service.usercentrics.eu https:\/\/content.services.dmtech.com; frame-ancestors 'self' https:\/\/account.dm.de https:\/\/app.datadoghq.eu https:\/\/checkout.dm.de https:\/\/content-preview.apps.prod.gcp.dmtech.cloud https:\/\/mobileapp.dm.de https:\/\/studio.dm-drogeriemarkt.com; frame-src 'self' https:\/\/*.bazaarvoice.com https:\/\/account.dm.de https:\/\/app.usercentrics.eu https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/cdn.podigee.com https:\/\/checkout.dm.de https:\/\/configurator.nuk.de https:\/\/gastfamilie.podigee.io https:\/\/geburtskanal-dm.podigee.io https:\/\/hey-familie.podigee.io https:\/\/kinderwunschsprechstunde.podigee.io https:\/\/mobileapp.dm.de https:\/\/player.podigee-cdn.net https:\/\/recaptcha.google.com\/recaptcha\/ https:\/\/sandbox.om.dm.de https:\/\/signin.dm.de https:\/\/web.cmp.usercentrics.eu https:\/\/www.google.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.youtube-nocookie.com; base-uri 'self' https:\/\/exc.mm.dm.de; child-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint; report-uri \/__csp-reports__","count":2},{"content-security-policy-report-only":" default-src data: 'unsafe-inline' 'unsafe-eval' https: http:; script-src data: 'unsafe-inline' 'unsafe-eval' https: http: blob:; style-src data: 'self' 'unsafe-inline' https:; img-src data: 'self' https: blob: android-webview-video-poster:; font-src 'self' https: data:; connect-src 'self' data: https: wss: blob:; media-src data: https: blob:; object-src https:; child-src https: data: blob:; form-action https:; report-uri https:\/\/prod.bhaskarapi.com\/api\/1.0\/web-backend\/csp-report;","count":2},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/www.theaustralian.com.au\/csp-reports","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/cdn.gdebenz.org https:\/\/mc.yandex.ru https:\/\/yandex.ru https:\/\/yastatic.net; style-src 'self' 'unsafe-inline' https:\/\/cdn.gdebenz.org; img-src 'self' data: blob: https:; connect-src 'self' https:\/\/cdn.gdebenz.org https:\/\/api.gdebenz.ru https:\/\/mc.yandex.ru https:\/\/an.yandex.ru https:\/\/yabs.yandex.ru https:\/\/yandex.ru; font-src 'self' data: https:\/\/cdn.gdebenz.org; frame-src https:\/\/yandex.ru https:\/\/an.yandex.ru https:\/\/yastatic.net; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'","count":2},{"content-security-policy-report-only":" connect-src https:; child-src https:; default-src https:; font-src data: https:; form-action https:; frame-ancestors 'self' *.ffxblue.com.au *.ffx.io *.afr.com *.cdn.ampproject.org *.platform.ink; frame-src https:; img-src https: data:; media-src blob: https:; object-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; script-src-attr https: 'unsafe-eval' 'unsafe-inline'; script-src-elem https: 'unsafe-eval' 'unsafe-inline'; style-src https:; style-src-attr 'unsafe-inline'; style-src-elem https: 'unsafe-inline'; worker-src blob:; report-uri https:\/\/csp.ffx.io\/; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" style-src 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'none'; script-src 'self' 'unsafe-inline' https:\/\/fpt.mandm.com https:\/\/cdn-ukwest.onetrust.com https:\/\/widget.trustpilot.com https:\/\/js.klarna.com https:\/\/api.crm.mandmdirect.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/connect.facebook.net https:\/\/cdn.jsdelivr.net https:\/\/static.ads-twitter.com https:\/\/bat.bing.com; style-src 'self' 'unsafe-inline' https:\/\/widget.trustpilot.com https:\/\/cdn-ukwest.onetrust.com https:\/\/fonts.googleapis.com; img-src * data: blob:; connect-src * ws: wss:; font-src 'self' data: blob: https:\/\/fonts.gstatic.com; frame-src 'self' https:\/\/widget.trustpilot.com https:\/\/cdn-ukwest.onetrust.com; frame-ancestors 'none'; form-action 'self'; worker-src 'self' blob:; base-uri 'self';","count":2},{"content-security-policy-report-only":" connect-src 'self' cdn.cookielaw.org geolocation.onetrust.com ipmeta.io *.abtasty.com www.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net *.widencdn.net *.yimg.com *.stackadapt.com *.bing.com *.snapchat.com *.facebook.com *.tiktok.com *.tiktokw.us *.nrdcapi.org https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com; frame-src 'self' www.googletagmanager.com ad.ipredictive.com *.snapchat.com *.doubleclick.net trk.clinch.co *.youtube.com *.youtube-nocookie.com; img-src 'self' cdn.cookielaw.org *.abtasty.com data: www.nrdc.org *.doubleclick.net *.widencdn.net *.google.com *.facebook.com *.linkedin.com *.bing.com *.snapchat.com *.yahoo.com trkn.us *.tiktok.com *.tiktokw.us *.widen.net https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' bat.bing.com cdn.cookielaw.org code.jquery.com connect.facebook.net data: googleads.g.doubleclick.net js.ipredictive.com platform.instagram.com platform.twitter.com qvdt3feo.com s.yimg.com snap.licdn.com tags.srv.stackadapt.com blob: *.abtasty.com www.googletagmanager.com www.instagram.com cdn.jsdelivr.net cdnjs.cloudflare.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' agadata.online apis.google.com bat.bing.com cdn.cookielaw.org code.jquery.com colegiodiocesanosantaclara.imtlazarus.com:6443 connect.facebook.net data1.blamap.com get663.com googleads.g.doubleclick.net js.ipredictive.com lf16-tiktok-web.tiktokcdn-us.com nrdcapps.org pixel.byspotify.com platform.instagram.com platform.twitter.com public.tableau.com qvdt3feo.com s.yimg.com sc-static.net snap.licdn.com tags.srv.stackadapt.com translate-pa.googleapis.com translate.google.com translate.googleapis.com try.abtasty.com www.google-analytics.com www.googletagmanager.com www.instagram.com www.nrdcapps.org www.pagespeed-mod.com www.scrible.com www.tiktok.com unpkg.com www.vimeo.com www.youtube.com www.tp88trk.com apps.rokt.com *.mountain.com analytics.tiktok.com tr.snapchat.com cdn.clinch.co cdn.jsdelivr.net cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' cdn.honey.io tags.srv.stackadapt.com www.gstatic.com *.abtasty.com cdn.jsdelivr.net fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' blob: cdn.honey.io lf16-tiktok-web.tiktokcdn-us.com nrdcapps.org sf16-website-login.neutral.ttwstatic.com tags.srv.stackadapt.com www.googletagmanager.com www.gstatic.com www.nrdcapps.org www.scrible.com cdn.jsdelivr.net fonts.googleapis.com; worker-src 'self' blob:; frame-ancestors 'self'; report-uri https:\/\/nrdc.report-uri.com\/r\/d\/csp\/wizard","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' blob: https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/googleads.g.doubleclick.net https:\/\/ad.doubleclick.net https:\/\/cdn.cookielaw.org https:\/\/js.qualified.com https:\/\/scripts.clarity.ms https:\/\/www.clarity.ms https:\/\/j.6sc.co https:\/\/snap.licdn.com https:\/\/bat.bing.com https:\/\/munchkin.marketo.net https:\/\/js.zi-scripts.com https:\/\/tracking-api.g2.com https:\/\/cdn.propensity.com https:\/\/www.redditstatic.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/ws.zoominfo.com https:\/\/pages.sift.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdn.cookielaw.org https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/pages.sift.com; img-src 'self' data: https:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/js.qualified.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/www.google.com https:\/\/geolocation.onetrust.com https:\/\/*.clarity.ms https:\/\/j.6sc.co https:\/\/c.6sc.co https:\/\/ipv6.6sc.co https:\/\/b.6sc.co https:\/\/px.ads.linkedin.com https:\/\/www.linkedin.com https:\/\/alb.reddit.com https:\/\/analytics.propensity-abm.com https:\/\/epsilon.6sense.com https:\/\/ws.zoominfo.com https:\/\/cdn.cookielaw.org https:\/\/pagead2.googlesyndication.com https:\/\/stats.g.doubleclick.net https:\/\/ad.doubleclick.net https:\/\/app.qualified.com wss:\/\/ws6.qualified.com https:\/\/js.zi-scripts.com https:\/\/a.usbrowserspeed.com https:\/\/tracking-api.g2.com https:\/\/bat.bing.com https:\/\/526-pcc-974.mktoresp.com; frame-src 'self' https:\/\/cdn.cookielaw.org https:\/\/pages.sift.com https:\/\/app.qualified.com; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/pages.sift.com","count":2},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' cdn.cookielaw.org *.googletagmanager.com www.google-analytics.com *.google-analytics.com assets.adobedtm.com static.hotjar.com cdn.bizible.com www.knotch-cdn.com js.qualified.com app-sj11.marketo.com fonts.googleapis.com cdnjs.cloudflare.com dka575ofm4ao0.cloudfront.net s21.q4cdn.com widgets.q4app.com cdn.localizejs.com unpkg.com events.rainfocus.com cdn-leads.rainfocus.com static.rainfocus.com assets-global.website-files.com cdn.jsdelivr.net cdn.frontify.com technical-services-public.s3.us-east-1.amazonaws.com a.mtstatic.com c.la4-c2-chi.salesforceliveagent.com consent.truste.com static.getclicky.com www.gstatic.com ga.jspm.io 583ec472ee7d.edge.sdk.awswaf.com static.pathmotion.io www.bugherd.com","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/challenges.cloudflare.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn.tailwindcss.com https:\/\/pagead2.googlesyndication.com https:\/\/grop.net https:\/\/wingsmob.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn.tailwindcss.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdnjs.cloudflare.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/challenges.cloudflare.com https:\/\/challenges.fed.cloudflare.com https:\/\/pagead2.googlesyndication.com https:\/\/cdnjs.cloudflare.com https:\/\/grop.net https:\/\/wingsmob.com; frame-src 'self' https:\/\/challenges.cloudflare.com https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/accounts.google.com; frame-ancestors 'self'; report-uri \/csp-report.php; report-to csp","count":2},{"content-security-policy-report-only":" default-src 'self';         script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/*.amazon-adsystem.com https:\/\/*.contentsquare.net https:\/\/*.demdex.net https:\/\/*.doubleclick.net https:\/\/*.googleadservices.com https:\/\/*.smassets.net https:\/\/*.surveymonkey.com https:\/\/ajax.googleapis.com https:\/\/amazon-adsystem.com https:\/\/analytics.tiktok.com https:\/\/app.contentsquare.com https:\/\/bat.bing.com https:\/\/c5.adalyser.com https:\/\/cdn.evergage.com https:\/\/cdn.evgnet.com https:\/\/connect.facebook.net https:\/\/cse.google.com https:\/\/ct.pinterest.com https:\/\/data.privacy.ensighten.com https:\/\/manage.ensighten.com https:\/\/maps.googleapis.com https:\/\/nationaltrustorguk.germany-2.evergage.com https:\/\/nexus-test.ensighten.com https:\/\/nexus.ensighten.com https:\/\/player.vimeo.com https:\/\/s.pinimg.com https:\/\/s.yimg.com https:\/\/static.nationaltrust.org.uk https:\/\/static.yieldmo.com https:\/\/tkr.yieldmo.com https:\/\/tms.nationaltrust.org.uk https:\/\/www.awin1.com https:\/\/www.dwin1.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.redditstatic.com https:\/\/www.youtube.com https:\/\/www.zenaps.com;         style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/static.nationaltrust.org.uk https:\/\/www.google.com;         img-src 'self' data: https:\/\/*.amazon-adsystem.com https:\/\/*.contentsquare.net https:\/\/*.demdex.net https:\/\/*.doubleclick.net https:\/\/*.googleadservices.com https:\/\/*.googlesyndication.com https:\/\/*.gstatic.com https:\/\/*.paa-reporting-advertising.amazon https:\/\/*.smassets.net https:\/\/alb.reddit.com https:\/\/amazon-adsystem.com https:\/\/bat.bing.com https:\/\/c5.adalyser.com https:\/\/clients1.google.com https:\/\/ct.pinterest.com https:\/\/data.privacy.ensighten.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/nt.global.ssl.fastly.net https:\/\/paa-reporting-advertising.amazon https:\/\/services.postcodeanywhere.co.uk https:\/\/smetrics.nationaltrust.org.uk https:\/\/sp.analytics.yahoo.com https:\/\/static.nationaltrust.org.uk https:\/\/tkr.yieldmo.com https:\/\/tms.nationaltrust.org.uk https:\/\/www.awin1.com https:\/\/www.facebook.com https:\/\/www.google.co.uk https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.zenaps.com;         font-src 'self' data: https:\/\/*.smassets.net https:\/\/fonts.gstatic.com https:\/\/static.nationaltrust.org.uk;         frame-src 'self' https:\/\/*.amazon-adsystem.com https:\/\/*.demdex.net https:\/\/*.surveymonkey.com https:\/\/amazon-adsystem.com https:\/\/ct.pinterest.com https:\/\/maps.googleapis.com https:\/\/national-trust.maps.arcgis.com https:\/\/player.vimeo.com https:\/\/syndicatedsearch.goog https:\/\/www.awin1.com https:\/\/www.youtube.com;         connect-src 'self' https:\/\/*.adtrafficquality.google https:\/\/*.amazon-adsystem.com https:\/\/*.contentsquare.com https:\/\/*.contentsquare.net https:\/\/*.demdex.net https:\/\/*.doubleclick.net https:\/\/*.googleadservices.com https:\/\/*.googlesyndication.com https:\/\/*.paa-reporting-advertising.amazon https:\/\/*.tt.omtrdc.net https:\/\/amazon-adsystem.com https:\/\/analytics.tiktok.com https:\/\/api.iconify.design https:\/\/bat.bing.com https:\/\/ct.pinterest.com https:\/\/data.privacy.ensighten.com https:\/\/kinesis.us-east-1.amazonaws.com\/ https:\/\/manage.ensighten.com https:\/\/maps.googleapis.com https:\/\/nationaltrustorguk.germany-2.evergage.com https:\/\/nexus-test.ensighten.com https:\/\/nexus.ensighten.com https:\/\/paa-reporting-advertising.amazon https:\/\/pixel-config.reddit.com https:\/\/pixel.reddit.com https:\/\/s.yimg.com https:\/\/services.postcodeanywhere.co.uk https:\/\/smetrics.nationaltrust.org.uk https:\/\/syndicatedsearch.goog https:\/\/tms.nationaltrust.org.uk https:\/\/www.google.co.uk https:\/\/www.google.com https:\/\/www.googleapis.com https:\/\/www.googletagmanager.com;         media-src 'self' https:\/\/audioboom.com https:\/\/d11untcg2uthr3.cloudfront.net https:\/\/dts.podtrac.com;         object-src 'none';         child-src blob:;         worker-src blob:;         frame-ancestors https:\/\/webcms.nationaltrust.org.uk;         base-uri 'self';","count":2},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' https:\/\/*.grass.io https:\/\/*.getgrass.io https:\/\/*.ghost.io https:\/\/*.clarity.ms https:\/\/*.google-analytics.com https:\/\/*.grassfoundation.io https:\/\/*.convertexperiments.com https:\/\/*.google.com https:\/\/analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.doubleclick.net https:\/\/*.googleadservices.com https:\/\/*.facebook.com https:\/\/*.analytics.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/*.clarity.ms https:\/\/*.googletagmanager.com https:\/\/*.youtube.com https:\/\/*.convertexperiments.com https:\/\/*.google-analytics.com https:\/\/*.doubleclick.net https:\/\/*.facebook.net https:\/\/*.googleadservices.com https:\/\/www.google.com https:\/\/www.gstatic.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/*.clarity.ms https:\/\/*.googletagmanager.com https:\/\/*.youtube.com https:\/\/*.convertexperiments.com https:\/\/*.google-analytics.com https:\/\/*.doubleclick.net https:\/\/*.facebook.net https:\/\/*.googleadservices.com https:\/\/www.google.com https:\/\/www.gstatic.com; style-src 'self' 'unsafe-inline' https:\/\/*.googletagmanager.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com; img-src 'self' https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https: blob: data:; font-src 'self' https:\/\/*.gstatic.com https:\/\/*.googleapis.com; media-src 'self' https:\/\/*.grass.io https:\/\/*.getgrass.io https:\/\/*.ghost.io; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https:\/\/studio.aeocontent.ai; upgrade-insecure-requests; frame-src 'self' https:\/\/*.youtube.com https:\/\/*.convertexperiments.com https:\/\/*.googletagmanager.com https:\/\/*.doubleclick.net; worker-src 'self' blob:; child-src 'self' blob:; manifest-src 'self'","count":2},{"content-security-policy-report-only":" default-src 'self'; object-src 'none'; script-src 'self' *.hubspot.com *.hubspotusercontent-na1.net cdn.jsdelivr.net adsplay.com.br www.chatbase.co platform.twitter.com static.addtoany.com cdn.socket.io cdn.datatables.net *.cloudfront.net *.airtable.com www.googleadservices.com bat.bing.com *.albacross.com www.youtube.com snap.licdn.com static.hotjar.com cdn.privacytools.com.br plugin.handtalk.me unpkg.com *.hubspot.net cdnjs.cloudflare.com www.gstatic.com script.hotjar.com www.google.com *.storylane.io try.abtasty.com code.jquery.com googleads.g.doubleclick.net www.google-analytics.com www.clarity.ms ajax.googleapis.com cdn.cookielaw.org *.facebook.net js.hs-analytics.net js.hs-banner.com js.hsadspixel.net js.hscollectedforms.net js.hsforms.net js.hsleadflows.net js.hubspot.com app.hubspot.com js.usemessages.com *.linkedin.com static.hsappstatic.net www.googletagmanager.com www.gupy.io sibforms.com; style-src 'self' 'unsafe-inline' *.gupy.io *.hubspot.com *.hsappstatic.net *.hubspot.net cdn-uicons.flaticon.com kit.fontawesome.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.datatable.net cdn.datatables.net stackpath.bootstrapcdn.com cdn.cookielaw.org *.hubspotusercontent-na1.net *.hubspotusercontent40.net fonts.googleapis.com cdn.privacytools.com.br www.gupy.io sibforms.com; img-src 'self' blob: 3299491.fs1.hubspotusercontent-na1.net perf-na1.hsforms.com track.hubspot.com www.gupy.io data: *; font-src 'self' fonts.gstatic.com fonts.googleapis.com *.hubspotusercontent-na1.net *.hubspotusercontent40.net www.gupy.io assets.sendinblue.com static.hsappstatic.net; connect-src 'self' blob: fs1.hubspotusercontent-na1.net cdn.cookielaw.org *.gupy.io data: gap: *; media-src 'self' *.hubspot.com *.hubspotusercontent-na1.net www.gupy.io; frame-src gupy.com.br *.gupy.com.br gupy.com.br\/ gupy.io *.hs-sites.com *.hubspot.com js.hsforms.net www.googletagmanager.com www.chatbase.co lottie.host platform.twitter.com www.figma.com marine-bebop-445118-a6.uc.r.appspot.com w.soundcloud.com *.sibforms.com static.addtoany.com www.youtube.com app.hubspot.com *.hubspotvideo.com td.doubleclick.net *.facebook.com forms.hsforms.com *.storylane.io airtable.com *.spotify.com gupy.chat.blip.ai gupy673.outgrow.us *.google.com anchor.fm; frame-ancestors 'self' gupy.com.br gupy.io;","count":2},{"content-security-policy-report-only":" script-src 'self' 'sha256-kz2v74aYFXbVNI1RKgffRc97G6Nw3HcMyT+qZRkoBhU=' 'sha256-gCXLkrPpYy6xgmgD8n0k0F1nWoINZsXq0c9g9Sy1usE=' 'sha256-aV5sJM1xeKRTFQgcQsOXJbFf7ZRu5MaU6R0dtqP6gMQ=' 'sha256-eeqt0GDRCuSpbcwMoXotJNYmmropS6wU04bmz56gi18=' 'sha256-Lgo7GgMiFoYMvzmUZLiH8wl+1MP5eLvxUzOnClkT\/kM=' 'sha256-KPGkHeFQOQ\/smrMmvzMKUQ5po4R9ugJ+WM2tFcVG7W0=' 'sha256-Z\/2BXxmqc6WV+VAyRFVlrEc6uO7rrEo\/+2D1S+Wtvu8=' 'sha256-qUWcOHvC1Rutm3K\/p6R7ptKKLX7QWdjd2U8\/ltznJUA=' 'sha256-PsZzYIDSf8BqixcMVtaI03iPP9IQ5s9eGPNI7udg11c=' 'sha256-yXp9TJaD98YtAX3er+\/FMoBYNVSuq6n+7n55uiCIIUY=' 'sha256-Ut5ybhCk6r4Yg4tdo2ez801+Key4uI8edFNjSp9ZoTk=' 'sha256-BS\/PaAi6082damEJbcaFy1\/tWmtIPTe1829M0dyBMZk=' 'sha256-AxWFcgyZnLcU770djLDTc\/k2uQicnMxz4oNOVNIrSTc=' 'sha256-CSfrl2y7AN0ybMQ2tj6024n+V9fsISUmdShlZiMX9sc=' 'sha256-daEdpEyAJIa8b2VkCqSKcw8PaExcB6Qro80XNes\/sHA=' 'sha256-zW+LLMslIj9gSZbRyaXFBbdRdFL\/SeSQv+q1rluysJk=' 'sha256-0Hqc4NkL\/LJrwHJqhJTV2\/fIIBaYvBb4RNqAGwDNkPs=' 'sha256-ASsh7r3M\/doNFewL4IYDdqjz7E7YF1SRYRjfrKVb+Dk=' 'sha256-29f8NmOrTvvUjsKQjXhQ9h4Qv58e0D2CJil2t+xerLA=' 'sha256-1Zc6YjqLt0QOp95NuGSN5Kilk8dIYNmR8po\/WIpuf6U=' 'sha256-mM49nCpBA87\/v3czXi5oZ2lHWpUh0EEomLp6MqNqt2k=' 'sha256-QcwM8FdmD\/I7YCTMvSwBuSGJne\/NlKlvdaC14Qymi2M=' 'sha256-NADsW9CGI8+xDbqknQo4eOViCdtQP2hyu7pw3eFycb0=' 'sha256-\/k8Ywm3sncfyAxhoDo5R7NYKCOb0GBTsYBBrEsapWWU=' 'sha256-WQT\/IeQlgNuv3VtDNZqUsXjtDTjJ04AXTy2tbSfILJ8=' https:\/\/consentcdn.cookiebot.com\/ https:\/\/static.responsetap.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/consent.cookiebot.com\/ https:\/\/js.monitor.azure.com\/scripts\/b\/ https:\/\/securepubads.g.doubleclick.net\/tag\/js\/ https:\/\/securepubads.g.doubleclick.net\/pagead\/managed\/js\/gpt\/ https:\/\/partner.googleadservices.com\/gampad\/ https:\/\/ep2.adtrafficquality.google\/sodar\/ https:\/\/cse.google.com https:\/\/www.google.com\/cse\/static\/element\/ https:\/\/browser.sentry-cdn.com\/8.55.0\/ https:\/\/js-de.sentry-cdn.com\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/platform.twitter.com\/ https:\/\/live.streamdays.com\/ https:\/\/ajax.googleapis.com\/ajax\/libs\/jquery\/1.12.0\/ https:\/\/metrics.responsetap.com\/track\/ https:\/\/www.gstatic.com\/recaptcha\/releases\/ https:\/\/maps.googleapis.com\/ https:\/\/cse.google.com\/adsense\/ https:\/\/platform.twitter.com\/js\/;object-src 'none';base-uri 'self'; report-uri https:\/\/o4507894741598208.ingest.de.sentry.io\/api\/4509445648678992\/security\/?sentry_key=e2a1dc027731a824307d6bafbefc86c0&sentry_environment=prod; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'report-sample' 'self'   https:\/\/7052064.fs1.hubspotusercontent-na1.net   https:\/\/a.omappapi.com   https:\/\/app.hubspot.com   https:\/\/assets.apollo.io   https:\/\/cdn.demio.com   https:\/\/cdn.propensity.com   https:\/\/cdnjs.cloudflare.com   https:\/\/code.jquery.com   https:\/\/googleads.g.doubleclick.net   https:\/\/import-cdn.default.com   https:\/\/js.hscollectedforms.net   https:\/\/js.navattic.com   https:\/\/platform.linkedin.com   https:\/\/s3-us-west-2.amazonaws.com   https:\/\/snap.licdn.com   https:\/\/static.hsappstatic.net   https:\/\/www.googleadservices.com   https:\/\/www.googletagmanager.com   https:\/\/www.redditstatic.com   https:\/\/js.hs-analytics.net   https:\/\/js.hs-scripts.com; style-src 'report-sample' 'self'   https:\/\/7052064.fs1.hubspotusercontent-na1.net   https:\/\/ajax.googleapis.com   https:\/\/cdn.demio.com   https:\/\/cdnjs.cloudflare.com   https:\/\/fonts.googleapis.com   https:\/\/kit-free.fontawesome.com   https:\/\/static.hsappstatic.net; object-src 'none'; base-uri 'self'; connect-src 'self'   https:\/\/a.omappapi.com   https:\/\/analytics.google.com   https:\/\/aplo-evnt.com   https:\/\/app.hubspot.com   https:\/\/cp.hubspot.com   https:\/\/forms.default.com   https:\/\/forms.hsforms.com   https:\/\/geo.demio.com   https:\/\/js.hs-banner.com   https:\/\/nucleus.default.com   https:\/\/pixel-config.reddit.com   https:\/\/px.ads.linkedin.com   https:\/\/www.cloudflare.com   https:\/\/www.google.com   https:\/\/www.redditstatic.com   https:\/\/z.omappapi.com   https:\/\/api.hsforms.com   https:\/\/api.hubapi.com; font-src 'self' https:\/\/fonts.gstatic.com; frame-src 'self'   https:\/\/forms.hsforms.com   https:\/\/play.hubspotvideo.com   https:\/\/scheduler.default.com   https:\/\/td.doubleclick.net   https:\/\/www.googletagmanager.com; img-src 'self'   https:\/\/a.omappapi.com   https:\/\/alb.reddit.com   https:\/\/forms-na1.hsforms.com   https:\/\/forms.hsforms.com   https:\/\/forms.hubspot.com   https:\/\/googleads.g.doubleclick.net   https:\/\/px.ads.linkedin.com   https:\/\/static.hsappstatic.net   https:\/\/track.hubspot.com   https:\/\/www.google.com; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-uri https:\/\/6823595ee2a3634bf77e7bfe.endpoint.csper.io?builder=true&v=2;","count":2},{"content-security-policy-report-only":" default-src https: 'unsafe-inline' 'unsafe-eval'; report-uri https:\/\/b3ceba9babf02086c0dca962bbbd1cda.report-uri.io\/r\/default\/csp\/reportOnly","count":2},{"content-security-policy-report-only":" frame-ancestors 'self' *.pdffiller.com *.signnow.com *.airslate.com; report-uri https:\/\/www.pdffiller.com\/api_v3\/security_report\/cspViolationsReport?appKey=rs3dwgboso31.apps.marketing_pages","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https:\/\/api-maps.yandex.ru https:\/\/*.api-maps.yandex.ru https:\/\/yastatic.net https:\/\/suggest-maps.yandex.ru https:\/\/*.mindbox.ru https:\/\/mc.yandex.ru https:\/\/smartcaptcha.yandexcloud.net https:\/\/api.mindbox.ru https:\/\/web-static.mindbox.ru https:\/\/personalization-web.g.mindbox.ru https:\/\/websdk.appsflyer.com https:\/\/banner.appsflyersdk.com; style-src 'self' 'unsafe-inline' https:\/\/api-maps.yandex.ru https:\/\/*.api-maps.yandex.ru https:\/\/yastatic.net; img-src 'self' data: blob: https: https:\/\/image.mm.ru https:\/\/api-maps.yandex.ru https:\/\/*.api-maps.yandex.ru https:\/\/*.maps.yandex.net https:\/\/yastatic.net https:\/\/*.cluster.kznexpess.com https:\/\/ke-images.servicecdn.ru https:\/\/kazanexpress.hb.bizmrg.com https:\/\/image.kazanexpress.ru https:\/\/support.apple.com https:\/\/core-renderer-tiles.maps.yandex.net; connect-src 'self' https:\/\/api-maps.yandex.ru https:\/\/*.api-maps.yandex.ru https:\/\/*.maps.yandex.net https:\/\/graphql.kazanexpress.ru https:\/\/web-api.mm.ru https:\/\/api.kazanexpress.ru https:\/\/id.magnit.ru https:\/\/event-stream-api.magnit.ru https:\/\/*.kaspersky-labs.com https:\/\/firebaseremoteconfig.googleapis.com https:\/\/firebaseinstallations.googleapis.com https:\/\/*.cluster.kznexpess.com https:\/\/nmchdd.ru:25343 https:\/\/mc.yandex.ru wss:\/\/mc.yandex.ru https:\/\/api.mindbox.ru https:\/\/web-static.mindbox.ru https:\/\/personalization-web.g.mindbox.ru https:\/\/*.mindbox.ru https:\/\/smartcaptcha.yandexcloud.net https:\/\/sentry.mm.ru https:\/\/banner.appsflyersdk.com; frame-src 'self' https:\/\/smartcaptcha.yandexcloud.net https:\/\/www.youtube.com; worker-src 'self' blob: https:\/\/api-maps.yandex.ru https:\/\/*.api-maps.yandex.ru https:\/\/yastatic.net; report-to csp","count":2},{"content-security-policy-report-only":" object-src 'none'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' 'unsafe-eval'; base-uri 'none'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" default-src https: data: blob: wss: android-webview-video-poster: 'unsafe-inline' 'unsafe-eval'; form-action https:; report-to default; report-uri https:\/\/sentry.io\/api\/256178\/csp-report\/?sentry_key=c2fb05422b2242faaec1d6d8a2a000fc&sentry_environment=production&sentry_release=1.2.119","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/vercel.live https:\/\/challenges.cloudflare.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn.arena.ai https:\/\/*.posthog.com https:\/\/www.googletagmanager.com https:\/\/static.cloudflareinsights.com https:\/\/www.google.com https:\/\/www.gstatic.com 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' https:\/\/vercel.live https:\/\/challenges.cloudflare.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn.arena.ai https:\/\/*.posthog.com https:\/\/www.googletagmanager.com https:\/\/arena.ai https:\/\/static.cloudflareinsights.com\/ https:\/\/www.google.com https:\/\/www.gstatic.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https:\/\/challenges.cloudflare.com https:\/\/vercel.live https:\/\/us.posthog.com; img-src 'self' data: blob: https:\/\/challenges.cloudflare.com https:\/\/*.posthog.com https:\/\/vercel.live https:\/\/vercel.com https:\/\/*.27c852f3500f38c1e7786e2c9ff9e48f.r2.cloudflarestorage.com https:\/\/lh3.googleusercontent.com https:\/\/*.googletagmanager.com; connect-src 'self' https:\/\/arena.ai https:\/\/vercel.live wss:\/\/ws-us3.pusher.com https:\/\/*.posthog.com https:\/\/posthog.com https:\/\/challenges.cloudflare.com https:\/\/unpkg.com\/@rive-app\/ https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/www.google.com https:\/\/*.27c852f3500f38c1e7786e2c9ff9e48f.r2.cloudflarestorage.com https:\/\/browser-intake-us3-datadoghq.com https:\/\/api.trigger.dev; frame-src 'self' https:\/\/vercel.live https:\/\/challenges.cloudflare.com https:\/\/www.google.com https:\/\/*.arena.site https:\/\/*.staging.arena.site; font-src 'self' data: https:\/\/vercel.live https:\/\/assets.vercel.com https:\/\/*.gstatic.com; worker-src 'self' blob:","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:\/\/www.masterdc.com https:\/\/admin.masterdc.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval'   https:\/\/challenges.cloudflare.com   https:\/\/www.googletagmanager.com   https:\/\/googleads.g.doubleclick.net   https:\/\/www.googleadservices.com   https:\/\/pagead2.googlesyndication.com   https:\/\/cdn.ip2c.net   https:\/\/reveal.ip2c.net   https:\/\/ct.leady.com   https:\/\/cdnjs.cloudflare.com   https:\/\/www.youtube.com; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' data:   https:\/\/fonts.gstatic.com   https:\/\/www.masterdc.com   https:\/\/cdnjs.cloudflare.com; img-src 'self' data: blob:   https:\/\/www.masterdc.com   https:\/\/t.leady.com   https:\/\/i.ytimg.com   https:\/\/www.googleadservices.com   https:\/\/www.googletagmanager.com   https:\/\/pagead2.googlesyndication.com   https:\/\/googleads.g.doubleclick.net   https:\/\/www.google.com https:\/\/www.google.cz https:\/\/www.google.sk   https:\/\/www.google.de https:\/\/www.google.at https:\/\/www.google.fr   https:\/\/www.google.nl https:\/\/www.google.pl https:\/\/www.google.ro   https:\/\/www.google.hr https:\/\/www.google.ca https:\/\/www.google.com.hk   https:\/\/www.google.com.ng https:\/\/www.google.com.om; connect-src 'self'   https:\/\/challenges.cloudflare.com   https:\/\/api.ip2c.net   https:\/\/t.leady.com   https:\/\/www.google.com https:\/\/google.com   https:\/\/www.google.cz https:\/\/www.google.sk https:\/\/www.google.de   https:\/\/www.google.com.hk https:\/\/www.google.com.om   https:\/\/www.google-analytics.com   https:\/\/region1.google-analytics.com   https:\/\/analytics.google.com   https:\/\/region1.analytics.google.com   https:\/\/pagead2.googlesyndication.com   https:\/\/googleads.g.doubleclick.net   https:\/\/www.googleadservices.com   https:\/\/ad.doubleclick.net   https:\/\/stats.g.doubleclick.net   https:\/\/www.googletagmanager.com; frame-src 'self'   https:\/\/challenges.cloudflare.com   https:\/\/www.youtube-nocookie.com   https:\/\/www.youtube.com   https:\/\/maps.google.com   https:\/\/www.google.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; report-uri \/csp-report.php; report-to csp","count":2},{"content-security-policy-report-only":" connect-src https: wss:; font-src data: https:; frame-src https:; img-src blob: data: https:; media-src blob: data: https:; object-src 'self' https:\/\/*.app-eu.wrike.com https:\/\/*.wrike.com https:\/\/*.www.wrike.com https:\/\/youtube.com https:\/\/d3tvpxjako9ywy.cloudfront.net https:\/\/d1c5qktmphn2d.cloudfront.net; manifest-src 'self' https:\/\/cdn.wrike.com; script-src 'unsafe-eval' 'unsafe-inline' data: https:\/\/*.wrike.com https:\/\/*.www.wrike.com https:\/\/*.app-eu.wrike.com https:\/\/*.google-analytics.com https:\/\/*.usercentrics.eu https:\/\/*.marketo.com https:\/\/*.marketo.net https:\/\/apis.google.com https:\/\/bat.bing.com https:\/\/cdn.ravenjs.com https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net https:\/\/snap.licdn.com https:\/\/static.ads-twitter.com https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com https:\/\/pagead2.googlesyndication.com\/pagead\/conversion\/962492627\/ https:\/\/s.yimg.jp\/images\/listing\/tool\/cv\/ytag.js https:\/\/tag.demandbase.com\/63365c817f510bbb.min.js https:\/\/api.tomi.ai\/029\/loader.js https:\/\/tags.srv.stackadapt.com\/events.js https:\/\/s.yimg.jp\/images\/listing\/tool\/cv\/conversion.js https:\/\/cdn.metadata.io https:\/\/js.partnerstack.com\/v1\/ https:\/\/www.clarity.ms\/ https:\/\/tracking.intentsify.io\/ https:\/\/b97.yahoo.co.jp\/pagead\/conversion_async.js https:\/\/ad.doubleclick.net\/ddm\/adj\/N1344363.197812NSO.CODESRV\/ https:\/\/*.d41.co https:\/\/d3tvpxjako9ywy.cloudfront.net https:\/\/d1c5qktmphn2d.cloudfront.net https:\/\/static.cloudflareinsights.com https:\/\/*.goldcast.io https:\/\/fast.wistia.com https:\/\/js.qualified.com https:\/\/static.axept.io https:\/\/j.6sc.co https:\/\/www.youtube.com https:\/\/cdn.dreamdata.cloud; style-src 'unsafe-inline' data: https:; default-src 'self'; report-uri https:\/\/sentry.wrike.com\/api\/20\/security\/?sentry_key=38ca5e63ef594e30b392b3cec0b162cf&sentry_environment=website;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src https:; object-src 'none'; base-uri 'self'","count":2},{"content-security-policy-report-only":" default-src 'self'; media-src 'self'; connect-src 'self' https:\/\/vpncdn.protonweb.com https:\/\/account.proton.me https:\/\/account.protonvpn.com https:\/\/telemetry.protonvpn.com *.metrics.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com https:\/\/growth.proton.me ; script-src 'self' blob: 'unsafe-eval' 'unsafe-inline' https:\/\/vpncdn.protonweb.com; style-src 'self' 'unsafe-inline' https:\/\/vpncdn.protonweb.com; font-src 'self' https:\/\/vpncdn.protonweb.com; img-src 'self' data: blob: https:; frame-src 'self' data: blob: https:\/\/www.youtube-nocookie.com https:\/\/www.openstreetmap.org; object-src 'self' data: blob:; child-src 'self' data: blob:; report-uri https:\/\/reports.proton.me\/reports\/csp; frame-ancestors 'self';","count":2},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/www.dailytelegraph.com.au\/csp-reports","count":2},{"content-security-policy-report-only":" default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob:; font-src https: data:; img-src https: data:; media-src blob: data: https:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; frame-ancestors 'self'; report-uri https:\/\/leafgroup.report-uri.com\/r\/d\/csp\/wizard","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/whiteboard.cloud.dev.microsoft https:\/\/whiteboard.cloud.microsoft; frame-ancestors 'self' https:\/\/teams.microsoft.com https:\/\/retailservices.teams.microsoft.com https:\/\/retailservices-ppe.teams.microsoft.com https:\/\/tasks.teams.microsoft.com https:\/\/local.teams.office.com https:\/\/devspaces.skype.com https:\/\/ssauth.skype.com https:\/\/teams.microsoft.com.mcas.ms https:\/\/teams.microsoft.com.us3.cas.ms https:\/\/local.teams.office.com:8080 https:\/\/teams.live.com https:\/\/outlook-sdf.office.com https:\/\/outlook.office.com\/ https:\/\/assignments.onenote.com https:\/\/assignments.edu.cloud.microsoft https:\/\/browser-sandbox.meshxp.net\/ https:\/\/spoolclientsdk.skype.com https:\/\/acsinternal-cte-beta.azurewebsites.net https:\/\/acssample-beta.azurewebsites.net https:\/\/acssample-stable.azurewebsites.net https:\/\/loop.microsoft.com https:\/\/*.loop.microsoft.com https:\/\/loop.cloud.microsoft https:\/\/loop.cloud-dev.microsoft https:\/\/app.int.whiteboard.microsoft.com https:\/\/whiteboard.cloud-dev.microsoft https:\/\/whiteboard.cloud.dev.microsoft https:\/\/whiteboard.cloud.microsoft https:\/\/*.whiteboard.microsoft.com https:\/\/whiteboard.microsoft.com https:\/\/whiteboard.office.com https:\/\/teams.cloud.microsoft https:\/\/outlook.cloud.microsoft https:\/\/m365.cloud.microsoft https:\/\/res-sdf.cdn.office.net https:\/\/res.cdn.office.net https:\/\/mesh.public.onecdn.static.microsoft https:\/\/mesh.df.onecdn.static.microsoft https:\/\/m365.cloud.microsoft https:\/\/sbrprodprv.www.office.com https:\/\/scuprodprv.www.office.com https:\/\/fa000000174.resources.office.net https:\/\/outlook.office.com https:\/\/planner.cloud.microsoft; base-uri 'none'; manifest-src 'self' https:\/\/whiteboard.cloud.dev.microsoft https:\/\/whiteboard.cloud.microsoft; script-src 'self' 'wasm-unsafe-eval' 'report-sample' https:\/\/whiteboard.cloud.dev.microsoft https:\/\/whiteboard.cloud.microsoft http:\/\/amcdn.msftauth.net https:\/\/amcdn.msftauth.net https:\/\/*.office365.com https:\/\/shell.cdn.office.net https:\/\/cdn.fluidpreview.office.net https:\/\/js.monitor.azure.com https:\/\/res-1.cdn.office.net https:\/\/res.cdn.office.net https:\/\/ch5.fluidpreview.office.net https:\/\/cdn.dev.fluidpreview.office.net https:\/\/dev.loop.microsoft.com https:\/\/res-sdf.cdn.office.net 'sha256-VCkGe6AeV2B4vV7flXt9Dkkp04wMc8zq7faHdRwhOx0=' 'sha256-Wmg7miLkEVn5v393z4Ch7lbKnpNnLZhnVOk\/iJN1miE='; style-src 'self' 'unsafe-inline' 'report-sample' https:\/\/whiteboard.cloud.dev.microsoft https:\/\/whiteboard.cloud.microsoft https:\/\/*.office.net https:\/\/res.cdn.office.net https:\/\/cdn.fluidpreview.office.net https:\/\/ch5.fluidpreview.office.net https:\/\/cdn.dev.fluidpreview.office.net https:\/\/dev.loop.microsoft.com https:\/\/res-sdf.cdn.office.net; font-src 'self' https:\/\/whiteboard.cloud.dev.microsoft https:\/\/whiteboard.cloud.microsoft data: https:\/\/*.office.net https:\/\/spoprod-a.akamaihd.net https:\/\/static2.sharepointonline.com fs.microsoft.com; img-src 'self' https:\/\/whiteboard.cloud.dev.microsoft https:\/\/whiteboard.cloud.microsoft blob: data: https:\/\/*.office.com https:\/\/*.office365.com https:\/\/outlook.live.com https:\/\/*.teams.microsoft.com https:\/\/*.officeapps.live.com https:\/\/web.vortex.data.microsoft.com https:\/\/shell.cdn.office.net https:\/\/urlp.asm.skype.com https:\/\/urlp.sfbassets.com https:\/\/login.live.com https:\/\/storage.live.com; connect-src 'self' blob: https:\/\/* wss:\/\/whiteboard.microsoft.com\/sync wss:\/\/whiteboard.svc.cloud.microsoft\/sync wss:\/\/whiteboard.svc.cloud.dev.microsoft\/sync wss:\/\/*.whiteboard.microsoft.com wss:\/\/whiteboard.microsoft.com wss:\/\/*.svc.ms wss:\/\/dogfood.augloop.svc.cloud.microsoft wss:\/\/*.dogfood.augloop.svc.cloud.microsoft wss:\/\/*.augloop-dogfood.officeppe.com wss:\/\/augloop-dogfood.officeppe.com wss:\/\/augloop.svc.cloud.microsoft wss:\/\/*.augloop.svc.cloud.microsoft wss:\/\/*.augloop.office.com wss:\/\/augloop.office.com wss:\/\/augloop-gcc.office.com wss:\/\/*.augloop-gcc.office.com; worker-src 'self' https:\/\/whiteboard.cloud.dev.microsoft https:\/\/whiteboard.cloud.microsoft; frame-src 'self' https:\/\/* https:\/\/webshell.suite.office.com; media-src 'self' https:\/\/whiteboard.cloud.dev.microsoft https:\/\/whiteboard.cloud.microsoft; object-src 'none'; form-action 'self' https:\/\/*; report-uri https:\/\/csp.microsoft.com\/report\/WhiteboardWebClient-WhiteboardApp-PROD; report-to csp-endpoint;","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:\/\/tierpointdev.wpengine.com https:\/\/*.duosecurity.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https:\/\/js.hsforms.net https:\/\/js.hs-scripts.com https:\/\/www.googletagmanager.com https:\/\/www.googleadservices.com https:\/\/www.clarity.ms https:\/\/tierpoint.my.site.com https:\/\/browser.sentry-cdn.com https:\/\/fd.cleantalk.org https:\/\/play.vidyard.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/vimeo.com https:\/\/vzaar.com https:\/\/maps.googleapis.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/wec-assets.terminus.services https:\/\/cdn.callrail.com https:\/\/trk.techtarget.com https:\/\/www.statcounter.com https:\/\/snap.licdn.com https:\/\/ws.zoominfo.com https:\/\/js.zi-scripts.com https:\/\/static.ads-twitter.com https:\/\/www.clickcease.com https:\/\/tag.demandbase.com https:\/\/cdn.webexperiences.com https:\/\/connect.facebook.net https:\/\/www.redditstatic.com https:\/\/bzrcdn.openai.com https:\/\/bat.bing.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/assets.pinterest.com https:\/\/platform.twitter.com https:\/\/apis.google.com https:\/\/js.callrail.com https:\/\/scripts.clarity.ms https:\/\/ws-assets.zoominfo.com https:\/\/js.hsadspixel.net https:\/\/js.hs-banner.com https:\/\/js.hs-analytics.net https:\/\/s.webexperiences.com https:\/\/googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/tierpoint.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/static.hotjar.com https:\/\/tierpoint.my.site.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdnjs.cloudflare.com https:\/\/static.hotjar.com; img-src 'self' data: blob: https:\/\/www.tierpoint.com https:\/\/tierpointstg.wpengine.com https:\/\/tierpoint.my.site.com https:\/\/www.googletagmanager.com https:\/\/c.statcounter.com https:\/\/px.ads.linkedin.com https:\/\/monitor.clickcease.com https:\/\/ws.zoominfo.com https:\/\/moderate.cleantalk.org https:\/\/moderate-v4.cleantalk.org https:\/\/www.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/td.doubleclick.net https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/bat.bing.com https:\/\/static.hotjar.com https:\/\/img.youtube.com https:\/\/i.ytimg.com https:\/\/secure.gravatar.com https:\/\/via.placeholder.com https:\/\/maps.gstatic.com https:\/\/*.hsforms.com https:\/\/track.hubspot.com https:\/\/t.co https:\/\/analytics.twitter.com https:\/\/alb.reddit.com https:\/\/id.rlcdn.com https:\/\/www.facebook.com https:\/\/*.clarity.ms; connect-src 'self' https:\/\/api.ipify.org https:\/\/tierpoint.my.salesforce-scrt.com https:\/\/tierpoint.my.site.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/sentry.io https:\/\/www.clarity.ms https:\/\/*.clarity.ms https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/bat.bing.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/maps.googleapis.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/*.hsforms.com https:\/\/fd-api.cleantalk.org https:\/\/px.ads.linkedin.com https:\/\/js.callrail.com https:\/\/bzrcdn.openai.com https:\/\/js.hs-banner.com https:\/\/ws.zoominfo.com https:\/\/ad.doubleclick.net https:\/\/c.statcounter.com https:\/\/js.zi-scripts.com https:\/\/bzr.openai.com https:\/\/www.googleadservices.com https:\/\/api.hubapi.com https:\/\/ibc-flow.techtarget.com https:\/\/api.company-target.com https:\/\/tag-logger.demandbase.com https:\/\/monitor.clickcease.com https:\/\/analytics.twitter.com https:\/\/t.co; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/tierpoint.my.site.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/view.vzaar.com https:\/\/fast.wistia.net https:\/\/www.google.com https:\/\/td.doubleclick.net https:\/\/s.company-target.com; media-src 'self' https:\/\/www.tierpoint.com; report-uri https:\/\/o4511936368410624.ingest.us.sentry.io\/api\/4511936396656640\/security\/?sentry_key=4bc2c287105b644e21a2c18b94784d85&sentry_environment=prod&sentry_release=csp-2","count":2},{"content-security-policy-report-only":" object-src https:\/\/players.brightcove.net https:\/\/www.realpage.com https:\/\/s.realpage.com https:\/\/vjs.zencdn.net;img-src * blob: data:; font-src https:\/\/acsbapp.com https:\/\/www.realpage.com https:\/\/s.realpage.com https:\/\/js.qualified.com https:\/\/use.typekit.net https:\/\/fonts.gstatic.com https:\/\/vjs.zencdn.net https:\/\/www.slant.co data:; style-src *.typekit.net https:\/\/www.realpage.com https:\/\/s.realpage.com https:\/\/fonts.googleapis.com https:\/\/www.gstatic.com https:\/\/cdn.jsdelivr.net 'unsafe-inline'; frame-ancestors 'self' *.realpage.com *.seismic.com www.realpagelearning.com *.yieldstar.com *.mpfyieldstar.com; report-to csp-report-only; report-uri https:\/\/cspreports.realpage.com\/api\/reports\/save\/report-only;","count":2},{"content-security-policy-report-only":" default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http:\/\/*.files.wordpress.com wss:\/\/robbreport.com; report-uri https:\/\/pmcuri.report-uri.com\/r\/d\/csp\/reportOnly","count":2},{"content-security-policy-report-only":" form-action *.facebook.com; default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: *.fls.doubleclick.net *.doubleclick.net *.hotjar.com *.hotjar.io wss:\/\/*.hotjar.com *.omtrdc.net *.twitter.com covers.odilo.io *.ads-twitter.com *.facebook.com *.facebook.net cdn.cookielaw.org *.googletagmanager.com *.googleadservices.com online.bancosantander.es a.omappapi.com *.googleapis.com extend.vimeocdn.com t.co adservice.google.com *.linkedin.com *.google-analytics.com *.santanderopenacademy.com *.universia.net fonts.gstatic.com in-automate.sendinblue.com z.omappapi.com api.omappapi.com snap.licdn.com images.findawayworld.com *.tiktok.com privacyportal-de.onetrust.com sibautomation.com use.typekit.net pro-becas-images-s3.s3.eu-west-1.amazonaws.com santander-privacy.my.onetrust.com; frame-ancestors 'self' *.santanderopenacademy.com *.googletagmanager.com; connect-src 'self' cdn.equalweb.com *.universia.net pro-becas-images-s3.s3.eu-west-1.amazonaws.com www.linkedin.com script.hotjar.com img.youtube.com px4.ads.linkedin.com t.co surveystats.hotjar.io analytics.twitter.com www.google.es mboxedge37.tt.omtrdc.net santanderuniversidad.tt.omtrdc.net www.googletagservices.com www.google.ie www.facebook.com cdn.cookielaw.org googleads.g.doubleclick.net stats.g.doubleclick.net www.google.com pagead2.googlesyndication.com *.analytics.google.com vc.hotjar.io metrics.hotjar.io wss:\/\/ws.hotjar.com ws.hotjar.com content.hotjar.io *.google-analytics.com px.ads.linkedin.com analytics.tiktok.com *.pangle-ads.com *.omappapi.com *.vimeo.com *.santanderopenacademy.com *.googlesyndication.com *.onetrust.com *.tiktokw.us sc-static.net *.sc-static.net snapchat.com *.snapchat.com onetrust.com *.onetrust.com omtrdc.net *.omtrdc.net analytics.google.com *.google.com *.adoberesources.net adoberesources.net *.adobedc.net adobedc.net *.demdex.net demdex.net; font-src 'self' script.hotjar.com fonts.gstatic.com data:; frame-src 'self' www.youtube.com www.google.com *.doubleclick.net track.adform.net www.facebook.com *.universia.net universia.net *.santanderopenacademy.com *.vimeo.com doubleclick.net *.doubleclick.net; img-src 'self' data: *.santanderopenacademy.com *.santanderx.com dss.hybrid.ai su-commons-documents.s3.eu-west-1.amazonaws.com pro-becas-images-s3.s3.eu-west-1.amazonaws.com i.ytimg.com non-productive-alfred-s3.s3.eu-west-1.amazonaws.com *.universia.net img.youtube.com cdn.cookielaw.org www.facebook.com fonts.gstatic.com www.google.ie www.google.com www.google.es *.googletagmanager.com *.google-analytics.com px.ads.linkedin.com px4.ads.linkedin.com t.co analytics.twitter.com covers.odilo.io images.findawayworld.com *.doubleclick.net *.odilotk.es *.googlesyndication.com snapchat.com *.snapchat.com; manifest-src 'self'; media-src 'self' data: *.santanderopenacademy.com *.santanderx.com; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' emd.hybrid.ai *.hybrid.ai pixel.wp.pl www.google.com 'sha256-YSegCmpoY\/9vy6z9Jp\/wY5F+2CZOSO85IpkqRDamw6o=' 'sha256-8UQUF8T5SdG0xN7U0SziZK\/tE7Mx20WlIEvrhPZS+5c=' 'sha256-ZC4Ihfl+1sv3E25DQh090ITQKwffxiocyA9C1vaePKU=' 'sha256-y+EdpRp7NGzuxDREjdSGXuM2ZRxY\/zPRIps6hzHQOcU=' 'sha256-ZC4Ihfl+1sv3E25DQh090ITQKwffxiocyA9C1vaePKU=' 'sha256-HbtNuErO4Ji0X7sd59L8NfJYuQk3WllCWK3gVuRMpfM=' 'sha256-BBirXJiJdwXRuf4PKdCNfYQLT8mhwGu68gkk2lfCqN8=' 'sha256-9gh4m8bsTLdMvKZ358mYZY2d+f5k+bk+APY\/b3jwy1o=' 'sha256-xeKH9HwGHVm84iWqrxisQix9T08PGSCZTxFIO4+ewWk=' 'sha256-DwzQ63XCPWPBU9VhenPaZeU1L0tiiqJkkaWArzaMA14=' 'sha256-5t573MY7H7LQK71Vf2b+RoOG9NlBxHctIHdMjVPJIE0=' 'sha256-ZxrnaNw21FtNs0hG3ejrGPJWMFqp2c2scn3dGBS7Xtk=' 'sha256-DaJ5+aVVCCwmIoJpsto8Q2FfkqVlML3utJdn4mDMGD0=' 'sha256-Fj\/OzUbSCuycXsQO3rkxgJpOQcr0O4grKcZDUi0FIiU=' 'sha256-L89rOqVn3e1Yeav7YFzFH7bxGr1IyHtjhNxYvrcVL4E=' 'sha256-g2T0Peh4PkAjcTj+CFHeM0y83Uuh+6W\/+Ay4nUyncSo=' 'sha256-BpTz1JC47PMe4NhdM7n0gmuvr+83Jo3c+LLXav8o+Wc=' 'sha256-+i46atGTJGrevoy\/LaA\/uxqfIvacu6J\/34f4LYs4FLU=' 'sha256-NW1gvrymt4M+SBgRpB7GKpbvkiAcBF120jBugIgwTkY=' 'sha256-TCOS0LXlyOYGx+xlpfAYkRxyaOiYLTlRzHwI0YQSm3Q=' 'sha256-XdoX181xfRJT12LmChyU6l4zxvoIsaAHf4FxTHoJM+I=' 'sha256-NKT4ofJEPzU1gDi1WITFInJvz8potrsIe5i+LSnCKqo=' 'sha256-w6kdg\/3YV4tBVkaDe4i2aktYPtaPLEHNIGHKOXJ7aZI=' 'sha256-7OI\/iFnRHuxJU3EbXDhDFX6g3cZ0C1I8U6VTbbk7bPw=' 'sha256-VY8NVZZ8EZKkngWGPFlpnC0jlPPS4naDQeeIKqLpgUU=' 'sha256-3ThNsno0lln5H88qDcBDPljNxQaOgkPiulXpM\/OsV1s=' 'sha256-8N1I80yqbb8\/sRov2zmhZf1nwe9Hd8PifhnSJaDP664=' 'sha256-LG4xcV34tsaAdFNYuH8Lr84Ovn0ZnSV2GoIA+TiLP5s=' 'sha256-y36RoFUJWgc8gbl\/5Pk2\/0bsYv2bJ+bMa8Y4LV\/Wz\/k=' 'sha256-IgMQOOOedQeMPBl7lSreMVPmJvU62bc6l8HcsGXnbWc=' 'sha256-3FPxyKucOIUnwkis1jUlVWeg63ttBCdsnPZ7d1\/U9vQ=' 'sha256-lBxE5qVCAIfADFr1+pdyVxAP7I\/YVviosUAsCf3pZtU=' 'sha256-3iXpidN34sHSaOL+oY8lqqkqIs8qgMSZmmFOyyyJq5o=' 'sha256-TZjz12EnkJLarfuyWy8NqZ9HG8RpIuFAlQySbT4\/4h8=' 'sha256-Y4y\/Z3pJNei7wFfh20klvIrbZiajvE\/JWO1KhI668Xo=' 'sha256-LigV2Z6\/JVA57qW0q8wSx849ylkhI35JZTPqGObl9ks=' 'sha256-83sIN1kEH+EziQHRTaQiSWImOUtv0wFFfa74npfXyoE=' 'sha256-BMIPp0uCJPYMdHFyQdug09fBOv1yC4c3ATQ5HIB8lnU=' 'sha256-mkZ77JgvPSMOW\/FuYQr4tf+Z2qIq0e\/ozaNEcVp9eyc=' cdn.jsdelivr.net cdn.equalweb.com code.jquery.com track.adform.net s2.adform.net www.googletagservices.com cdn.cookielaw.org googleads.g.doubleclick.net connect.facebook.net static.hotjar.com metrics.hotjar.io script.hotjar.com *.googletagmanager.com *.google-analytics.com snap.licdn.com static.ads-twitter.com analytics.tiktok.com *.googleapis.com pro-becas-images-s3.s3.eu-west-1.amazonaws.com *.gstatic.com *.omappapi.com *.googleadservices.com *.santanderopenacademy.com *.googlesyndication.com sc-static.net *.sc-static.net snapchat.com *.snapchat.com onetrust.com *.onetrust.com omtrdc.net *.omtrdc.net analytics.google.com *.google.com *.adoberesources.net adoberesources.net *.adobedc.net adobedc.net *.demdex.net demdex.net st.hybrid.ai; style-src 'self' 'unsafe-inline' stackpath.bootstrapcdn.com *.googletagmanager.com fonts.googleapis.com *.omappapi.com; worker-src *.universia.net","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/themes.googleusercontent.com\/ https:\/\/apps.geodan.nl https:\/\/acc.apps.geodan.nl https:\/\/platform.twitter.com\/ https:\/\/syndication.twitter.com\/ http:\/\/www.rovid.nl https:\/\/geodata.rivm.nl https:\/\/statistiek.rijksoverheid.nl https:\/\/mebi.rivm.nl https:\/\/cstm.rivm.nl\/ https:\/\/cgl-web-api.rivm.nl\/ https:\/\/acceptatie-cgl-web-api.rivm.nl\/ https:\/\/data.rivm.nl\/ https:\/\/chemkap.rivm.nl https:\/\/app.powerbi.com\/ https:\/\/api.pdok.nl\/; script-src 'self' 'unsafe-inline' 'unsafe-eval'  *.mopinion.com https:\/\/statistiek.rijksoverheid.nl http:\/\/platform.twitter.com\/ https:\/\/cdn.syndication.twimg.com https:\/\/mebi.rivm.nl https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cstm.rivm.nl\/ https:\/\/cgl-web-api.rivm.nl\/ https:\/\/acceptatie-cgl-web-api.rivm.nl\/ https:\/\/data.rivm.nl\/  https:\/\/apps.rivm.nl https:\/\/chemkap.rivm.nl https:\/\/*.mopinion.com https:\/\/api.pdok.nl\/ https:\/\/collect.mopinion.com https:\/\/cacheorcheck.mopinion.com https:\/\/w.usabilla.com\/; object-src https:\/\/cstm.rivm.nl\/ https:\/\/cgl-web-api.rivm.nl\/ https:\/\/acceptatie-cgl-web-api.rivm.nl\/ https:\/\/app.powerbi.com\/ https:\/\/api.pdok.nl\/; style-src 'self' 'unsafe-inline'  *.mopinion.com https:\/\/platform.twitter.com\/ https:\/\/ton.twimg.com\/ https:\/\/mebi.rivm.nl https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cstm.rivm.nl\/ https:\/\/cgl-web-api.rivm.nl\/ https:\/\/acceptatie-cgl-web-api.rivm.nl\/ https:\/\/*.mopinion.com https:\/\/data.rivm.nl\/ https:\/\/api.pdok.nl\/ https:\/\/collect.mopinion.com https:\/\/cacheorcheck.mopinion.com; img-src 'self' https:\/\/rivm.nl\/ https:\/\/*.rivm.nl\/ *.mopinion.com https:\/\/statistiek.rijksoverheid.nl\/ https:\/\/geodata.nationaalgeoregister.nl\/ https:\/\/syndication.twitter.com\/ https:\/\/pbs.twimg.com\/ https:\/\/ton.twimg.com\/ https:\/\/abs.twimg.com\/ https:\/\/platform.twitter.com\/ http:\/\/abs.twimg.com\/ http:\/\/www.rovid.nl https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cstm.rivm.nl\/ https:\/\/cgl-web-api.rivm.nl\/ https:\/\/acceptatie-cgl-web-api.rivm.nl\/  https:\/\/service.pdok.nl\/ https:\/\/data.rivm.nl\/  https:\/\/*.openstreetmap.org\/ https:\/\/chemkap.rivm.nl https:\/\/api.pdok.nl\/; frame-src 'self' https:\/\/cibrapportage.rivm.nl https:\/\/esp-ext.rivm.nl https:\/\/login-ext.rivm.nl https:\/\/chemkap.rivm.nl https:\/\/www.infectieradar.nl https:\/\/app.powerbi.com https:\/\/api.pdok.nl\/ https:\/\/apps.rivm.nl\/ https:\/\/sterftecijfers.rivm.nl; frame-ancestors 'self' https:\/\/www.atlasleefomgeving.nl https:\/\/*.gezondeleefomgeving.nl https:\/\/*.woondossier.nl https:\/\/roosendaal.incijfers.nl https:\/\/*.nhnieuws.nl https:\/\/chemkap.rivm.nl https:\/\/www.infectieradar.nl https:\/\/api.pdok.nl; child-src https:\/\/cstm.rivm.nl\/ https:\/\/cgl-web-api.rivm.nl\/ https:\/\/acceptatie-cgl-web-api.rivm.nl\/ https:\/\/data.rivm.nl\/  https:\/\/app.powerbi.com https:\/\/api.pdok.nl\/; font-src 'self' https:\/\/rivm.nl\/ *.mopinion.com https:\/\/*.rivm.nl\/ https:\/\/themes.googleusercontent.com\/ https:\/\/cstm.rivm.nl\/ https:\/\/*.mopinion.com https:\/\/cgl-web-api.rivm.nl\/ https:\/\/acceptatie-cgl-web-api.rivm.nl\/ https:\/\/data.rivm.nl\/ https:\/\/api.pdok.nl\/; connect-src 'self' *.mopinion.com https:\/\/data.rivm.nl https:\/\/mebi.rivm.nl\/ https:\/\/statistiek.rijksoverheid.nl\/ https:\/\/statistiek.rijksoverheid.nl\/* https:\/\/cstm.rivm.nl\/ https:\/\/cstm.rivm.nl\/* https:\/\/cgl-web-api.rivm.nl\/ https:\/\/acceptatie-cgl-web-api.rivm.nl\/ https:\/\/acc-api.rivm.nl https:\/\/api.rivm.nl\/ https:\/\/api.pdok.nl\/* https:\/\/*.mopinion.com https:\/\/api.pdok.nl; report-uri \/report-csp-violation","count":2},{"content-security-policy-report-only":" frame-src 'self' accounts.firefox.com gtm.mozilla.org js.stripe.com www.google-analytics.com www.googletagmanager.com www.youtube.com; style-src 'self' 'unsafe-inline' cdn.transcend.io transcend-cdn.com www.mozilla.org; media-src 'self' assets.mozilla.net videos.cdn.mozilla.net www.mozilla.org; font-src 'self' www.mozilla.org; img-src 'self' blog.mozilla.org data: images.ctfassets.net www.google-analytics.com www.googletagmanager.com www.mozilla.org; frame-ancestors 'none'; default-src 'self' *.mozilla.org; connect-src 'self' *.analytics.google.com *.google-analytics.com *.googletagmanager.com analytics.google.com cdn.transcend.io google-analytics.com googletagmanager.com gtm.mozilla.org https:\/\/abdri3ttkb.execute-api.us-east-2.amazonaws.com https:\/\/accounts.firefox.com\/ https:\/\/basket.mozilla.org o1069899.ingest.sentry.io o1069899.sentry.io region1.google-analytics.com telemetry.transcend.io telemetry.us.transcend.io transcend-cdn.com www.mozilla.org\/submit\/bedrock\/; form-action 'self' https:\/\/abdri3ttkb.execute-api.us-east-2.amazonaws.com https:\/\/accounts.firefox.com\/ https:\/\/basket.mozilla.org; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google-analytics.com *.googletagmanager.com cdn.transcend.io google-analytics.com googletagmanager.com js.stripe.com s.ytimg.com tagmanager.google.com transcend-cdn.com www.mozilla.org www.youtube.com; object-src 'none'; upgrade-insecure-requests; base-uri 'none'","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' sat.plus500.com 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com cdn.cookielaw.org dev.visualwebsiteoptimizer.com cdn.taboola.com trc.taboola.com www.googleadservices.com cdn.livechatinc.com static.zdassets.com cdn-main.plus500.com rum-static.pingdom.net pagead2.googlesyndication.com vjs.zencdn.net core.spreedly.com www.google.com *.checkout.com *.klarnacdn.net b98.yahoo.co.jp unpkg.com static.cloudflareinsights.com sdk.getlimy.ai c.amazon-adsystem.com; style-src 'self' sat.plus500.com fonts.googleapis.com 'unsafe-inline' cdn-main.plus500.com www.gstatic.com; img-src 'self' region1.analytics.google.com www.google.bg cdn-main.plus500.com www.facebook.com trkn.us images.ctfassets.net plus5001705310504.zendesk.com www.google-analytics.com data: *.doubleclick.net www.googletagmanager.com play.google.com tools.applemediaservices.com toolbox.marketingtools.apple.com cdn.cookielaw.org dev.visualwebsiteoptimizer.com www.googleadservices.com www.google.com www.google.co.il analytics.plus500.com analytics.google.com cdn.plus500.com cdn.plus500.com region1.google-analytics.com googleads.g.doubleclick.net www.google.co.jp static.plus500.com quality.text.com p28.zdusercontent.com www.google.co.uk www.google.com.sg ade.googlesyndication.com metrics.brightcove.com cf-images.us-east-1.prod.boltdns.net trc.taboola.com www.google.be fonts.gstatic.com https:\/\/*.google.nl www.google.com.au i.liadm.com b99.yahoo.co.jp conv.fout.jp sync.taboola.com analytics.twitter.com t.co chat.google.com lh3.googleusercontent.com i.imgur.com t4.ftcdn.net www.google.co.id www.google.de sslwidget.criteo.com www.google.co.ke www.google.co.th i.ytimg.com login.dotomi.com x.klarnacdn.net placehold.co www.google.ch www.google.ca b98.yahoo.co.jp sp.analytics.yahoo.com www.google.dk sat.plus500.com www.google.cz www.google.com.uy www.google.pt www.google.ae www.google.pl www.google.lt www.google.at www.google.it www.google.kw www.google.ee www.google.et www.google.ro www.google.hu www.google.ar www.google.co.za www.google.al www.google.com.hk www.google.lv www.google.co.in www.google.fr translate.google.com www.google.ru www.google.com.cy www.google.no www.google.md www.google.mk www.google.co.nz www.google.ps www.google.es www.google.si www.google.sk www.google.com.qa www.google.se www.google.cl www.google.pk www.google.kg www.google.com.br www.google.com.sa www.google.com.tw www.google.rs www.google.com.co www.google.com.mt www.google.fi www.google.com.pk www.google.com.mx ipavatarbucket.s3.eu-central-1.amazonaws.com www.google.ba www.google.com.bh www.google.com.pa www.plus500.com www.google.com.ar www.google.com.eg www.google.com.kw www.google.co.ma www.google.com.om www.google.jo www.google.com.my www.google.dz www.google.com.do www.google.ne www.google.com.lb www.google.mv cdn.honey.io www.google.co.tz www.google.mu www.google.cd www.google.com.tr www.google.com.ec www.google.co.cr www.google.com.ua www.google.co.ug www.google.me www.google.com.et www.google.sc plus500.zendesk.com www.google.com.af www.google.lu www.google.com.ph www.google.com.ng www.google.com.pr www.google.td www.google.com.pe www.google.co.kr www.google.com.bd stats.g.doubleclick.net ad.doubleclick.net www.google.com.mm blob: www.google.cm www.google.com.vn www.google.tn c.clarity.ms tr.line.me bat.bing.com www.google.com.ly www.gravatar.com www.google.sn www.google.ml www.google.cf www.google.com.bo www.google.az www.google.kz www.google.ga www.google.sr www.google.com.sl www.google.com.sv www.google.by www.google.co.uz www.google.ci fastly-signed-us-east-1-prod.brightcovecdn.com www.google.mn adlc-exchange.toast.com www.google.tm www.google.rw osm.klarnaservices.com mgln.ai yastatic.net; font-src 'self' sat.plus500.com cdn-main.plus500.com fonts.gstatic.com data: cdn.scite.ai ms-browser-extension: static.shopback.com frontend-cdn.perplexity.ai; connect-src 'self' sat.plus500.com https:\/\/*.google.ad https:\/\/*.google.ae https:\/\/*.google.al https:\/\/*.google.am https:\/\/*.google.as https:\/\/*.google.at https:\/\/*.google.az https:\/\/*.google.ba https:\/\/*.google.be https:\/\/*.google.bf https:\/\/*.google.bg https:\/\/*.google.bi https:\/\/*.google.bj https:\/\/*.google.bs https:\/\/*.google.bt https:\/\/*.google.by https:\/\/*.google.ca https:\/\/*.google.cat https:\/\/*.google.cd https:\/\/*.google.cf https:\/\/*.google.cg https:\/\/*.google.ch https:\/\/*.google.ci https:\/\/*.google.cl https:\/\/*.google.cm https:\/\/*.google.cn https:\/\/*.google.co.ao https:\/\/*.google.co.bw https:\/\/*.google.co.ck https:\/\/*.google.co.cr https:\/\/*.google.co.id https:\/\/*.google.co.il https:\/\/*.google.co.in https:\/\/*.google.co.jp https:\/\/*.google.co.ke https:\/\/*.google.co.kr https:\/\/*.google.co.ls https:\/\/*.google.co.ma https:\/\/*.google.co.mz https:\/\/*.google.co.nz https:\/\/*.google.co.th https:\/\/*.google.co.tz https:\/\/*.google.co.ug https:\/\/*.google.co.uk https:\/\/*.google.co.uz https:\/\/*.google.co.ve https:\/\/*.google.co.vi https:\/\/*.google.co.za https:\/\/*.google.co.zm https:\/\/*.google.co.zw https:\/\/*.google.com https:\/\/*.google.com.af https:\/\/*.google.com.ag https:\/\/*.google.com.ar https:\/\/*.google.com.au https:\/\/*.google.com.bd https:\/\/*.google.com.bh https:\/\/*.google.com.bn https:\/\/*.google.com.bo https:\/\/*.google.com.br https:\/\/*.google.com.bz https:\/\/*.google.com.co https:\/\/*.google.com.cu https:\/\/*.google.com.cy https:\/\/*.google.com.do https:\/\/*.google.com.ec https:\/\/*.google.com.eg https:\/\/*.google.com.et https:\/\/*.google.com.fj https:\/\/*.google.com.gh https:\/\/*.google.com.gi https:\/\/*.google.com.gt https:\/\/*.google.com.hk https:\/\/*.google.com.jm https:\/\/*.google.com.kh https:\/\/*.google.com.kw https:\/\/*.google.com.lb https:\/\/*.google.com.ly https:\/\/*.google.com.mm https:\/\/*.google.com.mt https:\/\/*.google.com.mx https:\/\/*.google.com.my https:\/\/*.google.com.na https:\/\/*.google.com.ng https:\/\/*.google.com.ni https:\/\/*.google.com.np https:\/\/*.google.com.om https:\/\/*.google.com.pa https:\/\/*.google.com.pe https:\/\/*.google.com.pg https:\/\/*.google.com.ph https:\/\/*.google.com.pk https:\/\/*.google.com.pr https:\/\/*.google.com.py https:\/\/*.google.com.qa https:\/\/*.google.com.sa https:\/\/*.google.com.sb https:\/\/*.google.com.sg https:\/\/*.google.com.sl https:\/\/*.google.com.sv https:\/\/*.google.com.tj https:\/\/*.google.com.tr https:\/\/*.google.com.tw https:\/\/*.google.com.ua https:\/\/*.google.com.uy https:\/\/*.google.com.vc https:\/\/*.google.cv https:\/\/*.google.com.vn https:\/\/*.google.cz https:\/\/*.google.de https:\/\/*.google.dj https:\/\/*.google.dk https:\/\/*.google.dm https:\/\/*.google.dz https:\/\/*.google.ee https:\/\/*.google.es https:\/\/*.google.fi https:\/\/*.google.fm https:\/\/*.google.fr https:\/\/*.google.ga https:\/\/*.google.ge https:\/\/*.google.gg https:\/\/*.google.gl https:\/\/*.google.gm https:\/\/*.google.gr https:\/\/*.google.gy https:\/\/*.google.hn https:\/\/*.google.hr https:\/\/*.google.ht https:\/\/*.google.hu https:\/\/*.google.ie https:\/\/*.google.im https:\/\/*.google.iq https:\/\/*.google.is https:\/\/*.google.it https:\/\/*.google.je https:\/\/*.google.jo https:\/\/*.google.kg https:\/\/*.google.ki https:\/\/*.google.kz https:\/\/*.google.la https:\/\/*.google.li https:\/\/*.google.lk https:\/\/*.google.lt https:\/\/*.google.lu https:\/\/*.google.lv https:\/\/*.google.md https:\/\/*.google.me https:\/\/*.google.mg https:\/\/*.google.mk https:\/\/*.google.ml https:\/\/*.google.mn https:\/\/*.google.mu https:\/\/*.google.mv https:\/\/*.google.mw https:\/\/*.google.ne https:\/\/*.google.nl https:\/\/*.google.no https:\/\/*.google.nr https:\/\/*.google.nu https:\/\/*.google.pl https:\/\/*.google.pn https:\/\/*.google.ps https:\/\/*.google.pt https:\/\/*.google.ro https:\/\/*.google.rs https:\/\/*.google.ru https:\/\/*.google.rw https:\/\/*.google.sc https:\/\/*.google.se https:\/\/*.google.sh https:\/\/*.google.si https:\/\/*.google.sk https:\/\/*.google.sm https:\/\/*.google.sn https:\/\/*.google.so https:\/\/*.google.sr https:\/\/*.google.st https:\/\/*.google.td https:\/\/*.google.tg https:\/\/*.google.tl https:\/\/*.google.tm https:\/\/*.google.tn https:\/\/*.google.to https:\/\/*.google.tt https:\/\/*.google.vu https:\/\/*.google.ws https:\/\/google.com rum-collector-2.pingdom.net s.amazon-adsystem.com ara.paa-reporting-advertising.amazon wss:\/\/pod-28-sunco-ws.zendesk.com *.google-analytics.com cdn.cookielaw.org dev.visualwebsiteoptimizer.com geolocation.onetrust.com *.taboola.com analytics.plus500.com server-side-tagging-6hznhch7oa-uc.a.run.app analytics.google.com www.googleadservices.com adservice.google.com ad.doubleclick.net www.google.com privacyportal-de.onetrust.com ekr.zdassets.com plus5001705310504.zendesk.com core.spreedly.com cdn-b.checkouttools.com www.facebook.com cdn-main.plus500.com data: cdn.plus500.com www.googletagmanager.com psb.taboola.com cds.taboola.com www.google-analytics.com house-fastly-signed-us-east-1-prod.brightcovecdn.com edge.api.brightcove.com dotsub.com manifest.prod.boltdns.net region1.analytics.google.com region1.google-analytics.com pagead2.googlesyndication.com zendesk-eu.my.sentry.io o0rmue7xt0.execute-api.il-central-1.amazonaws.com c.amazon-adsystem.com cdn.plus500.com stats.g.doubleclick.net analytics.plus500.com apm.yahoo.co.jp googleads.g.doubleclick.net aax-eu.amazon-adsystem.com eu.playground.klarnaevt.com js.playground.klarna.com x.klarnacdn.net analytics.getlimy.ai sdk.getlimy.ai dm.slim02.jp pci.browser-intake-datadoghq.com api.checkouttools.com o4507427284123728.ingest.de.sentry.io https:\/\/us.plus500.com us.plus500.com\/ us.plus500.com chat.google.com gjtrack.ucweb.com plugin.ucads.ucweb.com metrics-dre.dt.dbankcloud.cn eu.klarnaevt.com js.klarna.com plus500.zendesk.com wss:\/\/plus500.zendesk.com px.wpk.quark.cn safesearchinc.com insight.adsrvr.org x.clarity.ms asia.creativecdn.com sp-trk.com statsdata.online gadstat.com singleview.site fonts.googleapis.com connect.facebook.net tstats.online motramby.com api.video-adblock.com api.killadsapi.com clientstream.launchdarkly.com getnuvio.org navrix.art overbridgenet.com mpc2-prod-25-is5qnl632q-wl.a.run.app; frame-src 'self' www.google.com www.youtube.com *.doubleclick.net dev.visualwebsiteoptimizer.com www.googletagmanager.com server-side-tagging-6hznhch7oa-uc.a.run.app analytics.plus500.com widget.trustpilot.com core.spreedly.com test-3ds.seglan.com tsdtocl.com s.amazon-adsystem.com 'unsafe-inline' data: analytics.plus500.com login.playground.klarna.com blob: js.playground.klarna.com www.facebook.com 3ds.checkouttools.com ndm-prev.3dss-non-prod.cloud.netcetera.com m.youtube.com us.plus500.com\/ us.plus500.com https:\/\/us.plus500.com app.plus500.com www.securesuite.co.uk acs2.estcard.ee players.brightcove.net 3ds.redsys.es x3d-redirect.credorax.net 3ds.nexigroup.com netfree.link www.rsa3dsauth.co.uk apis.redsys.es cdn-b.checkouttools.com 3ds4.nexigroup.com clients.smartsecure.tsys.co.uk:446 tsys.arcot.com 3ds1.nexigroup.com acs.revolut.com js.klarna.com secure7.arcot.com authentication.cardinalcommerce.com secure5.arcot.com methodurl.vcas.visa.com 3ds2.seglan.com idprotect.trendmicro.com pwm-image.trendmicro.com from 'www.cimbsecuree-pay.com.sg profiling.infinitium.com 8307440.fls.doubleclick.net.x.f13dd67f07186040440ad4300104e78ff0ed.d045213f.id.opendns.com block.opendns.com acs.luminorgroup.com acs.edb.com acs2p.gpesecure.com channel-cards-html.lloydsbankinggroup.com acs2.rba.hr 3ds.ntctr.acs.danskebank.com secure4.arcot.com 3ds.borica.bg acs.3ds.modirum.com 3dsecure.s-id-check-sparkassen.de jp-epoch.plus500.com hipodi.com 10.43.200.162:15871 match.adsrvr.org um.ladsp.com fw.koch-felix.de:8090 8307440.fls.doubleclick.net.x.f58fd3ed01f6304b1d084fe0fe26d65e9591.43d75327.id.opendns.com acs.swedbank.se acs.3dsecure.no secure.dkb.de pay.eewosecure.com 3dsmethod.eewosecure.com plus500.zendesk.com lsrelay-config-production.s3.amazonaws.com mc-id-check.firstdata.de verify.monzo.com bcsgsrv.com bezpecneplatby.rb.cz 3ds-sa.rpc-raiffeisen.com german-3ds-bxl.wlp-acs.com userapi2.danskebank.com uobs3dsg2.uobgroup.com danskebank.mitid.dk shared-logon.danskebank.com 3ds-challenge.n26.com clients.smartsecure.tsys.co.uk acs.netsgroup.com acs3.swedbank.se dpcgicloud.netsweeper.com secure2.arcot.com safesearchinc.com ecclients.btrl.ro gum.criteo.com ssl-prd-u5g-fo-acs-3dsm.wlp-acs.com; style-src-attr 'self' 'unsafe-inline' 'unsafe-hashes' cdn-main.plus500.com; style-src-elem 'self' cdn-main.plus500.com fonts.googleapis.com 'unsafe-inline' rum-static.pingdom.net core.spreedly.com sat.plus500.com pagead2.googlesyndication.com vjs.zencdn.net www.googletagmanager.com www.gstatic.com data: cdn.honey.io gc.kis.v2.scr.kaspersky-labs.com bak.res.qq.com adblockers.opera-mini.net me.kis.v2.scr.kaspersky-labs.com ff.kis.v2.scr.kaspersky-labs.com; script-src-elem 'self' rum-static.pingdom.net cdn-main.plus500.com www.google.com www.gstatic.com api.livechatinc.com connect.facebook.net c.amazon-adsystem.com pod-28-sunco-ws.zendesk.com 7a6ff7cc0a9ac6dc.endpoint.cloud.text.com www.googletagmanager.com 'unsafe-eval' 'unsafe-inline' cdn.cookielaw.org dev.visualwebsiteoptimizer.com cdn.taboola.com trc.taboola.com www.googleadservices.com static.zdassets.com cdn.livechatinc.com sat.plus500.com plugins.spreedly.com www.datadoghq-browser-agent.com marketingcomponents.plus500.com unpkg.com www.youtube.com players.brightcove.net pagead2.googlesyndication.com vjs.zencdn.net core.spreedly.com www.plus500.com *.klarnacdn.net *.checkout.com googleads.g.doubleclick.net static.ads-twitter.com static.cloudflareinsights.com js.fout.jp s.yimg.jp b99.yahoo.co.jp sdk.getlimy.ai netfree.link us-assets.i.posthog.com appassets.androidplatform.net wfapi.internal.netfree.link code.highcharts.com plus500.zendesk.com gc.kis.v2.scr.kaspersky-labs.com g.alicdn.com blob: bat.bing.com analytics.tiktok.com px.ladsp.com scripts.clarity.ms d.line-scdn.net tag.ladsp.com ad.atown.jp js.adsrvr.org lottingem.com app-vault-static.intl.miui.com nutrifunc.com us.plus500.com me.kis.v2.scr.kaspersky-labs.com ff.kis.v2.scr.kaspersky-labs.com infird.com sslwidget.criteo.com pp.d2-apps.net cdn.d2-apps.net dynamic.criteo.com; object-src 'self'; worker-src 'self' blob:; media-src 'self' static.zdassets.com blob: manifest.prod.boltdns.net dotsub.com cdn.plus500.com; manifest-src 'self'; form-action 'self' dev.visualwebsiteoptimizer.com test-3ds.seglan.com core.spreedly.com 3dsn.sandbox.safecharge.com www.facebook.com ndm-prev.3dss-non-prod.cloud.netcetera.com www.rsa3dsauth.co.uk www.securesuite.co.uk 3ds1.nexigroup.com secure7.arcot.com pay.eewosecure.com www.cimbsecuree-pay.com.sg profiling.infinitium.com 3ds.redsys.es authentication.cardinalcommerce.com acs.revolut.com methodurl.vcas.visa.com acs1.swedbank.se secure5.arcot.com 3ds.pkobp.pl 3ds.nexigroup.com mdpay.fibank.bg tsys.arcot.com secure4.arcot.com uobs3dsg2.uobgroup.com clients.smartsecure.tsys.co.uk clients.smartsecure.tsys.co.uk:446 verify.monzo.com betalen.rabobank.nl secure2.arcot.com; base-uri 'self'; sandbox 'self' us.plus500.com us.plus500.com\/ https:\/\/us.plus500.com;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests;","count":2},{"content-security-policy-report-only":" default-src 'self';connect-src 'self' https:\/\/analytics.majestic.com https:\/\/analytics.majesticseo.com https:\/\/*.google-analytics.com https:\/\/*.g.doubleclick.net https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/analytics.majesticseo.com https:\/\/analytics.majestic.com https:\/\/info.majestic.com https:\/\/*.googletagmanager.com www.google-analytics.com https:\/\/www.googleadservices.com\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/platform.twitter.com\/ https:\/\/challenges.cloudflare.com;style-src 'self' 'unsafe-inline';img-src 'self' data: https:;font-src 'none';object-src 'none';media-src 'none';frame-src www.openstreetmap.org www.youtube.com https:\/\/www.youtube-nocookie.com\/ https:\/\/player.vimeo.com\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/platform.twitter.com\/ https:\/\/player.captivate.fm\/ https:\/\/syndication.twitter.com\/ https:\/\/challenges.cloudflare.com;child-src www.openstreetmap.org www.youtube.com https:\/\/www.google.com\/recaptcha\/ https:\/\/platform.twitter.com\/ https:\/\/syndication.twitter.com\/;frame-ancestors https:\/\/docs.google.com https:\/\/*.googleusercontent.com;report-uri \/csp\/report;report-to report-endpoint","count":2},{"content-security-policy-report-only":" default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http:\/\/*.files.wordpress.com wss:\/\/www.artnews.com; report-uri https:\/\/pmcuri.report-uri.com\/r\/d\/csp\/reportOnly","count":2},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: wss:\/\/*.dathost.net https:\/\/*.dathost.net wss:\/\/*.dathost.com https:\/\/*.dathost.com https:\/\/www.googletagmanager.com https:\/\/*.cookieyes.com https:\/\/cdn-cookieyes.com https:\/\/analytics.ahrefs.com https:\/\/widget.trustpilot.com https:\/\/*.clarity.ms https:\/\/c.bing.com\/ https:\/\/beacon-v2.helpscout.net https:\/\/beaconapi.helpscout.net https:\/\/d3hb14vkzrxvla.cloudfront.net https:\/\/d33v4339jhl8k0.cloudfront.net https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/*.js.stripe.com https:\/\/js.stripe.com https:\/\/api.stripe.com https:\/\/hooks.stripe.com https:\/\/maps.googleapis.com https:\/\/*.gravatar.com https:\/\/s3.dathost.net https:\/\/www.paypalobjects.com https:\/\/fonts.gstatic.com https:\/\/media.forgecdn.net https:\/\/avatars.steamstatic.com https:\/\/accounts.google.com https:\/\/challenges.cloudflare.com https:\/\/i.gyazo.com https:\/\/i.imgur.com https:\/\/i.ytimg.com https:\/\/*.youtube.com https:\/\/fonts.googleapis.com https:\/\/use.typekit.net https:\/\/i0.wp.com https:\/\/i1.wp.com https:\/\/i2.wp.com https:\/\/ad.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com; report-uri \/internal-api\/csp-report","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https:; object-src 'self' https:; style-src 'self' data: 'unsafe-inline' https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; frame-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' data: https:;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.wellhub.com *.amplitude.com https:\/\/js.appboycdn.com\/web-sdk\/4.0\/braze.no-amd.min.js https:\/\/widget-mediator.zopim.com https:\/\/js-na1.hs-scripts.com https:\/\/static.zdassets.com https:\/\/sdk.inbenta.io https:\/\/chatbot.backoffice.gympass-staging.com\/chatbot-site-gympass-com.js https:\/\/cdn.optimizely.com https:\/\/maps.googleapis.com https:\/\/x.clearbitjs.com https:\/\/js.hscollectedforms.net https:\/\/connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.google.com cdn.cookielaw.org\/ cdn.segment.com bat.bing.com\/bat.js cdn.jsdelivr.net\/npm\/jquery-validation@1.19.5\/dist\/jquery.validate.min.js cdn.optimizely.com\/js\/ cdn.segment.com\/analytics.js\/ cdnjs.cloudflare.com\/ajax\/libs\/jquery.mask\/1.14.16\/jquery.mask.min.js code.jquery.com\/jquery-3.6.0.min.js connect.facebook.net\/en_US\/fbevents.js googleads.g.doubleclick.net\/pagead\/viewthroughconversion\/ j.6sc.co\/6si.min.js js.driftt.com\/include\/ js.hs-analytics.net\/analytics\/ js.hs-banner.com\/ js.hs-scripts.com\/ js.hsadspixel.net\/fb.js js.hsforms.net\/forms\/v2.js js.hsleadflows.net\/leadflows.js js.usemessages.com\/conversations-embed.js rum-static.pingdom.net\/ s.yimg.com\/wi\/ytc.js script.hotjar.com\/ snap.licdn.com\/li.lms-analytics\/ static.hotjar.com\/c\/ static.hsappstatic.net\/MeetingsEmbed\/ex\/MeetingsEmbedCode.js tag.clearbitscripts.com\/v1\/ tpc.googlesyndication.com\/ unpkg.com\/blip-chat-widget https:\/\/js.qualified.com\/ https:\/\/*.salesloft.com\/ clarity.ms\/tag\/uet\/ *.clarity.ms\/tag\/uet\/ x.clearbitjs.com\/v2\/ https:\/\/s3.amazonaws.com\/raichu-beta\/ https:\/\/static.play.ht\/playht-pageplayer-plugin.js https:\/\/bat.bing.com\/p\/action\/ https:\/\/connect.facebook.net\/signals\/config\/ https:\/\/js.hubspot.com\/web-interactives-embed.js https:\/\/analytics.tiktok.com\/ https:\/\/www.clarity.ms\/s\/ https:\/\/static.xingcdn.com\/xingtrk\/index.js; style-src 'self' 'unsafe-inline' https:\/\/sdk.inbenta.io fonts.googleapis.com https:\/\/www.googletagmanager.com\/ https:\/\/s3.amazonaws.com\/raichu-beta\/ https:\/\/static.play.ht\/playht-pageplayer-plugin.css; object-src 'none'; base-uri 'self'; connect-src 'self' *.wellhub.com https:\/\/app.qualified.com\/ wss:\/\/*.qualified.com https:\/\/unleash-edge-mep.gympass.com https:\/\/unleash-edge-mep.gympass.com\/api\/frontend\/ https:\/\/traces.observability.prd.us.gympass.cloud\/collect https:\/\/ext-otel.mep.prd.us.gympass.cloud\/collect https:\/\/sdk.iad-03.braze.com\/api\/v3\/data cdn.cookielaw.org\/ *.onetrust.com inbenta.io *.inbenta.io https:\/\/api.inbenta.io wss:\/\/widget-mediator.zopim.com https:\/\/zendesk-eu.my.sentry.io *.zendesk.com zendesk.com https:\/\/static.zdassets.com https:\/\/ekr.zdassets.com https:\/\/maps.googleapis.com https:\/\/unlogged.users.gympass-staging.com https:\/\/mpc2-prod-23-is5qnl632q-ue.a.run.app https:\/\/mpc2-prod-1-is5qnl632q-uc.a.run.app https:\/\/analytics-ipv6.tiktokw.us https:\/\/demo-1.conversionsapigateway.com https:\/\/translate.googleapis.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.google.com google.com googleadservices.com https:\/\/www.google.com.br\/ google.com.br googleads.g.doubleclick.net https:\/\/googleads.g.doubleclick.net\/ api.hubapi.com hubspot.com *.hubspot.com api.segment.io app.clearbit.com bat.bing.com cdn.segment.com epsilon.6sense.com *.optimizely.com optimizely.com forms.hsforms.com in.hotjar.com ipv6.6sc.co js.hs-banner.com *.clarity.ms rum-collector-2.pingdom.net s.yimg.com stats.g.doubleclick.net unlogged.users.gympass.com https:\/\/play.ht\/api\/v2\/ https:\/\/places.geo.us-east-1.amazonaws.com https:\/\/*.cloudfront.net https:\/\/px.ads.linkedin.com https:\/\/analytics.tiktok.com\/ api.reclameaqui.com.br https:\/\/browser-intake-datadoghq.com\/api\/v2\/ https:\/\/rum.browser-intake-datadoghq.com\/api\/v2\/ https:\/\/www.facebook.com\/ https:\/\/region1.analytics.google.com\/ wss:\/\/*.hotjar.com\/ https:\/\/*.hotjar.io\/ https:\/\/o4504963224764416.ingest.us.sentry.io\/api\/ https:\/\/www.xing.com\/xas\/api\/tracking_pixel_verification; font-src 'self' data: https:\/\/cdn.inbenta.io fonts.gstatic.com https:\/\/assets-cdn.gympass.com https:\/\/assets-cdn.wellhub.com https:\/\/script.hotjar.com\/ https:\/\/s3.amazonaws.com\/play-plugin\/build\/font https:\/\/js.qualified.com; frame-src 'self' https:\/\/gympass.chat.blip.ai https:\/\/app.qualified.com\/ optimizely.com *.cdn.optimizely.com googleadservices.com bid.g.doubleclick.net forms.hsforms.com js.driftt.com meetings.hubspot.com tpc.googlesyndication.com vars.hotjar.com facebook.com https:\/\/www.facebook.com\/ www.googletagmanager.com\/ https:\/\/www.youtube.com\/ https:\/\/td.doubleclick.net; img-src 'self' data: https:\/\/s3.amazonaws.com\/raichu-beta\/ https:\/\/assets-cdn.gympass-staging.com https:\/\/assets-cdn.gympass.com https:\/\/assets-cdn.wellhub.com https:\/\/images.partners.gympass.com\/ https:\/\/tmp-images.partners.gympass.com\/ https:\/\/p.adsymptotic.com https:\/\/www.googletagmanager.com https:\/\/translate.google.com cdn.cookielaw.org\/ *.inbenta.com inbenta.com https:\/\/gympass-staging-images-us.s3.amazonaws.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/analytics.tiktok.com\/ https:\/\/connect.facebook.net *.clarity.ms\/ cloudfront.net *.cloudfront.net https:\/\/www.google.com\/ads\/ga-audiences https:\/\/www.google.com.br\/ads\/ga-audiences https:\/\/www.google.com\/pagead\/1p-user-list\/ b.6sc.co bat.bing.com https:\/\/c.bing.com\/ forms-na1.hsforms.com forms.hsforms.com googleads.g.doubleclick.net https:\/\/googleads.g.doubleclick.net\/ px.ads.linkedin.com sp.analytics.yahoo.com track.hubspot.com facebook.com https:\/\/www.google-analytics.com google.com google.com.br www.google.com.br https:\/\/www.google.co.uk\/ https:\/\/www.google.com.ar\/ https:\/\/www.google.com.mx\/ https:\/\/www.google.de\/ https:\/\/www.google.es\/ https:\/\/www.google.cl\/ https:\/\/www.google.it\/ https:\/\/www.facebook.com\/ https:\/\/fonts.gstatic.com\/ https:\/\/px4.ads.linkedin.com\/collect https:\/\/www.linkedin.com\/px\/ https:\/\/ads01.groovinads.com\/ https:\/\/perf-na1.hsforms.com\/embed\/v3\/counters.gif; manifest-src 'self'; media-src 'self' https:\/\/static.zdassets.com https:\/\/*.qualified.com; worker-src 'self' *.gympass-staging.com blob:;","count":2},{"content-security-policy-report-only":" default-src 'self' blob: data:; script-src 'self' blob: data: 'unsafe-eval' 'unsafe-inline' 'wasm-eval' https:\/\/cdn.jsdelivr.net https:\/\/*.alicdn.com https:\/\/*.livechatinc.com https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/js.admediasales.com https:\/\/accounts.google.com https:\/\/appleid.cdn-apple.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.geetest.com https:\/\/*.google.com https:\/\/sepolia.drpc.org https:\/\/*.cloudflareinsights.com https:\/\/*.geevisit.com https:\/\/*.adjust.com https:\/\/*.gsensebot.com https:\/\/*.facebook.net https:\/\/*.forter.com https:\/\/*.simplex.com https:\/\/developers.kakao.com https:\/\/*.checkout.com https:\/\/*.twitter.com https:\/\/*.youtube.com https:\/\/*.telegram.org https:\/\/static.zdassets.com https:\/\/*.veriff.com https:\/\/*.veriff.me https:\/\/*.sardine.ai https:\/\/*.worldpay.com https:\/\/*.googleusercontent.com https:\/\/*.g.doubleclick.net https:\/\/ekr.zdassets.com https:\/\/*.zopim.com https:\/\/*.probity.io https:\/\/*.cardinalcommerce.com https:\/\/*.legendtrading.com https:\/\/static.trustdecision.com https:\/\/sdk.moss-risk.com https:\/\/fpnpmcdn.net https:\/\/static.sensorsdata.cn https:\/\/*.rerrkvifj.com https:\/\/telegram.org; style-src 'self' blob: data: 'unsafe-inline' https:\/\/cdn.jsdelivr.net https:\/\/*.alicdn.com https:\/\/fonts.googleapis.com https:\/\/accounts.google.com https:\/\/*.gstatic.com https:\/\/*.geetest.com https:\/\/*.rerrkvifj.com; font-src 'self' blob: data: https:\/\/*.alicdn.com https:\/\/fonts.gstatic.com https:\/\/accounts.google.com https:\/\/cdnjs.cloudflare.com https:\/\/migaku-public-data.migaku.com https:\/\/gw.alipayobjects.com https:\/\/use.typekit.net https:\/\/cdn.jsdelivr.net https:\/\/www.slant.co https:\/\/cdn.scite.ai https:\/\/*.aliyuncs.com https:\/\/cdn.megabonus.com https:\/\/cdn.fastdic.com https:\/\/*.rerrkvifj.com; img-src 'self' blob: data: https: android-webview-video-poster: https:\/\/*.google-analytics.com https:\/\/accounts.google.com https:\/\/*.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/*.geetest.com https:\/\/testqrc.bitgetapp.com; connect-src 'self' blob: data: https:\/\/aladdin.lbkpro.net https:\/\/*.livechatinc.com wss:\/\/*.livechatinc.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/sensors-data-access.lbkwork.com https:\/\/*.forter.com https:\/\/accounts.google.com https:\/\/appleid.cdn-apple.com https:\/\/stats.g.doubleclick.net https:\/\/*.googleapis.com https:\/\/eth.merkle.io https:\/\/region1.google-analytics.com https:\/\/region1.analytics.google.com https:\/\/*.geetest.com https:\/\/cdnjs.cloudflare.com https:\/\/*.alicdn.com https:\/\/binance.llamarpc.com https:\/\/js.admediasales.com https:\/\/track.uc.cn https:\/\/*.google.com https:\/\/gc.kis.v2.scr.kaspersky-labs.com https:\/\/*.oss-cn-hongkong.aliyuncs.com https:\/\/adscool.net https:\/\/api.trongrid.io https:\/\/arb1.arbitrum.io https:\/\/infragrid.v.network https:\/\/eth.llamarpc.com https:\/\/*.hongnuoyy.com https:\/\/*.bitunix.com https:\/\/*.okx.com https:\/\/mainnet.base.org https:\/\/rpc.genesys.network https:\/\/*.adjust.com https:\/\/*.adjust.world https:\/\/eth-mainnet.nodereal.io https:\/\/ethereum-rpc.publicnode.com https:\/\/go.getblock.io https:\/\/www.tradingview.com https:\/\/*.googletagmanager.com https:\/\/siteperformancetest.net https:\/\/wtp.siteperformancetest.net https:\/\/flagcdn.com https:\/\/*.telegram.org https:\/\/mainnet.helius-rpc.com https:\/\/sentry-uit.line-apps.com https:\/\/1rpc.io https:\/\/*.lbktech.com https:\/\/*.lbkwork.com https:\/\/*.lbank.com wss:\/\/*.lbank.com https:\/\/*.rerrkvifj.com wss:\/\/*.rerrkvifj.com https:\/\/*.rrrhhr.com https:\/\/*.ccchch.com wss:\/\/*.zopim.com wss:\/\/*.hotjar.com https:\/\/*.zendesk.com https:\/\/*.veriff.me https:\/\/*.veriff.com https:\/\/*.checkout.com https:\/\/*.sardine.ai https:\/\/*.worldpay.com https:\/\/*.cardinalcommerce.com https:\/\/*.hotjar.com https:\/\/*.googleusercontent.com https:\/\/*.g.doubleclick.net https:\/\/ekr.zdassets.com https:\/\/legendtrading.zendesk.com https:\/\/zendesk-eu.my.sentry.io https:\/\/v2assets.zopim.io https:\/\/*.probity.io https:\/\/*.legendtrading.com https:\/\/static.trustdecision.com https:\/\/sg-fp.apitd.net https:\/\/sdk.moss-risk.com https:\/\/www.turingfraud.net https:\/\/api.moss-lid.com https:\/\/api.fpjs.io https:\/\/*.turingfraud.net wss:\/\/mainnet.helius-rpc.com; worker-src 'self' blob:; frame-src 'self' blob: https:\/\/secure.livechatinc.com https:\/\/tracking.nexxustrk.pro https:\/\/auctera.gotrackier.com https:\/\/www.youtube.com https:\/\/accounts.google.com https:\/\/appleid.cdn-apple.com https:\/\/cdn.jsdelivr.net https:\/\/*.google.com https:\/\/media.openxglobal.com https:\/\/api.sumsub.com https:\/\/social.rockettrack.pro https:\/\/playsala.com https:\/\/data.trckr.pro https:\/\/*.simplex.com https:\/\/*.simplexcc.com https:\/\/risk.checkout.com https:\/\/*.telegram.org https:\/\/*.twitter.com https:\/\/*.youtube.com https:\/\/*.lbank.com https:\/\/*.lbank.zone https:\/\/*.lbktech.com https:\/\/www.lbankwidgets.com https:\/\/*.veriff.me https:\/\/*.veriff.com https:\/\/*.checkout.com https:\/\/*.worldpay.com https:\/\/*.cardinalcommerce.com https:\/\/*.legendtrading.com https:\/\/*.qq.com; object-src 'none'; media-src 'self' blob: data:; base-uri 'self'; form-action 'self' https:\/\/checkout.simplexcc.com https:\/\/centinelapi.cardinalcommerce.com; report-uri \/lbk-api\/apm\/h5\/submit\/csp-report; frame-ancestors 'self' https:\/\/*.telegram.com https:\/\/*.telegram.org;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.googletagmanager.com https:\/\/*.cloudflare.com https:\/\/*.slotor777.com.ua https:\/\/test2.slotor777.com https:\/\/*.clarity.ms https:\/\/r.clarity.ms https:\/\/www.google-analytics.com https:\/\/*.doubleclick.net https:\/\/cdnjs.cloudflare.com https:\/\/pwa.slotor777.com.ua https:\/\/chat.slotor777.com.ua https:\/\/static.cloudflareinsights.com https:\/\/auth.slotor777.com.ua https:\/\/js-agent.newrelic.com https:\/\/connect.facebook.net; script-src-elem 'self' 'unsafe-inline' https:\/\/*.googletagmanager.com https:\/\/*.cloudflare.com https:\/\/*.slotor777.com.ua https:\/\/test2.slotor777.com https:\/\/*.clarity.ms https:\/\/r.clarity.ms https:\/\/www.google-analytics.com https:\/\/*.doubleclick.net https:\/\/cdnjs.cloudflare.com https:\/\/pwa.slotor777.com.ua https:\/\/chat.slotor777.com.ua https:\/\/static.cloudflareinsights.com https:\/\/auth.slotor777.com.ua https:\/\/js-agent.newrelic.com https:\/\/connect.facebook.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/www.gstatic.com; style-src-attr 'self' 'unsafe-inline'; img-src 'self' data: https:\/\/*.google-analytics.com https:\/\/*.doubleclick.net https:\/\/www.google.com.ua https:\/\/www.google.pl https:\/\/www.google.kz https:\/\/test2.slotor777.com https:\/\/*.googletagmanager.com https:\/\/*.cloudflare.com https:\/\/*.slotor777.com.ua https:\/\/*.clarity.ms https:\/\/www.google.com https:\/\/www.google.fr https:\/\/www.facebook.com https:\/\/translate.google.com https:\/\/c.clarity.ms https:\/\/fonts.gstatic.com https:\/\/*.google.cz https:\/\/*.google.co.uk; object-src 'none'; connect-src 'self' https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.analytics.google.com https:\/\/region1.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/*.clarity.ms https:\/\/www.google.com.ua https:\/\/www.google.pl https:\/\/www.google.kz https:\/\/chat.slotor777.com.ua https:\/\/socket.slotor777.com.ua wss:\/\/socket.slotor777.com.ua https:\/\/td.doubleclick.net https:\/\/test2.slotor777.com https:\/\/*.googletagmanager.com https:\/\/www.google.fr https:\/\/www.google.com https:\/\/auth.slotor777.com.ua https:\/\/test2.slotor777.com.ua https:\/\/*.nr-data.net https:\/\/bam.eu01.nr-data.net https:\/\/www.facebook.com https:\/\/google.com https:\/\/www.googleadservices.com; font-src 'self' https:\/\/fonts.gstatic.com; frame-src 'self' https:\/\/chat.slotor777.com.ua https:\/\/dototo.net https:\/\/cdn4.endorphina.network https:\/\/nrgs-b2b-atbr.greentube.com https:\/\/td.doubleclick.net https:\/\/test2.slotor777.com https:\/\/www.google.com https:\/\/www.google.fr https:\/\/auth.slotor777.com.ua https:\/\/*.etr-op-133-adfr1.com https:\/\/www.facebook.com https:\/\/www.googletagmanager.com https:\/\/slotor777ua.games.amusnet.io https:\/\/betman.c4.3oaks.com https:\/\/gameseu.kaga88.com https:\/\/gamelaunch.voltent.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:\/\/slotor777.com.ua\/ru\/finance\/create-payment https:\/\/www.facebook.com; report-uri https:\/\/reporting.slotor777.com.ua\/api\/csp-report;","count":2},{"content-security-policy-report-only":" default-src 'self' *.insight.com *.drift.com *.driftcdn.com *.launchdarkly.com www.googletagmanager.com play.vidyard.com *.aimtell.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.insight.com *.adroll.com *.atgsvcs.com *.custhelp.com *.webcollage.net *.driftt.com *.google.com *.marketo.com *.doubleclick.com *.doubleclick.net *.qualtrics.com assets.adobedtm.com cdn.lr-in-prod.com cdn.pricespider.com munchkin.marketo.net play.vidyard.com s.go-mpulse.net up.pixel.ad use.typekit.net ws.cs.1worldsync.com www.clarity.ms www.google-analytics.com www.googletagmanager.com www.youtube.com apps.bazaarvoice.com static.ads-twitter.com cdn-ukwest.onetrust.com cdn01.basis.net cdns.eu1.gigya.com code.jquery.com content.syndigo.com js.adsrvr.org *.cnetcontentsolutions.com mpsnare.iesnare.com unpkg.com www.googleadservices.com bat.bing.com cdn.cs.1worldsync.com cdn.tt.omtrdc.net connect.facebook.net i.simpli.fi lex.33across.com px.ads.linkedin.com s3.amazonaws.com snap.licdn.com *.hotjar.com t.sellpoints.com tracking.intentsify.io view.ceros.com w.usabilla.com ws.zoominfo.com xiecomm.paymetric.com blob:; style-src 'self' 'unsafe-inline' *.insight.com *.drift.com *.marketo.com code.jquery.com cdn.cs.1worldsync.com fonts.googleapis.com cdn.tt.omtrdc.net; img-src * data:; font-src 'self' data: *.insight.com fonts.gstatic.com use.typekit.net cdn.cs.1worldsync.com insightenterprises.qualtrics.com s.nsit.com svcs.tql.com at.alicdn.com; connect-src 'self' *.akamaihd.net *.clarity.ms *.gigya.com *.google.com *.google-analytics.com *.googlesyndication.com *.insight.com *.launchdarkly.com *.mktoresp.com *.akstat.io *.go-mpulse.net *.onetrust.com insightenterprises.tt.omtrdc.net stats.g.doubleclick.net www.google-analytics.com 366-uky-221.mktoutil.com adservice.google.com bat.bing.com cdn.aimtell.io cdn.linkedin.oribi.io cert-xiecomm.paymetric.com content.syndigo.com dpm.demdex.net et-qalogin.insight.com integration.richrelevance.com r.lr-in-prod.com rules.atgsvcs.com signals.aimtell.com sjrtp2.marketo.com smetrics.insight.com *.bazaarvoice.com ws.zoominfo.com *.adroll.com play.vidyard.com *.richrelevance.com www.facebook.com siteintercept.qualtrics.com *.googletagmanager.com; media-src player.vimeo.com www.youtube.com; object-src *.insight.com; frame-src 'self' *.adsrvr.org pixel.sitescout.com insight.demdex.net js.driftt.com app-abm.marketo.com centinelapistag.cardinalcommerce.com cert-xiecomm.paymetric.com html5-player.libsyn.com insightent.wufoo.com *.insight.com play.vidyard.com view.ceros.com www.youtube.com *.marketo.com *.doubleclick.net *.everestjs.net cbsi.demdex.net www.facebook.com beacon.aimtell.com; report-uri https:\/\/insight.report-uri.com\/r\/t\/csp\/wizard","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/*.googletagmanager.com https:\/\/*.facebook.net https:\/\/*.twitter.com https:\/\/*.cookielaw.org https:\/\/*.cloudflare.com https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/*.google.com https:\/\/*.amazon-adsystem.com https:\/\/*.cloudfront.net https:\/\/secureaddisplay.com https:\/\/cleanmediaadserver.com https:\/\/*.iubenda.com https:\/\/*.hsforms.net https:\/\/*.hs-scripts.com https:\/\/*.tumblr.com https:\/\/vercel.live; style-src 'self' 'unsafe-inline' https:\/\/*.cookielaw.org https:\/\/*.iubenda.com; img-src 'self' data: https:\/\/*.ewtn.com https:\/\/*.cloudinary.com https:\/\/*.gravatar.com https:\/\/*.googletagmanager.com https:\/\/*.cookielaw.org https:\/\/*.iubenda.com; font-src 'self' data:; connect-src 'self' https:\/\/*.posthog.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com https:\/\/*.google-analytics.com https:\/\/*.google.com https:\/\/*.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/*.cloudfront.net https:\/\/*.auth0.com https:\/\/*.iubenda.com https:\/\/*.cookielaw.org https:\/\/*.onetrust.com https:\/\/secureaddisplay.com https:\/\/cleanmediaadserver.com https:\/\/*.amazon-adsystem.com https:\/\/*.ewtn.com https:\/\/*.cloudinary.com https:\/\/*.googletagmanager.com https:\/\/*.cloudflare.com https:\/\/vercel.live; media-src 'self' blob: https:\/\/*.ewtn.com https:\/\/*.googleapis.com; frame-src 'self' https:\/\/disqus.com https:\/\/*.disquscdn.com https:\/\/*.iubenda.com https:\/\/*.youtube.com https:\/\/*.facebook.com https:\/\/*.instagram.com https:\/\/*.tiktok.com https:\/\/*.hubspot.com https:\/\/*.auth0.com https:\/\/*.cloudflare.com https:\/\/vercel.live; worker-src blob:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:\/\/api.hsforms.com; report-uri \/api\/csp-report; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" default-src 'self' *.roche.com *.roche.net *.gene.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.roche.com *.roche.net *.gene.com snap.licdn.com cdn.walkme.com apis.google.com tpc.googlesyndication.com api.html5media.info workdevapp.com cdn-js.net gdata.youtube.com twitter.com geolocation.onetrust.com api.flickr.com graph.facebook.com sharecdn.social9.com maps.googleapis.com use.typekit.com use.typekit.net munchkin.marketo.net img.en25.com w.likebtn.com cdn.mathjax.org sadmin.brightcove.com cdnjs.cloudflare.com releases.flowplayer.org script.crazyegg.com wi.likebtn.com pepperglobal.com analytics.twitter.com cdn.blueconic.net connect.facebook.net fullstory.com script.hotjar.com gnntch.blueconic.net rules.quantcount.com secure.quantserve.com static.hotjar.com www.youtube.com www.googletagmanager.com www.google-analytics.com google-analytics.com *.gstatic.com static.ads-twitter.com sjs.bizographics.com *.linkedin.com www.google.com w.soundcloud.com s.ytimg.com *.cloudflareaccess.com *.salesforceliveagent.com https:\/\/*.roche.com:8080 https:\/\/cdnjs.org https:\/\/service.force.com\/* cdn.cookielaw.org static.cloudflareinsights.com googleads.g.doubleclick.net 7232514.collect.igodigital.com; style-src * 'self' 'unsafe-inline'; img-src * 'self' data:; font-src * 'self' data:; connect-src * 'self'; media-src * 'self' data:; object-src 'self'; child-src 'self' *.roche.com *.roche.net *.gene.com *.facebook.net qpcr.probefinder.com *.force.com *.hotjar.com www.facebook.com www.google.com www.googletagmanager.com www.youtube.com; frame-src 'self' *.roche.com *.roche.net *.gene.com www.youtube.com sites.google.com *.googleapis.com *.cloudfront.net *.facebook.net *.arcot.com live.sagepay.com player.vimeo.com tpc.googlesyndication.com players.brightcove.net qpcr.probefinder.com *.eloqua.com *.hotjar.com *.soundcloud.com *.facebook.com *.google.com *.googletagmanager.com *.youtube-nocookie.com *.youtube.com *.mendeley.com *.force.com https:\/\/cdn.walkme.com\/*; worker-src 'self' *.roche.com *.roche.net *.gene.com; frame-ancestors 'self' *.roche.com *.roche.net *.gene.com datastudio.google.com sites.google.com content.bioclinicien.fr connect.facebook.net www.facebook.com s1691.t.eloqua.com *.cloudflareworkers.com; form-action 'self' *.roche.com *.roche.net *.gene.com content.bioclinicien.fr connect.facebook.net www.facebook.com s1691.t.eloqua.com; base-uri 'self' *.roche.com *.roche.net *.gene.com *.secure.roche.com","count":2},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/www.news24.com.au\/csp-reports","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/cse.google.com https:\/\/*.iubenda.com https:\/\/cdn.flexformz.com https:\/\/vercel.live https:\/\/static.cloudflareinsights.com https:\/\/*.cookielaw.org; style-src 'self' 'unsafe-inline' https:\/\/cdn.flexformz.com https:\/\/*.cookielaw.org; img-src 'self' data: https:\/\/cdn.ewtn.com https:\/\/images.ewtn.com https:\/\/origin.ewtn.com https:\/\/i.watch.ewtn.com https:\/\/res.cloudinary.com https:\/\/www.ewtn.com https:\/\/www.googletagmanager.com https:\/\/encrypted-tbn0.gstatic.com https:\/\/*.cookielaw.org; font-src 'self' data:; connect-src 'self' https:\/\/i.watch.ewtn.com https:\/\/u.watch.ewtn.com https:\/\/i.listen.ewtn.com https:\/\/*.wowza.com https:\/\/*.streamguys1.com https:\/\/www.googletagmanager.com https:\/\/cse.google.com https:\/\/www.google.com https:\/\/*.youborafds01.com https:\/\/*.youboranqs01.com https:\/\/*.iubenda.com https:\/\/cloudflareinsights.com https:\/\/vercel.live https:\/\/*.cookielaw.org https:\/\/*.onetrust.com; media-src 'self' blob: https:\/\/i.watch.ewtn.com https:\/\/u.watch.ewtn.com https:\/\/i.listen.ewtn.com https:\/\/*.wowza.com https:\/\/*.streamguys1.com; worker-src blob:; frame-src 'self' https:\/\/*.iubenda.com https:\/\/cse.google.com https:\/\/vercel.live; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; report-uri \/api\/csp-report","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https:\/\/fonts.gstatic.com https:\/\/headless-storefront-assets.wildtangent.com; media-src 'self' data: https:; connect-src 'self' https:; frame-src https:; frame-ancestors 'self'; worker-src 'self' blob:; form-action 'self'; base-uri 'self'; report-uri https:\/\/reporting-api.gamigo.com\/report\/wildtangent.com; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com securepubads.g.doubleclick.net https:\/\/_.cinemark.com.ar static.cloudflareinsights.com connect.facebook.net static.ads-twitter.com www.clarity.ms bat.bing.com ads01.groovinads.com www.youtube.com analytics.tiktok.com tpc.googlesyndication.com pagead2.googlesyndication.com ep2.adtrafficquality.google scripts.clarity.ms ecommerce-modal.modo.com.ar googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' data: https:\/\/fonts.gstatic.com ecommerce-modal.modo.com.ar; img-src 'self' data: https:; connect-src 'self' https:\/\/bff-beta.cinemark.com.ar https:\/\/eastus2-3.in.applicationinsights.azure.com https:\/\/securepubads.g.doubleclick.net https:\/\/_.google-analytics.com https:\/\/pagead2.googlesyndication.com https:\/\/analytics.tiktok.com https:\/\/s.clarity.ms\/collect https:\/\/p.clarity.ms\/collect ad.doubleclick.net ep1.adtrafficquality.google ep2.adtrafficquality.google js.monitor.azure.com www.google.com analytics.google.com l.clarity.ms www.googleadservices.com analytics-ipv6.tiktokw.us ssl.kaptcha.com merchants.playdigital.com.ar api.amplitude.com ecommerce-modal.modo.com.ar stats.g.doubleclick.net a.clarity.ms www.facebook.com www.google-analytics.com; frame-src 'self' https:","count":2},{"content-security-policy-report-only":" img-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'none'; connect-src 'self' *.siteminder.com 123compareme.com *.123compareme.com *.ada-tray.com *.bookmebob.com *.flip.to *.gtsgapps.com *.hijiffy.com messenger-services.com *.sojern.com *.thehotelsnetwork.com *.triptease.io *.triptease.net *.userguest.com *.theguestbook.com connect.facebook.net *.facebook.com *.edge.sdk.awswaf.com *.paypal.com recaptcha.net *.launchdarkly.com *.newrelic.com bam.nr-data.net *.hotjar.com *.hotjar.io *.googletagmanager.com *.gstatic.com *.google-analytics.com *.google.com *.googlesyndication.com *.googleadservices.com *.g.doubleclick.net *.doubleclick.net *.imgix.net; script-src 'self' 123compareme.com *.123compareme.com *.ada-tray.com *.adatray.com *.bookmebob.com *.flip.to *.gtsgapps.com *.hijiffy.com *.sojern.com *.thehotelsnetwork.com *.triptease.io *.triptease.net *.userguest.com theguestbook.com *.theguestbook.com connect.facebook.net *.edge.sdk.awswaf.com *.paypal.com recaptcha.net *.launchdarkly.com *.newrelic.com bam.nr-data.net *.hotjar.com *.googletagmanager.com *.gstatic.com *.gstatic.cn *.google-analytics.com *.google.com *.googlesyndication.com *.googleadservices.com *.g.doubleclick.net *.doubleclick.net; frame-src 'self' recaptcha.net www.googletagmanager.com *.paypal.com *.triptease.io; img-src 'self' *.imgix.net *.siteminder.com *.paypalobjects.com *.googletagmanager.com *.openstreetmap.org *.adatray.com *.thehotelsnetwork.com data:; style-src 'self' 'unsafe-inline' *.adatray.com *.thehotelsnetwork.com *.userguest.com fonts.googleapis.com; font-src 'self' data: *.adatray.com *.thehotelsnetwork.com *.userguest.com fonts.gstatic.com; report-to cspendpoint; report-uri https:\/\/csp-report.siteminder.com\/api\/quokka\/booking-engine\/report; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" default-src 'self' bard.edu www.bard.edu inside.bard.edu tools.bard.edu maps.bard.edu opensocietyuniversitynetwork.org ghea21.org; \tform-action 'self' bard.edu www.bard.edu tools.bard.edu connect.bard.edu opensocietyuniversitynetwork.org ghea21.org; \tbase-uri 'self' bard.edu www.bard.edu tools.bard.edu opensocietyuniversitynetwork.org ghea21.org; \tfont-src 'self' data: www.bard.edu opensocietyuniversitynetwork.org ghea21.org fonts.gstatic.com *.fontawesome.com cdnjs.cloudflare.com; \tstyle-src 'self' 'unsafe-inline' www.bard.edu tools.bard.edu opensocietyuniversitynetwork.org ghea21.org fonts.googleapis.com *.fontawesome.com tagmanager.google.com www.google.com *.technolutions.net static.ctctcdn.com cdnjs.cloudflare.com *.curator.io; \tscript-src 'self' 'unsafe-inline' 'report-sample' www.bard.edu tools.bard.edu connect.bard.edu explore.bard.edu opensocietyuniversitynetwork.org ghea21.org code.jquery.com player.vimeo.com *.fontawesome.com www.google-analytics.com ssl.google-analytics.com *.googletagmanager.com tagmanager.google.com www.google.com cse.google.com googleads.g.doubleclick.net connect.facebook.net consent.cookiebot.com cdn.unibuddy.co www.youvisit.com *.technolutions.net analytics.tiktok.com *.curator.io; \timg-src 'self' data: bard.edu www.bard.edu inside.bard.edu tools.bard.edu opensocietyuniversitynetwork.org ghea21.org www.facebook.com trck.youvisit.com ssl.gstatic.com www.gstatic.com www.google.com *.google-analytics.com *.googletagmanager.com curator-assets.b-cdn.net; \tconnect-src 'self' www.bard.edu tools.bard.edu opensocietyuniversitynetwork.org ghea21.org *.google-analytics.com *.analytics.google.com analytics.google.com www.google.com *.googletagmanager.com *.doubleclick.net *.technolutions.net analytics.tiktok.com *.curator.io; \tmedia-src 'self' www.bard.edu tools.bard.edu opensocietyuniversitynetwork.org ghea21.org player.vimeo.com *.vimeocdn.com www.buzzsprout.com curator-assets.b-cdn.net; \tobject-src 'self' www.bard.edu tools.bard.edu maps.bard.edu opensocietyuniversitynetwork.org ghea21.org; \tchild-src 'self' www.bard.edu tools.bard.edu maps.bard.edu opensocietyuniversitynetwork.org ghea21.org www.youtube.com www.youtube-nocookie.com player.vimeo.com unibuddy.co popcard.unibuddy.co cdn.youvisit.com e.issuu.com; \tframe-src 'self' www.bard.edu tools.bard.edu maps.bard.edu opensocietyuniversitynetwork.org ghea21.org www.youtube.com www.youtube-nocookie.com player.vimeo.com *.googletagmanager.com *.doubleclick.net unibuddy.co popcard.unibuddy.co cdn.youvisit.com e.issuu.com; \tframe-ancestors 'self' www.bard.edu tools.bard.edu opensocietyuniversitynetwork.org ghea21.org;","count":2},{"content-security-policy-report-only":" frame-src 'self' https:\/\/widget.mercuryo.io https:\/\/*.alchemypay.org https:\/\/*.asterium.uz https:\/\/cash.app https:\/\/*.cash.app https:\/\/*.sumsub.com https:\/\/gwa.pgalta.com https:\/\/*.meshconnect.com; report-uri https:\/\/sentry.walletbot.me\/api\/38\/security\/?sentry_key=544a92e441a24f17aa6b08e34e728ed2&sentry_environment=production; report-to csp-endpoint;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/www.googletagmanager.com https:\/\/geo.cookie-script.com https:\/\/cdn.cookie-script.com https:\/\/js.hsforms.net https:\/\/js.hs-banner.com https:\/\/js.hs-analytics.net https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/www.clarity.ms 'sha256-\/+T9emIx7VOVdJQ+yECZuK\/uv7LkRlYg\/aKCPFHZCHE=' 'sha256-7VR6EL+WRF17B0V6+7JfbLS4qK7qyPuZ6F8AUBUEbds=' 'sha256-7um8+d3wQHLF8d7N5U3vBfMtkUsQSqQUq\/k+dGwopyU=' 'sha256-C1pdywXIoKnRHe5hgE3qcozgV4Arxf\/L\/xUNEuC\/7eM=' 'sha256-CpwgwXrhag26UMaqMia+NENIIT6PLLCeJ7ejLMTj6ls=' 'sha256-GlSDYU7aE42mXAh3Zua84pbC+imj0WnPOEK8rq51p0A=' 'sha256-P8ahPqt4FCUsj091o2fz2HlMMy8sQLnZNu3rBoHFo+c=' 'sha256-QVZHxbQWaOzbqrchFiZ75Gn4pwo2Wccbe+pxJin5cLo=' 'sha256-Qsr+wez0KPwgPLsl1Vh9bPvbeEyvSvqIQtbeLzlpq9s=' 'sha256-Ru2Q\/XnyVrSCLyvGAMC+8cL147Rd22I5mN\/wjaWaEQI=' 'sha256-UkNHCjLC8Cle59qVRle5RLK6+ofYqxMlXLY1OiIG7xw=' 'sha256-W3pGAdJ1BSt171tQ3o7R04STi6OGuxkMPp14IkP6u8A=' 'sha256-X420H\/cjxAmDfz4n8t74VUMnejRPIDMDJa6fts3AdJE=' 'sha256-Y2BFIZDuTTmzcZ8tW\/vHxUpvSB84BVBr26RU9IOmZ2M=' 'sha256-aZH14SElLgnxubcenEpmLwCX8Wz1KrhE\/AdJQGQhyKc=' 'sha256-dD3se0UWYNR4Hoz5q+Y0fLksKDWRlFDwv1L9EmkiHCw=' 'sha256-fy5spwzUW20XPm2VwRvCSy8e+2Opb1xlxg6ckhe+SzA=' 'sha256-jdK\/ydNYgtcO\/YsiSclQ06Js5yQl4g6IxVqpMZSgvUM=' 'sha256-k\/J3i1UbROCJkd8NEleC9L4gP3Cex1ZXVYVz6IH8+JI=' 'sha256-lbzUbgTiP4ipk134\/KGX6+Vlr6A4b5mLQp35A+Ae33s=' 'sha256-mzIcaAb\/pEFf6sNdKAIWkCBWaJl1P2w4V\/KpSJvJEfU=' 'sha256-n524UYvbZnJrLG68j7pFcnL9msOTT4RRVGVAMlQAmUc=' 'sha256-s1v51vC7Og4rozfMrY8Gyj4j4pYUYrUu+J9c+1ThQLM='; style-src 'self' https:\/\/fonts.googleapis.com 'unsafe-inline'; img-src 'self' https:\/\/www.incode.com https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/px.ads.linkedin.com https:\/\/www.facebook.com data:; font-src 'self' https:\/\/fonts.gstatic.com data:; connect-src 'self' https:\/\/api.hsforms.com https:\/\/forms.hsforms.com https:\/\/geo.cookie-script.com https:\/\/cdn.cookie-script.com https:\/\/report.cookie-script.com https:\/\/www.google-analytics.com https:\/\/stats.g.doubleclick.net; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/player.vimeo.com https:\/\/cdn.embedly.com https:\/\/www.youtube-nocookie.com https:\/\/forms.hsforms.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https:\/\/ahxf6rkzv1.execute-api.us-east-1.amazonaws.com; report-to csp","count":2},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: js.datadome.co ct.captcha-delivery.com *.onetrust.com *.googletagmanager.com *.cookielaw.org *.qualtrics.com *.salesforce.com *.en25.com *.segment.com *.amplitude.com *.salesforceliveagent.com *.sandbox.my.site.com reuters.my.site.com dd.reutersconnect.com; script-src-elem 'self' 'unsafe-inline' blob: www.datadoghq-browser-agent.com *.thomsonreuters.com reuters.my.site.com *.sandbox.my.site.com *.cookielaw.org *.amplitude.com *.segment.com *.googletagmanager.com js.datadome.co js.zuora.com ssl.p.jwpcdn.com ct.captcha-delivery.com dd.reutersconnect.com *.captcha.awswaf.com *.token.awswaf.com; connect-src 'self' api-js.datadome.co *.onetrust.com *.cookielaw.org wss:\/\/*.rcp-api.reutersconnect.com *.reuters.com *.reutersconnect.com *.qualtrics.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com www.google.com *.segment.io *.amplitude.com *.thomsonreuters.com *.segment.com browser-intake-datadoghq.com *.sandbox.my.salesforce-scrt.com reuters.my.salesforce-scrt.com cdn.jwplayer.com ssl.p.jwpcdn.com drmtd540xpi1f.cloudfront.net d3cgfqae8o6oiw.cloudfront.net d1qvkrpvk32u24.cloudfront.net d2tpo79pi2fb76.cloudfront.net d1uprxlryo4sfl.cloudfront.net d1s0weg9xjt2n5.cloudfront.net *.token.awswaf.com *.captcha.awswaf.com *.flagship.io; frame-src 'self' geo.captcha-delivery.com *.onetrust.com *.salesforce.com *.sandbox.my.site.com reuters.my.site.com *.thomsonreuters.com d1hbvbum0y1xmw.cloudfront.net *.reuters.com player.vimeo.com; worker-src 'self' blob: https:\/\/*.reutersconnect.com; report-uri https:\/\/reuters.report-uri.com\/r\/t\/csp\/reportOnly; report-to report-uri","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/js.hsforms.net https:\/\/js.hs-scripts.com https:\/\/js.hs-analytics.net https:\/\/js-na2.hs-scripts.com https:\/\/js-na2.hubspot.com https:\/\/js-na2.hscollectedforms.net https:\/\/js-na2.hs-banner.com https:\/\/js-na2.hs-analytics.net https:\/\/www.googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.analytics.google.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/cdn-cookieyes.com https:\/\/*.cookieyes.com https:\/\/j.6sc.co https:\/\/snap.licdn.com https:\/\/connect.facebook.net; style-src 'self' 'unsafe-inline' https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/fonts.googleapis.com https:\/\/cdn-cookieyes.com; img-src 'self' data: https: http:; font-src 'self' data: https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/fonts.gstatic.com https:\/\/cdn.jsdelivr.net; connect-src 'self' https:\/\/forms.hsforms.com https:\/\/forms-na2.hsforms.com https:\/\/api.hsforms.com https:\/\/cta-na2.hubspot.com https:\/\/forms-na2.hscollectedforms.net https:\/\/www.googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/cdn-cookieyes.com https:\/\/*.cookieyes.com https:\/\/directory.cookieyes.com https:\/\/c.6sc.co https:\/\/ipv6.6sc.co https:\/\/epsilon.6sense.com https:\/\/secure.adnxs.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.google.com https:\/\/www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https: data:; connect-src 'self' https:; frame-ancestors 'self';","count":2},{"content-security-policy-report-only":" script-src https: blob: 'unsafe-inline' 'unsafe-eval' 'self';base-uri 'self';report-uri https:\/\/reporting-api.gannettinnovation.com","count":2},{"content-security-policy-report-only":" default-src https: 'unsafe-inline' 'unsafe-eval' ; img-src https:\/\/* data: ; frame-src https:\/\/* about: javascript:","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/framerusercontent.com https:\/\/*.framer.com https:\/\/*.framer.app; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/framerusercontent.com https:\/\/*.framer.com https:\/\/*.framer.app https:\/\/events.framer.com https:\/\/app.framerstatic.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com; style-src 'self' 'unsafe-inline' https:\/\/framerusercontent.com https:\/\/*.framer.com https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/framerusercontent.com https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/*.framer.com https:\/\/events.framer.com https:\/\/framerusercontent.com https:\/\/www.google-analytics.com https:\/\/*.analytics.google.com; frame-src 'self' https:\/\/*.framer.com https:\/\/*.framer.website; media-src 'self' https:\/\/framerusercontent.com data: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/*.framer.com; frame-ancestors 'self'; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" worker-src https: 'unsafe-inline'; report-uri https:\/\/api.mp.pl\/csp-violation\/","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/*.exoticindia.com https:\/\/*.netcoresmartech.com https:\/\/*.stripe.com https:\/\/*.razorpay.com https:\/\/*.paypal.com https:\/\/*.googletagmanager.com https:\/\/*.google.com https:\/\/www.gstatic.com https:\/\/*.fera.ai https:\/\/*.clare.ai https:\/\/*.facebook.net https:\/\/*.refersion.com https:\/\/*.clarity.ms https:\/\/*.doubleclick.net https:\/\/*.pinimg.com https:\/\/*.google-analytics.com; worker-src 'self' https:\/\/cdnt.netcoresmartech.com https:\/\/cdp.exoticindia.com; connect-src 'self' https:\/\/*.exoticindia.com https:\/\/*.stripe.com https:\/\/*.fera.ai https:\/\/*.netcoresmartech.com https:\/\/*.pinterest.com https:\/\/*.paypal.com https:\/\/*.doubleclick.net https:\/\/*.google-analytics.com https:\/\/*.googleapis.com https:\/\/*.googletagmanager.com https:\/\/*.googleadservices.com https:\/\/*.facebook.com https:\/\/*.clarity.ms https:\/\/geo.bananastand.io https:\/\/unpkg.com https:\/\/*.razorpay.com https:\/\/*.google.com https:\/\/*.google.co.in https:\/\/*.google.ae https:\/\/*.google.ba https:\/\/*.google.by https:\/\/*.google.ca https:\/\/*.google.ch https:\/\/*.google.co.jp https:\/\/*.google.co.nz https:\/\/*.google.co.th https:\/\/*.google.co.uk https:\/\/*.google.com.ar https:\/\/*.google.com.au https:\/\/*.google.com.bd https:\/\/*.google.com.hk https:\/\/*.google.com.kw https:\/\/*.google.com.my https:\/\/*.google.com.np https:\/\/*.google.com.pk https:\/\/*.google.com.sa https:\/\/*.google.com.sg https:\/\/*.google.com.sl https:\/\/*.google.com.ua https:\/\/*.google.de https:\/\/*.google.fr https:\/\/*.google.gy https:\/\/*.google.iq https:\/\/*.google.lt https:\/\/*.google.nl https:\/\/*.google.pl https:\/\/*.google.pt; img-src 'self' data: https:; frame-src https:\/\/js.stripe.com https:\/\/www.paypal.com https:\/\/www.youtube.com https:\/\/sketchfab.com https:\/\/www.googletagmanager.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com; report-uri https:\/\/cdp.exoticindia.com\/cspreport\/; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" base-uri 'self'; default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/maps.googleapis.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/vault.pactsafe.io https:\/\/pactsafe.io https:\/\/*.siteintercept.qualtrics.com https:\/\/siteintercept.qualtrics.com https:\/\/dx.steelhousemedia.com https:\/\/px.steelhousemedia.com https:\/\/bat.bing.com https:\/\/*.btttag.com https:\/\/*.optimizely.com https:\/\/cdn.quantummetric.com https:\/\/assets.sitescdn.net https:\/\/connect.facebook.net https:\/\/cdn.unitmap.com https:\/\/cdn.jsdelivr.net https:\/\/js.paygateway.com https:\/\/twilio.dev.myaccount.extraspace.com https:\/\/twilio.myaccount.extraspace.com https:\/\/client.px-cloud.net ; connect-src 'self' https:\/\/browser-intake-datadoghq.com https:\/\/logs.browser-intake-datadoghq.com https:\/\/www.google.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/maps.googleapis.com https:\/\/pagead2.googlesyndication.com https:\/\/siteintercept.qualtrics.com https:\/\/api.usercentrics.eu https:\/\/aggregator.service.usercentrics.eu https:\/\/consent-api.service.consent.usercentrics.eu https:\/\/graphql.usercentrics.eu https:\/\/app.usercentrics.eu https:\/\/fbtracking.extraspace.com https:\/\/d.btttag.com https:\/\/bat.bing.com https:\/\/pactsafe.io https:\/\/o494745.ingest.sentry.io https:\/\/cdn.growthbook.io https:\/\/*.optimizely.com wss:\/\/*.optimizely.com https:\/\/webchat-3914-prod.twil.io https:\/\/ingest.quantummetric.com https:\/\/rl.quantummetric.com https:\/\/collector-pxnyx0n2sc.px-cloud.net https:\/\/collector-pxnyx0n2sc.px-client.net https:\/\/tzm.px-cloud.net https:\/\/google.com\/pay https:\/\/pay.google.com https:\/\/api.paygateway.com ; img-src 'self' data: https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com https:\/\/images.ctfassets.net https:\/\/downloads.ctfassets.net https:\/\/www.facebook.com https:\/\/iad1.qualtrics.com https:\/\/siteintercept.qualtrics.com https:\/\/app.usercentrics.eu https:\/\/bat.bing.com https:\/\/i.ytimg.com https:\/\/collector-pxnyx0n2sc.px-client.net https:\/\/*.optimizely.com ; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/use.fontawesome.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/*.optimizely.com ; form-action 'self' https:\/\/www.facebook.com https:\/\/extraspacecx.co1.qualtrics.com https:\/\/siteintercept.qualtrics.com ; frame-ancestors 'none'; frame-src 'self' https:\/\/app.pandadoc.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/pay.google.com https:\/\/www.youtube-nocookie.com https:\/\/*.cdn.optimizely.com https:\/\/extraspacecx.co1.qualtrics.com https:\/\/videos.virtualapt.com https:\/\/tzm.px-cloud.net https:\/\/js.paygateway.com ; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/maxcdn.bootstrapcdn.com https:\/\/use.fontawesome.com https:\/\/*.optimizely.com ; object-src 'none';","count":2},{"content-security-policy-report-only":" default-src 'none'; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; form-action 'self' https:\/\/accounts-*.cyberriskalliance.com https:\/\/188-UNZ-660.mktorest.com; script-src 'self' https:\/\/lytics.cyberriskalliance.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.clarity.ms https:\/\/s.dpmsrv.com https:\/\/cdn.feathr.co https:\/\/*.g.doubleclick.net https:\/\/www.googletagservices.com https:\/\/www.googleadservices.com https:\/\/munchkin.marketo.net https:\/\/pages.cyberriskalliance.com https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/player.vimeo.com https:\/\/platform.twitter.com https:\/\/cra.hum.works https:\/\/*.ml314.com https:\/\/ml314.com https:\/\/ib.adnxs.com https:\/\/js.zi-scripts.com https:\/\/a.usbrowserspeed.com https:\/\/renderer.visuel.ly; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:\/\/files.cyberriskalliance.com https:\/\/image-optimizer*.cyberriskalliance.com https:\/\/www.cyberriskalliance.com https:\/\/securepubads.g.doubleclick.net; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/api*.cyberriskalliance.com https:\/\/cms*.cyberriskalliance.com https:\/\/image-optimizer*.cyberriskalliance.com https:\/\/userapi*.cyberriskalliance.com https:\/\/*.hum.works https:\/\/7acfab725e3b6315db795ca16eb9966e.clients.hosted-elasticpress.io https:\/\/accounts-*.cyberriskalliance.com https:\/\/lytics.cyberriskalliance.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/snap.licdn.com https:\/\/www.google-analytics.com https:\/\/cdn.feathr.co https:\/\/s.dpmsrv.com https:\/\/munchkin.marketo.net https:\/\/pages.cyberriskalliance.com https:\/\/securepubads.g.doubleclick.net; frame-src 'self' https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/www.google.com https:\/\/html5-player.libsyn.com https:\/\/securepubads.g.doubleclick.net https:\/\/*.googlesyndication.com; media-src 'self' https:\/\/html5-player.libsyn.com; manifest-src 'self'; worker-src 'self'; report-uri \/_csp; report-to default;","count":2},{"content-security-policy-report-only":" frame-ancestors 'self' https:\/\/*.jobcloud.ch https:\/\/*.jobs.ch https:\/\/*.jobup.ch; base-uri 'self'; connect-src * data: 'self'; default-src 'self' https:; font-src 'self' https: data:; form-action 'self'; frame-src 'self' https:; img-src * data: blob: 'self'; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' https: * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; require-trusted-types-for 'script'; worker-src 'self'","count":2},{"content-security-policy-report-only":" default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; base-uri 'self'; object-src 'none'; frame-ancestors 'self';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/fonts.gstatic.com https:\/\/use.fontawesome.com https:\/\/cdn.nlpg.com https:\/\/cdn.masterbooks.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.masterbooks.com *.nlpg.com self https: 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.youtu.be *.certcapture.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.doubleclick.net *.masterbooks.com *.nlpg.com www.facebook.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com *.youtu.be *.img.youtube.com *.certcapture.com *.trackedlink.net *.ddlnk.net www.facebook.com https:\/\/online.flippingbook.com https:\/\/*.cloudfront.net https:\/\/*.masterbooks.com https:\/\/*.nlpg.com *.google.com.ar *.google.com *.googletagmanager.com https:\/\/cdn-cookieyes.com pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com flagpedia.net ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.certcapture.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com https:\/\/cdn.noibu.com https:\/\/cdn.jsdelivr.net https:\/\/connect.facebook.net https:\/\/static.zdassets.com https:\/\/online.flippingbook.com https:\/\/*.cloudfront.net https:\/\/cdn.nlpg.com https:\/\/cdn.masterbooks.com *.googletagmanager.com app.viralsweep.com https:\/\/cdn-cookieyes.com connect.facebook.net twitter.com platform.twitter.com static.addtoany.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com *.gstatic.com maps.googleapis.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com webchat.dotdigital.com webchat.staging.dotdigital.com https:\/\/fonts.googleapis.com https:\/\/use.fontawesome.com https:\/\/cdn.nlpg.com https:\/\/cdn.masterbooks.com *.googletagmanager.com *.googleapis.com assets.braintreegateway.com maxcdn.bootstrapcdn.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.youtube.com *.youtu.be *.img.youtube.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.certcapture.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https:\/\/ekr.zdassets.com https:\/\/fbo-b.flippingbook.com https:\/\/nlpg.zendesk.com wss:\/\/input.noibu.com *.noibu.com *.doubleclick.net https:\/\/cdn.nlpg.com https:\/\/cdn.masterbooks.com https:\/\/www.google.com.ar https:\/\/www.facebook.com *.cookieyes.com https:\/\/cdn-cookieyes.com stats.addtoany.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com www.gstatic.com maps.googleapis.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/53272415-ac62-4480-bded-0011a34ac7cd.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" worker-src 'self' blob:;     object-src 'self';     script-src 'self' 'unsafe-inline' 'unsafe-eval'         *.alida.com         *.bing.com         *.cloudfirst.digital         *.cnd-motionmedia.de         *.dkv.com         *.doubleclick.net         *.ergo-reiseversicherung.de         *.ergo.com         *.ergo.de         *.ergocarbon.com         *.ergodirekt.de         *.facebook.net         *.fww.de         *.google.com         *.googlesyndication.com         *.googletagmanager.com         *.gstatic.com         *.intelliad.de         *.licdn.com         *.onetrust.com         *.outbrain.com         *.podigee-cdn.net         *.realperson.de         *.spoteffects.net         *.taboola.com         *.youtube.com         assets.adobedtm.com         cdn.cookielaw.org         cdn.mouseflow.com         cdn.scarabresearch.com         cdn.trackjs.com         cdnjs.cloudflare.com         edge.eu1.fullstory.com         ergo-live.s3.eu-central-1.amazonaws.com         index.ergomultitool.de         js-cdn.dynatrace.com         maps.googleapis.com         platform.twitter.com         rum.hlx.page         static.xingcdn.com         wave.outbrain.com         www.facebook.com         www.googleadservices.com;     report-uri https:\/\/csp-reporting.ergo.com\/csp-reports?tenant=erde;     report-to csp-endpoint;","count":2},{"content-security-policy-report-only":" default-src * 'unsafe-inline' 'unsafe-eval' blob:; frame-src *; img-src * data:; script-src * 'report-sample' 'unsafe-inline' 'unsafe-eval' blob:; style-src * 'report-sample' 'unsafe-inline'; base-uri *; form-action *; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" default-src *.quikr.com *.kuikr.com ;script-src *.quikr.com *.kuikr.com *.google-analytics.com *.facebook.net *.facebook.com 'unsafe-inline' cdnjs.cloudflare.com *.google.com securepubads.g.doubleclick.net csi.gstatic.com *.googletagservices.com adservice.google.co.in cdn.ampproject.org adservice.google.com *.googletagmanager.com www.gstatic.com www.googleadservices.com bam.nr-data.net googleads.g.doubleclick.net ;style-src *.quikr.com *.kuikr.com 'unsafe-inline' ;img-src * ;frame-src https:\/\/*.doubleclick.net https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/*.adtrafficquality.google https:\/\/*.safeframe.googlesyndication.com https:\/\/*.facebook.com https:\/\/www.googleadservices.com ;connect-src *.quikr.com *.kuikr.com www.google-analytics.com securepubads.g.doubleclick.net csi.gstatic.com wss:\/\/chat.kuikr.com:5291 ;script-src-elem *.quikr.com *.kuikr.com *.google-analytics.com *.facebook.net *.facebook.com 'unsafe-inline' cdnjs.cloudflare.com *.google.com securepubads.g.doubleclick.net csi.gstatic.com *.googletagservices.com adservice.google.co.in cdn.ampproject.org *.google.com *.googletagmanager.com http:\/\/*.kuikr.com www.gstatic.com www.googleadservices.com bam.nr-data.net googleads.g.doubleclick.net ;","count":2},{"content-security-policy-report-only":" default-src https:;frame-ancestors about: 'self';frame-src https:\/\/optimize.google.com *;style-src https:\/\/optimize.google.com https:\/\/fonts.googleapis.com https: data: 'unsafe-inline' *;script-src https:\/\/www.googleanalytics.com https:\/\/www.google-analytics.com https:\/\/optimize.google.com * 'unsafe-inline' 'unsafe-eval';img-src https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/optimize.google.com https: data: *;font-src https:\/\/fonts.gstatic.com data: *;object-src 'none';connect-src * ws: wss:; report-uri https:\/\/res.destinia.com\/web\/csp-violation-report-endpoint; report-to default;","count":2},{"content-security-policy-report-only":" default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" script-src 'self' https:\/\/challenges.cloudflare.com https:\/\/hcaptcha.com https:\/\/static.cloudflareinsights.com https:\/\/*.hcaptcha.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.recaptcha.net\/recaptcha\/ https:\/\/www.google-analytics.com\/ https:\/\/www.googletagmanager.com\/; base-uri 'self'; object-src 'self'; report-uri \/cdn-cgi\/script_monitor\/report","count":2},{"content-security-policy-report-only":" frame-src https:\/\/*.stripe.com https:\/\/hooks.stripe.com https:\/\/assets.braintreegateway.com https:\/\/*.youtube.com https:\/\/*.google.com https:\/\/*.facebook.com https:\/\/*.tiktok.com https:\/\/*.datagrail.io https:\/\/api.consentjs.datagrail.io https:\/\/*.mathtag.com https:\/\/*.paypal.com https:\/\/*.braintreegateway.com; style-src 'self' 'unsafe-inline' https:\/\/*.weeecdn.com https:\/\/*.weeecdn.net https:\/\/*.sayweee.com; connect-src 'self' https:\/\/*.googleapis.com https:\/\/*.sayweee.com https:\/\/*.sayweee.net; img-src 'self' data: https: https:\/\/*.masgusto.com https:\/\/*.googletagmanager.com https:\/\/*.sayweee.com https:\/\/*.sayweee.net https:\/\/*.weeecdn.com https:\/\/*.weeecdn.net; report-uri https:\/\/api.sayweee.net\/ec\/bff\/report\/csp-violation; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/accounts.google.com https:\/\/apis.google.com https:\/\/sdk.mercadopago.com https:\/\/*.mlstatic.com https:\/\/connect.facebook.net https:\/\/sdkweb-lib.idwall.co https:\/\/*.idwall.co https:\/\/chat.movidesk.com https:\/\/www.paypalobjects.com https:\/\/*.paypal.com https:\/\/www.clarity.ms https:\/\/*.clarity.ms https:\/\/pay.google.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/accounts.google.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com; media-src 'self' blob: data: https:; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/accounts.google.com https:\/\/www.googleapis.com https:\/\/play.google.com https:\/\/pay.google.com https:\/\/google.com\/pay https:\/\/api.mercadopago.com https:\/\/*.mlstatic.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/graph.facebook.com https:\/\/*.clarity.ms https:\/\/c.bing.com https:\/\/api.rollbar.com https:\/\/*.idwall.co https:\/\/*.idwall.io https:\/\/chat.movidesk.com wss:\/\/*.movidesk.com https:\/\/vakinha-api2.vakinha.com.br https:\/\/static.vakinha.com.br https:\/\/vakinha-site.s3-sa-east-1.amazonaws.com https:\/\/us.i.posthog.com; frame-src https:\/\/pay.google.com https:\/\/accounts.google.com https:\/\/www.google.com https:\/\/recaptcha.google.com https:\/\/*.mercadopago.com https:\/\/*.mlstatic.com https:\/\/www.facebook.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/*.idwall.co https:\/\/*.paypal.com https:\/\/caixinhadedoacao.vakinha.com.br; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/*.mercadopago.com https:\/\/*.paypal.com; frame-ancestors 'none'; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" default-src 'self';script-src 'self';connect-src 'self' 'https:\/\/api.partnerstack.com';object-src 'none';report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub55c44fb9851c51c381980b74811b856d&dd-evp-origin=content-security-policy&ddsource=csp-report;report-to partnerstack-csp-endpoint","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/assets.emergent.sh; script-src 'self' https:\/\/app.emergent.sh https:\/\/dev.emergentagent.com 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/connect.facebook.net https:\/\/us.i.posthog.com https:\/\/us-assets.i.posthog.com https:\/\/ap.emergent.sh https:\/\/api.emergent.sh https:\/\/cds.taboola.com https:\/\/cdn.taboola.com https:\/\/trc.taboola.com https:\/\/r.wdfl.co https:\/\/js.partnerstack.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/*.emergentagent.com https:\/\/accounts.google.com https:\/\/cdn.paddle.com https:\/\/sandbox-cdn.paddle.com https:\/\/static-cdn.trackier.com https:\/\/webtrafficsource.com https:\/\/track.omguk.com https:\/\/addrevenue.io https:\/\/ad-srvl.com https:\/\/cdn.similartargets.com https:\/\/assets.tvscipixel.com https:\/\/trafficcdn.com https:\/\/js.stripe.com https:\/\/analytics.tiktok.com https:\/\/googleads.g.doubleclick.net https:\/\/public.profitwell.com https:\/\/snap.licdn.com https:\/\/challenges.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/checkout.razorpay.com https:\/\/cdn.razorpay.com blob: https:\/\/fpnpmcdn.net https:\/\/cdn.goentri.com https:\/\/framerusercontent.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/accounts.google.com https:\/\/cdn.paddle.com https:\/\/sandbox-cdn.paddle.com https:\/\/cdn.jsdelivr.net https:\/\/dev.visualwebsiteoptimizer.com https:\/\/cdn.visualwebsiteoptimizer.com; font-src 'self' https:\/\/fonts.gstatic.com https:\/\/assets.emergent.sh https:\/\/cdn.jsdelivr.net data: https:\/\/framerusercontent.com https:\/\/use.typekit.net; img-src 'self' data: blob: https:; worker-src 'self' blob:; connect-src 'self' https:\/\/*.supabase.co wss:\/\/*.supabase.co https:\/\/us.i.posthog.com https:\/\/us-assets.i.posthog.com https:\/\/ap.emergent.sh https:\/\/api.emergent.sh https:\/\/*.emergent.sh https:\/\/*.emergentagent.com https:\/\/*.emergent.cloud https:\/\/*.emergent.host https:\/\/*.run.app https:\/\/bam.nr-data.net https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/cds.taboola.com https:\/\/trc.taboola.com https:\/\/trc-events.taboola.com https:\/\/pips.taboola.com https:\/\/psb.taboola.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/r.wdfl.co https:\/\/analytics.tiktok.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/mon.tiktokv.com https:\/\/px.ads.linkedin.com https:\/\/www.google.com https:\/\/www.google.co.in https:\/\/googleads.g.doubleclick.net https:\/\/snap.licdn.com https:\/\/public.profitwell.com https:\/\/www.react-grab.com wss:\/\/*.pusher.com https:\/\/*.pusher.com https:\/\/www.googleadservices.com https:\/\/lumberjack.razorpay.com https:\/\/*.conversionsapigateway.com https:\/\/api.getrewardful.com https:\/\/grsm.io https:\/\/partnerlinks.io https:\/\/api.fpjs.io https:\/\/api.goentri.com https:\/\/emergent-customers-assets.s3.amazonaws.com https:\/\/emergent-website-migrate.s3.us-west-2.amazonaws.com https:\/\/avatars.githubusercontent.com https:\/\/*.cloudfront.net https:\/\/framerusercontent.com blob:; frame-src https:\/\/www.youtube.com https:\/\/accounts.google.com https:\/\/cdn.paddle.com https:\/\/buy.paddle.com https:\/\/js.stripe.com https:\/\/checkout.stripe.com https:\/\/www.facebook.com https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net https:\/\/challenges.cloudflare.com https:\/\/*.emergentagent.com https:\/\/*.emergent.sh https:\/\/*.emergent.cloud https:\/\/*.emergent.host https:\/\/dev.visualwebsiteoptimizer.com https:\/\/api.razorpay.com https:\/\/app.goentri.com https:\/\/domains.entri.com blob: data:; media-src 'self' https:\/\/assets.emergent.sh https:\/\/*.youtube.com data:; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/*.supabase.co https:\/\/accounts.google.com https:\/\/github.com https:\/\/www.facebook.com; frame-ancestors 'self' *.emergent.sh getwingman.sh www.getwingman.sh dev.getwingman.sh getwingman.com www.getwingman.com dev.getwingman.com getwingman.test *.emergentagent.com *.emergentlabs.com *.emergentcf.cloud *.emergentcf.dev *.emergent.host *.preview.emergentagent.com *.internal.preview.emergentagent.com *.stage-preview.emergentagent.com *.internal.stage-preview.emergentagent.com *.stage-preview3.emergentagent.com *.stage-envcore-preview.emergentagent.com *.dev.apps.emergentagent.com *.staging.apps.emergentagent.com *.preview.static.emergentagent.com *.emergent-client-1.uc.r.appspot.com *.emergent-default.uc.r.appspot.com supersecret-akd.pages.dev emergent-product-dev.pages.dev *.emergent-product-dev.pages.dev emergent-product-prod.pages.dev *.emergent-product-prod.pages.dev landing-page-gatsby.pages.dev *.landing-page-gatsby.pages.dev landing-page-gatsby-prod.pages.dev *.landing-page-gatsby-prod.pages.dev emergent-router-pages.pages.dev *.emergent-router-pages.pages.dev emergent-router-pages-prod.pages.dev *.emergent-router-pages-prod.pages.dev","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/pub-chat-dev.ai.tarr.hu; style-src 'self' 'unsafe-inline' https:\/\/use.typekit.net; font-src 'self' data: https:\/\/use.typekit.net https:\/\/p.typekit.net; img-src 'self' data: https:\/\/*.basemaps.cartocdn.com http:\/\/tarr-cms.test; connect-src 'self' https:\/\/pub-chat-dev.ai.tarr.hu; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'","count":2},{"content-security-policy-report-only":" font-src *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.liqui-moly.com liquimoly.cloudimg.io *.twofour.dev data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.twofour.dev 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.googletagmanager.com\/ *.google.com\/ js.mollie.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.liqui-moly.com walls.io *.walls.io *.cookiebot.com *.amazon-adsystem.com insight.adsrvr.org *.facebook.com *.twofour.dev 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ https:\/\/firebasestorage.googleapis.com https:\/\/www.magezon.com https:\/\/www.mollie.com *.cloudimg.io *.liqui-moly.com liquimoly.cloudimg.io *.google.de *.google.com *.facebook.com *.twofour.dev data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/browser.sentry-cdn.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ *.avada.io *.google.com\/ js.mollie.com liquimoly.cloudimg.io *.scaleflex.it *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.liqui-moly.com walls.io *.walls.io *.cookiebot.com *.google-analytics.com *.googleadservices.com maps.googleapis.com googleapis.com connect.facebook.net service.liqui-moly.de *.twofour.dev 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com *.liqui-moly.com walls.io *.walls.io liquimoly.cloudimg.io *.twofour.dev 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu https:\/\/*.ingest.sentry.io api.authentic.network http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ https:\/\/get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.liqui-moly.com walls.io *.walls.io *.cookiebot.com *.analytics.google.com *.twofour.dev 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" script-src 'self' https:\/\/ajax.googleapis.com https:\/\/f1000research.s3-eu-west-1.amazonaws.com https:\/\/cdnjs.cloudflare.com https:\/\/cdnjs.cloudflare.com https:\/\/js.hs-scripts.com","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' *.argenta.be argenta-aam.be *.argenta-aam.be *.googleapis.com *.adobedtm.com *.googletagmanager.com *.doubleclick.net *.adsrvr.org *.teads.tv *.facebook.net *.hotjar.com *.tiqcdn.com *.pingdom.net *.google.ie 'unsafe-inline' 'unsafe-eval' wasm-eval; style-src 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'; connect-src 'self' https:\/\/agentaspaarbank.tt.omtrdc.net *.googleapis.com *.simargenta.be *.argenta.be argenta-aam.be *.argenta-aam.be *.teads.tv *.googlesyndication.com *.pingdom.net *.google.com; font-src 'self'; frame-src 'self'  *.tst-argenta.be *.argenta-aam.be *.adsrvr.org *.teads.tv *.doubleclick.net *.googletagmanager.com; img-src 'self' *.argenta.be *.simargenta.be argenta-aam.be *.argenta-aam.be *.facebook.com *.google.be *.google.com *.google.ie *.teads.tv *.gstatic.com; manifest-src 'self'; media-src 'self'; worker-src 'none';","count":2},{"content-security-policy-report-only":" default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; report-uri https:\/\/www.milestonesys.com\/csp\/report","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.tiktok.com *.ttcdn-row.com traxxas.com fonts.googleapis.com cdn.jsdelivr.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * traxxas.com fonts.gstatic.com zonos.com https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.gstatic.com https:\/\/img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.tiktok.com *.ttcdn-row.com traxxas.com assurance.sysnetgs.com *.createsend1.com fonts.gstatic.com hn.inspectlet.com hello.zonos.com connect.facebook.net www.facebook.com facebook.com zonos-store-assets.s3.amazonaws.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.tiktok.com *.ttcdn-row.com *.bytedance.com analytics.tiktok.com traxxas.com support.traxxas.com assurance.sysnetgs.com cdn.inspectlet.com fonts.gstatic.com s7.addthis.com zonos.com cdn.jsdelivr.net route.elements.zonos.com js-agent.newrelic.com connect.facebook.net adobe.com newrelic.com nr-data.net commerce-payment-services.com vimeocdn.com youtube.com magento-ds.com typekit.net cdn-apple.com braintreegateway.com online-metrix.net paypal.com rum.hlx.page js.createsend1.com https:\/\/js.stripe.com\/v3 https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/cdn-scripts.signifyd.com https:\/\/cdn-scripts.signifyd.com\/api\/script-tag.js https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.tiktok.com *.ttcdn-row.com traxxas.com fonts.gstatic.com zonos.com cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src *.tiktok.com 'self' 'unsafe-inline'; media-src *.adobe.com download-video-ak.vimeocdn.com player.vimeo.com vod-progressive-ak.vimeocdn.com vimeocdn.com 'self' 'unsafe-inline'; manifest-src *.traxxas.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com analytics.tiktok.com business-api.tiktok.com *.ttcdn-row.com *.bytedance.com traxxas.com fonts.gstatic.com hn.inspectlet.com wss:\/\/ws.inspectlet.com zonos.com hello.zonos.com cdn.jsdelivr.net route.elements.zonos.com js-agent.newrelic.com connect.facebook.net cdn.inspectlet.com assurance.sysnetgs.com stats.g.doubleclick.net www.facebook.com https:\/\/maps.googleapis.com https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' object-src 'none'; base-uri 'self'; frame-ancestors 'none'; upgrade-insecure-requests; report-to csp","count":2},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' *.angusrobertson.com.au; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.secure-afterpay.com.au bam.nr-data.net *.hotjar.com googleads.g.doubleclick.net *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.bing.com *.google.com *.gstatic.com *.forter.com *.visualwebsiteoptimizer.com *.cloudfront.net static.scarabresearch.com cdn.scarabresearch.com apis.google.com *.criteo.com static.criteo.net *.newrelic.com connect.facebook.net platform.twitter.com d.impactradius-event.com *.afterpay.com; connect-src 'self' blob: *.cloudfront.net *.google-analytics.com *.hotjar.io *.nr-data.net stats.g.doubleclick.net *.emarsys.net *.scarabresearch.com *.hotjar.com *.salecycle.com  *.forter.com opentag-stats.qubit.com *.visualwebsiteoptimizer.com recommender.scarabresearch.com angusrobertson.4tqiav.net; img-src 'self' data: *.criteo.net *.google-analytics.com *.google.com *.bing.com *.google.com.au *.pinterest.com *.cloudfront.net *.visualwebsiteoptimizer.com *.facebook.com syndication.twitter.com *.secure-afterpay.com.au *.angusrobertson.com.au *.loggly.com; frame-src 'self' *.cloudfront.net *.angusrobertson.com.au *.google.com platform.twitter.com www.facebook.com staticxx.facebook.com www.youtube.com *.criteo.com *.criteo.net *.hotjar.com *.salecycle.com bid.g.doubleclick.net","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.wistia.com https:\/\/*.wistia.net https:\/\/cdn.growthbook.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com https:\/\/gtm.moneybird.nl https:\/\/gtm.moneybird.de https:\/\/gtm.moneybird.com https:\/\/gtm.moneybird.be https:\/\/www.google-analytics.com https:\/\/www.youtube.com https:\/\/maps.googleapis.com https:\/\/bat.bing.com https:\/\/*.demio.com https:\/\/d3s4clg74dg0wr.cloudfront.net https:\/\/zapier.com https:\/\/www.clarity.ms https:\/\/static.homerun.co https:\/\/unpkg.com\/@googlemaps\/ https:\/\/euc-widget.freshworks.com https:\/\/moneybird.freshdesk.com https:\/\/*.wistia.com https:\/\/*.wistia.net https:\/\/*.intercom.io wss:\/\/*.intercom.io https:\/\/intercom-sheets.com\/ https:\/\/*.intercomcdn.eu https:\/\/*.intercomcdn.com https:\/\/*.intercomassets.eu; style-src 'self' 'unsafe-inline' https:\/\/moneybird.nl https:\/\/www.moneybird.nl https:\/\/www.googletagmanager.com https:\/\/gtm.moneybird.nl https:\/\/gtm.moneybird.de https:\/\/gtm.moneybird.com https:\/\/gtm.moneybird.be https:\/\/www.gstatic.com https:\/\/d3s4clg74dg0wr.cloudfront.net https:\/\/fonts.googleapis.com https:\/\/*.demio.com https:\/\/static.homerun.co https:\/\/fonts.bunny.net https:\/\/euc-widget.freshworks.com https:\/\/moneybird.freshdesk.com https:\/\/*.adyen.com\/ https:\/\/intercom-sheets.com\/ https:\/\/*.intercomcdn.eu https:\/\/*.intercomcdn.com https:\/\/*.intercomassets.eu; img-src 'self' https:\/\/moneybird.nl https:\/\/www.moneybird.nl https:\/\/prismic-io.s3.amazonaws.com https:\/\/images.prismic.io https:\/\/moneybird.cdn.prismic.io https:\/\/dl6oytjgv033w.cloudfront.net https:\/\/www.gstatic.com https:\/\/www.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/gtm.moneybird.nl https:\/\/gtm.moneybird.de https:\/\/gtm.moneybird.com https:\/\/gtm.moneybird.be https:\/\/www.google.nl https:\/\/www.google.com https:\/\/i.ytimg.com https:\/\/maps.gstatic.com https:\/\/csi.gstatic.com https:\/\/maps.googleapis.com https:\/\/bat.bing.com https:\/\/zapier.com https:\/\/cdn.zapier.com https:\/\/euc-widget.freshworks.com https:\/\/moneybird.freshdesk.com https:\/\/*.wistia.com https:\/\/*.wistia.net data: https:\/\/*.adyen.com\/ https:\/\/intercom-sheets.com\/ https:\/\/*.intercomcdn.eu https:\/\/*.intercomcdn.com https:\/\/*.intercomassets.eu; object-src 'self' https:\/\/www.youtube-nocookie.com https:\/\/www.youtube.com; connect-src 'self' https:\/\/moneybird.nl https:\/\/www.moneybird.nl https:\/\/help.moneybird.nl https:\/\/bat.bing.com https:\/\/gtm.moneybird.nl https:\/\/gtm.moneybird.com https:\/\/gtm.moneybird.be https:\/\/gtm.moneybird.de https:\/\/pagead2.googlesyndication.com https:\/\/*.google-analytics.com https:\/\/www.gstatic.com https:\/\/moneybird.com https:\/\/www.moneybird.com https:\/\/homerun.co https:\/\/stats.g.doubleclick.net https:\/\/*.demio.com https:\/\/*.clarity.ms https:\/\/embed.homerun.co https:\/\/maps.googleapis.com https:\/\/euc-widget.freshworks.com https:\/\/moneybird.freshdesk.com https:\/\/*.wistia.com https:\/\/*.wistia.net https:\/\/cdn.growthbook.io https:\/\/*.intercom.io wss:\/\/*.intercom.io https:\/\/*.intercom-messenger.com wss:\/\/*.intercom-messenger.com https:\/\/intercom-sheets.com\/ https:\/\/*.intercomcdn.eu https:\/\/*.intercomcdn.com https:\/\/*.intercomassets.eu; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/gtm.moneybird.nl https:\/\/gtm.moneybird.de https:\/\/gtm.moneybird.com https:\/\/gtm.moneybird.be https:\/\/www.google.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/moneybird.clickwebinar.com https:\/\/w.soundcloud.com https:\/\/euc-widget.freshworks.com https:\/\/moneybird.freshdesk.com https:\/\/fast.wistia.com https:\/\/fast.wistia.net https:\/\/intercom-sheets.com\/ https:\/\/*.intercomcdn.eu https:\/\/*.intercomcdn.com https:\/\/*.intercomassets.eu; font-src 'self' https:\/\/moneybird.nl https:\/\/www.moneybird.nl https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/fonts.bunny.net https:\/\/*.wistia.com data: https:\/\/intercom-sheets.com\/ https:\/\/*.intercomcdn.eu https:\/\/*.intercomcdn.com https:\/\/*.intercomassets.eu; report-uri https:\/\/moneybird.com\/csp_report;","count":2},{"content-security-policy-report-only":" default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: https:\/\/www.googletagmanager.com; object-src 'none'; script-src 'self' https: https:\/\/cdn.fonts.net https:\/\/maps.googleapis.com 'unsafe-hashes' 'sha256-MhtPZXr7+LpJUY5qtMutB+qWfQtMaPccfe7QXtCcEYc=' 'nonce-'; style-src 'self' https: https:\/\/*.civiccomputing.com https:\/\/cdn.fonts.net https:\/\/maps.googleapis.com 'nonce-'; connect-src 'self' https: https:\/\/www.googletagmanager.com https:\/\/www.google.com","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/www.google.com; connect-src 'self' https:\/\/api.stripe.com https:\/\/*.google-analytics.com https:\/\/live.pdf-xchange.com https:\/\/translate.googleapis.com https:\/\/translate-pa.googleapis.com https:\/\/*.pdf-xchange.com https:\/\/www.paypal.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/admin.pdf-xchange.com; font-src 'self' https:\/\/fonts.gstatic.com https:\/\/*.pdf-xchange.com data:; frame-src 'self' https:\/\/*.pdf-xchange.com https:\/\/js.stripe.com https:\/\/*.paypal.com https:\/\/assets.braintreegateway.com https:\/\/www.google.com https:\/\/www.youtube.com; img-src 'self' https:\/\/*.pdf-xchange.com https:\/\/www.googletagmanager.com https:\/\/translate.googleapis.com https:\/\/translate.google.com https:\/\/fonts.gstatic.com https:\/\/www.gstatic.com https:\/\/www.google.com https:\/\/*.paypal.com https:\/\/www.paypalobjects.com https:\/\/img.youtube.com data:; media-src data:; script-src 'self' 'unsafe-inline' https:\/\/*.pdf-xchange.com https:\/\/js.stripe.com https:\/\/m.stripe.network https:\/\/www.googletagmanager.com https:\/\/translate.google.com https:\/\/live.pdf-xchange.com https:\/\/www.paypal.com https:\/\/www.paypalobjects.com https:\/\/translate.googleapis.com https:\/\/translate-pa.googleapis.com https:\/\/www.google.com https:\/\/www.gstatic.com; style-src 'self' 'unsafe-inline' https:\/\/*.pdf-xchange.com https:\/\/fonts.googleapis.com https:\/\/www.gstatic.com https:\/\/www.paypalobjects.com; report-uri \/csp-report; report-to \/csp-report","count":2},{"content-security-policy-report-only":" report-uri https:\/\/superkassa.ru\/next\/api\/csp-report;","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https:\/\/static.unzer.com https:\/\/applepay.cdn-apple.com maxcdn.bootstrapcdn.com data: 'self' data: https:\/\/widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https:\/\/plumrocket.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.facebook.com *.facebook.com *.nkd.com *.nkd.it 'self' 'unsafe-inline'; frame-ancestors *.nkd.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https:\/\/www.googletagmanager.com\/ *.facebook.com https:\/\/plumrocket.com https:\/\/payment.unzer.com https:\/\/payment.heidelpay.com https:\/\/sbx-payment.heidelpay.com https:\/\/sbx-payment.unzer.com https:\/\/static-cc.test.unzer.com https:\/\/h.online-metrix.net https:\/\/google.com\/pay https:\/\/pay.google.com\/ https:\/\/test-heidelpay.hpcgw.net\/ https:\/\/sbx-api.heidelpay.com\/ https:\/\/sandbox.clicktopay.auth.visa.com https:\/\/clicktopay.visa.com https:\/\/sandbox.secure.checkout.visa.com https:\/\/secure.checkout.visa.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com https:\/\/accounts.google.com ad4m.at *.criteo.com *.doubleclick.net www.facebook.com hal9000.redintelligence.net *.usercentrics.eu www.usemaxserver.de *.fls.doubleclick.net *.creativecdn.com tsdtocl.com *.sovendus-benefits.com *.sovendus-connect.com *.usemaxserver.de 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ *.cdninstagram.com maps.googleapis.com https:\/\/static.unzer.com *.online-metrix.net https:\/\/www.gstatic.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com *.hsforms.net *.hsforms.com 'self' data: ad11.adfarm1.adition.com bat.bing.com *.doubleclick.net *.google.com *.google.pl imagesrv.adition.com lantern.roeye.com *.nkd.com track.adform.net usage.trackjs.com *.usercentrics.eu widgets.trustedshops.com www.facebook.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.etrusted.com *.360yield.com *.3lift.com *.addlv.smt.docomo.ne.jp *.adform.net *.admixer.net *.adnxs.com *.adscale.de *.adx.opera.com *.bing.com *.casalemedia.com *.ck-ie.com *.connectad.io *.console.adtarget.com.tr *.creativecdn.com *.dmxleo.com *.e-planning.net *.facebook.com *.facebook.net *.g.doubleclick.net *.go.sonobi.com *.gumgum.com *.inmobi.com *.leap.de *.loopme.me *.marphezis.com *.media.net *.mgid.com *.nexx360.io *.openx.net *.outbrain.com *.roeye.com *.rubiconproject.com *.sharethrough.com *.taboola.com *.teads.tv *.trackjs.com *.udmserve.net *.visx.net *.adition.com *.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.plugins.emarsys.net *.scarabresearch.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ *.googleapis.com player.vimeo.com connect.facebook.net cdnjs.cloudflare.com *.googleoptimize.com maps.googleapis.com https:\/\/static.unzer.com https:\/\/applepay.cdn-apple.com https:\/\/pay.google.com https:\/\/code.jquery.com https:\/\/h.online-metrix.net https:\/\/h64.online-metrix.net https:\/\/static-v2.unzer.com\/v2\/ui-components\/ *.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com https:\/\/accounts.google.com https:\/\/www.gstatic.com *.hsforms.net *.hsforms.com ad4m.at api.sovendus.com bat.bing.com *.taboola.com cdn.mouseflow.com core.loopingo.com *.criteo.com *.epoq.de epoq-systems.de *.facebook.net *.kameleoon.eu *.kameleoon.com lantern.roeyecdn.com *.nkd.com tags.creativecdn.com *.usercentrics.eu webanalytics.mso.digital widgets.trustedshops.com www.dwin1.com www.usemaxserver.de https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com *.bing.com *.dwin1.com *.epoq-systems.de *.loopingo.com *.usemaxserver.de *.trustedshops.com *.googletagmanager.com *.mouseflow.com *.outbrain.com *.creativecdn.com d22q3dafggn5rg.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/sandbox.src.mastercard.com https:\/\/static-v2.unzer.com\/v2\/ui-components\/ maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com https:\/\/accounts.google.com https:\/\/www.gstatic.com *.googleapis.com *.epoq.de epoq-systems.de https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.scarabresearch.com *.eservice.emarsys.net http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ maps.googleapis.com places.googleapis.com https:\/\/api.unzer.com https:\/\/api.heidelpay.com https:\/\/sbx-api.heidelpay.com https:\/\/sbx-api.unzer.com https:\/\/payment.unzer.com https:\/\/payment.heidelpay.com https:\/\/sbx-payment.heidelpay.com https:\/\/sbx-payment.unzer.com https:\/\/h.online-metrix.net https:\/\/h64.online-metrix.net https:\/\/google.com\/pay https:\/\/www.google.com\/pay https:\/\/pay.google.com https:\/\/test-heidelpay.hpcgw.net\/ https:\/\/sbx-api.heidelpay.com\/ https:\/\/static-cc.test.unzer.com https:\/\/static-v2.unzer.com\/v2\/ui-components\/ www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com https:\/\/accounts.google.com t.elasticsuite.io *.hsforms.net *.hsforms.com ams.creativecdn.com api.usercentrics.eu bat.bing.com *.criteo.com *.googleapis.com *.taboola.com webanalytics.mso.digital *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site *.bing.com *.usercentrics.eu *.creativecdn.com *.bing.net *.loopingo.com *.kameleoon.eu *.sovendus.com *.arc.epoq.de *.facebook.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' https:; report-uri https:\/\/reporturi.savagescape.com\/report.php; report-to default","count":2},{"content-security-policy-report-only":" base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:\/\/*.hsforms.com; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' 'report-sample'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; media-src 'self' https: data: blob:; worker-src 'self' blob: data:; frame-src https:; manifest-src 'self'; report-uri https:\/\/b288bea8a51fb90daf961744c3a98a53.report-uri.com\/r\/t\/csp\/reportOnly;","count":2},{"content-security-policy-report-only":" connect-src 'self' public-eur.mkt.dynamics.com formui-usa1.mkt.dynamics.com assets-eur.mkt.dynamics.com https:\/\/search.luiss.it; font-src 'self' data: assets-eur.mkt.dynamics.com; frame-src 'self' www.youtube-nocookie.com player.vimeo.com; img-src 'self' data: assets-eur.mkt.dynamics.com; media-src 'self'; object-src 'none'; script-src 'self' 'report-sample' formui-usa1.mkt.dynamics.com; style-src 'self' 'report-sample'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' unpkg.com fonts.googleapis.com cludo.com customer.cludo.com api.cludo.com *.cookiebot.com siteimprove.com *.siteimprove.com *.siteimproveanalytics.io *.google.com *.newrelic.com newrelic.com *.23video.com *.gstatic.com *.rm.dk *.analysefortegnelsen.dk connect.facebook.net\/en_US\/sdk.js *.rm.dk *.regionshospitalet-horsens.dk *.cpropslagqa.rm.dk *.cpropslagtest.rm.dk auh.intranet.rm.dk alvorligpatologi.dk auh.dk danishairambulance.dk danishneurosciencecenter.dk desikredeinstitutioner.dk diabetes.rm.dk godstrup.dk groennekompetencer.dk horsens.rm.dk human-first.org ikh.rm.dk innoccus-simply.dk klinik-almenmedicin-lemvig.dk landsbyviden.dk life-act.eu madsonline.dk mit.ikh.rm.dk move-interreg.eu psykiatrien.rm.dk randers.rm.dk regionaludvikling.intranet.rm.dk regionsklinikkenskive.dk regionsklinikkenskjern.dk regionsklinikkenthyholm.dk *.akutlaegehelikopter.dk *.antk.dk *.auh.dk *.c2ccc.eu *.cdss.dk *.cfbh.rm.dk *.coolgeoheat.eu *.danishairambulance.dk *.danishneurosciencecenter.dk *.dccc.dk *.defactum.dk *.desikredeinstitutioner.dk *.digi-lingo.eu *.dmcg.dk *.dok.rm.dk en.auh.dk *.faellesservicecenter.dk *.fagperson.auh.dk *.fagperson.hospitalsenhedmidt.dk *.fagperson.psykiatrien.rm.dk *.fagperson.regionshospitalet-goedstrup.dk *.fagperson.regionshospitalet-horsens.dk *.fagperson.regionshospitalet-randers.dk *.fagperson.sundhed.rm.dk *.godstrup.dk *.grenaasundhedshus.dk *.groennekompetencer.dk *.harts.dk *.hemidt.dk *.hemidt.intranet.rm.dk *.holmstrupgaard.rm.dk *.horsens.rm.dk *.hospitalsenhedmidt.dk *.human-first.org *.ikh.rm.dk *.klinik-almenmedicin-lemvig.dk *.kulturregion.dk *.laege-kvalitet.dk *.landsbyviden.rm.dk *.lemvigsundhedshus.dk *.life-bioscape.eu *.marselisborgcentret.dk *.medarbejder.rm.dk *.organdonation.dk *.pa.intra.rm.dk *.patientkommunikation.dk *.ph.rm.dk *.ps-horsens.intra.rm.dk *.ps-midt.intra.rm.dk *.ps-randers.intra.rm.dk *.ps-vest.intra.rm.dk *.psykiatriakademiet.rm.dk *.psykiatrien.rm.dk *.randers.intranet.rm.dk *.randers.rm.dk *.refer-cdr.eu *.regionshospitalet-goedstrup.dk *.regionshospitalet-horsens.dk *.regionshospitalet-randers.dk *.regionsklinikkenskive.dk *.regionsklinikkenskjern.dk *.regionsklinikkenthyholm.dk *.rehabiliteringsforum.dk *.rkkp.dk *.ru.rm.dk *.sau.rm.dk *.sbu.rm.dk *.sekretariatet.intra.rm.dk *.sektorovergang.rm.dk *.skivesundhedshus.dk *.sku.rm.dk *.social.rm.dk *.socialkvalitetsmodel.dk *.socialmedicin.rm.dk *.soh.rm.dk *.specialpsykologuddannelsen.dk *.specpsyksygeplejerske.dk *.stenoaarhus.dk *.sua.rm.dk *.sundhed.rm.dk *.sundhedsaftalen.rm.dk *.sundhedshusringkoebing.dk *.svo.rm.dk *.tvaerspor.dk *.videreuddannelsen-nord.dk *.voldtaegt.dk *.voresbaredygtighed.rm.dk *.windowstudiet.dk *.zgodkender.rm.dk *.ramazzini.dk; style-src 'self'  'unsafe-inline' unpkg.com fonts.googleapis.com cludo.com customer.cludo.com api.cludo.com *.cookiebot.com siteimprove.com *.siteimprove.com *.siteimproveanalytics.io *.google.com *.newrelic.com newrelic.com *.23video.com *.gstatic.com *.rm.dk *.analysefortegnelsen.dk connect.facebook.net\/en_US\/sdk.js *.rm.dk *.regionshospitalet-horsens.dk *.cpropslagqa.rm.dk *.cpropslagtest.rm.dk auh.intranet.rm.dk alvorligpatologi.dk auh.dk danishairambulance.dk danishneurosciencecenter.dk desikredeinstitutioner.dk diabetes.rm.dk godstrup.dk groennekompetencer.dk horsens.rm.dk human-first.org ikh.rm.dk innoccus-simply.dk klinik-almenmedicin-lemvig.dk landsbyviden.dk life-act.eu madsonline.dk mit.ikh.rm.dk move-interreg.eu psykiatrien.rm.dk randers.rm.dk regionaludvikling.intranet.rm.dk regionsklinikkenskive.dk regionsklinikkenskjern.dk regionsklinikkenthyholm.dk *.akutlaegehelikopter.dk *.antk.dk *.auh.dk *.c2ccc.eu *.cdss.dk *.cfbh.rm.dk *.coolgeoheat.eu *.danishairambulance.dk *.danishneurosciencecenter.dk *.dccc.dk *.defactum.dk *.desikredeinstitutioner.dk *.digi-lingo.eu *.dmcg.dk *.dok.rm.dk en.auh.dk *.faellesservicecenter.dk *.fagperson.auh.dk *.fagperson.hospitalsenhedmidt.dk *.fagperson.psykiatrien.rm.dk *.fagperson.regionshospitalet-goedstrup.dk *.fagperson.regionshospitalet-horsens.dk *.fagperson.regionshospitalet-randers.dk *.fagperson.sundhed.rm.dk *.godstrup.dk *.grenaasundhedshus.dk *.groennekompetencer.dk *.harts.dk *.hemidt.dk *.hemidt.intranet.rm.dk *.holmstrupgaard.rm.dk *.horsens.rm.dk *.hospitalsenhedmidt.dk *.human-first.org *.ikh.rm.dk *.klinik-almenmedicin-lemvig.dk *.kulturregion.dk *.laege-kvalitet.dk *.landsbyviden.rm.dk *.lemvigsundhedshus.dk *.life-bioscape.eu *.marselisborgcentret.dk *.medarbejder.rm.dk *.organdonation.dk *.pa.intra.rm.dk *.patientkommunikation.dk *.ph.rm.dk *.ps-horsens.intra.rm.dk *.ps-midt.intra.rm.dk *.ps-randers.intra.rm.dk *.ps-vest.intra.rm.dk *.psykiatriakademiet.rm.dk *.psykiatrien.rm.dk *.randers.intranet.rm.dk *.randers.rm.dk *.refer-cdr.eu *.regionshospitalet-goedstrup.dk *.regionshospitalet-horsens.dk *.regionshospitalet-randers.dk *.regionsklinikkenskive.dk *.regionsklinikkenskjern.dk *.regionsklinikkenthyholm.dk *.rehabiliteringsforum.dk *.rkkp.dk *.ru.rm.dk *.sau.rm.dk *.sbu.rm.dk *.sekretariatet.intra.rm.dk *.sektorovergang.rm.dk *.skivesundhedshus.dk *.sku.rm.dk *.social.rm.dk *.socialkvalitetsmodel.dk *.socialmedicin.rm.dk *.soh.rm.dk *.specialpsykologuddannelsen.dk *.specpsyksygeplejerske.dk *.stenoaarhus.dk *.sua.rm.dk *.sundhed.rm.dk *.sundhedsaftalen.rm.dk *.sundhedshusringkoebing.dk *.svo.rm.dk *.tvaerspor.dk *.videreuddannelsen-nord.dk *.voldtaegt.dk *.voresbaredygtighed.rm.dk *.windowstudiet.dk *.zgodkender.rm.dk *.ramazzini.dk; img-src 'self' data: 'unsafe-inline' unpkg.com fonts.googleapis.com cludo.com customer.cludo.com api.cludo.com *.cookiebot.com siteimprove.com *.siteimprove.com *.siteimproveanalytics.io *.google.com *.newrelic.com newrelic.com *.23video.com *.gstatic.com *.rm.dk *.analysefortegnelsen.dk connect.facebook.net\/en_US\/sdk.js *.rm.dk *.regionshospitalet-horsens.dk *.cpropslagqa.rm.dk *.cpropslagtest.rm.dk auh.intranet.rm.dk alvorligpatologi.dk auh.dk danishairambulance.dk danishneurosciencecenter.dk desikredeinstitutioner.dk diabetes.rm.dk godstrup.dk groennekompetencer.dk horsens.rm.dk human-first.org ikh.rm.dk innoccus-simply.dk klinik-almenmedicin-lemvig.dk landsbyviden.dk life-act.eu madsonline.dk mit.ikh.rm.dk move-interreg.eu psykiatrien.rm.dk randers.rm.dk regionaludvikling.intranet.rm.dk regionsklinikkenskive.dk regionsklinikkenskjern.dk regionsklinikkenthyholm.dk *.akutlaegehelikopter.dk *.antk.dk *.auh.dk *.c2ccc.eu *.cdss.dk *.cfbh.rm.dk *.coolgeoheat.eu *.danishairambulance.dk *.danishneurosciencecenter.dk *.dccc.dk *.defactum.dk *.desikredeinstitutioner.dk *.digi-lingo.eu *.dmcg.dk *.dok.rm.dk en.auh.dk *.faellesservicecenter.dk *.fagperson.auh.dk *.fagperson.hospitalsenhedmidt.dk *.fagperson.psykiatrien.rm.dk *.fagperson.regionshospitalet-goedstrup.dk *.fagperson.regionshospitalet-horsens.dk *.fagperson.regionshospitalet-randers.dk *.fagperson.sundhed.rm.dk *.godstrup.dk *.grenaasundhedshus.dk *.groennekompetencer.dk *.harts.dk *.hemidt.dk *.hemidt.intranet.rm.dk *.holmstrupgaard.rm.dk *.horsens.rm.dk *.hospitalsenhedmidt.dk *.human-first.org *.ikh.rm.dk *.klinik-almenmedicin-lemvig.dk *.kulturregion.dk *.laege-kvalitet.dk *.landsbyviden.rm.dk *.lemvigsundhedshus.dk *.life-bioscape.eu *.marselisborgcentret.dk *.medarbejder.rm.dk *.organdonation.dk *.pa.intra.rm.dk *.patientkommunikation.dk *.ph.rm.dk *.ps-horsens.intra.rm.dk *.ps-midt.intra.rm.dk *.ps-randers.intra.rm.dk *.ps-vest.intra.rm.dk *.psykiatriakademiet.rm.dk *.psykiatrien.rm.dk *.randers.intranet.rm.dk *.randers.rm.dk *.refer-cdr.eu *.regionshospitalet-goedstrup.dk *.regionshospitalet-horsens.dk *.regionshospitalet-randers.dk *.regionsklinikkenskive.dk *.regionsklinikkenskjern.dk *.regionsklinikkenthyholm.dk *.rehabiliteringsforum.dk *.rkkp.dk *.ru.rm.dk *.sau.rm.dk *.sbu.rm.dk *.sekretariatet.intra.rm.dk *.sektorovergang.rm.dk *.skivesundhedshus.dk *.sku.rm.dk *.social.rm.dk *.socialkvalitetsmodel.dk *.socialmedicin.rm.dk *.soh.rm.dk *.specialpsykologuddannelsen.dk *.specpsyksygeplejerske.dk *.stenoaarhus.dk *.sua.rm.dk *.sundhed.rm.dk *.sundhedsaftalen.rm.dk *.sundhedshusringkoebing.dk *.svo.rm.dk *.tvaerspor.dk *.videreuddannelsen-nord.dk *.voldtaegt.dk *.voresbaredygtighed.rm.dk *.windowstudiet.dk *.zgodkender.rm.dk *.ramazzini.dk; connect-src 'self' bam.eu01.nr-data.net sentry.io unpkg.com fonts.googleapis.com cludo.com customer.cludo.com api.cludo.com *.cookiebot.com siteimprove.com *.siteimprove.com *.siteimproveanalytics.io *.google.com *.newrelic.com newrelic.com *.23video.com *.gstatic.com *.rm.dk *.analysefortegnelsen.dk connect.facebook.net\/en_US\/sdk.js *.rm.dk *.regionshospitalet-horsens.dk *.cpropslagqa.rm.dk *.cpropslagtest.rm.dk auh.intranet.rm.dk alvorligpatologi.dk auh.dk danishairambulance.dk danishneurosciencecenter.dk desikredeinstitutioner.dk diabetes.rm.dk godstrup.dk groennekompetencer.dk horsens.rm.dk human-first.org ikh.rm.dk innoccus-simply.dk klinik-almenmedicin-lemvig.dk landsbyviden.dk life-act.eu madsonline.dk mit.ikh.rm.dk move-interreg.eu psykiatrien.rm.dk randers.rm.dk regionaludvikling.intranet.rm.dk regionsklinikkenskive.dk regionsklinikkenskjern.dk regionsklinikkenthyholm.dk *.akutlaegehelikopter.dk *.antk.dk *.auh.dk *.c2ccc.eu *.cdss.dk *.cfbh.rm.dk *.coolgeoheat.eu *.danishairambulance.dk *.danishneurosciencecenter.dk *.dccc.dk *.defactum.dk *.desikredeinstitutioner.dk *.digi-lingo.eu *.dmcg.dk *.dok.rm.dk en.auh.dk *.faellesservicecenter.dk *.fagperson.auh.dk *.fagperson.hospitalsenhedmidt.dk *.fagperson.psykiatrien.rm.dk *.fagperson.regionshospitalet-goedstrup.dk *.fagperson.regionshospitalet-horsens.dk *.fagperson.regionshospitalet-randers.dk *.fagperson.sundhed.rm.dk *.godstrup.dk *.grenaasundhedshus.dk *.groennekompetencer.dk *.harts.dk *.hemidt.dk *.hemidt.intranet.rm.dk *.holmstrupgaard.rm.dk *.horsens.rm.dk *.hospitalsenhedmidt.dk *.human-first.org *.ikh.rm.dk *.klinik-almenmedicin-lemvig.dk *.kulturregion.dk *.laege-kvalitet.dk *.landsbyviden.rm.dk *.lemvigsundhedshus.dk *.life-bioscape.eu *.marselisborgcentret.dk *.medarbejder.rm.dk *.organdonation.dk *.pa.intra.rm.dk *.patientkommunikation.dk *.ph.rm.dk *.ps-horsens.intra.rm.dk *.ps-midt.intra.rm.dk *.ps-randers.intra.rm.dk *.ps-vest.intra.rm.dk *.psykiatriakademiet.rm.dk *.psykiatrien.rm.dk *.randers.intranet.rm.dk *.randers.rm.dk *.refer-cdr.eu *.regionshospitalet-goedstrup.dk *.regionshospitalet-horsens.dk *.regionshospitalet-randers.dk *.regionsklinikkenskive.dk *.regionsklinikkenskjern.dk *.regionsklinikkenthyholm.dk *.rehabiliteringsforum.dk *.rkkp.dk *.ru.rm.dk *.sau.rm.dk *.sbu.rm.dk *.sekretariatet.intra.rm.dk *.sektorovergang.rm.dk *.skivesundhedshus.dk *.sku.rm.dk *.social.rm.dk *.socialkvalitetsmodel.dk *.socialmedicin.rm.dk *.soh.rm.dk *.specialpsykologuddannelsen.dk *.specpsyksygeplejerske.dk *.stenoaarhus.dk *.sua.rm.dk *.sundhed.rm.dk *.sundhedsaftalen.rm.dk *.sundhedshusringkoebing.dk *.svo.rm.dk *.tvaerspor.dk *.videreuddannelsen-nord.dk *.voldtaegt.dk *.voresbaredygtighed.rm.dk *.windowstudiet.dk *.zgodkender.rm.dk *.ramazzini.dk; font-src 'self' fonts.gstatic.com fonts.googleapis.com; frame-src 'self' unpkg.com fonts.googleapis.com cludo.com customer.cludo.com api.cludo.com *.cookiebot.com siteimprove.com *.siteimprove.com *.siteimproveanalytics.io *.google.com *.newrelic.com newrelic.com *.23video.com *.gstatic.com *.rm.dk *.analysefortegnelsen.dk connect.facebook.net\/en_US\/sdk.js *.rm.dk *.regionshospitalet-horsens.dk *.cpropslagqa.rm.dk *.cpropslagtest.rm.dk auh.intranet.rm.dk alvorligpatologi.dk auh.dk danishairambulance.dk danishneurosciencecenter.dk desikredeinstitutioner.dk diabetes.rm.dk godstrup.dk groennekompetencer.dk horsens.rm.dk human-first.org ikh.rm.dk innoccus-simply.dk klinik-almenmedicin-lemvig.dk landsbyviden.dk life-act.eu madsonline.dk mit.ikh.rm.dk move-interreg.eu psykiatrien.rm.dk randers.rm.dk regionaludvikling.intranet.rm.dk regionsklinikkenskive.dk regionsklinikkenskjern.dk regionsklinikkenthyholm.dk *.akutlaegehelikopter.dk *.antk.dk *.auh.dk *.c2ccc.eu *.cdss.dk *.cfbh.rm.dk *.coolgeoheat.eu *.danishairambulance.dk *.danishneurosciencecenter.dk *.dccc.dk *.defactum.dk *.desikredeinstitutioner.dk *.digi-lingo.eu *.dmcg.dk *.dok.rm.dk en.auh.dk *.faellesservicecenter.dk *.fagperson.auh.dk *.fagperson.hospitalsenhedmidt.dk *.fagperson.psykiatrien.rm.dk *.fagperson.regionshospitalet-goedstrup.dk *.fagperson.regionshospitalet-horsens.dk *.fagperson.regionshospitalet-randers.dk *.fagperson.sundhed.rm.dk *.godstrup.dk *.grenaasundhedshus.dk *.groennekompetencer.dk *.harts.dk *.hemidt.dk *.hemidt.intranet.rm.dk *.holmstrupgaard.rm.dk *.horsens.rm.dk *.hospitalsenhedmidt.dk *.human-first.org *.ikh.rm.dk *.klinik-almenmedicin-lemvig.dk *.kulturregion.dk *.laege-kvalitet.dk *.landsbyviden.rm.dk *.lemvigsundhedshus.dk *.life-bioscape.eu *.marselisborgcentret.dk *.medarbejder.rm.dk *.organdonation.dk *.pa.intra.rm.dk *.patientkommunikation.dk *.ph.rm.dk *.ps-horsens.intra.rm.dk *.ps-midt.intra.rm.dk *.ps-randers.intra.rm.dk *.ps-vest.intra.rm.dk *.psykiatriakademiet.rm.dk *.psykiatrien.rm.dk *.randers.intranet.rm.dk *.randers.rm.dk *.refer-cdr.eu *.regionshospitalet-goedstrup.dk *.regionshospitalet-horsens.dk *.regionshospitalet-randers.dk *.regionsklinikkenskive.dk *.regionsklinikkenskjern.dk *.regionsklinikkenthyholm.dk *.rehabiliteringsforum.dk *.rkkp.dk *.ru.rm.dk *.sau.rm.dk *.sbu.rm.dk *.sekretariatet.intra.rm.dk *.sektorovergang.rm.dk *.skivesundhedshus.dk *.sku.rm.dk *.social.rm.dk *.socialkvalitetsmodel.dk *.socialmedicin.rm.dk *.soh.rm.dk *.specialpsykologuddannelsen.dk *.specpsyksygeplejerske.dk *.stenoaarhus.dk *.sua.rm.dk *.sundhed.rm.dk *.sundhedsaftalen.rm.dk *.sundhedshusringkoebing.dk *.svo.rm.dk *.tvaerspor.dk *.videreuddannelsen-nord.dk *.voldtaegt.dk *.voresbaredygtighed.rm.dk *.windowstudiet.dk *.zgodkender.rm.dk *.ramazzini.dk; base-uri 'self'; frame-ancestors 'self'; report-uri https:\/\/o4504207644033024.ingest.us.sentry.io\/api\/4510300403204096\/security\/?sentry_key=0f83650c1c0c90a8ea22a527173f4833&sentry_environment=prod; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/voys.containers.piwik.pro https:\/\/voys.piwik.pro https:\/\/*.hubspot.com https:\/\/*.hubapi.com https:\/\/*.hs-scripts.com https:\/\/*.hs-banner.com https:\/\/*.hs-analytics.net https:\/\/*.hsforms.com https:\/\/*.hsforms.net https:\/\/*.hsappstatic.net https:\/\/*.hscollectedforms.net https:\/\/policy.app.cookieinformation.com https:\/\/static.homerun.co https:\/\/www.kiyoh.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/*.hubspot.com https:\/\/*.hubapi.com https:\/\/*.hs-scripts.com https:\/\/*.hs-banner.com https:\/\/*.hs-analytics.net https:\/\/*.hsforms.com https:\/\/*.hsforms.net https:\/\/*.hsappstatic.net https:\/\/*.hscollectedforms.net; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/*.hubspot.com https:\/\/*.hubapi.com https:\/\/*.hs-scripts.com https:\/\/*.hs-banner.com https:\/\/*.hs-analytics.net https:\/\/*.hsforms.com https:\/\/*.hsforms.net https:\/\/*.hsappstatic.net https:\/\/*.hscollectedforms.net; connect-src 'self' https:\/\/voys.containers.piwik.pro https:\/\/voys.piwik.pro https:\/\/*.hubspot.com https:\/\/*.hubapi.com https:\/\/*.hs-scripts.com https:\/\/*.hs-banner.com https:\/\/*.hs-analytics.net https:\/\/*.hsforms.com https:\/\/*.hsforms.net https:\/\/*.hsappstatic.net https:\/\/*.hscollectedforms.net https:\/\/policy.app.cookieinformation.com https:\/\/sentry.voipgrid.nl; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/voys.containers.piwik.pro https:\/\/voys.piwik.pro https:\/\/*.hubspot.com https:\/\/*.hubapi.com https:\/\/*.hs-scripts.com https:\/\/*.hs-banner.com https:\/\/*.hs-analytics.net https:\/\/*.hsforms.com https:\/\/*.hsforms.net https:\/\/*.hsappstatic.net https:\/\/*.hscollectedforms.net https:\/\/policy.app.cookieinformation.com; media-src 'self' data: blob: https:; worker-src 'self' blob:; manifest-src 'self'; form-action 'self' https:\/\/*.hubspot.com https:\/\/*.hubapi.com https:\/\/*.hs-scripts.com https:\/\/*.hs-banner.com https:\/\/*.hs-analytics.net https:\/\/*.hsforms.com https:\/\/*.hsforms.net https:\/\/*.hsappstatic.net https:\/\/*.hscollectedforms.net; frame-ancestors 'self' https:\/\/www.notion.so; base-uri 'self'; object-src 'none'; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/nexo.com *.nexo.com *.nexo.io cdn.segment.com https:\/\/cdn.cookielaw.org https:\/\/geolocation.onetrust.com https:\/\/nexoio.my.salesforce-scrt.com https:\/\/widget.trustpilot.com https:\/\/appleid.cdn-apple.com https:\/\/www.apple.com https:\/\/browser-intake-datadoghq.eu https:\/\/region1.analytics.google.com https:\/\/region1.google-analytics.com https:\/\/events.eu1.segmentapis.com https:\/\/www.googletagmanager.com https:\/\/accounts.google.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com *.geetest.com wss:\/\/platform.nexo.com https:\/\/nexoio.my.site.com; frame-ancestors https:\/\/platform.nexo.io https:\/\/platform.nexo.com https:\/\/support.nexo.io https:\/\/support.nexo.com https:\/\/nexosurvey.force.com https:\/\/nexoio.lightning.force.com https:\/\/nexoio--c.visualforce.com; report-uri https:\/\/security-logging.nexo.com;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https:; worker-src 'self' blob:; media-src 'self' https: data: blob:; object-src 'none'; frame-ancestors 'self'; base-uri 'self' https:; form-action 'self' https:; report-uri https:\/\/o4506236539830272.ingest.us.sentry.io\/api\/4511266129117184\/security\/?sentry_key=f64ced49b50af8fd26d68bc004aeca86; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.cloudfront.net https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/*.cloudfront.net; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/*.cloudfront.net; connect-src 'self' https:; media-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'","count":2},{"content-security-policy-report-only":" default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https:\/\/locize.app https:\/\/*.locize.app; worker-src 'self' blob:; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none'","count":2},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' blob:; object-src 'none'; base-uri 'none'; form-action 'self' *.pennymac.com *.wufoo.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.googletagmanager.com *.vwo.com *.visualwebsiteoptimizer.com *.google.com; font-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.visualwebsiteoptimizer.com *.vwo.com; style-src-elem 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.googletagmanager.com *.vwo.com *.visualwebsiteoptimizer.com *.google.com; frame-ancestors 'self'; frame-src 'self' *.pennymac.com *.youtube.com *.instagram.com *.vimeo.com *.youtube-nocookie.com *.googletagmanager.com *.doubleclick.net *.adsrvr.org *.google.com *.leadid.com *.cloudfront.net *.vwo.com *.visualwebsiteoptimizer.com app.vwo.com *.picflow.com; connect-src 'self' *.reddit.com *.onetrust.com *.google.com *.play.google.com *.googleapis.com *.bing.com *.nr-data.net *.on.aws *.cookielaw.org *.reson8.com *.visualwebsiteoptimizer.com *.pennymac.com *.tealiumapis.com *.doubleclick.net *.tealiumiq.com *.yimg.com *.linkedin.com *.adsrvr.org *.leadid.com *.googleadservices.com *.googletagmanager.com *.facebook.com *.facebook.net *.exacttarget.com *.yahoo.com *.trcknow.com *.vwo.com app.vwo.com; script-src 'self' 'unsafe-inline' *.newrelic.com capi-automation.s3.us-east-2.amazonaws.com *.redditstatic.com *.googletagmanager.com *.pennymac.com *.vwo.com *.visualwebsiteoptimizer.com *.google.com *.googleapis.com; script-src-elem 'self' 'unsafe-inline' capi-automation.s3.us-east-2.amazonaws.com *.instagram.com *.redditstatic.com *.tailwindcss.com *.gstatic.com *.googletagmanager.com *.visualwebsiteoptimizer.com *.newrelic.com *.lidstatic.com *.vimeo.com *.google.com *.googleapis.com *.cookielaw.org *.youtube.com *.tiqcdn.com *.facebook.com *.facebook.net *.bing.com *.licdn.com *.yimg.com *.adsrvr.org *.tealiumiq.com *.resonate.com *.doubleclick.net *.nr-data.net *.vwo.com *.exacttarget.com *.trcknow.com *.pennymac.com; img-src 'self' data: *.townsgateservicing.com *.reddit.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.visualwebsiteoptimizer.com *.vimeocdn.com *.adsvr.org *.google.com *.yahoo.com *.linkedin.com *.bing.com *.facebook.com *.facebook.net *.cloudinary.com *.cookielaw.org *.pennymac.com *.googleadservices.com *.resonate.com *.doubleclick.net *.reson8.com *.yimg.com *.leadid.com *.exacttarget.com *.trcknow.com *.vwo.com *.vwo.io app.vwo.com; worker-src 'self' blob:; require-trusted-types-for 'script';","count":2},{"content-security-policy-report-only":" default-src 'self' captcha-api.yandex.ru smartcaptcha.yandexcloud.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' mc.yandex.ru www.googletagmanager.com www.google.com vk.com top-fwz1.mail.ru *.jivosite.com mod.calltouch.ru static.popmechanic.ru st.hybrid.ai get.shoppilot.ru cdn.diginetica.net smartcaptcha.yandexcloud.net *.jivo.ru captcha-api.yandex.ru api-maps.yandex.ru yastatic.net api.mindbox.ru web-static.mindbox.ru personalization-web-stable.mindbox.ru personalization-speedtest.g.mindbox.ru www.gstatic.com pay.yandex.ru *.koleso.ru; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' mc.yandex.ru www.googletagmanager.com www.google.com vk.com top-fwz1.mail.ru *.jivosite.com mod.calltouch.ru static.popmechanic.ru st.hybrid.ai get.shoppilot.ru cdn.diginetica.net smartcaptcha.yandexcloud.net *.jivo.ru captcha-api.yandex.ru api-maps.yandex.ru yastatic.net api.mindbox.ru web-static.mindbox.ru personalization-web-stable.mindbox.ru personalization-speedtest.g.mindbox.ru www.gstatic.com goodmod.ru pxaction.com icyh3e.ru trackerme.org pixel.betweenx.com pixel.adspector.pro ab-ct.ru bonuscake.ru rmetrics.ru stalkoda.com 1jvb.com eventtrace.ru m.stalkoda.com pay.yandex.ru dss.hybrid.ai fp.hybrid.ai emd.hybrid.ai c.stalkoda.com code.cake023.ru code.6i7y3i.ru px.adhigh.net core-renderer-tiles.maps.yandex.net *.koleso.ru dcapi.direct-credit.ru privacy-cs.mail.ru player.kinescope.io vk.ru; connect-src 'self' wss:\/\/socket.koleso.ru wss:\/\/stream-widget.koleso.ru mc.yandex.ru wss:\/\/mc.yandex.ru wss:\/\/mc.yandex.com mc.yandex.com www.google.com pay.yandex.ru captcha-api.yandex.ru wss:\/\/*.jivo.ru wss:\/\/vi-sber1-24.jivo.ru *.jivo.ru *.jivosite.com w-api2.aplaut.io api.mindbox.ru web-static.mindbox.ru personalization-web-stable.mindbox.ru personalization-speedtest.g.mindbox.ru sentry.dev.koleso.ru api.diginetica.net tracking.diginetica.net autocomplete.diginetica.net sort.diginetica.net mod.calltouch.ru px.segmel.com hitcrypt.icyh3e.ru trackerme.org vk.com pixel.adspector.pro bobid-ip.hybrid.ai fpf.hybrid.ai ab-ct.ru *.koleso.ru www.googletagmanager.com top-fwz1.mail.ru translate.googleapis.com log.api-maps.yandex.ru web-static-no-content.g.mindbox.ru; img-src 'self' data: blob: mc.yandex.ru mc.yandex.com yastatic.net vk.com fonts.googleapis.com ads.betweendigital.com *.jivo.ru core-renderer-tiles.maps.yandex.net log.api-maps.yandex.ru api.diginetica.net tracking.diginetica.net autocomplete.diginetica.net top-fwz1.mail.ru personalization-web-stable.mindbox.ru personalization-speedtest.g.mindbox.ru hit.icyh3e.ru bonuscake.ru eventtrace.ru 1jvb.com dss.hybrid.ai www.katalog-diskov.ru *.koleso.ru mc.yandex.by mc.yandex.kz vk.ru; font-src 'self' data: koleso.ru fonts.gstatic.com yastatic.net cdn.diginetica.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com code.jivo.ru get.aplaut.io *.koleso.ru dcapi.direct-credit.ru; media-src 'self' data:; frame-src 'self' blob: m.my.mail.ru smartcaptcha.yandexcloud.net www.google.com omnibox.aplaut.io captcha-api.yandex.ru kinescope.io pay.yandex.ru *.koleso.ru code.jivo.ru; worker-src 'self' blob:; child-src 'self' blob:; report-uri \/csp-report;","count":2},{"content-security-policy-report-only":" default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.mxpnl.com www.googletagmanager.com cdn.cookiehub.eu www.google-analytics.com cdnjs.cloudflare.com cdn-4.convertexperiments.com www.convert.com leadbooster-chat.pipedrive.com cdn.pdx-1.pipedriveassets.com public.our-trace.com googleads.g.doubleclick.net snap.licdn.com bat.bing.com tracking-api.g2.com; style-src 'self' 'unsafe-inline' www.convert.com cookiehub.net cdn.cookiehub.eu; img-src 'self' data: blob: www.w3.org public.our-trace.com leadbooster-chat.pipedrive.com px.ads.linkedin.com bat.bing.com www.googletagmanager.com www.google.com www.google.com.au; frame-src 'self' www.googletagmanager.com; child-src 'none'; font-src 'self' data: cdn.pdx-1.pipedriveassets.com; connect-src 'self' cdn-4.convertexperiments.com api.our-trace.com pagead2.googlesyndication.com leadbooster-chat.pipedrive.com www.google.com px.ads.linkedin.com api-js.mixpanel.com www.google-analytics.com consent.cookiehub.net snap.licdn.com bat.bing.com tracking-api.g2.com googleads.g.doubleclick.net; manifest-src 'self'; media-src 'self'; object-src 'none';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.cookielaw.org https:\/\/privacyportal-free-cdn.onetrust.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/apis.google.com https:\/\/maps.googleapis.com https:\/\/www.googletagmanager.com https:\/\/js.mollie.com https:\/\/6ab37bwg4l.kameleoon.io https:\/\/cdn.evgnet.com https:\/\/cdn.bc0a.com https:\/\/*.useinsider.com https:\/\/*.noibu.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/ct.pinterest.com https:\/\/s.pinimg.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/*.doubleclick.net https:\/\/*.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/500009757.collect.igodigital.com https:\/\/*.criteo.com https:\/\/*.cquotient.com https:\/\/*.getflowbox.com https:\/\/*.contentsquare.net https:\/\/app.contentsquare.com https:\/\/static.cloudflareinsights.com https:\/\/player.vimeo.com blob: https:\/\/sstg.torfs.be https:\/\/chatbot.torfs.be; connect-src 'self' https:\/\/cdn.cookielaw.org https:\/\/geolocation.onetrust.com https:\/\/privacyportal-fr.onetrust.com https:\/\/www.google.com https:\/\/maps.googleapis.com https:\/\/www.googletagmanager.com https:\/\/bam.nr-data.net https:\/\/torfslnv.germany-2.evergage.com https:\/\/ixfd2-api.bc0a.com https:\/\/*.useinsider.com https:\/\/500009757.collect.igodigital.com https:\/\/www.facebook.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/ct.pinterest.com https:\/\/*.doubleclick.net https:\/\/*.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/*.criteo.com https:\/\/*.noibu.com wss:\/\/*.noibu.com https:\/\/*.cquotient.com https:\/\/*.contentsquare.net https:\/\/*.contentsquare.com https:\/\/*.getflowbox.com https:\/\/sstg.torfs.be https:\/\/chatbot.torfs.be; style-src 'self' 'unsafe-inline' https:\/\/fonts.gstatic.com; font-src 'self' https:\/\/fonts.gstatic.com; img-src 'self' data: https:; frame-src 'self' https:\/\/sstg.torfs.be https:\/\/player.vimeo.com https:\/\/www.google.com https:\/\/*.doubleclick.net https:\/\/*.g.doubleclick.net https:\/\/www.facebook.com https:\/\/*.criteo.com https:\/\/ct.pinterest.com https:\/\/*.useinsider.com; worker-src 'self' blob: https:\/\/*.useinsider.com; child-src 'self' blob: https:\/\/*.useinsider.com https:\/\/*.contentsquare.net; frame-ancestors 'self'; form-action 'self' https:\/\/www.facebook.com; report-uri https:\/\/www.torfs.be\/on\/demandware.store\/Sites-Torfs-Webshop-BE-Site\/nl_BE\/CSPReport-Collect","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https:\/\/www.googletagmanager.com *.googleapis.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com cdn.hedonskate.com cdn.bladeville.pl cdn.bladeville.com *.facebook.com *.facebook.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * apm.przelewy24.pl secure.payu.com merch-prod.snd.payu.com https:\/\/player.vimeo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com static.przelewy24.pl www.gstatic.com gstatic.com static.payu.com cdn.hedonskate.com cdn.bladeville.pl cdn.bladeville.com bladeville.dev.aur.ac bladevilleen.dev.aur.ac *.facebook.com *.facebook.net blob: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https:\/\/www.googletagmanager.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl apm.przelewy24.pl secure.payu.com secure.snd.payu.com cdn.hedonskate.com cdn.bladeville.pl cdn.bladeville.com bladeville.dev.aur.ac bladevilleen.dev.aur.ac *.facebook.com *.facebook.net https:\/\/furgonetka.pl *.jsdelivr.net api.mapbox.com https:\/\/unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/www.googletagmanager.com tagmanager.google.com *.googleapis.com https:\/\/static.klaviyo.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com cdn.hedonskate.com cdn.bladeville.pl cdn.bladeville.com bladeville.dev.aur.ac bladevilleen.dev.aur.ac *.facebook.com *.facebook.net api.mapbox.com *.jsdelivr.net https:\/\/unpkg.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl wss:\/\/ws.przelewy24.pl wss:\/\/sandbox-ws.przelewy24.pl wss:\/\/secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com secure.payu.com merch-prod.snd.payu.com cdn.hedonskate.com cdn.bladeville.pl cdn.bladeville.com bladeville.dev.aur.ac bladevilleen.dev.aur.ac *.facebook.com *.facebook.net *.furgonetka.pl https:\/\/unpkg.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/bounce.com https:\/\/*.bounce.com https:\/\/usebounce.com https:\/\/*.usebounce.com https:\/\/*.usebounce.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https:\/\/bounce.com https:\/\/*.bounce.com https:\/\/usebounce.com https:\/\/*.usebounce.com https:\/\/*.usebounce.io https:\/\/accounts.google.com https:\/\/apis.google.com https:\/\/appleid.cdn-apple.com https:\/\/bat.bing.com https:\/\/cdn.amplitude.com https:\/\/cdnjs.cloudflare.com https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net https:\/\/js.intercomcdn.com https:\/\/maps.googleapis.com https:\/\/static.intercomcdn.com https:\/\/vercel.live https:\/\/tagmanager.google.com https:\/\/widget.intercom.io https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com; script-src-elem 'self' 'unsafe-inline' blob: https:\/\/bounce.com https:\/\/*.bounce.com https:\/\/usebounce.com https:\/\/*.usebounce.com https:\/\/*.usebounce.io https:\/\/accounts.google.com https:\/\/apis.google.com https:\/\/appleid.cdn-apple.com https:\/\/bat.bing.com https:\/\/cdn.amplitude.com https:\/\/cdnjs.cloudflare.com https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net https:\/\/js.intercomcdn.com https:\/\/maps.googleapis.com https:\/\/static.intercomcdn.com https:\/\/vercel.live https:\/\/tagmanager.google.com https:\/\/widget.intercom.io https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com; style-src 'self' 'unsafe-inline' https:\/\/bounce.com https:\/\/*.bounce.com https:\/\/usebounce.com https:\/\/*.usebounce.com https:\/\/*.usebounce.io https:\/\/fonts.googleapis.com https:\/\/www.google.com; style-src-elem 'self' 'unsafe-inline' https:\/\/bounce.com https:\/\/*.bounce.com https:\/\/usebounce.com https:\/\/*.usebounce.com https:\/\/*.usebounce.io https:\/\/fonts.googleapis.com https:\/\/www.google.com; img-src 'self' data: blob: https: http: https:\/\/bounce.com https:\/\/*.bounce.com https:\/\/usebounce.com https:\/\/*.usebounce.com https:\/\/*.usebounce.io; font-src 'self' data: blob: https:\/\/bounce.com https:\/\/*.bounce.com https:\/\/usebounce.com https:\/\/*.usebounce.com https:\/\/*.usebounce.io https:\/\/appdown.pstatic.net https:\/\/assets.cdn.bounc3.com https:\/\/cdnjs.cloudflare.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/fonts.intercomcdn.com https:\/\/js.intercomcdn.com; connect-src 'self' data: blob: https: wss:; worker-src 'self' blob: https:\/\/bounce.com https:\/\/*.bounce.com https:\/\/usebounce.com https:\/\/*.usebounce.com https:\/\/*.usebounce.io; frame-src 'self' https:\/\/bounce.com https:\/\/*.bounce.com https:\/\/usebounce.com https:\/\/*.usebounce.com https:\/\/*.usebounce.io https:\/\/accounts.google.com https:\/\/appleid.apple.com https:\/\/intercom-sheets.com https:\/\/td.doubleclick.net https:\/\/vercel.live https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/www.facebook.com; media-src 'self' blob: https:\/\/bounce.com https:\/\/*.bounce.com https:\/\/usebounce.com https:\/\/*.usebounce.com https:\/\/*.usebounce.io https:\/\/js.intercomcdn.com; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/www.facebook.com; frame-ancestors 'none'; upgrade-insecure-requests; report-to https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub8e50b3cc2c1956779a374061145a7883&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Amarketing-web; report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub8e50b3cc2c1956779a374061145a7883&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Amarketing-web","count":2},{"content-security-policy-report-only":" default-src 'self';style-src 'self' 'unsafe-inline' *.googleapis.com;font-src 'self' data: *.googleapis.com *.gstatic.com *.youtube.com *.vimeo.com;script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.doubleclick.net *.googleapis.com *.adtrafficquality.google *.googletagmanager.com *.google-analytics.com *.pendo.io *.google.com *.gstatic.com *.kaltura.com *.kaltura.net *.zoom.us zoom.us *.js.ubembed.com assets.ubembed.com zendesk.com *.zendesk.com *.stripe.com static.zdassets.com *.sentry.io *.linkedin.com *.scriptintel.io;connect-src 'self' *.google-analytics.com *.google.com *.analytics.google.com *.doubleclick.net *.pendo.io *.kaltura.com *.sentry.io *.kaltura.net *.googlesyndication.com *.adtrafficquality.google wss:\/\/tsock.us1.twilio.com\/v3\/wsconnect wss:\/\/*.zoom.us *.cloudfront.net *.zoom.us;frame-src 'self' *.twilio.com *.doubleclick.net *.vimeo.com *.youtube.com *.kaltura.com *.kaltura.net *.pendo.io *.googletagmanager.com *.googlesyndication.com *.google *.google.com kitaboo.firsthand.co *.stripe.com static.zdassets.com;frame-ancestors 'none';img-src 'self' data: blob: https:;media-src 'self' data: blob: *.youtube.com *.vimeo.com *.kaltura.com *.kaltura.net;worker-src 'self' blob:;report-uri \/api\/csp-report","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:\/\/lh3.googleusercontent.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com; font-src 'self'; connect-src 'self' https:\/\/*.google-analytics.com https:\/\/www.googletagmanager.com; frame-src https:\/\/www.googletagmanager.com; object-src 'none'; base-uri 'self'","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.netonnet.com https:\/\/*.netonnet.se https:\/\/*.netonnet.no https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/chat.kindlycdn.com https:\/\/*.videoly.co https:\/\/cdn.loadbee.com https:\/\/scripts.clarity.ms https:\/\/www.clarity.ms https:\/\/mycliplister.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:\/\/assets.netonnet.com https:\/\/mycliplister.com https:\/\/*.mycliplister.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/chat.kindlycdn.com; connect-src 'self' blob: https: wss:; frame-src 'self' https:; worker-src 'self' blob:; manifest-src 'self'; report-uri \/api\/csp-report","count":2},{"content-security-policy-report-only":" default-src 'self' data:; img-src 'self' data: *.hva.nl *.amsterdamuas.com imgsct.cookiebot.com; script-src 'unsafe-eval' 'unsafe-inline' 'self' consent.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu www.googletagmanager.com www.google.com www.google-analytics.com; script-src-elem 'unsafe-inline' 'self' consent.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu www.googletagmanager.com www.google.com www.google-analytics.com; object-src 'self'; base-uri 'none'; frame-ancestors 'self'; frame-src 'self' consent.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu www.google.com; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.gstatic.com; connect-src 'self' *.hva.nl *.amsterdamuas.com www.google-analytics.com www.googletagmanager.com consent.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu","count":2},{"content-security-policy-report-only":" default-src 'self' *.adsrvr.org *.google.com *.doubleclick.net *.optimizely.com *.facebook.com *.cookielaw.org *.clarity.ms apps.usw2.pure.cloud www.googletagmanager.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com cdn.jsdelivr.net code.jquery.com embed.signalintent.com *.optimizely.com cdn.segment.com *.googleapis.com www.googletagmanager.com www.google.com www.gstatic.com *.btttag.com *.bing.com *.app-us1.com *.adsrvr.org *.doubleclick.net *.cookielaw.org www.google-analytics.com *.mypurecloud.com *.googleadservices.com *.pure.cloud *.aptrinsic.com *.bootstrapcdn.com js.monitor.azure.com *.facebook.net *.facebook.com trackcmp.net extractable-finalytics-storage.s3.us-west-2.amazonaws.com extractable-finalytics-stable.s3.us-west-2.amazonaws.com *.cloudfront.net snap.licdn.com www.redditstatic.com;style-src 'self' 'unsafe-inline' use.fontawesome.com use.typekit.net embed.signalintent.com p.typekit.net *.mypurecloud.com *.googleapis.com *.aptrinsic.com *.jsdelivr.net *.bootstrapcdn.com extractable-finalytics-storage.s3.us-west-2.amazonaws.com extractable-finalytics-stable.s3.us-west-2.amazonaws.com *.cloudfront.net;img-src 'self' data: bat.bing.com *.google.com www.google-analytics.com content-cdn.com *.gstatic.com *.googleapis.com www.googletagmanager.com *.facebook.net *.facebook.com *.adsrrvr.org *.doubleclick.net *.yahoo.com *.cookielaw.org *.googlesyndication.com *.ads.linkedin.com embed.signalintent.com insight.adsrvr.org ib.adnxs.com *.reddit.com;font-src 'self' use.fontawesome.com embed.signalintent.com use.typekit.net *.mypurecloud.com *.gstatic.com *.googleapis.com *.cloudfront.net data:;connect-src 'self' ws: wss: *.googlesyndication.com signal-intent-production-back.herokuapp.com cdn.segment.com *.optimizely.com *.cookielaw.org calc-backend-prod.herokuapp.com d.btttag.com *.googleapis.com www.google-analytics.com api.segment.io *.doubleclick.net *.alaskausa.org *.bing.com *.aptrinsic.com *.episerver.net *.visualstudio.com *.google.com *.facebook.com finalyticsdata.com devfinalyticsdata.com stgfinalyticsdata.com px.ads.linkedin.com api-cdn.usw2.pure.cloud pixel-config.reddit.com www.redditstatic.com;worker-src 'self' blob:;block-all-mixed-content","count":2},{"content-security-policy-report-only":" frame-src 'self' https:\/\/lvpr.tv https:\/\/player.kick.com https:\/\/hosted.paysafe.com https:\/\/*.pay.com https:\/\/buy.moonpay.com https:\/\/*.meshconnect.com https:\/\/cdn.plaid.com https:\/\/*.amazoncognito.com https:\/\/*.myprize.us https:\/\/*.myprize.com https:\/\/*.tequity.ventures https:\/\/*.relaxg.com https:\/\/*.hacksawgaming.com https:\/\/*.bgaming-network.com https:\/\/*.evo-games.com https:\/\/*.petros04.com https:\/\/*.bangspin.com https:\/\/*.slotmill.com https:\/\/*.vegassoftware.com https:\/\/*.mascot.games https:\/\/*.netgaming.com https:\/\/*.pubinterlayer.online https:\/\/*.bgaming-system.com https:\/\/*.marbles.xyz https:\/\/open.mascot.host https:\/\/assets.cdn.systems https:\/\/*.konquer.tech https:\/\/*.gmslnk001.cfd https:\/\/*.gmslnk002.cfd https:\/\/static.8127-dg.com https:\/\/lajyanayd8.yrolduiyie.net https:\/\/mck6861dje.xtsbzfybyl.net https:\/\/*.repackz.fun https:\/\/*.thndr-cdn.com https:\/\/*.snapchat.com https:\/\/*.facebook.com https:\/\/*.adform.net https:\/\/*.vibe.co https:\/\/www.aerosync.com https:\/\/sandbox.aerosync.com https:\/\/*.amazonaws.com; report-uri https:\/\/devops-web-reporting-api.use1.prod.myprize.io\/v1\/reports","count":2},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' blob: data: https:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' http:\/\/*.quantserve.com https: https:\/\/*.doubleclick.net https:\/\/*.teads.tv; worker-src 'self' blob:; connect-src 'self' https: wss:; img-src 'self' https:; frame-src 'self' http:\/\/*.trendmicro.com https:; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" default-src 'self';  script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval'   *.hubspot.com *.cookielaw.org *.cdntwrk.com *.wistia.com *.wistia.net *.q2.com   *.sentry-cdn.com *.clarity.ms *.google.com *.googletagmanager.com *.googleapis.com   *.googleadservices.com *.gstatic.com *.hsappstatic.com *.hsappstatic.net *.hubspot.net   *.hs-banner.com *.hsadspixel.net *.hs-analytics.com *.hs-analytics.net *.licdn.com   *.marketo.net *.marketo.com *.zoominfo.com *.bizible.com *.6sc.co *.qualified.com   *.segment.com *.bugcrowd.com *.bugcrowdusercontent.com bugcrowd.com   *.jsdeliver.net *.jsdelivr.net *.cloudflare.com *.doubleclick.net *.youtube.com   *.hubspotusercontent-na1.net *.pathfactory.com *.zuddl.com   8ab0a26cb0027939bcf5-49c99c3c0c9c98b3365b710757036e1b.ssl.cf5.rackcdn.com   *.crazyegg.com *.callrail.com *.linkedin.com *.facebook.net *.twitter.com;  style-src 'self' *.q2.com 'report-sample' 'unsafe-inline'   *.cdntwrk.com *.googleapis.com *.hsappstatic.net *.hubspot.net   *.jsdeliver.net *.jsdelivr.net *.marketo.com   7044196.fs1.hubspotusercontent-na1.net 7044196.fs2.hubspotusercontent-na1.net   *.hubspotusercontent-na1.net *.pathfactory.com *.googletagmanager.com   *.zuddl.com *.qualified.com;  object-src 'none';  base-uri 'self';  connect-src 'self'   *.mktoresp.com *.hubspotusercontent-na1.net *.google.com *.hubspot.com   *.hs-banner.com *.onetrust.com *.cookielaw.org *.wistia.com   *.embed-cloudfront.wistia.com *.wistia.net *.6sc.co *.6sense.com   *.qualified.com wss:\/\/*.qualified.com *.segment.com *.segment.io *.linkedin.com   *.google-analytics.com *.clarity.ms *.hubapi.com *.doubleclick.com   https:\/\/stats.g.doubleclick.net *.zoominfo.com *.adnxs.com *.litix.io   *.marketo.com *.doubleclick.net *.youtube.com *.pathfactory.com   *.zuddl.com api.prod.zuddl.com *.crazyegg.com *.gonorth.io *.callrail.com   *.googleadservices.com *.sentry-cdn.com *.hsappstatic.net;  font-src 'self' data:   *.gstatic.com *.cdntwrk.com *.wistia.com *.wistia.net   7044196.fs1.hubspotusercontent-na1.net *.pathfactory.com *.zuddl.com *.hsappstatic.net;  frame-src 'self' *.q2.com *.qualified.com *.doubleclick.net *.wistia.net *.gstatic.com   *.google.com *.googletagmanager.com *.bugcrowd.com bugcrowd.com *.hubspotvideo.com   *.marketo.com *.youtube.com *.pathfactory.com *.uberflip.com *.zuddl.com *.on24.com   *.libsyn.com *.megaphone.fm *.twitter.com;  img-src 'self' *.q2.com data:   *.hubspotusercontent-na1.net *.hsappstatic.net *.6sc.co *.cdntwrk.com   *.cookielaw.org *.wistia.com *.hsforms.com *.linkedin.com *.hubspot.com *.hubspot.net   *.bizible.com *.cloudinary.com *.clarity.ms *.bing.com *.googletagmanager.com   *.placeholder.com *.marketo.com googleads.g.doubleclick.net *.doubleclick.net   *.google.com *.youtube.com *.hubspotusercontent40.net *.pathfactory.com   *.bizibly.com *.gstatic.com *.zuddl.com *.imgix.net *.wistia.net *.qualified.com;  manifest-src 'self';  media-src 'self' *.q2.com   7044196.fs1.hubspotusercontent-na1.net 7044196.fs2.hubspotusercontent-na1.net   7044196.fs1.hubspotusercontent-eu1.net 7044196.fs2.hubspotusercontent-eu1.net   *.marketo.com blob: *.doubleclick.net *.youtube.com *.pathfactory.com;  form-action 'self'   *.marketo.com *.mktoweb.com *.zuddl.com *.callrail.com *.googleadservices.com   *.qualified.com;  frame-ancestors 'self' *.q2.com *.pathfactory.com *.lookbookhq.com https:\/\/zuddl.com https:\/\/*.zuddl.com;  report-to https:\/\/343747560e392f7a31ae9a0247c09302.report-uri.com\/r\/d\/csp\/reportOnly","count":2},{"content-security-policy-report-only":" default-src 'self' http: filesystem: https:\/\/*-c2es.pantheonsite.io\/ https:\/\/c2es.ddev.site https:\/\/*.addthis.com https:\/\/*.youtube.com; script-src 'unsafe-inline' 'unsafe-eval' http: filesystem: https:\/\/*.google.com https:\/\/fonts.googleapis.com https:\/\/ajax.googleapis.com https:\/\/jnn-pa.googleapis.com https:\/\/*.googletagmanager.com https:\/\/*.youtube.com https:\/\/*.addthis.com https:\/\/*.google-analytics.com https:\/\/*.ytimg.com https:\/\/*.moatads.com https:\/\/*.doubleclick.net https:\/\/*.addthisedge.com https:\/\/cdnjs.cloudflare.com; style-src 'unsafe-inline' http: filesystem: https:\/\/*.google.com https:\/\/fonts.googleapis.com https:\/\/ajax.googleapis.com https:\/\/jnn-pa.googleapis.com https:\/\/*.youtube.com; img-src 'self' http: data: filesystem: https:\/\/*.ytimg.com https:\/\/*.ggpht.com https:\/\/*.gstatic.com https:\/\/*.google-analytics.com; connect-src 'self' filesystem: https:\/\/*.google-analytics.com https:\/\/*.bookingbug.com https:\/\/geolocation.onetrust.com https:\/\/*.cookielaw.org https:\/\/fonts.googleapis.com https:\/\/ajax.googleapis.com https:\/\/jnn-pa.googleapis.com *.addtoany.com; font-src 'self' data: filesystem: fonts.gstatic.com use.typekit.net use.fontawesome.com bespoke.bookingbug.com; media-src 'self' filesystem: *.youtube.com *.vimeo.com *.akamaized.net; report-uri 'self'; child-src 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'self'; frame-src 'self'; worker-src 'self'; manifest-src 'self'; navigate-to 'self'; prefetch-src 'self'; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https: data:; connect-src 'self' https:;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; font-src 'self'; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/clients.bertina.us https:\/\/api.indexnow.org; worker-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https:\/\/clients.bertina.us","count":2},{"content-security-policy-report-only":" default-src 'self';  script-src 'self' https:\/\/js.stripe.com https:\/\/www.googletagmanager.com https:\/\/widget.usepylon.com https:\/\/plausible.io https:\/\/www.google-analytics.com https:\/\/js.appetize.io;  style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/widget.usepylon.com;  img-src 'self' data: https:\/\/codemagic.io https:\/\/widget.usepylon.com https:\/\/px.ads.linkedin.com https:\/\/storage.googleapis.com https:\/\/avatars.githubusercontent.com https:\/\/avatars.usepylon.com https:\/\/www.googletagmanager.com;  font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/widget.usepylon.com https:\/\/codemagic.io;  connect-src 'self' wss:\/\/ws2.codemagic.io https:\/\/ws2.codemagic.io https:\/\/api.codemagic.io https:\/\/status.codemagic.io https:\/\/api.stripe.com https:\/\/www.google-analytics.com https:\/\/api.rollbar.com https:\/\/widget.usepylon.com https:\/\/apichatwidget.usepylon.com https:\/\/plausible.io https:\/\/api.hsforms.com https:\/\/*.appetize.io wss:\/\/*.appetize.io;  frame-src 'self' https:\/\/js.stripe.com https:\/\/hooks.stripe.com https:\/\/www.youtube-nocookie.com https:\/\/*.appetize.io;  base-uri 'self';  object-src 'none';  frame-ancestors 'self';","count":2},{"content-security-policy-report-only":" font-src data: *.gstatic.com *.tryggehandel.net tryggehandel.net *.googleapis.com googleapis.com *.adsrvr.org data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com *.collector.se *.cardinalcommerce.com *.jobylon.com *.doubleclick.net *.proffs.se *.walleydev.com *.walleypay.com doubleclick.net *.adsrvr.org *.dotdigital-pages.com *.dotdigital.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/images.unsplash.com googleadservices.com google-analytics.com *.magentocommerce.com *.s.ytimg.com *.googleadservices.com *.google-analytics.com *.googleapis.com googleapis.com *.gstatic.com *.collector.se *.adnxs.com *.byggmax.se *.byggmax.no *.byggmax.fi *.byggmax.dk *.byggmax.com byggmax.se byggmax.no byggmax.fi byggmax.com byggmax.dk www.byggmax.se www.byggmax.no www.byggmax.fi www.byggmax.dk *.bing.com bing.com *.teads.tv teads.tv *.smartadserver.com smartadserver.com *.rubiconproject.com rubiconproject.com *.3lift.com 3lift.com *.smaato.net *.taboola.com taboola.com *.doubleclick.com *.360yield.com 360yield.com *.yahoo.com *.casalemedia.com casalemedia.com *.openx.net *.sharethrough.com sharethrough.com *.bidswitch.net *.pubmatic.com pubmatic.com *.omnitagjs.com omnitagjs.com *.yieldmo.com yieldmo.com *.ivitrack.com ivitrack.com *.advertising.com *.stickyadstv.com *.media.net media.net *.doubleclick.net *.e-planning.net *.clmbtech.com *.adform.net adform.net *.liadm.com *.postrelease.com postrelease.com *.smartclip.net *.krxd.net *.ad-stir.com *.outbrain.com outbrain.com *.tremorhub.com tremorhub.com *.demdex.net *.pingdom.net *.adscale.de *.twiago.com *.google.com *.google.se *.bluekai.com *.wisepops.com *.tapad.com *.mgid.com *.rambler.ru *.thebrighttag.com *.walleypay.com *.1rx.io 1rx.io id5-sync.com *.id5-sync.com *.mediavine.com mediavine.com *.yieldlab.net yieldlab.net *.emxdgt.com emxdgt.com *.unrulymedia.com unrulymedia.com *.tryggehandel.net tryggehandel.net adnxs.com cm.g.doubleclick.net bidswitch.net www.facebook.com *.quantserve.com quantserve.com *.adsrvr.org *.trackedlink.net https:\/\/cdn.flbx.io data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.google-analytics.com *.collector.se *.assets.adobedtm.com *.authorize.net *.geostag.cardinalcommerce.com *.paypal.com *.vimeo.com *.ccdc02.com google.com *.braintreegateway.com *.ytimg.com *.signifyd.com *.adnxs.com adnxs.com adtr.io *.googletagmanager.com *.trackedlink.net *.jobylon.com *.doubleclick.net doubleclick.net *.googleapis.com googleapis.com *.byggmax.se *.byggmax.no *.byggmax.fi *.byggmax.com *.byggmax.dk byggmax.se byggmax.no byggmax.fi byggmax.com byggmax.dk www.byggmax.se www.byggmax.no www.byggmax.fi www.byggmax.dk *.bing.com *.hotjar.com hotjar.com bing.com *.cloudflare.com *.wisepops.com *.facebook.net facebook.net *.quantserve.com quantserve.com *.quantcount.com *.cloudflareinsights.com *.pingdom.net pingdom.net *.getflowbox.net *.kuvio.io kuvio.io *.walleydev.com *.tryggehandel.net tryggehandel.net *.dynamicyield.com dynamicyield.com *.testfreaks.com testfreaks.com *.walleypay.com *.videoly.co dialogtrail.com *.dialogtrail.com wisepops.net *.wisepops.net *.adsrvr.org *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.trustpilot.com https:\/\/cdn.flbx.io https:\/\/connect.getflowbox.com http:\/\/connect.getflowbox.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com googleapis.com *.byggmax.se *.byggmax.no *.byggmax.fi *.byggmax.dk www.byggmax.se www.byggmax.no www.byggmax.fi www.byggmax.dk *.adsrvr.org *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.flbx.io flbx.io *.adsrvr.org 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.wisepops.com *.google-analytics.com google-analytics.com *.collector.se *.pingdom.net pingdom.net *.adnxs.com adnxs.com *.walleydev.com *.walleypay.com *.dynamicyield.com dynamicyield.com www.google.com google.com *.google.com *.doubleclick.net doubleclick.net *.dialogtrail.com dialogtrail.com *.ebbot.app ebbot.app *.adsrvr.org *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https:\/\/*.amazonaws.com https:\/\/cdn.flbx.io https:\/\/connect.getflowbox.com http:\/\/connect.getflowbox.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.oney.io *.staging.oney.io *.fontawesome.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https:\/\/pinterest.com https:\/\/www.pinterest.com appleid.apple.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.gelproximity.com *.hipay-tpp.com *.hipay.com *.googleapis.com https:\/\/www.googletagmanager.com\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.openstreetmap.org *.salesmanago.pl *.salesmanago.es *.salesmanago.com https:\/\/maps.googleapis.com *.hipay.com *.googleapis.com *.oney.io *.staging.oney.io http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.gelproximity.com *.hipay.com *.hipay-tpp.com https:\/\/mpsnare.iesnare.com *.zdassets.com *.zipchat.ai *.salesmanago.pl *.salesmanago.es *.salesmanago.com mpsnare.iesnare.com *.paypal.com *.googleapis.com *.oney.io *.staging.oney.io http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.hipay.com *.googleapis.com *.fontawesome.com assets.braintreegateway.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.zdassets.com data: mpsnare.iesnare.com *.googleapis.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.zendesk.com *.zdassets.com *.zopim.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.openstreetmap.org https:\/\/maps.googleapis.com *.hipay-tpp.com *.hipay.com wss:\/\/mpsnare.iesnare.com *.googleapis.com *.oney.io *.staging.oney.io http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.gstatic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src bonialconnect.com *.oney.io assets.app.smart-tribune.com cdnjs.cloudflare.com api-gateway.app.smart-tribune.com polyfill-fastly.io data: 'self' 'unsafe-inline'; form-action secure.ogone.com v1-sim.preprod.psp-solutions.com v2-sim.preprod.psp-solutions.com www.facebook.com\/tr\/ bpcepaymentservices-3ds-vdm.wlp-acs.com bnpp-3ds-vdm.wlp-acs.com assets.app.smart-tribune.com cdnjs.cloudflare.com api-gateway.app.smart-tribune.com polyfill-fastly.io pay.google.com 'self' 'unsafe-inline'; frame-src secure.ogone.com ogone.test.v-psp.com widget.trustpilot.com gum.criteo.com s.salecycle.com https:\/\/10766555.fls.doubleclick.net\/ static.criteo.net\/ www.facebook.com\/ magasins.bureau-vallee.fr magasins.bureau-vallee.be magasins.bureau-vallee.nc magasins.bureau-vallee.re magasins.bureau-vallee.gf magasins.bureau-vallee.yt magasins.bureau-vallee.gp magasins.bureau-vallee.sx t.clic2buy.com bpcepaymentservices-3ds-vdm.wlp-acs.com assets.app.smart-tribune.com cdnjs.cloudflare.com api-gateway.app.smart-tribune.com polyfill-fastly.io pay.google.com td.doubleclick.net accounts.google.com 'self' 'unsafe-inline'; img-src bva-preprod-fbi-fr-media-s3.s3.amazonaws.com bva-recette-fbi-fr-media-s3.s3.amazonaws.com bv-prd-fbi-fr-media.s3.eu-west-3.amazonaws.com bv-prd-fbi-fr-media.s3.amazonaws.com d2hlj6xfalexml.cloudfront.net d3n1o8ch79p937.cloudfront.net dxbyzx5id4chj.cloudfront.net bonialconnect.com content-media.bonial.biz rum-metrics.quanta.io bat.bing.com ib.adnxs.com www.facebook.com cm.g.doubleclick.net gum.criteo.com dis.criteo.com sync-t1.taboola.com x.bidswitch.net r.casalemedia.com ad.360yield.com contextual.media.net sync.outbrain.com pixel.rubiconproject.com match.sharethrough.com rtb-csync.smartadserver.com criteo-sync.teads.tv eb2.3lift.com ups.analytics.yahoo.com e1.emxdgt.com cm.adform.net visitor.omnitagjs.com id5-sync.com matching.ivitrack.com exchange.mediavine.com simage2.pubmatic.com criteo-partners.tremorhub.com ad.yieldlab.net sync-criteo.ads.yieldmo.com beacon.krxd.net s.thebrighttag.com www.bureau-vallee.fr www.google.fr bureauvallee-c6i.colop.com *.oney.io assets.app.smart-tribune.com cdnjs.cloudflare.com api-gateway.app.smart-tribune.com polyfill-fastly.io www.gstatic.com jadserve.postrelease.com ad.doubleclick.net jadserve.postrelease.com public-prod-dspcookiematching.dmxleo.com data: 'self' 'unsafe-inline'; script-src www.googletagmanager.com magasins.bureau-vallee.fr widget.trustpilot.com bonialconnect.com s3.amazonaws.com maps.googleapis.com\/ d16fk4ms6rqz1v.cloudfront.net bat.bing.com appstatic.quanta.io try.abtasty.com acdn.adnxs.com static.criteo.net sslwidget.criteo.com connect.facebook.net cdn.jsdelivr.net static.target2sell.com js-agent.newrelic.com\/ bam.eu01.nr-data.net *.oney.io magasins.bureau-vallee.be magasins.bureau-vallee.nc magasins.bureau-vallee.re magasins.bureau-vallee.gf magasins.bureau-vallee.yt magasins.bureau-vallee.gp magasins.bureau-vallee.sx rs.clic2buy.com assets.app.smart-tribune.com cdnjs.cloudflare.com api-gateway.app.smart-tribune.com polyfill-fastly.io pagead2.googlesyndication.com tpc.googlesyndication.com *.algolia.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src assets.app.smart-tribune.com cdnjs.cloudflare.com api-gateway.app.smart-tribune.com polyfill-fastly.io 'self' 'unsafe-inline'; manifest-src pay.google.com 'self' 'unsafe-inline'; connect-src s3.eu-west-1.amazonaws.com www.bonialserviceswidget.de maps.googleapis.com trackingapi.bonial.fr bonialconnect.com dcinfos-cache.abtasty.com ariane.abtasty.com c.salecycle.com api.ipify.org google.com i.salecycle.com wss:\/\/ws.salecycle.com\/ region1.analytics.google.com www.facebook.com serv-api.target2sell.com bat.bing.com\/actionp\/ rum-metrics.quanta.io reco.target2sell.com bam.eu01.nr-data.net www.google.fr *.oney.io autocomplete.geocoder.api.here.com assets.app.smart-tribune.com cdnjs.cloudflare.com api-gateway.app.smart-tribune.com polyfill-fastly.io try.abtasty.com pagead2.googlesyndication.com measurement-api.criteo.com 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; default-src https:\/\/epaync.nc\/vads-payment\/ https:\/\/epaync.nc\/api-payment\/ https:\/\/epaync.nc\/static\/ *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src 'self'; frame-src 'self'; img-src 'self' data: https:\/\/img.airtel.tv https:\/\/moe-email-campaigns.s3.amazonaws.com https:\/\/image.moengage.com; style-src report-sample 'self' 'unsafe-inline'; script-src report-sample 'self' 'unsafe-inline' https:\/\/app.link\/_r https:\/\/cdn.branch.io\/branch-latest.min.js https:\/\/www.googletagmanager.com\/gtag\/js;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: https:\/\/*.monkeytilt.com https:\/\/*.monkeytilt.pro https:\/\/*.monkeytilt.io https:\/\/*.tiltrips.com https:\/\/img.monkeytilt.co https:\/\/d34lk2pr0k31uk.cloudfront.net https:\/\/d32bk3dvaelqfx.cloudfront.net https:\/\/d3hb5vvfdo7tpj.cloudfront.net https:\/\/d2lz2zlzfqehxx.cloudfront.net https:\/\/og-static.monkeytilt.com https:\/\/connect.facebook.net https:\/\/www.googletagmanager.com https:\/\/analytics.tiktok.com https:\/\/sc-static.net https:\/\/*.snapchat.com https:\/\/static.ads-twitter.com https:\/\/www.redditstatic.com https:\/\/cdn.blockchainads.io https:\/\/track.liftdsp.com https:\/\/static.cloudflareinsights.com https:\/\/*.i.posthog.com https:\/\/*.coinflow.cash https:\/\/coinflow.cash https:\/\/mpc2-prod-29-is5qnl632q-uc.a.run.app https:\/\/www.paypal.com https:\/\/pay.google.com https:\/\/*.paymentiq.io https:\/\/*.onramper.com https:\/\/*.onramper.dev https:\/\/*.nsureapi.com https:\/\/*.biahosted.com https:\/\/*.hub88.io https:\/\/*.fh8labs.com https:\/\/*.hacksawgaming.com https:\/\/*.gamingcorpscasino.com https:\/\/*.footballbookstage.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/unpkg.com https:\/\/cdn.tailwindcss.com https:\/\/us.i.posthog.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/*.monkeytilt.com https:\/\/*.monkeytilt.pro https:\/\/*.monkeytilt.io https:\/\/*.tiltrips.com https:\/\/img.monkeytilt.co https:\/\/d34lk2pr0k31uk.cloudfront.net https:\/\/d32bk3dvaelqfx.cloudfront.net https:\/\/d3hb5vvfdo7tpj.cloudfront.net https:\/\/d2lz2zlzfqehxx.cloudfront.net https:\/\/og-static.monkeytilt.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/unpkg.com https:\/\/cdn.tailwindcss.com; connect-src 'self' blob: data: ipc: wss:\/\/*.monkeytilt.pro wss:\/\/*.tiltrips.com https:\/\/*.monkeytilt.com https:\/\/*.monkeytilt.pro https:\/\/*.monkeytilt.io https:\/\/*.tiltrips.com https:\/\/img.monkeytilt.co https:\/\/d34lk2pr0k31uk.cloudfront.net https:\/\/d32bk3dvaelqfx.cloudfront.net https:\/\/d3hb5vvfdo7tpj.cloudfront.net https:\/\/d2lz2zlzfqehxx.cloudfront.net https:\/\/og-static.monkeytilt.com https:\/\/analytics.tiktok.com https:\/\/*.snapchat.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/www.google.com https:\/\/google.com https:\/\/www.googletagmanager.com https:\/\/cloudflareinsights.com https:\/\/*.i.posthog.com https:\/\/*.coinflow.cash https:\/\/coinflow.cash https:\/\/mpc2-prod-29-is5qnl632q-uc.a.run.app https:\/\/www.paypal.com https:\/\/pay.google.com https:\/\/*.paymentiq.io https:\/\/*.onramper.com https:\/\/*.onramper.dev https:\/\/*.nsureapi.com https:\/\/*.quiknode.pro https:\/\/blockstream.info https:\/\/*.biahosted.com https:\/\/*.hub88.io https:\/\/*.fh8labs.com https:\/\/*.hacksawgaming.com https:\/\/*.gamingcorpscasino.com https:\/\/*.footballbookstage.com https:\/\/us.i.posthog.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/*.monkeytilt.com https:\/\/*.monkeytilt.pro https:\/\/*.monkeytilt.io https:\/\/*.tiltrips.com https:\/\/img.monkeytilt.co https:\/\/d34lk2pr0k31uk.cloudfront.net https:\/\/d32bk3dvaelqfx.cloudfront.net https:\/\/d3hb5vvfdo7tpj.cloudfront.net https:\/\/d2lz2zlzfqehxx.cloudfront.net https:\/\/og-static.monkeytilt.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/unpkg.com https:\/\/cdn.tailwindcss.com; media-src 'self' data: blob: https:\/\/*.monkeytilt.com https:\/\/*.monkeytilt.pro https:\/\/*.monkeytilt.io https:\/\/*.tiltrips.com https:\/\/img.monkeytilt.co https:\/\/d34lk2pr0k31uk.cloudfront.net https:\/\/d32bk3dvaelqfx.cloudfront.net https:\/\/d3hb5vvfdo7tpj.cloudfront.net https:\/\/d2lz2zlzfqehxx.cloudfront.net https:\/\/og-static.monkeytilt.com; worker-src 'self' blob:; frame-src 'self' https:\/\/*.snapchat.com https:\/\/*.monkeytilt.com https:\/\/*.monkeytilt.pro https:\/\/*.monkeytilt.io https:\/\/*.tiltrips.com https:\/\/img.monkeytilt.co https:\/\/d34lk2pr0k31uk.cloudfront.net https:\/\/d32bk3dvaelqfx.cloudfront.net https:\/\/d3hb5vvfdo7tpj.cloudfront.net https:\/\/d2lz2zlzfqehxx.cloudfront.net https:\/\/og-static.monkeytilt.com https:\/\/*.coinflow.cash https:\/\/coinflow.cash https:\/\/mpc2-prod-29-is5qnl632q-uc.a.run.app https:\/\/www.paypal.com https:\/\/pay.google.com https:\/\/*.paymentiq.io https:\/\/*.onramper.com https:\/\/*.onramper.dev https:\/\/*.nsureapi.com https:\/\/*.biahosted.com https:\/\/*.hub88.io https:\/\/*.fh8labs.com https:\/\/*.hacksawgaming.com https:\/\/*.gamingcorpscasino.com https:\/\/*.footballbookstage.com; object-src 'none'; base-uri 'self' https:\/\/d34lk2pr0k31uk.cloudfront.net https:\/\/d32bk3dvaelqfx.cloudfront.net https:\/\/d3hb5vvfdo7tpj.cloudfront.net https:\/\/d2lz2zlzfqehxx.cloudfront.net https:\/\/og-static.monkeytilt.com; frame-ancestors 'self'; form-action 'self' https:\/\/*.monkeytilt.com https:\/\/*.monkeytilt.pro https:\/\/*.monkeytilt.io https:\/\/*.tiltrips.com https:\/\/img.monkeytilt.co https:\/\/d34lk2pr0k31uk.cloudfront.net https:\/\/d32bk3dvaelqfx.cloudfront.net https:\/\/d3hb5vvfdo7tpj.cloudfront.net https:\/\/d2lz2zlzfqehxx.cloudfront.net https:\/\/og-static.monkeytilt.com https:\/\/*.coinflow.cash https:\/\/coinflow.cash https:\/\/mpc2-prod-29-is5qnl632q-uc.a.run.app https:\/\/www.paypal.com https:\/\/pay.google.com https:\/\/*.paymentiq.io https:\/\/*.onramper.com https:\/\/*.onramper.dev https:\/\/*.nsureapi.com; report-uri \/csp-report\/; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" frame-ancestors 'self' https:\/\/bioland.we.network\/ https:\/\/my.dlv.de\/","count":2},{"content-security-policy-report-only":" default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: www.googletagmanager.com www.google-analytics.com *.contentsquare.net; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' blob: www.googletagmanager.com www.google-analytics.com www.googleadservices.com d1stxfv94hrhia.cloudfront.net commondatastorage.googleapis.com d2wy8f7a9ursnm.cloudfront.net cdn.ckeditor.com t.contentsquare.net contentsquare.com secure.livechatinc.com; style-src 'self' https: 'unsafe-inline'; child-src blob: https:\/\/accounts.google.com https:\/\/www.google.com https:\/\/storage.googleapis.com https:\/\/www.googletagmanager.com\/ https:\/\/www.paypalobjects.com https:\/\/*.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/*.doubleclick.net https:\/\/www.facebook.com https:\/\/connect.facebook.com https:\/\/facebook.com https:\/\/service.force.com https:\/\/finditparts.my.site.com https:\/\/finditparts.my.salesforce.com https:\/\/secure.livechatinc.com https:\/\/app.dover.com\/ https:\/\/app.dover.io\/ https:\/\/assets.braintreegateway.com; worker-src blob:; frame-ancestors 'self' https:\/\/buttercms.com https:\/\/app.fullbay.com; connect-src 'self' https: http:\/\/localhost:3035 ws:\/\/localhost:3035 ws:\/\/localhost:3001\/cable wss:\/\/www-build.finditparts.com\/cable wss:\/\/pim.finditparts.com\/cable wss:\/\/pim-staging.finditparts-cdn.com\/cable wss:\/\/www.finditparts.com\/cable apis.google.com maps.googleapis.com cdn.jsdelivr.net code.jquery.com www.google-analytics.com *.attn.tv *.contentsquare.net *.webeyez.com firehose.eu-west-1.amazonaws.com cognito-identity.eu-west-1.amazonaws.com secure.livechatinc.com","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'report-sample'; style-src 'self'; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net cdn.jsdelivr.net cdn.almapay.com *.googleapis.com https:\/\/www.gstatic.com data: fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.adyen.com pay.google.com *.paypal.com *.getalma.eu *.almapay.com\/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/www.googletagmanager.com\/ *.google.com\/ https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com https:\/\/www.youtube.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com https:\/\/*.gstatic.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.bird.eu https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.openstreetmap.org maps.googleapis.com maps.gstatic.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ https:\/\/www.magezon.com https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com cdn.jsdelivr.net *.almapay.com *.googleapis.com https:\/\/*.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/cdnjs.cloudflare.com https:\/\/polyfill-fastly.io https:\/\/browser.sentry-cdn.com sentry.bird.eu *.google.com\/ https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net *.almapay.com https:\/\/static.klaviyo.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.adyen.com *.google.com https:\/\/*.google.com payments-eu.amazon.com *.paypal.com *.getalma.eu *.almapay.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ maps.googleapis.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ https:\/\/*.ingest.sentry.io sentry.bird.eu https:\/\/ipinfo.io https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klevu.com *.ksearchnet.com *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.facebook.com webchat.jdg.co.za *.jdg.co.za *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com maps.googleapis.com chart.googleapis.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com *.facebook.com webchat.jdg.co.za *.jdg.co.za *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'unsafe-inline' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.trackedlink.net *.klevu.com *.ksearchnet.com oppwa.com *.oppwa.com *.peachpayments.com *.eu-west-1.amazonaws.com mrpg.scene7.com cdn.media.amplience.net *.cloudflare.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.facebook.com *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za amcglobal.sc.omtrdc.net media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com js.klevu.com *.ksearchnet.com maps.googleapis.com chart.googleapis.com *.oppwa.com oppwa.com *.peachpayments.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.facebook.com *.what3words.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klevu.com *.ksearchnet.com oppwa.com *.oppwa.com *.peachpayments.com *.cloudflare.com *.googleapis.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: *.yotpo.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klevu.com *.ksearchnet.com maps.googleapis.com chart.googleapis.com oppwa.com *.oppwa.com *.peachpayments.com *.testfreaks.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss:\/\/*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.what3words.com *.googleapis.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss:\/\/widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/security-hub.vaimo.network\/public\/api\/content-security-policy.php; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" connect-src 'self' data: *.pattersoncompanies.dev https:\/\/ad.doubleclick.net https:\/\/analytics.google.com https:\/\/bf23181kbe.bf.dynatrace.com https:\/\/consent.trustarc.com https:\/\/cta-service-cms2.hubspot.com https:\/\/d.monetate.net https:\/\/edge.api.brightcove.com https:\/\/forms.hscollectedforms.net https:\/\/forms.hsforms.com https:\/\/house-fastly-signed-us-east-1-prod.brightcovecdn.com https:\/\/ixfd2-api.bc0a.com https:\/\/logx.optimizely.com https:\/\/manifest.prod.boltdns.net https:\/\/px.ads.linkedin.com https:\/\/rs.fullstory.com https:\/\/rules.atgsvcs.com https:\/\/siteintercept.qualtrics.com https:\/\/tags.srv.stackadapt.com https:\/\/www.google.com; default-src 'self' blob: data: ; font-src 'self' data: https:\/\/ajax.aspnetcdn.com https:\/\/fonts.gstatic.com https:\/\/consent.trustarc.com https:\/\/use.typekit.net; frame-src https:\/\/a9189275809.cdn.optimizely.com https:\/\/pixel.mathtag.com https:\/\/www.google.com; img-src 'self' data: *.pattersoncompanies.dev https:\/\/analytics.twitter.com https:\/\/cf-images.us-east-1.prod.boltdns.net https:\/\/cdn.cloud.pattersoncompanies.com https:\/\/cdn.cloud.ecom-dev.pattersoncompanies.dev https:\/\/consent.trustarc.com https:\/\/dev-microservices-gw.corp-internal.ecom-dev.pattersoncompanies.dev https:\/\/forms-na1.hsforms.com https:\/\/forms.hsforms.com https:\/\/gw.pattersoncompanies.com https:\/\/metrics.brightcove.com https:\/\/perf-na1.hsforms.com https:\/\/px.ads.linkedin.com https:\/\/r.turn.com https:\/\/t.co https:\/\/track.hubspot.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.googletagmanager.com; media-src 'self' blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' *.pattersoncompanies.dev https:\/\/*.siteintercept.qualtrics.com https:\/\/app.convertful.com https:\/\/bat.bing.com https:\/\/billpay.pattersonvet.com https:\/\/capi-automation.s3.us-east-2.amazonaws.com https:\/\/cdn.bc0a.com https:\/\/cdn.callrail.com https:\/\/cdn.cloud.ecom-dev.pattersoncompanies.dev https:\/\/cdn.cloud.pattersoncompanies.com https:\/\/cdn.optimizely.com https:\/\/connect.facebook.net https:\/\/consent.trustarc.com https:\/\/content.pattersonvet.com https:\/\/d.monetate.net https:\/\/edge.fullstory.com https:\/\/f.monetate.net https:\/\/fonts.googleapis.com https:\/\/googleads.g.doubleclick.net https:\/\/gw.pattersoncompanies.com https:\/\/js-cdn.dynatrace.com https:\/\/js.hs-analytics.net https:\/\/js.hs-banner.com https:\/\/js.hscollectedforms.net https:\/\/js.hsforms.net https:\/\/js.hs-scripts.com https:\/\/js.hubspot.com https:\/\/p.typekit.net https:\/\/pattersonsupport--tst1.custhelp.com https:\/\/pattersonsupport--tst1.widget.custhelp.com https:\/\/pixel.mathtag.com https:\/\/players.brightcove.net https:\/\/r.turn.com https:\/\/rs.fullstory.com https:\/\/se.monetate.net https:\/\/siteintercept.qualtrics.com https:\/\/snap.licdn.com https:\/\/static.ads-twitter.com https:\/\/static.atgsvcs.com https:\/\/tags.srv.stackadapt.com https:\/\/use.typekit.net https:\/\/vjs.zencdn.net https:\/\/vsvipac01.rightnowtech.com https:\/\/www.clickcease.com https:\/\/www.google.ca https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com; style-src 'self' 'unsafe-inline' ; style-src-elem 'self' 'unsafe-inline' https:\/\/cdn.cloud.pattersoncompanies.com https:\/\/cdn.cloud.ecom-dev.pattersoncompanies.dev https:\/\/fonts.googleapis.com https:\/\/p.typekit.net https:\/\/tags.srv.stackadapt.com https:\/\/use.typekit.net; worker-src 'self' blob:;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/static.hj.contentsquare.net https:\/\/*.api.useinsider.com https:\/\/i.k-analytix.com https:\/\/device.neuralco.com.ar https:\/\/ecommerce-modal.modo.com.ar https:\/\/*.adyen.com https:\/\/sdk.mercadopago.com; connect-src 'self' https:\/\/p10-backend-for-frontend.prd.plataforma10.com https:\/\/p10-api-payments.prd.plataforma10.com https:\/\/prd-get-ip-user-lambda.plataforma10.com https:\/\/*.amplitude.com https:\/\/*.ingest.us.sentry.io https:\/\/browser-intake-datadoghq.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/*.contentsquare.net https:\/\/*.hotjar.io https:\/\/*.api.useinsider.com https:\/\/*.useinsider.com https:\/\/*.k-analytix.com https:\/\/*.konduto.com https:\/\/device.neuralco.com.ar https:\/\/*.adyen.com https:\/\/api.mercadopago.com https:\/\/script.google.com https:\/\/script.googleusercontent.com; frame-src 'self' https:\/\/p10-api-payments.prd.plataforma10.com https:\/\/*.adyen.com https:\/\/*.modo.com.ar https:\/\/www.googletagmanager.com; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/p10-api-payments.prd.plataforma10.com; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cdn.jsdelivr.net cdn.almapay.com *.bglobale.com *.global-e.com *.fontawesome.com fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/applepay.cdn-apple.com 'self' data: *.abtasty.com *.bocage.fr *.cdnfonts.com globale-prod.s3-eu-west-1.amazonaws.com *.googleusercontent.com *.iadvize.com *.isge49.com *.kameleoon.com ncspublicasset.s3.eu-west-3.amazonaws.com *.onestock-retail.io *.perplexity.ai s3-eu-west-1.amazonaws.com *.sensefuel.live data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https:\/\/pinterest.com https:\/\/www.pinterest.com appleid.apple.com *.facebook.com *.google.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.getalma.eu *.almapay.com\/ *.stripe.com\/ *.checkout.com\/ *.adyen.com\/ *.bglobale.com *.global-e.com *.google.com\/ *.payplug.com *.dalenys.com https:\/\/applepay.cdn-apple.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com *.onestock-retail.com\/ *.abtasty.com *.bing.com *.bocage.eu *.cloudflare.com *.cookiebot.com *.criteo.com *.criteo.net *.doubleclick.net *.effiliation.com *.facebook.com *.goodays.co *.googlesyndication.com *.googletagmanager.com *.iadvize.com *.pinterest.com *.snapchat.com *.vimeo.com vimeo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.bglobale.com *.global-e.com *.googleapis.com https:\/\/www.magezon.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com https:\/\/www.google.fr https:\/\/api.mapbox.com *.tile.openstreetmap.org https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/secure-magenta.dalenys.com *.hsforms.net *.hsforms.com 'self' data: *.abtasty.com *.adform.net *.adnxs.com *.advalo.com *.affilae.com *.batch.com *.bing.com *.bing.net *.bocage.eu *.bocage.fr bucket-ip-website.s3.eu-central-1.amazonaws.com *.contentsquare.net *.cookiebot.com *.criteo.com *.criteo.net d1oco4z2z1fhwp.cloudfront.net d3e54v103j8qbb.cloudfront.net *.doubleclick.net *.ebuyclub.com *.ekoo.co *.eram.eu *.eram.fr *.facebook.com *.facebook.net *.ggpht.com *.googleadservices.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.by www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.tt www.google.vu www.google.ws *.google.com google.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.iadvize.com *.isge49.com joko-mobile-app-media.s3.eu-west-1.amazonaws.com *.kameleoon.com *.kameleoon.eu *.lgw.io *.lifmo.ai *.media-amazon.com mellowyellow.com *.mellowyellow.com *.mellowyellow.eu *.mmtro.com mmtro.com *.onestock-retail.io *.openx.net *.outbrain.com *.pinterest.com s3-eu-west-1.amazonaws.com *.sensefuel.live *.sharepoint.com *.smartadserver.com *.snapchat.com *.taboola.com *.teads.tv *.tiktok.com *.twiago.com us-central1-shopmyinfluens.cloudfunctions.net *.vimeo.com *.webyn.ai *.xiti.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page cdn.jsdelivr.net *.bglobale.com *.global-e.com *.googleapis.com *.gstatic.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/maps.googleapis.com https:\/\/secure-magenta.dalenys.com https:\/\/applepay.cdn-apple.com api.payplug.com cdn.payplug.com *.hsforms.net *.hsforms.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com *.addthis.com *.abtasty.com *.adform.net *.affilae.com *.aticdn.net *.batch.com *.bing.com *.bocage.fr capi-automation.s3.us-east-2.amazonaws.com *.cloudflare.com *.contentsquare.com *.contentsquare.net *.cookiebot.com *.criteo.com *.criteo.net critizr.com d3e54v103j8qbb.cloudfront.net *.doubleclick.net dqfw2hlp4tfww.cloudfront.net *.ekoo.co *.eram.fr *.facebook.net *.goodays.co *.googleadservices.com translate.google.com.hk *.googlesyndication.com *.googletagmanager.com *.hotjar.com *.iadvize.com *.jquery.com *.kameleoon.com *.kameleoon.eu *.kameleoon.io *.lgw.io *.lifmo.ai *.mmtro.com mmtro.com *.onestock-retail.io *.pinimg.com *.pinterest.com sc-static.net *.sensefuel.com *.sensefuel.live *.snapchat.com *.taboola.com *.tiktok.com *.vimeo.com *.webyn.ai 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net *.bglobale.com *.global-e.com *.gstatic.com *.googleapis.com *.fontawesome.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/secure-magenta.dalenys.com *.abtasty.com *.bocage.fr *.critizr.com *.goodays.co *.googletagmanager.com *.iadvize.com *.kameleoon.com *.onestock-retail.io semji.github.io *.sensefuel.com *.sensefuel.live *.typekit.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.bing.com *.fbcdn.net *.googleapis.com *.gstatic.com *.lifmo.ai *.mellowyellow.com *.vimeocdn.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.getalma.eu *.almapay.com maps.googleapis.com https:\/\/nominatim.openstreetmap.org https:\/\/maps.googleapis.com t.elasticsuite.io *.hsforms.net *.hsforms.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com *.abtasty.com *.adnxs.com *.advalo.com *.affilae.com *.aticdn.net *.batch.com *.bing.com *.bing.net *.bocage.fr *.cloudflare.com *.contentsquare.com *.contentsquare.net *.cookiebot.com *.criteo.com *.criteo.net critizr.com *.deebr.co *.doubleclick.net *.ekoo.co *.eram.fr *.facebook.com *.facebook.net *.goodays.co *.googleadservices.com *.googleapis.com www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bj www.google.by www.google.ca www.google.cd www.google.ch www.google.cl www.google.cn www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.br www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.hk www.google.com.lb www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.uk www.google.co.za www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gg www.google.gr www.google.hr www.google.hu www.google.ie www.google.im www.google.is www.google.it www.google.kg www.google.lt www.google.lu www.google.lv www.google.md www.google.mg www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.td www.google.tn www.google.vu *.googlesyndication.com *.gstatic.com *.hotjar.com *.hotjar.io *.iadvize.com *.instagram.com *.jquery.com *.kameleoon.com *.kameleoon.eu *.kameleoon.io *.merchant-center-analytics.goog *.mmtro.com *.onestock-retail.io *.openx.net *.pinimg.com *.pinterest.com *.sensefuel.biz *.sensefuel.live *.snapchat.com *.taboola.com *.teads.tv *.tiktok.com *.typekit.net *.webyn.ai *.xiti.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com *.iadvize.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/ab48b69d-84be-485e-b94f-4ed50b3a5780.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' addtocalendar.com https:\/\/api.mapbox.com https:\/\/cdn.jsdelivr.net https:\/\/cdn.rawgit.com https:\/\/cdnjs.cloudflare.com https:\/\/static.addtoany.com https:\/\/unpkg.com https:\/\/www.google.com https:\/\/www.tintup.com unpkg.com; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' https:\/\/apps.elfsight.com https:\/\/static.elfsight.com https:\/\/www.youtube.com https:\/\/storage.elfsight.com https:\/\/apis.google.com https:\/\/www.googletagmanager.com https:\/\/elfsightcdn.com\/platform.js addtocalendar.com https:\/\/api.mapbox.com https:\/\/cdn.jsdelivr.net https:\/\/cdn.rawgit.com https:\/\/cdnjs.cloudflare.com https:\/\/static.addtoany.com https:\/\/unpkg.com https:\/\/www.google.com https:\/\/www.tintup.com unpkg.com; style-src 'self' 'unsafe-inline' https:\/\/p.typekit.net addtocalendar.com https:\/\/api.mapbox.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com https:\/\/use.typekit.net unpkg.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" font-src https:\/\/*.hotjar.com https:\/\/*.fontawesome.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com sandbox.secure.checkout.visa.com secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com business.facebook.com landofcoder.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com api-static.mercadopago.com *.doubleclick.net http:\/\/*.twitter.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com www.gstatic.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com https:\/\/facebook.com business.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/*.paypal.com *.sandbox.paypal.com https:\/\/*.paypalobjects.com https:\/\/assets.adobedtm.com https:\/\/amcglobal.sc.omtrdc.net https:\/\/dpm.demdex.net https:\/\/cm.everesttech.net https:\/\/*.adobe.com https:\/\/widgets.magentocommerce.com https:\/\/t.paypal.com https:\/\/fpdbs.paypal.com https:\/\/fpdbs.sandbox.paypal.com https:\/\/*.ftcdn.net https:\/\/*.behance.net https:\/\/*.vimeocdn.com https:\/\/i.ytimg.com https:\/\/d3sbl0c71oxeok.cloudfront.net https:\/\/dhkkzdfmpzvap.cloudfront.net https:\/\/d2bpzs5y44q6e0.cloudfront.net https:\/\/d37shgu97oizpd.cloudfront.net https:\/\/d1zlqll3enr74n.cloudfront.net https:\/\/d1jynp0fpwn93a.cloudfront.net https:\/\/d2cb3tokgpwh3v.cloudfront.net https:\/\/d1re8bfxx3pw6e.cloudfront.net https:\/\/d35u8xwkxs8vpe.cloudfront.net https:\/\/d13s9xffygp5o.cloudfront.net https:\/\/d388nbw0dwi1jm.cloudfront.net https:\/\/d11p2vtu3dppaw.cloudfront.net https:\/\/d3r89hiip86hka.cloudfront.net https:\/\/dc7snq0c8ipyk.cloudfront.net https:\/\/d5c7kvljggzso.cloudfront.net https:\/\/d2h8yg3ypfzua1.cloudfront.net https:\/\/d1b556x7apj5fb.cloudfront.net https:\/\/draz1ib3z71v2.cloudfront.net https:\/\/dr6hdp4s5yzfc.cloudfront.net https:\/\/d2bomicxw8p7ii.cloudfront.net https:\/\/d3aypcdgvjnnam.cloudfront.net https:\/\/d2a3iuf10348gy.cloudfront.net https:\/\/*.ssl-images-amazon.com https:\/\/*.ssl-images-amazon.co.uk https:\/\/*.ssl-images-amazon.co.jp https:\/\/*.ssl-images-amazon.it https:\/\/*.ssl-images-amazon.fr https:\/\/*.ssl-images-amazon.es https:\/\/*.ssl-images-amazon.de https:\/\/*.media-amazon.com https:\/\/*.media-amazon.co.uk https:\/\/*.media-amazon.co.jp https:\/\/*.media-amazon.it https:\/\/*.media-amazon.fr https:\/\/*.media-amazon.es https:\/\/*.media-amazon.de https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/graph.facebook.com https:\/\/business.facebook.com https:\/\/sandbox.secure.checkout.visa.com https:\/\/secure.checkout.visa.com https:\/\/sandbox-assets.secure.checkout.visa.com https:\/\/assets.secure.checkout.visa.com https:\/\/thm.visa.com https:\/\/cdn.aplazo.mx https:\/\/*.mercadopago.com https:\/\/*.mercadolivre.com https:\/\/*.mercadolibre.com https:\/\/*.mercadolibre.com.br https:\/\/*.mercadopago.com.br https:\/\/*.mlstatic.com https:\/\/*.mercadolivre.com.br https:\/\/*.mercadolibre.com.mx https:\/\/*.mercadolibre.com.ar https:\/\/*.mercadopago.com.mx https:\/\/b.stats.paypal.com https:\/\/dub.stats.paypal.com https:\/\/assets.braintreegateway.com https:\/\/c.paypal.com https:\/\/checkout.paypal.com https:\/\/*.sandbox.paypal.com https:\/\/*.yotpo.com https:\/\/*.steren.com.mx https:\/\/*.ocularsolution.com https:\/\/0.s3.envato.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com\/ https:\/\/bat.bing.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com songbirdstag.cardinalcommerce.com business.facebook.com landofcoder.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.bootstrapcdn.com https:\/\/*.hotjar.com https:\/\/*.fontawesome.com https:\/\/*.ocularsolution.com https:\/\/diffuser-cdn.app-us1.com https:\/\/*.liveperson.net https:\/\/*.omappapi.com http:\/\/js-na1.hs-scripts.com https:\/\/prism.app-us1.com http:\/\/*.twitter.com https:\/\/*.googleapis.com https:\/\/static.cloudflareinsights.com https:\/\/analytics.tiktok.com https:\/\/googleads.g.doubleclick.net https:\/\/calidad.steren.com.mx https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net https:\/\/*.hotjar.com https:\/\/*.fontawesome.com https:\/\/use.fontawesome.com https:\/\/*.omappapi.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com thm.visa.com business.facebook.com landofcoder.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/*.ocularsolution.com https:\/\/*.googleapis.com https:\/\/*.omappapi.com https:\/\/*.hubspot.com https:\/\/*.hscollectedforms.net https:\/\/bat.bing.com https:\/\/analytics.google.com https:\/\/analytics.tiktok.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" worker-src *.litter-robot.com *.litterbox.com *.whisker.com *.osano.com blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.elev.io *.paypalobjects.com *.klarnacdn.net *.shopify.com shop.app *.shopifysvc.com cdn.shopifycloud.com *.stripe.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.shopify.com shop.app *.shopifysvc.com cdn.shopifycloud.com pay.shopify.com *.stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.osano.com https:\/\/*.talkable.com *.klarna.com *.shopify.com shop.app *.shopifysvc.com cdn.shopifycloud.com pay.shopify.com *.stripe.com 'self' 'unsafe-inline'; img-src data: *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io widgets.automizely.com widgets.automizely.io *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.affirm.com *.affirm.ca *.certcapture.com magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.adnxs.com *.adsrvr.org *.applovin.com aa.agkn.com *.bidr.io *.bing.com *.doubleclick.net *.facebook.com *.gotolstoy.com *.lightboxcdn.com *.localizecdn.com *.reddit.com *.twitter.com *.pinterest.com *.pbbl.co *.tiktok.com *.litter-robot.com *.litterbox.com *.whisker.com https:\/\/*.ordergroove.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.shopify.com shop.app cdn.shopifycloud.com *.stripe.com *.paypalobjects.com *.googletagmanager.com *.disqus.com *.cdn.imgeng.in *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com ajax.googleapis.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.googleapis.com *.gstatic.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca *.certcapture.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.acsbapp.com *.adnxs.com *.ads-twitter.com *.adsrvr.org *.applovin.com *.attn.tv *.bing.com *.byspotify.com *.dixa.io *.dstillery.com *.elev.io *.exponea.com *.facebook.net *.gleamjs.io *.gotolstoy.com *.hotjar.com *.impactcdn.com *.iubenda.com *.lightboxcdn.com *.localizecdn.com action.media6degrees.com *.noibu.com *.onescreen.ai *.pepperjam.com *.pinimg.com *.pinterest.com *.redditstatic.com *.tiktok.com getrockerbox.com *.litter-robot.com *.litterbox.com *.whisker.com *.optimizely.com s3-us-west-2.amazonaws.com *.pbbl.co d2hrivdxn8ekm8.cloudfront.net c.amazon-adsystem.com *.osano.com https:\/\/*.ordergroove.com https:\/\/d2jjzw81hqbuqv.cloudfront.net https:\/\/di6re4dxelnn2.cloudfront.net https:\/\/elements.sika.health *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.shopify.com shop.app *.shopifysvc.com cdn.shopifycloud.com pay.shopify.com *.stripe.com cdn1.affirm.com *.googletagmanager.com *.google-analytics.com *.bloomreach.com *.paypalobjects.com *.disqus.com *.cdn.imgeng.in *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.certcapture.com assets.braintreegateway.com *.gotolstoy.com *.lightboxcdn.com *.plyr.io *.litter-robot.com *.litterbox.com *.whisker.com *.osano.com *.klarnacdn.net *.shopify.com shop.app cdn.shopifycloud.com *.stripe.com *.affirm.com *.adobedtm.com *.cdn.imgeng.in *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.gotolstoy.com *.litter-robot.com *.litterbox.com *.whisker.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com api.automizely.com api.automizely.io *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.affirm.com *.affirm.ca *.certcapture.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.acsbapp.com *.adsrvr.org *.adnxs.com *.applovin.com s.axon.ai c.albss.com *.attentivemobile.com *.attn.tv *.bing.com *.dixa.io *.doubleclick.net *.elev.io *.exponea.com *.facebook.com js.go2sdk.com *.googlesyndication.com *.gotolstoy.com *.hotjar.com *.hotjar.io wss:\/\/*.hotjar.com *.iubenda.com *.localizecdn.com *.noibu.com wss:\/\/*.noibu.com *.onescreen.ai *.pinterest.com *.plyr.io *.reddit.com *.redditstatic.com *.spotify.com *.tiktok.com *.litter-robot.com *.litterbox.com *.whisker.com *.optimizely.com *.telemetry.vaultdcr.com rp.liadm.com whisker.pxf.io *.osano.com https:\/\/*.ordergroove.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.shopify.com shop.app *.shopifysvc.com cdn.shopifycloud.com pay.shopify.com *.stripe.com *.googletagmanager.com *.bloomreach.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/472ad5a6-d25e-45ca-8d99-f4067de68ea9.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/www.google.com https:\/\/snap.licdn.com https:\/\/www.redditstatic.com https:\/\/policy.app.cookieinformation.com https:\/\/googleads.g.doubleclick.net https:\/\/secure.quantserve.com https:\/\/static.ads-twitter.com https:\/\/rules.quantcount.com https:\/\/analytics.tiktok.com https:\/\/tags.srv.stackadapt.com https:\/\/www.gstatic.com https:\/\/cdn.xsolla.net https:\/\/3001.scriptcdn.net https:\/\/infird.com; style-src 'self' 'unsafe-inline' https:\/\/tags.srv.stackadapt.com https:\/\/www.gstatic.com; img-src 'self' data: blob: https: https:\/\/cms.ioi.dk https:\/\/www.facebook.com https:\/\/px.ads.linkedin.com https:\/\/region1.google-analytics.com https:\/\/alb.reddit.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/ioi.dk https:\/\/use.typekit.net https:\/\/r2cdn.perplexity.ai; connect-src 'self' data: https:\/\/cms.ioi.dk https:\/\/region1.google-analytics.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/px.ads.linkedin.com https:\/\/alb.reddit.com https:\/\/pixel-config.reddit.com https:\/\/conversions-config.reddit.com https:\/\/www.redditstatic.com https:\/\/www.facebook.com https:\/\/policy.app.cookieinformation.com https:\/\/o4504207644033024.ingest.us.sentry.io https:\/\/vimeo.com https:\/\/prreqcroab.icu https:\/\/analytics.tiktok.com https:\/\/tags.srv.stackadapt.com https:\/\/www.googleadservices.com https:\/\/pixel.quantserve.com https:\/\/pixel.quantcount.com https:\/\/googleads.g.doubleclick.net https:\/\/analytics-ipv6.tiktokw.us https:\/\/consent.app.cookieinformation.com https:\/\/store.xsolla.com https:\/\/api.killadsapi.com https:\/\/overbridgenet.com; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/policy.app.cookieinformation.com https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/www.google.com https:\/\/www.facebook.com https:\/\/purchase.xsolla.com https:\/\/duertry.com https:\/\/access.workspace.google.com https:\/\/accounts.google.com; frame-ancestors 'self' https:\/\/dev-ioi-website.euwest01.umbraco.io https:\/\/stage-ioi-website.euwest01.umbraco.io https:\/\/ioi-website.euwest01.umbraco.io; media-src 'self' https:\/\/dev-ioi-website.euwest01.umbraco.io https:\/\/stage-ioi-website.euwest01.umbraco.io https:\/\/cms.ioi.dk; report-uri https:\/\/4ff80cf698c8fa08a42150e2d0fae142@o4504207644033024.ingest.us.sentry.io\/4510260682948608; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/client.stackcommerce.io https:\/\/js.stripe.com https:\/\/*.js.stripe.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/maps.googleapis.com https:\/\/googleads.g.doubleclick.net https:\/\/cdn.segment.com https:\/\/analytics-cdn.stackcommerce.net https:\/\/connect.facebook.net https:\/\/browser.sentry-cdn.com https:\/\/*.paypal.com https:\/\/www.paypal.com https:\/\/cdn-scripts.signifyd.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net https:\/\/analytics.tiktok.com https:\/\/static.ads-twitter.com https:\/\/bat.bing.com https:\/\/trc.taboola.com https:\/\/cdn.taboola.com https:\/\/*.clarity.ms blob: https:\/\/pxdrop.lijit.com https:\/\/static.zdassets.com https:\/\/app.enzuzo.com https:\/\/www.lightboxcdn.com https:\/\/www.zeropartyforms.com https:\/\/www-beta.stack-sonar.com https:\/\/jscloud.net https:\/\/s.opensend.com https:\/\/cdn.gladly.com https:\/\/www.upsellit.com https:\/\/app.upsellit.com https:\/\/cdn.p-n.io https:\/\/pixel.stackcommerce.dev https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/snowplow\/ https:\/\/cdn.aggle.net https:\/\/www.youtube.com https:\/\/cdn.optimizely.com; style-src 'self' 'unsafe-inline' https:\/\/client.stackcommerce.io https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/fonts.googleapis.com https:\/\/www.zeropartyforms.com; font-src 'self' https:\/\/use.typekit.net https:\/\/fonts.gstatic.com data:; img-src 'self' https:\/\/*.stackassets.com https:\/\/*.stripe.com https:\/\/*.paypal.com https:\/\/www.paypalobjects.com https:\/\/www.google-analytics.com https:\/\/googleads.g.doubleclick.net https:\/\/cm.g.doubleclick.net https:\/\/www.facebook.com https:\/\/bat.bing.com https:\/\/analytics.twitter.com https:\/\/t.co https:\/\/www.google.com https:\/\/api-beta.stack-sonar.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net https:\/\/seal-sanjose.bbb.org https:\/\/www.zeropartyforms.com https:\/\/tvspix.com https:\/\/www.upsellit.com https:\/\/*.liadm.com https:\/\/*.clarity.ms https:\/\/c.bing.com https:\/\/www.google.com.br https:\/\/img.youtube.com https:\/\/graph.facebook.com https:\/\/*.fbcdn.net https:\/\/stack-public-sale-image-embed.s3.amazonaws.com data: blob:; connect-src 'self' https:\/\/client.stackcommerce.io https:\/\/api.stackcommerce.net https:\/\/api.stripe.com https:\/\/maps.googleapis.com https:\/\/api.segment.io https:\/\/analytics-cdn.stackcommerce.net https:\/\/analytics-api.stackcommerce.net https:\/\/*.sentry.io https:\/\/*.paypal.com https:\/\/imgs.signifyd.com https:\/\/dp.signifyd.com https:\/\/analytics.tiktok.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/*.taboola.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/analytics.google.com https:\/\/www.google-analytics.com https:\/\/pagead2.googlesyndication.com https:\/\/ad.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/analytics.twitter.com https:\/\/t.co https:\/\/*.clarity.ms https:\/\/use.typekit.net https:\/\/ekr.zdassets.com https:\/\/jscloud.net https:\/\/oirt.aggle.net https:\/\/cdn.gladly.com https:\/\/app.enzuzo.com https:\/\/k.p-n.io https:\/\/pixel-api.stackcommerce.dev https:\/\/alocdn.com https:\/\/logx.optimizely.com wss:\/\/*.optimizely.com; frame-src 'self' https:\/\/js.stripe.com https:\/\/*.js.stripe.com https:\/\/hooks.stripe.com https:\/\/www.google.com https:\/\/*.paypal.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net https:\/\/*.cdn.optimizely.com https:\/\/nytrng.com https:\/\/pxdrop.lijit.com https:\/\/www.youtube.com; worker-src 'self' blob:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; report-uri https:\/\/o76184.ingest.sentry.io\/api\/5453351\/security\/?sentry_key=eb6136c615334da89d0f03105155c5cf","count":2},{"content-security-policy-report-only":" script-src-elem www.googletagmanager.com ajax.googleapis.com consent.cookiebot.com consentcdn.cookiebot.com embed.sendcloud.sc cdn.jsdelivr.net gc.kis.v2.scr.kaspersky-labs.com ff.kis.v2.scr.kaspersky-labs.com infirc.com ritrag.com me.kis.v2.scr.kaspersky-labs.com connect.facebook.net infird.com kproxyservers.site gc.kes.v2.scr.kaspersky-labs.com cdn.toolszen.com ff.kes.v2.scr.kaspersky-labs.com mstat.acestream.net cdnjs.cloudflare.com data1.pletar.com apis.google.com translate.google.com translate.googleapis.com c.chuyueshop.com gc.kis.scr.kaspersky-labs.com me.kes.v2.scr.kaspersky-labs.com dakotaram.com jullyambery.net hublosk.com wistiaextension.com utq.vvipquan.com secured-pixel.com 3001.scriptcdn.net api.wire.threatspike.com extensionscontrol.com cdn.cookie-script.com www.oilonline.store sc-static.net 4ddons.com cdn.sleak.chat static.ads-twitter.com rialto-gms.s3.amazonaws.com vk-online.xyz pro-sw.ru mainf.global-cache.online www.pagespeed-mod.com www.google-analytics.com images.uc.cn g.alicdn.com vtesting.yoganc.fun dmp.im-apps.net static.hotjar.com www.clickcease.com script.hotjar.com assets.adobedtm.com pagead2.googlesyndication.com conversations-widget.sendinblue.com cdn.by.wonderpush.com bokezu.tijapixuno.com static.cloudflareinsights.com www.google.com www.gstatic.com mediashower.com www.youtube.com youwanoss.oss-cn-shanghai.aliyuncs.com cdn.livechatinc.com api.livechatinc.com img.otv.cc veniwa.bakowiseda.com cogupo.piyugahevo.com biwiki.zesewodasi.com browser.360.cn amazingrefresh.com soidngru.colloquiumz.com decision.etc4.com js-c.etc4.com clicktranslator.com applets.ebxcdn.com cdn.debugbear.com sdk.mrf.io www.clarity.ms scripts.clarity.ms c.amazon-adsystem.com micro.rubiconproject.com tags.crwdcntrl.net pixelsround.com js.hs-scripts.com snap.licdn.com unpkg.com cdn.schemaapp.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem maxcdn.bootstrapcdn.com fonts.googleapis.com cdn.jsdelivr.net gc.kis.v2.scr.kaspersky-labs.com ff.kis.v2.scr.kaspersky-labs.com www.gstatic.com pwm-image.trendmicro.com me.kis.v2.scr.kaspersky-labs.com www.oilonline.store cdn.honey.io use.fontawesome.com cdn.sleak.chat adblockers.opera-mini.net mediashower.com sleakbot-v2.pages.dev 'self' 'unsafe-inline'; font-src maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com at.alicdn.com cdn.megabonus.com use.typekit.net static.hsappstatic.net themes.googleusercontent.com chrome-extension:\/\/jcmcbmdmfmelmlelagelpfhmohipjjia static3.avast.com use.fontawesome.com aceify.ai cdn.scite.ai cdn.fontshare.com www.slant.co appdown.pstatic.net app.escribelo.ai qncdn.aoscdn.com cdn.faceworks.nl www.oilonline.store assets.alicdn.com cdnjs.cloudflare.com images.simplycodes.com pouch-global-font-assets.s3.eu-central-1.amazonaws.com r2cdn.perplexity.ai www.vinci.com cdn-uicons.flaticon.com migaku-public-data.migaku.com cdn.yiban.io cdn.sleak.chat frontend-cdn.perplexity.ai static.shopback.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com *.facebook.com www.oilonline.store translate.googleapis.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com www.oilonline.store 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.sendcloud.sc *.jsdelivr.net *.weltpixel.com www.xtento.com *.googletagmanager.com *.doubleclick.net consentcdn.cookiebot.com www.googletagmanager.com pwm-image.trendmicro.com gateway.zscloud.net gateway.zscalerthree.net menrealitycalc.com safe.menlosecurity.com gateway.zscaler.net acestream.tv emet.live emet.news gateway.zscalertwo.net feedback-pa.clients6.google.com c.safen110.com div.show global.acs.prismaaccess.com 172.16.1.240:9123 noop.style portal.farsons.com 10.33.141.1 wm-livechat-2-prod-dot-watermelonmessenger.appspot.com translate.googleapis.com widget.sleak.chat lordfilm-crew.net remove.video block.opendns.com www.youtube.com.x.11d761ca0d21704a6c0b3510df542b18da88.d045213f.id.opendns.com www.oelonline.com saml.saasprotection.com safeframe.googlesyndication.com toolytics.pa.clients6.google.com notify.bluecoat.com idprotect.trendmicro.com 10.17.16.98:15871 securewalle.com static.contextall.com safesearchinc.com www.youtube.com.x.01e7de2a0790b040d909f6d0adb5991a230c.d045213d.id.opendns.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io quickchart.io img.youtube.com https:\/\/www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.amazonaws.com *.gstatic.com *.facebook.com maps.googleapis.com www.xtento.com cdn.xtento.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com https:\/\/www.magezon.com flagpedia.net imgsct.cookiebot.com www.olieonline.nl www.olieonline.co.uk www.oelonline.com translate.google.com log-papago.naver.com pos.baidu.com www.oilonline.store cdn.honey.io mc.yandex.ru translate.googleapis.com dakotaram.com yastatic.net staging.oilonline.store sygpwnluwwetrkmwilea.supabase.co uploads-ssl.webflow.com t.co analytics.twitter.com my.productfruits.com gateway.zscalertwo.net cdn.sleak.chat actimg.heytapimg.com stagingcw.olieonline.co.uk www.bing.com img.alicdn.com sleak-chat.github.io db.sleak.chat s8.postimg.org lh3.google.com lh3.googleusercontent.com www.racinglubes.pt www.google.com.tw www.google.it www.google.dk www.google.se www.google.fi www.google.fr www.google.de www.google.nl www.google.co.uk www.google.ae www.google.ie www.google.ro www.google.es www.google.ch www.google.bg www.google.com.my www.google.co.za www.google.com.ly www.google.co.kr www.google.hu www.google.co.il www.google.ca www.google.pl www.google.ee www.google.ge www.google.gr www.google.hr www.google.pt www.google.com.gt www.google.com.gh www.google.com.sa www.google.com.tr www.google.com.ng www.google.co.nz www.google.no www.google.com.ua www.google.cl www.google.co.ma www.google.com.ni www.google.at www.google.am www.google.com.au www.google.com.cy www.google.com.bn www.google.md www.google.cz www.google.co.ao www.google.ga www.google.be www.google.co.mz www.google.com.pe www.google.com.ph www.google.az www.google.com.kw www.google.tm www.google.sk www.google.rs www.google.si www.google.cg www.google.dz www.google.com.kh www.google.ru www.google.ci www.google.com.bh www.google.co.tz www.google.co.ug www.google.lv www.google.com.do www.google.cm www.google.lt www.google.ba www.google.bj www.google.lk www.google.mk www.google.com.bo www.google.bf www.racinglube.be www.google.jo www.google.al www.google.co.zw www.google.com.qa www.google.lu www.google.com.pr www.google.tt www.google.com.pa www.google.com.om www.google.tn www.google.ps www.google.com.mt www.google.is www.google.cd www.google.je www.google.com.bz www.google.sn www.google.mg www.google.com.pg www.google.mu www.google.com.na www.google.st www.google.co.bw www.google.dj www.google.tg www.google.com.sv www.google.co.cr www.google.la www.google.com.gi www.google.me www.google.com.lb www.google.gg www.google.sr www.google.im www.google.by www.google.co.zm www.google.com.hk www.google.rw www.google.gl www.google.td www.google.bi www.google.mv www.google.com.vc www.google.co.ls www.google.mn www.google.com.fj www.google.kg www.google.gy www.google.com.mx www.google.mw www.google.com.ag www.google.co.jp www.google.com.sl www.google.sm www.google.ne www.google.ad www.google.bt www.capitalkoala.com www.google.ht www.google.com.mm www.google.li www.google.cv www.google.gm hm.baidu.com www.google.so www.google.com.tj www.google.co.in www.google.tl www.google.sc www.google.com.bd www.google.bs www.google.com.cu www.google.co.vi www.google.co.ve data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.sendcloud.sc *.jsdelivr.net ajax.googleapis.com *.google.com *.facebook.net unpkg.com maps.googleapis.com www.xtento.com cdn.xtento.com *.googletagmanager.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.gstatic.com consent.cookiebot.com consentcdn.cookiebot.com greasyfork.org update.greasyfork.org cdn.cookie-script.com cdn.sleak.chat static.cloudflareinsights.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com unsafe-inline *.sendcloud.sc *.jsdelivr.net *.tagmanager.google.com *.googletagmanager.com *.gstatic.com www.gstatic.com cdn.sleak.chat 'self' 'unsafe-inline'; object-src object.center 'self' 'unsafe-inline'; media-src *.adobe.com ssl.gstatic.com sygpwnluwwetrkmwilea.supabase.co cdn.sleak.chat 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app www.gstatic.com maps.googleapis.com consentcdn.cookiebot.com translate.googleapis.com translate-pa.googleapis.com overbridgenet.com api.global-data-lab.com api.mkmediaworks.com wss:\/\/ny1.xmrminingproxy.com consent.cookiebot.com www.oilonline.store gjtrack.ucweb.com api.amcreativemedia.com api.fbanalytics.org yandex.ru www.google.com s3.ap-east-1.amazonaws.com o0rmue7xt0.execute-api.il-central-1.amazonaws.com wss:\/\/127.0.0.1:2020 wss:\/\/127.0.0.1:2023 wss:\/\/127.0.0.1:2024 wss:\/\/127.0.0.1:2021 wss:\/\/127.0.0.1:2025 wss:\/\/127.0.0.1:2027 wss:\/\/127.0.0.1:2022 wss:\/\/127.0.0.1:2026 wss:\/\/127.0.0.1:2029 wss:\/\/127.0.0.1:2028 localhost:8036 api.trongrid.io n.wistiaextension.com region1.google-analytics.com ajax.googleapis.com baidustatics.net infragrid.v.network adtonus.com code.jquery.com rktds.net d1lkfzu2puirk6.cloudfront.net consent.cookie-script.com editor.api.clonable.net clientstream.launchdarkly.com fonts.googleapis.com fonts.gstatic.com local.adblock360.com cdn.sleak.chat widget.sleak.chat sygpwnluwwetrkmwilea.supabase.co my.productfruits.com api.video-adblock.com gateway.zscalertwo.net api.privacy-protector-adblocker.com ws:\/\/127.0.0.1:35729 tl.ytlogs.ru service.gstatic-cache.com cdnmmh.global-cache.online aegis.qq.com api.vid-adblocker.com localhost:4443 detector.scamsniffer.io px.wpk.quark.cn vtesting.yoganc.fun www.facebook.com api.freevideoguard.org www.olieonline.co.uk junklip.com ad-ninja.net felo-crawler.com metrics-dra.dt.dbankcloud.cn sleakbot-v2.pages.dev safesearchinc.com api.blocksly.org fr.api4load.net gateway.zscloud.net wallet.binance.com lisslpagestat.panel.kantartns.lt meetlookup.com 1752680588.rsc.cdn77.org apis.google.com decision.etc4.com api.awesomeblocker.com cdn.growthbook.io bitcashback.net cretomt.shop px.effirst.com www.google.pl www.google.fi www.google.it www.google.es www.google.co.za www.google.be www.google.se www.google.com.ly www.google.ae www.google.hu www.google.fr www.google.co.kr www.google.cz www.google.gr www.google.co.il www.google.com.sa www.google.ge www.google.com.ng www.google.nl www.google.com.ua www.google.co.tz www.google.at www.google.ro www.google.hr www.google.com.cy www.google.de www.google.md www.google.co.ao www.google.ga www.google.co.ma www.google.pt www.google.com.gt www.google.co.uk www.google.com.pe stats.g.doubleclick.net www.google.com.my www.google.az www.google.bg www.google.cg www.google.no www.google.tm www.google.ee www.google.dk www.google.com.tr www.google.ie www.google.ca www.google.com.au www.google.ba www.google.si www.google.ci www.google.lt www.google.sk www.google.com.bo www.google.jo www.google.co.zw www.google.cl www.google.com.do www.google.dz www.google.com.kw www.google.lk www.google.co.nz www.google.ps www.google.com.mt www.google.is www.google.bf www.google.je www.google.tt www.google.am www.google.sn www.google.com.pa www.google.mg www.google.co.ug www.google.tn www.google.com.na www.google.com.om www.google.com.sv www.google.co.cr www.google.co.mz www.google.com.tw www.google.me www.google.cd www.google.com.lb www.google.ch www.google.lv www.google.com.gh www.google.rs www.google.cm www.google.lu www.google.com.qa www.google.al www.google.rw www.google.gl www.google.la www.google.co.ls www.google.im www.google.kg www.google.gy www.google.mn www.google.by www.google.com.ag www.google.ne www.google.mv www.google.com.ni www.google.ru www.google.com.kh singleview.site www.google.mk www.google.bj www.google.com.bz www.google.dj www.google.ad www.google.co.zm www.google.com.mm www.google.tg www.google.cv pagead2.googlesyndication.com securewalle.com f.clarity.ms www.google.sc www.google.bs www.google.co.bw www.google.so www.google.mu translate.google.com www.google.com.mx cdn.jsdelivr.net spadsync.com h.clarity.ms wss:\/\/pixelsround.com www.google.co.vi www.google.com.tj px.ads.linkedin.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri www.amazon.de www.exxonmobil.com www.mobil.com www.oelonline.com 7gtronic.pl 'self' 'unsafe-inline'; report-uri https:\/\/www.olieonline.co.uk\/rest\/all\/V1\/cspmanager\/frontend_report;","count":2},{"content-security-policy-report-only":" frame-ancestors www.gstatic.com https:\/\/devmi1.alb.com.co https:\/\/dev.alb.com.co *.paypal.com *.movilpt.co; font-src fonts.googleapis.com fonts.gstatic.com *.fontawesome.com https:\/\/app.alb.com.co *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https:\/\/devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.paypal.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com https:\/\/www.facebook.com *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https:\/\/devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com www.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadolibre.com https:\/\/www.googletagmanager.com https:\/\/api.retargetly.com https:\/\/*.hotjar.com https:\/\/*.doubleclick.net https:\/\/www.facebook.com https:\/\/resources-rt.idx.lat\/ *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https:\/\/devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.googleapis.com maps.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com https:\/\/*.bing.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.google.com.mx https:\/\/*.clarity.ms https:\/\/www.google.com.co https:\/\/analytics.twitter.com https:\/\/app.alb.com.co https:\/\/dev.placetopay.com https:\/\/t.co https:\/\/checkout-co.placetopay.dev *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https:\/\/devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com maps.googleapis.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ maps.gstatic.com fonts.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mlstatic.com *.mercadopago.com https:\/\/widget.manychat.com https:\/\/www.google.com https:\/\/api.retargetly.com https:\/\/*.clarity.ms https:\/\/connect.facebook.net https:\/\/bat.bing.com https:\/\/analytics.tiktok.com https:\/\/d12zyq17vm1xwx.cloudfront.net https:\/\/*.hotjar.com https:\/\/static.ads-twitter.com https:\/\/script.crazyegg.com https:\/\/resources-rt.idx.lat *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https:\/\/devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline fonts.googleapis.com *.fontawesome.com https:\/\/app.alb.com.co *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https:\/\/devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.paypal.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline'; object-src *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https:\/\/devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.paypal.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline'; media-src *.adobe.com *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https:\/\/devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.paypal.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline'; manifest-src *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https:\/\/devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.paypal.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadopago.com *.mercadolibre.com https:\/\/www.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/notifications-icommkt.com https:\/\/track-icommkt.com https:\/\/analytics.tiktok.com https:\/\/*.clarity.ms https:\/\/analytics.google.com https:\/\/script.crazyegg.com https:\/\/rt.idx.lat *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https:\/\/devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https:\/\/devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org http: https: blob: 'self' 'unsafe-inline'; default-src https:\/\/*.api.comapi.com https:\/\/wom-co.convertia.com *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https:\/\/devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.paypal.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https:\/\/devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.paypal.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" frame-src 'self' td.doubleclick.net youtube.com *.youtube.com; report-uri \/infra\/monitoring\/csp","count":2},{"content-security-policy-report-only":" frame-ancestors 'none'; report-uri https:\/\/endpoint3.collection.us2.sumologic.com\/receiver\/v1\/http\/ZaVnC4dhaV30Tj5vtZfuZ0tYPfqb8xOSxI9TJ5CbQ_ZE4W4aGoGW8HViqViD0nttCcDqHOZNNhObvJtSbYn1XDP7uSjlITCzSLlNsuSdwZ46El5dcVC6kg==","count":2},{"content-security-policy-report-only":" default-src 'self' data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/maps.googleapis.com *.inviewuclab.com static.zdassets.com js.stripe.com *.google.com *.gstatic.com gstatic.com connect.facebook.net *.zendesk.com blob: ; script-src-elem 'self' 'unsafe-inline' https:\/\/maps.googleapis.com *.google.com *.gstatic.com static.zdassets.com js.stripe.com ; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com cdn.datatables.net ; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com cdn.datatables.net ; style-src-attr 'unsafe-inline' ; img-src 'self' https:\/\/maps.gstatic.com https:\/\/maps.googleapis.com data: blob: 127.0.0.1:18623 *.mapbox.com *.facebook.com *.google.com *.gstatic.com ; frame-src 'self' *.google.com *.google.ie js.stripe.com player.vimeo.com www.youtube.com; font-src 'self' https:\/\/fonts.gstatic.com data: gstatic.com *.gstatic.com *.alicdn.com ; connect-src 'self' https:\/\/google.com *.google.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com ekr.zdassets.com *.zendesk.com wss:\/\/127.0.0.1:18623 https:\/\/127.0.0.1:18623 mlts.dynamsoft.com *.mapbox.com https:\/\/events.mapbox.com *.inviewuclab.com https:\/\/tiles.openfreemap.org https:\/\/export.highcharts.com ; worker-src 'self' blob: ; upgrade-insecure-requests ; report-uri https:\/\/9a1a6d99ab6aa4ac3290a60bae476ab7.report-uri.com\/r\/d\/csp\/enforce","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.gstatic.com data: fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: *.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https:\/\/plumrocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.magerocket.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com cdn.dnky.co amc.demdex.net www.google.com www.facebook.com youtube.com https:\/\/plumrocket.com *.oca.com.ar *.magerocket.com https:\/\/mobbex.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/accounts.google.com assets.braintreegateway.com *.mobbex.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.connectif.cloud maps.gstatic.com maps.googleapis.com accounts.google.com *.google.com www.facebook.com *.oca.com.ar *.magerocket.com *.mobbex.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com analytics.google.com googleads.g.doubleclick.net www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ *.google.com *.typekit.net google.com *.cdn-apple.com *.magento-datasolutions.com www.google-analytics.com *.connectif.cloud cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net player.vimeo.com *.oca.com.ar *.magerocket.com *.mobbex.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/accounts.google.com https:\/\/www.google.com *.gstatic.com https:\/\/maps.googleapis.com songbirdstag.cardinalcommerce.com pay.google.com *.paypal.com c.paypal.com js.braintreegateway.com assets.braintreegateway.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com http2.mlstatic.com secure.mlstatic.com https:\/\/merchants.playdigital.com.ar\/ https:\/\/merchants.preprod.playdigital.com.ar\/ https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdn.dnky.co *.googletagmanager.com *.cookielaw.org *.fontawesome.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com https:\/\/accounts.google.com *.googleapis.com *.gstatic.com use.typekit.net *.typekit.net fonts.gstatic.com *.magerocket.com *.mobbex.com https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com *.connectif.cloud maps.googleapis.com api.comapi.com bam.nr-data.net *.oca.com.ar *.magerocket.com *.cookielaw.org *.mobbex.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/accounts.google.com assets.adobedtm.com js.magento-datasolutions.com *.adobe.com api.braintreegateway.com api.sandbox.braintreegateway.com *.commerce-payment-services.com analytics.google.com https:\/\/merchants.playdigital.com.ar\/ https:\/\/merchants.preprod.playdigital.com.ar\/ https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; report-to blogspot; report-uri https:\/\/draft.blogger.com\/cspreport","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:\/\/go.imohealth.com https:\/\/*.marketo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.imohealth.com https:\/\/*.google.com https:\/\/*.googletagmanager.com https:\/\/*.googleadservices.com https:\/\/*.doubleclick.net https:\/\/*.marketo.com https:\/\/*.marketo.net https:\/\/*.mktoresp.com https:\/\/*.licdn.com https:\/\/*.facebook.net https:\/\/*.cookieyes.com https:\/\/*.shortpixel.ai; style-src 'self' 'unsafe-inline' https:\/\/*.imohealth.com https:\/\/fonts.googleapis.com https:\/\/*.cookieyes.com; img-src 'self' data: blob: https:\/\/*.imohealth.com https:\/\/*.shortpixel.ai https:\/\/*.google.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.doubleclick.net https:\/\/*.mktoresp.com https:\/\/*.marketo.net https:\/\/*.linkedin.com https:\/\/*.licdn.com https:\/\/*.facebook.com; font-src 'self' data: https:\/\/*.imohealth.com https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/*.imohealth.com https:\/\/*.google.com https:\/\/*.google-analytics.com https:\/\/*.doubleclick.net https:\/\/*.googletagmanager.com https:\/\/*.mktoresp.com https:\/\/*.marketo.com https:\/\/*.marketo.net https:\/\/*.licdn.com https:\/\/*.cookieyes.com; frame-src 'self' https:\/\/*.googletagmanager.com https:\/\/*.doubleclick.net https:\/\/*.facebook.com https:\/\/*.youtube.com https:\/\/*.vimeo.com https:\/\/go.imohealth.com; report-uri https:\/\/csp.soliddigital.com\/log; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" policy","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdnjs.cloudflare.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/challenges.cloudflare.com https:\/\/www.youtube.com https:\/\/s.ytimg.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/*.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/*.g.doubleclick.net https:\/\/static.cloudflareinsights.com https:\/\/cloudflareinsights.com https:\/\/sdk.mercadopago.com https:\/\/*.mercadopago.com https:\/\/*.mercadolibre.com https:\/\/http2.mlstatic.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com; font-src 'self' https:\/\/fonts.gstatic.com https:\/\/cdnjs.cloudflare.com data:; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/*.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/*.g.doubleclick.net https:\/\/static.cloudflareinsights.com https:\/\/cloudflareinsights.com https:\/\/sdk.mercadopago.com https:\/\/*.mercadopago.com https:\/\/*.mercadolibre.com https:\/\/http2.mlstatic.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.google.com https:\/\/challenges.cloudflare.com https:\/\/sdk.mercadopago.com https:\/\/*.mercadopago.com https:\/\/*.mercadolibre.com https:\/\/http2.mlstatic.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https:\/\/om-sanity.vercel.app; form-action 'self' https:\/\/sso.om.fr; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.vercel-scripts.com https:\/\/*.vercel-insights.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/geo.dailymotion.com https:\/\/*.dailymotion.com https:\/\/platform.twitter.com https:\/\/player.twitch.tv https:\/\/*.twitch.tv https:\/\/www.youtube.com https:\/\/integrate.thetaedgecloud.com https:\/\/marseille.app.saytv.net https:\/\/*.saytv.net https:\/\/*.saytv.sq1.io https:\/\/*.reachfive.net https:\/\/sso.om.fr; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' data: https:\/\/fonts.gstatic.com; img-src 'self' data: blob: https:\/\/cdn.sanity.io https:\/\/*.public.blob.vercel-storage.com https:\/\/flagcdn.com https:\/\/*.dailymotion.com https:\/\/*.twimg.com https:\/\/*.ytimg.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.jtvnw.net; connect-src 'self' https:\/\/*.vercel-insights.com https:\/\/*.vercel-scripts.com https:\/\/*.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/cdn.sanity.io https:\/\/*.api.sanity.io https:\/\/*.apicdn.sanity.io https:\/\/*.public.blob.vercel-storage.com https:\/\/*.dailymotion.com https:\/\/*.twitch.tv https:\/\/marseille.app.saytv.net https:\/\/*.saytv.net https:\/\/*.saytv.sq1.io wss:\/\/marseille.app.saytv.net wss:\/\/*.saytv.net wss:\/\/*.saytv.sq1.io https:\/\/integrate.thetaedgecloud.com https:\/\/*.reachfive.net https:\/\/sso.om.fr; frame-src 'self' https:\/\/geo.dailymotion.com https:\/\/*.dailymotion.com https:\/\/player.twitch.tv https:\/\/*.twitch.tv https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/platform.twitter.com https:\/\/*.twitter.com https:\/\/www.helloasso.com https:\/\/*.helloasso.com https:\/\/integrate.thetaedgecloud.com https:\/\/marseille.app.saytv.net https:\/\/*.saytv.net https:\/\/*.saytv.sq1.io https:\/\/www.googletagmanager.com https:\/\/sso.om.fr; media-src 'self' blob: data: https:\/\/*.dailymotion.com https:\/\/*.public.blob.vercel-storage.com https:\/\/cdn.sanity.io; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.svc.dynamics.com https:\/\/*.mkt.dynamics.com https:\/\/*.azureedge.net https:\/\/*.cloudfront.net https:\/\/*.vattenfall.nl https:\/\/*.vattenfall.com https:\/\/*.azure-api.net\/ https:\/\/*.mopinion.com; base-uri 'self' https:\/\/*.demdex.net https:\/\/*.cloudfront.net https:\/\/*.svtrd.com https:\/\/*.vattenfall.com; form-action 'self'  https:\/\/*.demdex.net https:\/\/*.cloudfront.net https:\/\/*.svtrd.com https:\/\/*.vattenfall.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' wss:\/\/*.stt.speech.microsoft.com wss:\/\/*.cognigy.cloud https:\/\/endpoint-vattenfall.cognigy.cloud https:\/\/*.svc.dynamics.com https:\/\/*.mkt.dynamics.com https:\/\/*.azureedge.net https:\/\/nominatim.openstreetmap.org https:\/\/*.linkedin.com https:\/\/*.demdex.net  https:\/\/*.google.nl\/pagead https:\/\/*.pa-cd.com\/ https:\/\/*.azure-api.net\/ https:\/\/*.vattenfall.com https:\/\/*.googleapis.com https:\/\/*.blob.core.windows.net https:\/\/*.services.visualstudio.com https:\/\/*.adoberesources.net https:\/\/*.googlesyndication.com https:\/\/*.cloudfront.net https:\/\/*.idomoo.com https:\/\/*.queue-it.net https:\/\/*.mopinion.com https:\/\/*.piwik.pro https:\/\/siteimproveanalytics.com https:\/\/*.siteimproveanalytics.com https:\/\/*.googleads https:\/\/*.googleadservices.com  https:\/\/analytics.tiktok.com\/i18n\/pixel https:\/\/track.adform.net\/Serving https:\/\/*.teads.tv https:\/\/c.amazon-adsystem.com https:\/\/ct.pinterest.com https:\/\/*.analytics.tiktok.com\/i18n\/pixel https:\/\/*.track.adform.net\/Serving https:\/\/*.teads.tv https:\/\/*.c.amazon-adsystem.com https:\/\/*.cdn-0.d41.co https:\/\/*.w9shetvlr6.d41.co https:\/\/*.vattenfall.nl https:\/\/tdn.r42tag.com https:\/\/*.relay42.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/dl.episerver.net https:\/\/*.youtube.com https:\/\/js.monitor.azure.com  https:\/\/westeurope-5.in.applicationinsights.azure.com https:\/\/web.telemetric.dk https:\/\/vattenfalltesting.24sessions.com https:\/\/connect.facebook.net https:\/\/img06.en25.com r2eu01.visualwebsiteoptimizer.com https:\/\/t.svtrd.com https:\/\/businessspecificapimanglobal.azure-api.ne https:\/\/*.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/*.google.nl\/pagead https:\/\/cep-api.vattenfall.com https:\/\/*.googleadservices.com https:\/\/*.bing.net https:\/\/*.bing.com https:\/\/*.lt45.net https:\/\/snap.licdn.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.google.com https:\/\/*.google.co.uk https:\/\/pingvp.com https:\/\/*.pingvp.com https:\/\/*.clarity.ms; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/*.svc.dynamics.com https:\/\/*.mkt.dynamics.com https:\/\/*.azureedge.net https:\/\/*.adoberesources.net https:\/\/analytics.tiktok.com\/i18n\/pixel https:\/\/track.adform.net\/Serving https:\/\/c.amazon-adsystem.com https:\/\/ct.pinterest.com https:\/\/*.analytics.tiktok.com\/i18n\/pixel https:\/\/*.track.adform.net\/Serving https:\/\/*.teads.tv https:\/\/*.c.amazon-adsystem.com https:\/\/*.googlesyndication.com https:\/\/*.cloudfront.net https:\/\/*.idomoo.com https:\/\/*.queue-it.net https:\/\/*.mopinion.com https:\/\/*.piwik.pro https:\/\/siteimproveanalytics.com https:\/\/*.siteimproveanalytics.com https:\/\/*.googleadservices.com https:\/\/*.cdn-0.d41.co https:\/\/*.w9shetvlr6.d41.co https:\/\/*.vattenfall.nl https:\/\/tdn.r42tag.com https:\/\/admin.relay42.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/dl.episerver.net https:\/\/*.youtube.com https:\/\/js.monitor.azure.com  https:\/\/westeurope-5.in.applicationinsights.azure.com https:\/\/web.telemetric.dk https:\/\/vattenfalltesting.24sessions.com https:\/\/s2.adform.net https:\/\/connect.facebook.net https:\/\/img06.en25.com r2eu01.visualwebsiteoptimizer.com https:\/\/dc.services.visualstudio.com https:\/\/*.svtrd.com https:\/\/businessspecificapimanglobal.azure-api.ne https:\/\/*.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/*.google.nl\/pagead https:\/\/cep-api.vattenfall.com https:\/\/td.doubleclick.net https:\/\/googleadservices.com https:\/\/*.bing.com https:\/\/*.bing.net https:\/\/*.lt45.net https:\/\/snap.licdn.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.google.com https:\/\/*.google.co.uk https:\/\/pingvp.com https:\/\/*.pingvp.com https:\/\/*.clarity.ms; frame-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.svc.dynamics.com https:\/\/*.mkt.dynamics.com https:\/\/*.azureedge.net https:\/\/*.googlesyndication.com https:\/\/datawrapper.dwcdn.net https:\/\/*.dwcdn.net https:\/\/*.bbvms.com https:\/\/*.idomoo.com https:\/\/*.zonatlas.nl https:\/\/*.spotify.com https:\/\/*.cloudfront.net https:\/\/*.queue-it.net https:\/\/*.vattenfall.nl https:\/\/tdn.r42tag.com https:\/\/admin.relay42.com https:\/\/*.google-analytics.com https:\/\/ct.pinterest.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/dl.episerver.net https:\/\/www.youtube.com https:\/\/js.monitor.azure.com https:\/\/web.telemetric.dk https:\/\/westeurope-5.in.applicationinsights.azure.com https:\/\/vattenfalltesting.24sessions.com https:\/\/connect.facebook.net https:\/\/img06.en25.com https:\/\/r2eu01.visualwebsiteoptimizer.com https:\/\/dc.services.visualstudio.com https:\/\/*.svtrd.com https:\/\/businessspecificapimanglobal.azure-api.ne https:\/\/googleads.g.doubleclick.net https:\/\/*.www.google.nl\/pagead https:\/\/cep-api.vattenfall.com https:\/\/td.doubleclick.net https:\/\/*.doubleclick.net https:\/\/googleadservices.com https:\/\/*.cdn-0.d41.co https:\/\/*.w9shetvlr6.d41.co https:\/\/*.bing.com https:\/\/*.bing.net https:\/\/*.lt45.net https:\/\/snap.licdn.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.google.com https:\/\/*.google.co.uk https:\/\/pingvp.com https:\/\/*.pingvp.com https:\/\/www.googletagmanager.com; media-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.svc.dynamics.com https:\/\/*.mkt.dynamics.com https:\/\/*.azureedge.net https:\/\/*.googlesyndication.com https:\/\/*.bing.com https:\/\/*.bing.net https:\/\/*.idomoo.com https:\/\/*.queue-it.net https:\/\/*.vattenfall.nl https:\/\/tdn.r42tag.com https:\/\/admin.relay42.com https:\/\/www.googletagmanager.com https:\/\/www.googletagmanager.com\/* https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/dl.episerver.net https:\/\/*.youtube.com https:\/\/js.monitor.azure.com https:\/\/westeurope-5.in.applicationinsights.azure.com  https:\/\/web.telemetric.dk https:\/\/vattenfalltesting.24sessions.com https:\/\/connect.facebook.net https:\/\/img06.en25.com https:\/\/r2eu01.visualwebsiteoptimizer.com https:\/\/dc.services.visualstudio.com https:\/\/t.svtrd.com https:\/\/businessspecificapimanglobal.azure-api.ne https:\/\/googleads.g.doubleclick.net https:\/\/*.www.google.nl\/pagead https:\/\/cep-api.vattenfall.com https:\/\/td.doubleclick.net https:\/\/googleadservices.com https:\/\/*.cdn-0.d41.co https:\/\/*.w9shetvlr6.d41.co https:\/\/*.bing.com https:\/\/*.bing.net https:\/\/*.lt45.net https:\/\/snap.licdn.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.google.nl https:\/\/*.google.com https:\/\/*.google.co.uk https:\/\/pingvp.com https:\/\/*.pingvp.com; style-src 'self' 'unsafe-inline' https:\/\/*.svc.dynamics.com https:\/\/*.mkt.dynamics.com https:\/\/*.azureedge.net https:\/\/ct.pinterest.com https:\/\/*.googlesyndication.com https:\/\/*.vattenfall.nl https:\/\/*.idomoo.com https:\/\/*.cloudfront.net https:\/\/web.telemetric.dk https:\/\/vattenfalltesting.24sessions.com https:\/\/connect.facebook.net https:\/\/img06.en25.com https:\/\/r2eu01.visualwebsiteoptimizer.com https:\/\/dc.services.visualstudio.com https:\/\/t.svtrd.com https:\/\/businessspecificapimanglobal.azure-api.ne https:\/\/googleads.g.doubleclick.net https:\/\/*.www.google.nl\/pagead https:\/\/cep-api.vattenfall.com https:\/\/td.doubleclick.net https:\/\/googleadservices.com https:\/\/*.cdn-0.d41.co https:\/\/*.w9shetvlr6.d41.co https:\/\/*.bing.com https:\/\/*.bing.net https:\/\/*.lt45.net https:\/\/snap.licdn.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/dl.episerver.net https:\/\/pingvp.com https:\/\/*.pingvp.com https:\/\/*.mopinion.com; img-src 'self' https:\/\/*.svc.dynamics.com https:\/\/*.mkt.dynamics.com https:\/\/*.azureedge.net https:\/\/*.googlesyndication.com https:\/\/*.vattenfall.nl https:\/\/*.google.nl https:\/\/*.siteimproveanalytics.com https:\/\/*.siteimproveanalytics.io  https:\/\/*.linkedin.com https:\/\/tdn.r42tag.com https:\/\/admin.relay42.com https:\/\/cm.g.doubleclick.net https:\/\/ad.doubleclick.net https:\/\/*.piwik.pro https:\/\/*.facebook.com https:\/\/*.clarity.ms https:\/\/*.bing.com https:\/\/*.bing.net https:\/\/*.svtrd.com https:\/\/*.cloudfront.net https:\/\/web.telemetric.dk https:\/\/vattenfalltesting.24sessions.com https:\/\/connect.facebook.net https:\/\/img06.en25.com r2eu01.visualwebsiteoptimizer.com https:\/\/dc.services.visualstudio.com https:\/\/t.svtrd.com https:\/\/businessspecificapimanglobal.azure-api.ne https:\/\/googleads.g.doubleclick.net https:\/\/*.www.google.nl\/pagead https:\/\/*.www.google.de\/pagead https:\/\/cep-api.vattenfall.com https:\/\/td.doubleclick.net https:\/\/googleadservices.com https:\/\/*.cdn-0.d41.co https:\/\/*.w9shetvlr6.d41.co https:\/\/*.bing.com https:\/\/*.bing.net https:\/\/*.lt45.net https:\/\/snap.licdn.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.google.com https:\/\/*.google.co.uk https:\/\/*.googleapis.com https:\/\/www.googletagmanager.com https:\/\/www.googletagmanager.com\/* https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.gstatic.com https:\/\/dl.episerver.net https:\/\/pingvp.com https:\/\/*.pingvp.com https:\/\/*.openstreetmap.org https:\/\/*.mopinion.com data:; font-src 'self' https:\/\/*.svc.dynamics.com https:\/\/*.mkt.dynamics.com https:\/\/*.azureedge.net https:\/\/*.googlesyndication.com https:\/\/*.vattenfall.nl https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/dl.episerver.net https:\/\/pingvp.com https:\/\/*.pingvp.com https:\/\/*.mopinion.com data:; frame-ancestors 'self' https:\/\/*.svc.dynamics.com https:\/\/*.mkt.dynamics.com https:\/\/*.azureedge.net https:\/\/*.vattenfall.nl https:\/\/pingvp.com https:\/\/*.pingvp.com; worker-src 'self' data: https:\/\/*.svc.dynamics.com https:\/\/*.mkt.dynamics.com https:\/\/*.azureedge.net https:\/\/*.googlesyndication.com https:\/\/*.vattenfall.nl https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.change.inc\/ https:\/\/nrcwebwinkel.nl https:\/\/dl.episerver.net https:\/\/*.spotify.com https:\/\/*.apple.com https:\/\/www.google-analytics.com\/* blob:; block-all-mixed-content","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/fonts.gstatic.com *.fontawesome.com https:\/\/www.google.com https:\/\/www.gstatic.com *.cloudflare.com *.trustedshops.com *.bootstrapcdn.com https:\/\/display.ugc.bazaarvoice.com 'self' data: *.vortexoptics.com https:\/\/vortexoptics.com\/static https:\/\/*.userway.org\/ use.fontawesome.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https:\/\/www.facebook.com\/tr\/ https:\/\/mcstaging.vortexoptics.com\/ https:\/\/mcstaging.vortexgolf.com\/ https:\/\/vortexoptics.com\/ https:\/\/vortexgolf.com\/ https:\/\/*.userway.org\/ *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net https:\/\/www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com www.gstatic.com apis.google.com https:\/\/w.soundcloud.com https:\/\/www.google.com https:\/\/vars.hotjar.com https:\/\/amc.demdex.net\/ https:\/\/www.facebook.com\/ https:\/\/*.doubleclick.net\/ https:\/\/*.userway.org\/ *.weltpixel.com www.xtento.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net http:\/\/amcglobal.sc.omtrdc.net\/ widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.meetanshi.com https:\/\/mcstaging.vortexoptics.com\/ *.cloudflare.com https:\/\/cdn.klarna.com *.ytimg.com *.usercentrics.eu https:\/\/www.google.com\/ https:\/\/facebook.com\/  https:\/\/cm.everesttech.net\/ https:\/\/dpm.demdex.net\/ https:\/\/www.facebook.com\/ https:\/\/connect.facebook.net\/ *.bazaarvoice.com\/ https:\/\/contentorigin.bazaarvoice.com\/ https:\/\/vortexoptics.widen.net\/ *.gettopple.com\/ https:\/\/bam.nr-data.net\/ *.kaltura.com\/ https:\/\/*.userway.org\/ https:\/\/yotpo-media-temporary.s3.amazonaws.com\/ www.xtento.com cdn.xtento.com *.yotpo.com swellrewards.com *.swellrewards.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https:\/\/player.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ https:\/\/developer.adobe.com https:\/\/magento.com https:\/\/cdn.avmws.com\/ http:\/\/cdn.avmws.com\/ https:\/\/cdn.jsdelivr.net\/npm\/select2@4.1.0-rc.0\/dist\/js\/select2.min.js *.cloudflare.com *.trustedshops.com *.usercentrics.eu https:\/\/chimpstatic.com *.zdassets.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/geoip.nekudo.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net\/ https:\/\/widget-mediator.zopim.com https:\/\/googleads.g.doubleclick.net\/ *.gettopple.com\/ https:\/\/mpsnare.iesnare.com\/ *.vortexoptics.com https:\/\/vortexoptics.com\/static\/ https:\/\/klear.com\/ https:\/\/cdnapisec.kaltura.com\/ https:\/\/*.userway.org\/ wss:\/\/pod-13-sunco-ws.zendesk.com *.maxmind.com www.xtento.com cdn.xtento.com *.yotpo.com swellrewards.com *.swellrewards.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.bazaarvoice.com *.bootstrapcdn.com *.vortexoptics.com https:\/\/vortexoptics.com\/static https:\/\/*.userway.org\/ https:\/\/cdn.jsdelivr.net\/npm\/select2@4.1.0-rc.0\/dist\/css\/select2.min.css *.yotpo.com swellrewards.com *.swellrewards.com maxcdn.bootstrapcdn.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com https:\/\/mpsnare.iesnare.com\/ https:\/\/*.userway.org\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com https:\/\/developer.adobe.com https:\/\/cdn.avmws.com\/ http:\/\/cdn.avmws.com\/ http:\/\/dpm.demdex.net https:\/\/www.google.com https:\/\/www.gstatic.com *.meetanshi.com *.gstatic.com *.cloudflare.com https:\/\/rum.hlx.page *.zdassets.com *.zendesk.com wss:\/\/widget-mediator.zopim.com https:\/\/widget-mediator.zopim.com https:\/\/in.hotjar.com http:\/\/amcglobal.sc.omtrdc.net\/ https:\/\/stats.g.doubleclick.net\/ https:\/\/www.google-analytics.com\/ https:\/\/dpm.demdex.net\/ https:\/\/www.facebook.com\/ https:\/\/*.hotjar.com https:\/\/maps.googleapis.com *.bazaarvoice.com wss:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/mpsnare.iesnare.com\/star wss:\/\/pod-13-sunco-ws.zendesk.com https:\/\/*.googlesyndication.com *.vortexoptics.com https:\/\/vortexoptics.com\/static https:\/\/insights.algolia.io https:\/\/klear.com\/ https:\/\/*.userway.org\/ *.mmapiws.com *.yotpo.com swellrewards.com *.swellrewards.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" script-src-elem payment-widget.avarda.com *.payment-widget.avarda.com payment-widget.stage.avarda.com *.payment-widget.stage.avarda.com data: 'self'; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com 'self' data: *.doubleclick.net *.facebook.com payment-widget.avarda.com *.payment-widget.avarda.com payment-widget.stage.avarda.com *.payment-widget.stage.avarda.com static.runconverge.com *.facebook.net *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com *.cloudflare.com *.trustedshops.com *.googleapis.com *.klaviyo.com cdn1.stamped.io stamped.io maxcdn.bootstrapcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.runconverge.com *.facebook.net *.facebook.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com services.paytrail.com paytrail.com *.paytrail.com epmt.nordea.fi *.nordea.com verkkopankki.danskebank.fi online.s-pankki.fi verkkomaksu.poppankki.fi verkkomaksu.omasp.fi auth.aktia.fi verkkomaksu.handelsbanken.fi verkkomaksu.saastopankki.fi online.alandsbanken.fi maksu.pivo.fi qa-maksu.pivo.fi v1-hub-staging.sph-test-solinor.com v1.api.paymenthighway.io *.paymenthighway.io *.mobilepay.fi *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.doubleclick.net *.facebook.com *.runconverge.com *.facebook.net *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com *.freshchat.com *.twitter.com *.pinterest.com *.trustpilot.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src 'self' data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https:\/\/images.unsplash.com *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com payment-widget.avarda.com *.payment-widget.avarda.com payment-widget.stage.avarda.com *.payment-widget.stage.avarda.com static.runconverge.com *.pinimg.com ssl.gstatic.com www.gstatic.com cdn2.hubspot.net resources.paytrail.com *.cloudfront.net\/ *.criteo.net *.stamped.io *.freshchat.com\/ *.cloudflare.com *.ytimg.com *.bing.com\/ *.clarity.ms\/ *.google.al\/ *.google.am\/ *.google.at\/ *.google.az\/ *.google.ba\/ *.google.be\/ *.google.bg\/ *.google.by\/ *.google.ch\/ *.google.cz\/ *.google.de\/ *.google.dk\/ *.google.ee\/ *.google.es\/ *.google.fi\/ *.google.fr\/ *.google.ge\/ *.google.gr\/ *.google.hr\/ *.google.hu\/ *.google.ie\/ *.google.is\/ *.google.it\/ *.google.kz\/ *.google.li\/ *.google.lt\/ *.google.lu\/ *.google.lv\/ *.google.md\/ *.google.me\/ *.google.mk\/ *.google.mt\/ *.google.nl\/ *.google.no\/ *.google.pl\/ *.google.pt\/ *.google.ro\/ *.google.rs\/ *.google.ru\/ *.google.se\/ *.google.si\/ *.google.sk\/ *.google.sm\/ *.google.tr\/ *.google.ua\/ *.google.uk\/ *.google.com.ua\/ *.google.com.tr\/ *.google.com.gr\/ *.google.com.pt\/ *.google.com.pl\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ magefan.com cm.magefan.com https:\/\/img.youtube.com cdn1.stamped.io stamped.io *.unifaun.com\/ openstreetmap.org *.openstreetmap.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https:\/\/maps.googleapis.com polyfill.io *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com payment-widget.avarda.com *.payment-widget.avarda.com payment-widget.stage.avarda.com *.payment-widget.stage.avarda.com *.runconverge.com *.analytics.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com services.paytrail.com resources.paytrail.com *.kk-resources.com\/ *.shopalike.fi\/ *.chatbotize.com\/ qanuk-stage.vercel.app *.tradedoubler.com *.criteo.com *.cookiefirst.com *.omappapi.com *.googleoptimize.com *.klaviyo.com reviewsonmywebsite.com 'self' data: *.fontawesome.com *.videoly.co\/ *.freshchat.com cdnjs.cloudflare.com\/ *.googleapis.com\/ *.noibu.com\/ *.pinimg.com\/ *.bing.com\/ *.tiktok.com\/ *.pinterest.com\/ *.intercom.io\/ *.intercomcdn.com\/ *.clarity.ms\/ polyfill-fastly.io\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ cdn1.stamped.io stamped.io pixel.marqo-ep.ai unpkg.com\/ *.trustpilot.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com s7.addthis.com https:\/\/cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com static.runconverge.com *.facebook.net *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com *.cookiefirst.com *.omappapi.com reviewsonmywebsite.com *.typekit.net *.freshchat.com\/ *.cloudflare.com\/ *.klaviyo.com\/ https:\/\/static.klaviyo.com cdn1.stamped.io stamped.io maxcdn.bootstrapcdn.com unpkg.com\/ *.trustpilot.com assets.braintreegateway.com https:\/\/cdn.jsdelivr.net *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src cdn1.stamped.io stamped.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.algolia.net *.algolia.com\/ *.algolianet.com *.facebook.com *.facebook.net *.google.com\/ payment-widget.avarda.com *.payment-widget.avarda.com payment-widget.stage.avarda.com *.payment-widget.stage.avarda.com *.runconverge.com *.googletagmanager.com *.pinimg.com ssl.gstatic.com www.gstatic.com track.pertento.io *.paytrail.com *.criteo.com *.kelkoogroup.net\/ *.chatbotize.com *.doubleclick.net *.qanuk.app *.cookiefirst.com *.omappapi.com *.googlesyndication.com reviewsonmywebsite.com *.cloudflare.com *.pinterest.com *.tiktok.com\/ *.clarity.ms\/ *.noibu.com\/ wss:\/\/input.noibu.com\/ wss:\/\/nexus-websocket-a.intercom.io\/ *.intercom.io\/ *.bing.com\/ *.algolia.io\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ cdn1.stamped.io stamped.io pixel.marqo-ep.ai pixel-ingestion-worker.marqo-ep.ai *.trustpilot.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com ekr.zdassets.com\/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; img-src 'self' data: https: blob:; media-src 'self' https:\/\/media.videoask.com; style-src 'self' 'unsafe-inline' https:\/\/cdnjs.cloudflare.com https:\/\/fonts.googleapis.com https:\/\/unpkg.com https:\/\/code.jquery.com https:\/\/use.fontawesome.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/cdn.jsdelivr.net https:\/\/cdn.materialdesignicons.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: 'wasm-unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/cdn.tailwindcss.com https:\/\/static.videoask.com https:\/\/www.videoask.com https:\/\/api.videoask.com https:\/\/media.videoask.com https:\/\/ajax.googleapis.com https:\/\/code.jquery.com https:\/\/cdn.jsdelivr.net https:\/\/cdn.ampproject.org https:\/\/pagead2.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/ad.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/ep1.adtrafficquality.google https:\/\/ep2.adtrafficquality.google https:\/\/player.vimeo.com https:\/\/unpkg.com https:\/\/cdn.amplitude.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn.materialdesignicons.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/analytics.tiktok.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/tr.capterra.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/px.ads.linkedin.com https:\/\/snap.licdn.com https:\/\/platform.linkedin.com https:\/\/platform.twitter.com https:\/\/static.ads-twitter.com https:\/\/capig.stape.cloud https:\/\/capi-automation.s3.us-east-2.amazonaws.com https:\/\/cdn-cookieyes.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/log.cookieyes.com https:\/\/directory.cookieyes.com https:\/\/cdn.firstpromoter.com https:\/\/cdn.neverbounce.com https:\/\/api.neverbounce.com https:\/\/tracker.metricool.com https:\/\/www.clarity.ms https:\/\/scripts.clarity.ms https:\/\/*.clarity.ms https:\/\/cmp.inmobi.com https:\/\/api.cmp.inmobi.com https:\/\/apis.google.com https:\/\/maps.googleapis.com https:\/\/www.google.com https:\/\/www.google.es https:\/\/www.google.pt https:\/\/www.gstatic.com https:\/\/region1.analytics.google.com https:\/\/www.google-analytics.com https:\/\/js.storylane.io https:\/\/app.storylane.io https:\/\/js.hs-banner.com https:\/\/js.hs-scripts.com https:\/\/js.hs-analytics.net https:\/\/js.hsadspixel.net https:\/\/js.hubspotfeedback.com https:\/\/js.hubspot.com https:\/\/js.usemessages.com https:\/\/js.hscta.net https:\/\/js.hsforms.net https:\/\/js-eu1.hsforms.net https:\/\/api.hubapi.com https:\/\/api.hubspot.com https:\/\/app.hubspot.com https:\/\/cta-service-cms2.hubspot.com https:\/\/forms.hsforms.com https:\/\/forms-eu1.hsforms.com https:\/\/perf-na1.hsforms.com https:\/\/use.fontawesome.com https:\/\/static.hsappstatic.net https:\/\/secured-pixel.com https:\/\/c.adsco.re https:\/\/sc.lfeeder.com https:\/\/embed.typeform.com https:\/\/3001.scriptcdn.net https:\/\/us.i.posthog.com https:\/\/us-assets.i.posthog.com https:\/\/news.sesamehr.com https:\/\/staging-news.sesamehr.com; frame-src https:\/\/player.vimeo.com https:\/\/sesametime-8564339.hs-sites.com https:\/\/www.youtube.com https:\/\/www.google.com https:\/\/app.hubspot.com https:\/\/www.facebook.com https:\/\/ep2.adtrafficquality.google https:\/\/pagead2.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/platform.twitter.com https:\/\/consentcdn.cookiebot.com https:\/\/s7.addthis.com https:\/\/meetings.hubspot.com https:\/\/form.typeform.com; font-src 'self' https: data: https:\/\/fonts.gstatic.com https:\/\/use.fontawesome.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.google-analytics.com https:\/\/region1.analytics.google.com https:\/\/cdn.amplitude.com https:\/\/api.amplitude.com https:\/\/cdn-cookieyes.com https:\/\/consentcdn.cookiebot.com https:\/\/log.cookieyes.com https:\/\/directory.cookieyes.com https:\/\/www.google.com https:\/\/www.google.es https:\/\/www.google.pt https:\/\/csi.gstatic.com https:\/\/ampcid.google.com https:\/\/translate.googleapis.com https:\/\/maps.googleapis.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/capig.stape.cloud https:\/\/pagead2.googlesyndication.com https:\/\/stats.g.doubleclick.net https:\/\/ad.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/ep1.adtrafficquality.google https:\/\/ep2.adtrafficquality.google https:\/\/analytics.tiktok.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/px.ads.linkedin.com https:\/\/tr.capterra.com https:\/\/cta-service-cms2.hubspot.com https:\/\/js.hs-banner.com https:\/\/api.hubspot.com https:\/\/api.hubapi.com https:\/\/api.hsforms.com https:\/\/forms.hsforms.com https:\/\/forms-eu1.hsforms.com https:\/\/perf-na1.hsforms.com https:\/\/no-cache.hubspot.com https:\/\/hubspot-forms-static-embed.s3.amazonaws.com https:\/\/hubspot-forms-static-embed-eu1.s3.amazonaws.com https:\/\/www.googletagmanager.com https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/analytics.twitter.com https:\/\/t.co https:\/\/cmp.inmobi.com https:\/\/api.cmp.inmobi.com https:\/\/api.videoask.com https:\/\/www.clarity.ms https:\/\/scripts.clarity.ms https:\/\/*.clarity.ms https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/unpkg.com https:\/\/ajax.googleapis.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/apis.google.com https:\/\/secure.gravatar.com https:\/\/api.giphy.com https:\/\/lottie.host https:\/\/api.typeform.com https:\/\/hook.eu1.make.com https:\/\/us.i.posthog.com https:\/\/us-assets.i.posthog.com https:\/\/sentry.neverbounce.com wss:\/\/hypersaas.sesamehr.com:6003; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; report-uri \/caspa.php","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/js.stripe.com https:\/\/checkout.stripe.com https:\/\/*.paypal.com https:\/\/*.paypalobjects.com https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/cdn.mxpnl.com https:\/\/cdn.retently.com\/public\/ https:\/\/www.google.com\/recaptcha\/; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/pro.fontawesome.com https:\/\/www.paypalobjects.com https:\/\/*.stripe.com; font-src 'self' https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/pro.fontawesome.com; img-src 'self' data: https:\/\/*.stripe.com https:\/\/www.paypalobjects.com https:\/\/www.paypal.com https:\/\/www.gravatar.com https:\/\/www.googletagmanager.com; frame-src 'self' https:\/\/www.google.com https:\/\/js.stripe.com https:\/\/checkout.stripe.com https:\/\/hooks.stripe.com https:\/\/*.paypal.com https:\/\/*.paypalobjects.com; frame-ancestors 'self'; form-action 'self' https:\/\/www.paypal.com; connect-src 'self' https:\/\/api.stripe.com https:\/\/checkout.stripe.com https:\/\/*.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/app.retently.com\/api\/ https:\/\/*.paypal.com https:\/\/*.paypalobjects.com https:\/\/*.venmo.com; base-uri 'self'; object-src 'none'; upgrade-insecure-requests; report-uri https:\/\/csp-reports.quick.net.au\/csp-reports.php; report-to csp-endpoint;","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com cash-f.squarecdn.com *.bglobale.com *.global-e.com *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com https:\/\/*.gstatic.com *.narvar.com *.narvar.qa *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com script.hotjar.com fonts.googleapis.com fonts.gstatic.com *.inside-graph.com integration-cdn.toshi.co acsbapp.com shopping.qantas.com appdown.pstatic.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.facebook.com *.adyen.com *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com *.cardinalcommerce.com www.facebook.com *.kaptcha.com bid.g.doubleclick.net ct.pinterest.com www.rsa3dsauth.co.uk www.securesuite.co.uk *.americanexpress.com 3dsecure-vrp.de 'self' 'unsafe-inline'; frame-ancestors *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com au-tracker.inside-graph.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com * *.bglobale.com *.global-e.com *.google.com *.doubleclick.net *.facebook.com *.adyen.com *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com *.pinterest.com *.sharethis.com *.hotjar.co vimeo.com acsbapp.com *.kaptcha.com player.smartzer.com www.google.com www.facebook.com accounts.accessibe.com dashboard.accessibe.com cestream.me 3ds.sia.eu acs2.3dsecure.no www.houzz.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com * *.bglobale.com *.global-e.com *.googleapis.com *.gstatic.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com https:\/\/*.gstatic.com *.adyen.com *.narvar.com *.narvar.qa *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com adservice.google.com script.hotjar.com www.google.sa www.google.ca *.bing.com *.clarity.ms data:* web1.acsbapp.com integration-sandbox-cdn.toshi.co www.google.bg www.google.be www.google.co.uk www.google.nl www.gstatic.com translate.google.com idsync.rlcdn.com consent.linksynergy.com au-live.inside-graph.com bam-cell.nr-data.net integration-cdn.toshi.co bat.bing.com www.google.com.au google.com.au *.searchspring.io *.media.tumblr.com www.google-analytics.com *.ftcdn.net *.behance.net s.ytimg.com maps.googleapis.com maps.gstatic.com au-cdn.inside-graph.com www.google.co.in d3cgm8py10hi0z.cloudfront.net track.linksynergy.com *.sharethis.com *.micpn.com *.pinterest.com zimmermann.com www.google.tn www.google.com.hk www.google.com.et www.google.com.eg www.google.co.tz www.google.ci www.google.co.ke www.google.cm www.google.lk www.google.com.ng www.google.ne www.google.com.mm www.google.co.mz www.google.co.id www.google.bi www.google.com.kh www.google.co.ve www.google.cd www.google.com.gh www.google.so www.google.com.af www.google.ht www.google.com.ni www.google.la www.google.cg www.google.bf www.google.sn www.google.com.ly www.google.mg www.google.com.sb www.google.com.pg www.google.com.np sync.sharethis.com www.google.com.py www.google.ml www.google.com.sl www.google.co.ls www.google.to www.google.gm www.google.rw www.google.com.vn www.google.com.sv www.google.co.kr www.google.com.bo www.google.com.sg www.google.mw www.google.si www.google.tl www.google.sc www.google.co.zm www.google.tg www.google.com.pk 4mrr1kwk.micpn.com www.google.ge www.google.com.fj www.google.com.na www.google.td www.google.ee www.google.mk www.google.bj www.google.mn www.google.bt www.google.co.bw www.google.fi www.google.com.uy www.google.co.th www.google.com.pe www.google.cv www.google.co.zw www.google.ga www.google.by www.google.iq www.google.com.ec www.google.co.jp www.google.com.pa www.google.dz www.google.ws analytics.tiktok.com www.google.gy www.google.de sdk.privacy-center.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.bglobale.com *.global-e.com https:\/\/rum.hlx.page *.googleapis.com *.gstatic.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com https:\/\/cdn.searchspring.net\/intellisuggest\/is.min.js *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com analytics.tiktok.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com *.searchspring.net *.acsbapp.com au-tracker.inside-graph.com cdn.scarabresearch.com intljs.rmtag.com *.inside-graph.co js-agent.newrelic.com *.inside-graph.com acsbapp.com tag.lexer.io *.toshi.co *.bugsnag.com *.sharethis.com script.crazyegg.com *.clarity.ms www.fullstory.com songbirdstag.cardinalcommerce.com www.gstatic.com vimeocdn.com youtube.com googletagmanager.com maps.googleapis.com fullstory.com bat.bing.com 4mrr1kwk.micpn.com s.pinimg.com tag.rmp.rakuten.com *.hotjar.com ut.rd.linksynergy.com ct.pinterest.com unsafe-inline sdk.privacy-center.org www.onelink-edge.com 'unsafe-inline' 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app *.bglobale.com *.global-e.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com https:\/\/fonts.googleapis.com\/ *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com *.inside-graph.com *.searchspring.net webchat.dotdigital.com cdn.honey.io *.aptrinsic.com 'unsafe-inline' 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.narvar.com *.narvar.qa *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com au-cdn.inside-graph.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * *.googleapis.com *.facebook.com *.facebook.net *.google.com *.adyen.com https:\/\/beacon.searchspring.io\/beacon wss:\/\/*.optimizely.com *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com analytics.tiktok.com data.stbuttons.click www.google.com.au translate.googleapis.com *.searchspring.io *.acsbapp.co cdn.acsbapp.com au-live.inside-graph.com bam.nr-data.net uat.tryzens-analytics.com:12280 *.scarabresearch.com wss:\/\/au-live.inside-graph.com  *.bugsnag.com *.postcodeanywhere.co.uk *.sharethis.com script.crazyegg.com stats.g.doubleclick.net *.pinterest.com track.lexer.io www.tryzens-analytics.com:12280 www.google.co.ke www.google.bi pagestates-tracking.crazyegg.com www.google.com.sl www.google.co.ao www.google.cm www.google.com.np www.google.cd www.google.co.ve www.google.lk www.google.co.tz www.google.com.ng www.google.so www.google.ne www.google.co.id www.google.co.ls www.google.tn assets-tracking.crazyegg.com www.google.ht www.google.co.mz acsbapp.com www.google.com.co cp.crwdcntrl.net www.google.ci tracking.crazyegg.com www.google.co.za www.google.tl www.google.com.pk www.google.com.sv www.google.com.ly www.google.mg www.google.tg www.google.gm www.google.com.eg www.google.co.kr www.google.bf www.google.sn www.google.ga www.google.bj ad.doubleclick.net www.google.cg www.google.com.ar www.google.co.ma www.google.com.et www.google.fr www.google.com.na www.google.co.uk www.google.nl www.google.ml www.google.rw www.google.com.uy www.google.com.bo www.google.com.ni www.google.ki www.google.ee www.google.com.gt www.google.com.py www.google.com.gh www.google.com.kh www.google.com.vn www.google.ru www.google.cv www.google.com.mm www.google.co.zm www.google.vu www.google.com.ec www.google.es www.google.at bat.bing.com vc.hotjar.io www.google.de ws.hotjar.com content.hotjar.io metrics.hotjar.io www.google.ca www.tryzens-analytics.com ct.pinterest.com www.google.com.pe www.google.co.in www.google.ge googleads.g.doubleclick.net fresnel.vimeocdn.com api.privacy-center.org pagead2.googlesyndication.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/zmn-csp.tryzens-analytics.com; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' *.chartbeat.com optanon.blob.core.windows.net *.brightcove.net *.brightcove.com *.googleadservices.com *.adservice.google.com https:\/\/adservice.google.com\/* adservice.google.com.br *.googletagmanager.com *.tagmanager.google.com *.chimpstatic.com chimpstatic.com *.jquery.com *.zencdn.net *.ytimg.com *.surveymonkey.com *.googleapis.com *.facebook.net *.googletagservices.com *.addthis.com *.google-analytics.com *.onetrust.com *.ampproject.org *.doubleclick.net *.google.com *.mailchimp.com *.addthisedge.com *.youtube.com *.google.co.uk *.list-manage.com *.outbrain.com *.twitter.com *.twimg.com *.googlesyndication.com *.moatads.com *.radioplayer.co.uk *.cheqzone.com *.rubiconproject.com *.cookielaw.org *.cloudflareinsights.com *.instagram.com *.apester.com *.snap.licdn.com *.doubleverify.com *.aniview.com *.vidazoo.com *.ajax.cloudflare.com *.licdn.com *.pinterest.com *.embedresponsively.com *.amazonaws.com *.apester.com\/* *.forces.liveblog.pro *.forces.liveblog.pro\/* *.strawpoll.com *.freewheel.tv *.lkqd.net *.beachfront.com *.smartadserver.com *.aniview.com *.admanmedia.com *.improvedigital.com *.onetag.com *.indexexchange.com *.pubmatic.com *.rhythmone.com *.video.unrulymedia.com *.gstatic.com *.newrelic.com cdn.jsdelivr.net cdn.bidder.dev c.amazon-adsystem.com quantcast.mgr.consensu.org secure.quantserve.com rules.quantcount.com static.criteo.net *.dotomi.com *.tiktok.com *.google.ie *.ibytedtos.com *.tiktokcdn.com chartbeat.com *.media.net *.sharethrough.com *.openx.com *.sonobi.com *.districtm.io *.emxdgt.com *.appnexus.com *.google.com *.rhythmone.com *.33across.com *.lemmatechnologies.com *.e-planning.net *.themediagrid.com *.sovrn.com *.lijit.com *.gumgum.com *.nr-data.net *.ttwstatic.com *.thinglink.com *.thinglink.me *.defybrick.com e.infogram.com *.clarity.ms; frame-src 'self'  'unsafe-eval' *.addthis.com *.googlesyndication.com *.facebook.com\/ *.outbrain.com *.twitter.com *.surveymonkey.com embeds.audioboom.com *.rubiconproject.com *.apester.com *.openx.net *.pinterest.com *.instagram.com *.embedresponsively.com *.youtube.com *.pubmatic.com *.forces.net *.forcesnews.com *.google.com *.bfbs.com apester.com\/* forces.liveblog.pro forces.liveblog.pro\/* *.strawpoll.com\/ timbre-player.sharp-stream.com *.tiktok.com googleads.g.doubleclick.net gum.criteo.com pre.ads.justpremium.com console.googletagservices.com giphy.com *.giphy.com e.infogram.com *.thinglink.com *.thinglink.me; child-src 'self' 'unsafe-inline' 'unsafe-eval' blob: apester.com\/* forces.liveblog.pro\/* *.strawpoll.com\/; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors https:\/\/*.doubleclick.net https:\/\/*.sharethis.com 'self' https:\/\/zb.tdicompliancecloud.com https:\/\/drive.zimmerbiomet.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/*.adsrvr.org https:\/\/*.clarity.ms https:\/\/*.doubleclick.net https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.marketo.com https:\/\/*.mouseflow.com https:\/\/*.scene7.com https:\/\/*.youtube.com https:\/\/*.zimmerbiomet.com https:\/\/acsbapp.com https:\/\/assets.adobedtm.com https:\/\/assets.map.brightcove.com https:\/\/bat.bing.com https:\/\/cdn.cookielaw.org https:\/\/connect.facebook.net https:\/\/js.driftt.com https:\/\/munchkin.marketo.net https:\/\/pagead2.googlesyndication.com https:\/\/players.brightcove.net https:\/\/snap.licdn.com https:\/\/tags.srv.stackadapt.com https:\/\/vjs.zencdn.net https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/*.sharethis.com https:\/\/buttons-config.sharethis.com https:\/\/cdn.jsdelivr.net https:\/\/platform-api.sharethis.com https:\/\/qvdt3feo.com; style-src 'self' 'unsafe-inline' https:\/\/*.googleapis.com https:\/\/*.marketo.com https:\/\/*.scene7.com https:\/\/cdn.cookielaw.org https:\/\/tags.srv.stackadapt.com https:\/\/cdn.jsdelivr.net; img-src 'self' data: https:\/\/*.bing.com https:\/\/*.clarity.ms https:\/\/*.doubleclick.net https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.picsum.photos https:\/\/*.salesforce.com https:\/\/*.scene7.com https:\/\/*.turn.com https:\/\/*.zimmerbiomet.com https:\/\/assets.adobedtm.com https:\/\/assets.map.brightcove.com https:\/\/bat.bing.com https:\/\/cdn.cookielaw.org https:\/\/cf-images.us-east-1.prod.boltdns.net https:\/\/cm.everesttech.net https:\/\/facebook.com https:\/\/connect.facebook.net https:\/\/dev.day.com https:\/\/dpm.demdex.net https:\/\/hostedseal.trustarc.com https:\/\/metrics.brightcove.com https:\/\/pagead2.googlesyndication.com https:\/\/picsum.photos https:\/\/privacy-policy.truste.com https:\/\/snap.licdn.com https:\/\/tags.srv.stackadapt.com https:\/\/www.facebook.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/zimzbdotcomprod.112.2o7.net https:\/\/*.sharethis.com https:\/\/www.google.com.mx https:\/\/www.thepersonalizedknee.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdn.jsdelivr.net; connect-src 'self' data: https:\/\/*.adsrvr.org https:\/\/*.bing.com https:\/\/*.clarity.ms https:\/\/*.doubleclick.net https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.mktoresp.com https:\/\/*.mktoutil.com https:\/\/*.salesforce.com https:\/\/*.scene7.com https:\/\/*.zimmerbiomet.com https:\/\/api.ipdata.co https:\/\/assets.adobedtm.com https:\/\/assets.map.brightcove.com https:\/\/bat.bing.com https:\/\/bcp.crwdcntrl.net https:\/\/cdn.acsbapp.com https:\/\/cdn.cookielaw.org https:\/\/facebook.com https:\/\/connect.facebook.net https:\/\/dpm.demdex.net https:\/\/edge.api.brightcove.com https:\/\/geolocation.onetrust.com https:\/\/js.driftt.com https:\/\/manifest.prod.boltdns.net https:\/\/metrics.brightcove.com https:\/\/n2.mouseflow.com https:\/\/pagead2.googlesyndication.com https:\/\/privacyportal.onetrust.com https:\/\/snap.licdn.com https:\/\/tags.srv.stackadapt.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/zimmerbiomet.tt.omtrdc.net https:\/\/zimzbdotcomprod.112.2o7.net https:\/\/*.brightcovecdn.com https:\/\/*.sharethis.com https:\/\/data.stbuttons.click https:\/\/house-fastly-signed-us-east-1-prod.brightcovecdn.com https:\/\/platform-api.sharethis.com; frame-src 'self' https:\/\/*.adsrvr.org https:\/\/*.doubleclick.net https:\/\/*.google.com https:\/\/*.marketo.com https:\/\/*.scene7.com https:\/\/*.youtube.com https:\/\/assets.map.brightcove.com https:\/\/connect.facebook.net https:\/\/js.driftt.com https:\/\/www.googletagmanager.com https:\/\/zimmer.demdex.net https:\/\/*.sharethis.com https:\/\/zb-id-test.vercel.app https:\/\/forms.zohopublic.com https:\/\/forms.office.com https:\/\/zbns.zimmerbiomet.com; media-src 'self' data: blob: https:\/\/*.scene7.com https:\/\/*.zimmerbiomet.com https:\/\/assets.map.brightcove.com https:\/\/*.driftt.com https:\/\/*.boltdns.net https:\/\/*.brightcove.com https:\/\/*.brightcovecdn.com; form-action 'self'","count":2},{"content-security-policy-report-only":" default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; object-src 'none'; base-uri 'self';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval' https:\/\/hmwa.helmholtz-munich.de https:\/\/prototype.local.next.helmholtz-munich.de 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' https:\/\/*.dzd-ev.de https:\/\/images.admiralcloud.com https:\/\/prototype.local.next.helmholtz-munich.de https:\/\/hmwa.helmholtz-munich.de https:\/\/i.ytimg.com https:\/\/i.vimeocdn.com; base-uri 'self'; frame-src 'self' https:\/\/player.vimeo.com https:\/\/www.youtube-nocookie.com https:\/\/spenden.twingle.de https:\/\/hmwa.helmholtz-munich.de https:\/\/www.ardmediathek.de; connect-src 'self' https:\/\/*.dzd-ev.de wss:\/\/*.dzd-ev.de\/ https:\/\/sentry2.in2code.de\/api\/62\/security\/ wss:\/\/prototype.local.next.helmholtz-munich.de\/ https:\/\/hmwa.helmholtz-munich.de https:\/\/spenden.twingle.de https:\/\/jobs.b-ite.com https:\/\/static.b-ite.com\/ https:\/\/images.admiralcloud.com; style-src 'self' 'unsafe-inline' 'report-sample'; style-src-elem 'self' 'unsafe-inline' https:\/\/prototype.local.next.helmholtz-munich.de 'report-sample'; script-src-elem 'self' 'unsafe-inline' https:\/\/*.dzd-ev.de https:\/\/prototype.local.next.helmholtz-munich.de https:\/\/hmwa.helmholtz-munich.de https:\/\/spenden.twingle.de https:\/\/cs-assets.b-ite.com https:\/\/static.b-ite.com 'report-sample'; script-src-attr 'self' 'unsafe-inline' 'report-sample'; font-src 'self' https:\/\/*.dzd-ev.de https:\/\/prototype.local.next.helmholtz-munich.de https:\/\/hmwa.helmholtz-munich.de; media-src 'self' https:\/\/*.dzd-ev.de https:\/\/images.admiralcloud.com https:\/\/filehub.admiralcloud.com https:\/\/mediafra.admiralcloud.com https:\/\/prototype.local.next.helmholtz-munich.de; report-uri https:\/\/sentry2.in2code.de\/api\/62\/security\/?sentry_key=c8671bb1cf909cd134a5b859fc8d36e1","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudfront.net *.podigee-cdn.net 'self' data: d3c2yqbxx52o4l.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * d3c2yqbxx52o4l.cloudfront.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com https:\/\/www.googletagmanager.com\/ *.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.office365.com schoeffel-lowa.de *.podigee-cdn.net komoot.com d3c2yqbxx52o4l.cloudfront.net www.komoot.com d3ms8mre5rhtvu.cloudfront.net dwin1.com awin1.com zenaps.com the.sciencebehindecommerce.com wepowerconnections.com lantern.roeyecdn.com lantern.roeye.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/www.mollie.com maps.googleapis.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ *.cdninstagram.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.usercentrics.eu *.hubspot.com *.podigee-cdn.net *.hsforms.net *.hsforms.com 'self' data: d3c2yqbxx52o4l.cloudfront.net maps.gstatic.com dwin1.com awin1.com zenaps.com the.sciencebehindecommerce.com wepowerconnections.com lantern.roeyecdn.com lantern.roeye.com *.facebook.com *.google.pl *.google.de data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.mollie.com maps.googleapis.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ player.vimeo.com connect.facebook.net cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleadservices.com *.usercentrics.eu *.googleapis.com *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.podigee-cdn.net *.hsforms.net *.hsforms.com *.gstatic.com d3c2yqbxx52o4l.cloudfront.net pagead2.googlesyndication.com *.dwin1.com dwin1.com *.awin1.com awin1.com *.zenaps.com zenaps.com the.sciencebehindecommerce.com wepowerconnections.com lantern.roeyecdn.com lantern.roeye.com *.hsadspixel.net *.digiaccess.org 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.podigee-cdn.net *.googleapis.com *.gstatic.com d3c2yqbxx52o4l.cloudfront.net *.googletagmanager.com www.google.pl 'self' 'unsafe-inline'; object-src d3c2yqbxx52o4l.cloudfront.net 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ *.cloudfront.net d3c2yqbxx52o4l.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.usercentrics.eu *.googleapis.com *.googlesyndication.com t.elasticsuite.io *.hsforms.net *.hsforms.com places.googleapis.com d3c2yqbxx52o4l.cloudfront.net www.google-analytics.com analytics.google.com paypal.com *.paypalobjects.com dwin1.com awin1.com zenaps.com the.sciencebehindecommerce.com wepowerconnections.com lantern.roeyecdn.com lantern.roeye.com *.digiaccess.org *.hubapi.com *.lowa.com *.hsappstatic.net googleads.g.doubleclick.net www.google.pl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com d3c2yqbxx52o4l.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/s0.wp.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com data:; frame-src 'self' data: blob: https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/wp-themes.com; img-src * data:; media-src * data:; style-src 'self' https:\/\/fonts.googleapis.com data: 'unsafe-inline'; script-src https:\/\/wp-themes.com 'self' data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self'; frame-ancestors 'self' https:\/\/hub.libraesva.com; report-uri https:\/\/sentry.libraesva.com\/api\/16\/security\/?sentry_key=ec35ea3e850202bb70633fcd5d55c698","count":2},{"content-security-policy-report-only":" img-src https:\/\/higherlogicdownload.s3.amazonaws.com\/NACE\/ https:\/\/cdn.jsdelivr.net\/jquery.slick\/ https:\/\/higherlogic-holdingpen-us-east-1.s3.amazonaws.com\/NACE\/ https:\/\/img.youtube.com\/vi\/ https:\/\/static.filestackapi.com\/picker\/ https:\/\/d2x5ku95bkycr3.cloudfront.net https:\/\/higherlogiclongterm.s3.amazonaws.com\/NACE\/ blob: https:\/\/d132x6oi8ychic.cloudfront.net 'self'; style-src https:\/\/d132x6oi8ychic.cloudfront.net 'unsafe-inline' https:\/\/higherlogiccloudfront.s3.amazonaws.com https:\/\/cdn.jsdelivr.net\/jquery.slick\/ https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/prism\/ https:\/\/d2x5ku95bkycr3.cloudfront.net\/ https:\/\/ajax.googleapis.com\/ajax\/libs\/jqueryui\/ https:\/\/use.fortawesome.com\/ https:\/\/cdn.higherlogic.com\/ai-assistant https:\/\/static.filestackapi.com\/picker\/ https:\/\/fonts.googleapis.com\/ https:\/\/d3uf7shreuzboy.cloudfront.net\/ https:\/\/higherlogic-holdingpen-us-east-1.s3.amazonaws.com\/NACE\/ https:\/\/higherlogicdownload.s3.amazonaws.com\/NACE\/ https:\/\/higherlogiclongterm.s3.amazonaws.com\/NACE\/ 'self'; font-src https:\/\/fonts.googleapis.com\/ https:\/\/fonts.gstatic.com\/ https:\/\/cdn.jsdelivr.net\/jquery.slick\/ https:\/\/higherlogiccloudfront.s3.amazonaws.com https:\/\/higherlogicdownload.s3.amazonaws.com\/NACE\/ https:\/\/higherlogic-holdingpen-us-east-1.s3.amazonaws.com\/NACE\/ 'self' https:\/\/higherlogiclongterm.s3.amazonaws.com\/NACE\/ https:\/\/maxcdn.bootstrapcdn.com\/font-awesome\/ https:\/\/d2x5ku95bkycr3.cloudfront.net https:\/\/d132x6oi8ychic.cloudfront.net data:; script-src-elem https:\/\/www.google.com\/recaptcha\/ https:\/\/www.recaptcha.net\/recaptcha\/ https:\/\/d2x5ku95bkycr3.cloudfront.net\/HigherLogic\/jquery\/jquery-ui-1.13.3.min.js https:\/\/d3uf7shreuzboy.cloudfront.net\/ https:\/\/static.filestackapi.com\/picker\/ https:\/\/cdn.higherlogic.com\/ai-assistant https:\/\/d2x5ku95bkycr3.cloudfront.net\/HigherLogic\/jquery\/jquery-3.7.1.min.js https:\/\/d2x5ku95bkycr3.cloudfront.net\/ https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/prism\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/static.filestackapi.com\/filestack-js\/ 'self' https:\/\/ajax.aspnetcdn.com\/ajax\/ 'unsafe-eval' 'unsafe-inline'; media-src https:\/\/higherlogiclongterm.s3.amazonaws.com\/NACE\/ https:\/\/higherlogicdownload.s3.amazonaws.com\/NACE\/ https:\/\/higherlogic-holdingpen-us-east-1.s3.amazonaws.com\/NACE\/ https:\/\/higherlogicstream.s3.amazonaws.com\/NACE\/ 'self' https:\/\/d132x6oi8ychic.cloudfront.net; script-src https:\/\/higherlogiclongterm.s3.amazonaws.com\/NACE\/ https:\/\/higherlogicdownload.s3.amazonaws.com\/NACE\/ https:\/\/ajax.aspnetcdn.com\/ajax\/ https:\/\/cdn.jsdelivr.net\/jquery.slick\/ https:\/\/d2x5ku95bkycr3.cloudfront.net\/HigherLogic\/jquery\/jquery-ui-1.13.3.min.js https:\/\/d132x6oi8ychic.cloudfront.net https:\/\/cdn.informz.net 'unsafe-eval' https:\/\/use.fortawesome.com\/ https:\/\/higherlogic-holdingpen-us-east-1.s3.amazonaws.com\/NACE\/ https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/prism\/ 'unsafe-inline' https:\/\/d2x5ku95bkycr3.cloudfront.net\/ https:\/\/higherlogiccloudfront.s3.amazonaws.com https:\/\/static.filestackapi.com https:\/\/d2x5ku95bkycr3.cloudfront.net\/HigherLogic\/jquery\/jquery-3.7.1.min.js https:\/\/d3uf7shreuzboy.cloudfront.net\/ 'self'; frame-src https:\/\/www.google.com\/recaptcha\/ https:\/\/www.recaptcha.net\/recaptcha\/ https:\/\/api.connectedcommunity.org\/ 'self' https:\/\/www.youtube.com\/embed\/ https:\/\/*.kb.us.higherlogic.com; connect-src https:\/\/upload.filestackapi.com https:\/\/static.filestackapi.com https:\/\/cloud.filestackapi.com\/folder\/list\/ 'self' https:\/\/hl-managedservices.informz.net https:\/\/d3uf7shreuzboy.cloudfront.net\/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https:\/\/*.connectedcommunity.org\/ 'self'; object-src 'none'; manifest-src 'self';","count":2},{"content-security-policy-report-only":" default-src 'self' blob: *; img-src 'self' data: *; script-src 'self' blob: * 'unsafe-inline' 'unsafe-eval'; style-src 'self' * 'unsafe-inline'; font-src 'self' data: *; connect-src *; frame-ancestors 'self'; base-uri 'self'; form-action 'self'","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' 'unsafe-eval' fonts.googleapis translate.google.com translate.googleapis.com translate-pa.googleapis.com *.gstatic.com siteimproveanalytics.com *.siteimprove.com svc.webspellchecker.net js-agent.newrelic.com bam.nr-data.net cdn.jsdelivr.net https:\/\/cdn.jsdelivr.net https:\/\/cdn.siteimprove.net https:\/\/cdnjs.cloudflare.com https:\/\/maps.googleapis.com https:\/\/rebilly.github.io https:\/\/static.addtoany.com https:\/\/unpkg.com https:\/\/webapp.recyclecoach.com maps.googleapis.com platform.instagram.com platform.twitter.com; script-src-attr 'self'; script-src-elem 'self' fonts.googleapis translate.google.com translate.googleapis.com translate-pa.googleapis.com *.gstatic.com siteimproveanalytics.com *.siteimprove.com svc.webspellchecker.net js-agent.newrelic.com bam.nr-data.net cdn.jsdelivr.net https:\/\/cdn.jsdelivr.net https:\/\/cdn.siteimprove.net https:\/\/cdnjs.cloudflare.com https:\/\/maps.googleapis.com https:\/\/rebilly.github.io https:\/\/static.addtoany.com https:\/\/unpkg.com https:\/\/webapp.recyclecoach.com maps.googleapis.com platform.instagram.com platform.twitter.com; style-src 'self' fonts.googleapis translate.google.com translate.googleapis.com translate-pa.googleapis.com *.gstatic.com siteimproveanalytics.com *.siteimprove.com svc.webspellchecker.net js-agent.newrelic.com bam.nr-data.net cdn.jsdelivr.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com https:\/\/use.fontawesome.com; style-src-attr 'self'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/cdn.teamtailor.com https:\/\/websdk.appsflyer.com https:\/\/onelink.me https:\/\/cdnjs.cloudflare.com https:\/\/zzcdn.me https:\/\/*.zzcdn.me https:\/\/elsaspeak.com https:\/\/www.clarity.ms 'unsafe-eval' https:\/\/googleads.g.doubleclick.net https:\/\/s.yimg.jp https:\/\/bat.bing.com https:\/\/static.ads-twitter.com https:\/\/analytics.tiktok.com https:\/\/analytics.ahrefs.com https:\/\/js.hs-scripts.com https:\/\/crm.zoho.com https:\/\/websdk.appsflyersdk.com https:\/\/onelinksmartscript.appsflyer.com https:\/\/scripts.clarity.ms https:\/\/js.hsadspixel.net https:\/\/js.hs-banner.com https:\/\/js.hubspot.com https:\/\/js.hs-analytics.net https:\/\/b99.yahoo.co.jp; style-src 'self' 'unsafe-inline' https:\/\/cdnjs.cloudflare.com https:\/\/vn.elsaspeak.com https:\/\/cdn.jsdelivr.net; font-src 'self' data: https:\/\/cdnjs.cloudflare.com; img-src 'self' data: blob: https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/*.fbcdn.net https:\/\/www.facebook.com https:\/\/px.ads.linkedin.com https:\/\/i.ytimg.com https:\/\/api.producthunt.com https:\/\/online.gov.vn https:\/\/zzcdn.me https:\/\/*.zzcdn.me https:\/\/vn.elsaspeak.com https:\/\/*.clarity.ms https:\/\/log.adtimaserver.vn https:\/\/www.google.com.vn https:\/\/d1t11jpd823i7r.cloudfront.net https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/t.co https:\/\/analytics.twitter.com https:\/\/bat.bing.com https:\/\/perf-na1.hsforms.com https:\/\/b99.yahoo.co.jp https:\/\/track.hubspot.com https:\/\/c.clarity.ms; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/px.ads.linkedin.com https:\/\/*.appsflyer.com https:\/\/*.clarity.ms https:\/\/ad.doubleclick.net https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/log.adtimaserver.vn https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/wa.onelink.me https:\/\/js.hs-banner.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/analytics.tiktok.com https:\/\/cta-service-cms2.hubspot.com https:\/\/api.hubapi.com https:\/\/wa.appsflyersdk.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.facebook.com https:\/\/*.teamtailor.com https:\/\/www.googletagmanager.com; worker-src 'self' blob:; frame-ancestors 'self'; base-uri 'self'; object-src 'none'","count":2},{"content-security-policy-report-only":" base-uri 'none'; font-src 'self' https: data: https:\/\/lightning.dcuniverseinfinite.com https:\/\/fonts.gstatic.com https:\/\/use.fontawesome.com data:; form-action 'self'; frame-ancestors 'self' https:\/\/multiverse.dc.com https:\/\/multiverse.qa.wbdnmv.net https:\/\/local.qa.wbdndc.net:444; img-src 'self' data: blob: https:\/\/lightning.dcuniverseinfinite.com https:\/\/reader.dcuniverseinfinite.com https:\/\/www.dcuniverseinfinite.com https:\/\/imgix-media.wbdndc.net https:\/\/cdn.cookielaw.org https:\/\/www.google.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com https:\/\/ssl.gstatic.com https:\/\/www.gstatic.com https:\/\/www.paypalobjects.com https:\/\/*.stats.paypal.com *.paypal.com *.paypalobjects.com *.venmo.com data: https:\/\/dc-qa-reader.drama9.com https:\/\/dc-qa-www.drama9.com https:\/\/imgix-media-qa.wbdndc.net https:\/\/imgix-media-dev.wbdndc.net https:\/\/c.sandbox.paypal.com; object-src 'none'; script-src-attr 'unsafe-inline'; style-src 'self' https:\/\/lightning.dcuniverseinfinite.com https:\/\/fonts.googleapis.com https:\/\/use.fontawesome.com https:\/\/googletagmanager.com https:\/\/tagmanager.google.com https:\/\/fonts.googleapis.com *.paypal.com *.paypalobjects.com *.venmo.com unsafe-inline 'unsafe-inline'; script-src 'self' https: https:\/\/googleads.g.doubleclick.net https:\/\/*.doubleclick.net https:\/\/cdn.cookielaw.org https:\/\/cdn.optimizely.com https:\/\/cdn.segment.com https:\/\/client-api.arkoselabs.com https:\/\/lightning.dcuniverseinfinite.com https:\/\/pg.feroot.com https:\/\/ssl.kaptcha.com https:\/\/www.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/googletagmanager.com https:\/\/tagmanager.google.com https:\/\/*.ingest.sentry.io *.paypal.com *.paypalobjects.com *.venmo.com unsafe-inline https:\/\/tst.kaptcha.com 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' 'nonce-staMDVfpNpRfRh7Xe2H0ynLW'; upgrade-insecure-requests; connect-src 'self' https:\/\/reader.dcuniverseinfinite.com https:\/\/search.dcuniverseinfinite.com https:\/\/api.segment.io https:\/\/cdn.cookielaw.org https:\/\/cdn.segment.com https:\/\/www.googleadservices.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/*.doubleclick.net https:\/\/*.google.com https:\/\/pagead2.googlesyndication.com https:\/\/ssl.kaptcha.com https:\/\/d.agkn.com https:\/\/pg.feroot.com https:\/\/client-api.arkoselabs.com https:\/\/lightning.dcuniverseinfinite.com https:\/\/privacyportal.onetrust.com https:\/\/geolocation.onetrust.com https:\/\/api.braintreegateway.com https:\/\/receive.wmcdp.io https:\/\/wmff.warnermediacdn.com https:\/\/*.optimizely.com https:\/\/sdk.iad-03.braze.com https:\/\/atlas.ngtv.io https:\/\/*.ingest.sentry.io https:\/\/payments.braintreegateway.com https:\/\/gateway.braintreegateway.com *.paypal.com *.paypalobjects.com *.venmo.com https:\/\/dc-qa-reader.drama9.com https:\/\/dc-qa-search.drama9.com https:\/\/dc-qa-www.drama9.com https:\/\/stats.g.doubleclick.net https:\/\/api.sandbox.braintreegateway.com https:\/\/payments.sandbox.braintree-api.com https:\/\/gateway-sand.sandbox.braintree-api.com https:\/\/test.receive.wmcdp.io https:\/\/tst.kaptcha.com https:\/\/sourcemaps-wsdk.roktinternal.com https:\/\/browser-intake-us5-datadoghq.com https:\/\/browser-intake-datadoghq.com; frame-src 'self' https:\/\/lightning.dcuniverseinfinite.com https:\/\/lightning.warnermediacdn.com https:\/\/d.agkn.com https:\/\/www.googletagmanager.com https:\/\/checkout.paypal.com https:\/\/assets.braintreegateway.com https:\/\/a1464009.cdn.optimizely.com https:\/\/client-api.arkoselabs.com https:\/\/apps.rokt.com https:\/\/*.cdn.optimizely.com https:\/\/*.kaptcha.com https:\/\/*.paypal.com *.paypalobjects.com *.venmo.com https:\/\/c.sandbox.paypal.com https:\/\/tst.kaptcha.com; report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub4f016f96ffe92caf11f87dc365619a51&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3AdcuiWebApp%2Cenv%3Aprod;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/js.stripe.com https:\/\/checkout.razorpay.com https:\/\/www.paypal.com https:\/\/www.paypalobjects.com https:\/\/connect.facebook.net https:\/\/www.clarity.ms https:\/\/client.crisp.chat https:\/\/settings.crisp.chat https:\/\/*.hotjar.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/client.crisp.chat; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/client.crisp.chat; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' https: wss:; frame-src 'self' https:\/\/js.stripe.com https:\/\/hooks.stripe.com https:\/\/checkout.razorpay.com https:\/\/api.razorpay.com https:\/\/www.paypal.com https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net https:\/\/game.crisp.chat https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'","count":2},{"content-security-policy-report-only":" base-uri 'self'; object-src 'none'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" font-src *.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net *.googleapis.com maxcdn.bootstrapcdn.com *.fonts.googleapis.com data: *.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https:\/\/www.coinpayments.net\/index.php *.canadapost.ca https:\/\/sso.epost.ca *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com www.facebook.com platform.twitter.com *.authorize.net *.addthis.com *.pinterest.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/www.coinpayments.net magefan.com cm.magefan.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.doubleclick.net *.googletagmanager.com https:\/\/firebasestorage.googleapis.com mageside.com *.canadapost.ca *.canadapost-postescanada.ca *.googleapis.com https:\/\/www.magezon.com flagpedia.net www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.addthis.com *.pinterest.com *.cdninstagram.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com *.googleapis.com maps.googleapis.com connect.facebook.net twitter.com platform.twitter.com *.authorize.net https:\/\/tnsb.postaffiliatepro.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com *.google.com *.doubleclick.net *.googlesyndication.com https:\/\/www.merchant-center-analytics.goog https:\/\/get.geojs.io *.avada.io *.googleapis.com www.gstatic.com maps.googleapis.com *.authorize.net *.cloudflare.com *.paypal.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval';","count":2},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/www.goldcoastbulletin.com.au\/csp-reports","count":2},{"content-security-policy-report-only":" script-src-elem *.googleapis.com assets.adobedtm.com *.cardinalcommerce.com local.dochorse.nl *.hypernode.io; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.bootstrapcdn.com data: *.fontawesome.com *.cloudflare.com fonts.googleapis.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com maxcdn.bootstrapcdn.com https:\/\/widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com https:\/\/seo.mageplaza.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.cookiebot.com *.hotjar.com *.criteo.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.sendcloud.sc *.jsdelivr.net js.mollie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.placeholder.com *.linkedin.com *.cookiebot.com *.hypernode.io *.google.com *.google.cn *.cloudfront.net https:\/\/images.unsplash.com 'self' data: *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.amazonaws.com flagpedia.net https:\/\/www.mollie.com *.hsforms.net *.hsforms.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.newrelic.com bam-cell.nr-data.net bam.nr-data.net *.cookiebot.com *.googleapis.com widget.thuiswinkel.org *.hotjar.com *.criteo.net *.criteo.com api.widget.trengo.eu static.widget.trengo.eu *.trustpilot.com vanerkel.zendesk.com static.zdassets.com chimpstatic.com *.cardinalcommerce.com *.authorize.net *.bing.com *.doubleclick.net *.hypernode.io https:\/\/maps.googleapis.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.sendcloud.sc maps.googleapis.com js.mollie.com *.hsforms.net *.hsforms.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.bootstrapcdn.com *.fontawesome.com *.thuiswinkel-cdn.org *.googleapis.com *.hypernode.io *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com https:\/\/static.klaviyo.com *.sendcloud.sc *.jsdelivr.net maxcdn.bootstrapcdn.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.widget.trengo.eu static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com bam-cell.nr-data.net *.cookiebot.com api.widget.trengo.eu *.thuiswinkel-cdn.org *.hotjar.com wss:\/\/ws17.hotjar.com *.google-analytics.com vanerkel.zendesk.com *.zdassets.com *.doubleclick.net *.zopim.com wss:\/\/widget-mediator.zopim.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.facebook.com *.facebook.net *.googlesyndication.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com www.gstatic.com maps.googleapis.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/sentry.accentinteractive.nl\/api\/7\/security&sentry_key=a7b87978f567bba847858753e19a250b&sentry_release=1787641320&sentry_environment=production; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" font-src https:\/\/*.mailcampaigns.nl https:\/\/fonts.gstatic.com *.fontawesome.com *.gstatic.com 'self' data: fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https:\/\/pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ bid.g.doubleclick.net www.facebook.com www.google.com https:\/\/*.hotjar.com https:\/\/*.doubleclick.net www.googletagmanager.com sst.chromeburner.com sst.uat.chromeburner.com sst.chromeburner.nl sst.uat.chromeburner.nl *.multisafepay.com https:\/\/pay.google.com www.xtento.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https:\/\/*.bing.com bat.bing.net https:\/\/*.google-analytics.com https:\/\/pagead2.googlesyndication.com https:\/\/*.google.nl https:\/\/*.google.com https:\/\/*.clarity.ms https:\/\/*.facebook.com https:\/\/*.facebook.net https:\/\/*.googletagmanager.com https:\/\/*.chromeburner.test blob: https:\/\/*.chromeburner.com https:\/\/*.chromeburner.nl https:\/\/*.hotjar.com https:\/\/*.mailcampaigns.nl https:\/\/googleads.g.doubleclick.net https:\/\/*.usercentrics.eu https:\/\/images.unsplash.com *.multisafepay.com *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https:\/\/*.bing.com https:\/\/*.google-analytics.com https:\/\/pagead2.googlesyndication.com https:\/\/*.webgains.io https:\/\/*.clarity.ms https:\/\/*.facebook.net https:\/\/*.googleadservices.com https:\/\/*.doubleclick.net https:\/\/*.chromeburner.test https:\/\/*.chromeburner.com https:\/\/*.chromeburner.nl https:\/\/*.hotjar.com https:\/\/*.mailcampaigns.nl analytics.tiktok.com https:\/\/partner-cdn.shoparize.com https:\/\/*.usercentrics.eu https:\/\/maps.googleapis.com *.multisafepay.com https:\/\/pay.google.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https:\/\/*.mailcampaigns.nl *.fontawesome.com *.multisafepay.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https:\/\/*.bing.com bat.bing.net https:\/\/*.doubleclick.net https:\/\/*.google.com https:\/\/*.google.nl https:\/\/pagead2.googlesyndication.com https:\/\/*.clarity.ms https:\/\/*.chromeburner.test https:\/\/*.chromeburner.com https:\/\/*.chromeburner.nl https:\/\/*.googletagmanager.com https:\/\/*.hotjar.com https:\/\/*.google-analytics.com https:\/\/*.mailcampaigns.nl analytics.tiktok.com https:\/\/*.usercentrics.eu https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.multisafepay.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/chromeburner.report-uri.com\/r\/d\/csp\/reportOnly; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" default-src 'self' data:; script-src 'self' https:\/\/webtools.europa.eu *.webanalytics.europa.eu 'unsafe-eval' https:\/\/cdn.jsdelivr.net https:\/\/europa.eu\/ https:\/\/cdn.ckeditor.com\/ckeditor5\/ https:\/\/webanalytics.europa.eu https:\/\/op.europa.eu https:\/\/*.webtools.europa.eu; object-src 'none'; style-src 'self' https:\/\/webtools.europa.eu 'unsafe-inline' https:\/\/op.europa.eu\/; img-src 'self' https:\/\/webtools.europa.eu *.webanalytics.europa.eu data: https:\/\/webanalytics.europa.eu https:\/\/op.europa.eu; frame-src https:\/\/w.soundcloud.com https:\/\/www.youtube.com\/ https:\/\/*.ec.europa.eu\/ https:\/\/www.dailymotion.com\/ https:\/\/vimeo.com\/ 'self' https:\/\/webtools.europa.eu https:\/\/europa.eu\/ https:\/\/op.europa.eu; child-src https:\/\/w.soundcloud.com https:\/\/www.youtube.com\/ https:\/\/*.ec.europa.eu\/ https:\/\/www.dailymotion.com\/ https:\/\/vimeo.com\/ 'self' https:\/\/webtools.europa.eu https:\/\/europa.eu\/ https:\/\/op.europa.eu; font-src 'self' https:\/\/webtools.europa.eu; connect-src 'self' https:\/\/webtools.europa.eu *.webanalytics.europa.eu https:\/\/webanalytics.europa.eu https:\/\/europa.eu\/webtools\/rest\/etrans\/translate https:\/\/op.europa.eu https:\/\/*.webtools.europa.eu; report-uri \/report-csp-violation","count":2},{"content-security-policy-report-only":" object-src 'self' *.cined.com; report-uri \/_\/csp-report\/","count":2},{"content-security-policy-report-only":" default-src 'self'; connect-src *; font-src * data:; frame-src *; img-src * data: blob:; media-src *; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.ownerrez.com https:\/\/*.orez.io https:\/\/ajax.googleapis.com https:\/\/assets.calendly.com https:\/\/code.jquery.com https:\/\/maps.googleapis.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/www.gstatic.com https:\/\/www.redditstatic.com https:\/\/connect.facebook.net; worker-src * blob:; style-src * 'unsafe-inline'; report-uri https:\/\/o4511310048526336.ingest.us.sentry.io\/api\/4511337721888768\/security\/?sentry_key=4c6441f207b3ceaba29ab9c5d08f76dc","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com data: *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https:\/\/plumrocket.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com https:\/\/plumrocket.com *.affirm.com *.affirm.ca www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https:\/\/www.google.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com *.hubspot.com *.hsforms.com static.hsappstatic.net bat.bing.com *.googleusercontent.com obs.withflowersea.com aorta.clickagy.com *.affirm.com *.affirm.ca *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.certcapture.com js.usemessages.com js.hs-banner.com *.hubspot.com js.hs-analytics.net js.hs-scripts.com js.hsadspixel.net js-agent.newrelic.com ob.withflowersea.com obs.withflowersea.com script.crazyegg.com bat.bing.com www.clarity.ms amplify.outbrain.com wave.outbrain.com bigsur.ai ws-assets.zoominfo.com js.zi-scripts.com tags.clickagy.com js.adsrvr.org js.callrail.com cdn.callrail.com https:\/\/rum.hlx.page *.affirm.com *.affirm.ca *.googleapis.com *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ https:\/\/www.googletagmanager.com tagmanager.google.com https:\/\/www.googleadservices.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/apis.google.com maps.googleapis.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.fontawesome.com https:\/\/fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.hubspot.com api.hubapi.com bam.nr-data.net tr.outbrain.com amplify.outbrain.com paid.outbrain.com obs.withflowersea.com js.callrail.com script.crazyegg.com api.prod.bigsur.ai v.clarity.ms js.zi-scripts.com ws.zoominfo.com aorta.clickagy.com hemsync.clickagy.com *.affirm.com *.affirm.ca *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.modo.com.ar fonts.googleapis.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.gocuotas.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.mercadopago.com.ar mercadopago.com.ar *.getblue.io *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/mobbex.com *.gocuotas.com www.facebook.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.google.com.ar *.google.es *.google.com.uy *.mercadopago.com.ar *.modo.com.ar *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com *.gocuotas.com *.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.woowup.com *.hotjar.com *.pageimprove.io pageimprove.io *.getblue.io *.adidas.com *.modo.com.ar *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com *.gocuotas.com cdn.ampproject.org www.gstatic.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms unpkg.com *.doubleclick.net https:\/\/merchants.playdigital.com.ar\/ https:\/\/merchants.preprod.playdigital.com.ar\/ https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com www.gstatic.com *.tagmanager.google.com *.googletagmanager.com https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.pangle-ads.com *.modo.com.ar *.google.com.ar *.google.com *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com *.gocuotas.com cdn.ampproject.org www.googleapis.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.clarity.ms *.doubleclick.net *.run.app https:\/\/merchants.playdigital.com.ar\/ https:\/\/merchants.preprod.playdigital.com.ar\/ https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'   *.cloudflare.com   *.bing.com   *.rfihub.net   *.boomtrain.com   *.cookielaw.org   *.facebook.net   *.doubleclick.net   *.derbysoftsec.com   *.rezync.com   *.cdn.digitaloceanspaces.com   *.azds.com   *.sojern.com   *.quantcount.com   *.crazyegg.com   *.quantserve.com   *.cloudflareinsights.com   *.stackadapt.com   *.google-analytics.com   *.googletagmanager.com   *.tiqcdn.com   *.stripe.com   *.googleapis.com   *.gstatic.com   *.google.com   *.callrail.com   *.googleadservices.com   *.yimg.com   *.simpli.fi   *.matomo.cloud   plausible.io   *.umami.is   *.posthog.com   *.threatspike.com   *.qvdt3feo.com   *.montage.com;  script-src-elem 'self' 'unsafe-inline'   *.cloudflare.com   *.bing.com   *.rfihub.net   *.boomtrain.com   *.cookielaw.org   *.facebook.net   *.doubleclick.net   *.derbysoftsec.com   *.rezync.com   *.cdn.digitaloceanspaces.com   *.azds.com   *.sojern.com   *.quantcount.com   *.crazyegg.com   *.quantserve.com   *.cloudflareinsights.com   *.stackadapt.com   *.google-analytics.com   *.googletagmanager.com   *.tiqcdn.com   *.stripe.com   *.googleapis.com   *.gstatic.com   *.google.com   *.callrail.com   *.googleadservices.com   *.yimg.com   *.simpli.fi   *.montage.com   *.storage.googleapis.com   plausible.io   *.matomo.cloud   *.sc-static.net   *.posthog.com   *.threatspike.com   *.umami.is   *.infird.com   *.hotjar.com   *.upsellit.com   *.redditstatic.com   blob:;  connect-src 'self'   *.azds.com   *.boomtrain.com   *.callrail.com   *.cookielaw.org   *.crazyegg.com   *.doubleclick.net   *.facebook.com   *.g.doubleclick.net   *.google-analytics.com   google.com   *.google.com.mx   *.google.com   *.google.de   *.googleadservices.com   *.googletagmanager.com   *.googleapis.com   *.google.co.uk   *.onetrust.com   *.sojern.com   *.stackadapt.com   *.tiqcdn.com   *.myhotelshop.de   *.awsapprunner.com   *.run.app   *.letsway.com   *.bing.com   *.bing.net   *.googlesyndication.com   *.matomo.cloud   *.umami.dev   *.yimg.com   plausible.io   *.pendry.com   *.posthog.com   *.yoast.com   *.launchdarkly.com   *.geoedge.com   *.adsrvr.org   *.yoast.com   *.cloudfront.net   *.adform.net   *.adnxs.com   *.tiktokw.us   *.tiktok.com   *.browsekeeper.com   *.redditstatic.com   *.reddit.com   *.overbridgenet.com   *.montage.com   data:;  frame-src 'self'   *.doubleclick.net   *.facebook.com   *.googletagmanager.com   *.google.com   *.pcibooking.net   *.rfihub.net   *.rfihub.com   *.sojern.com   *.stripe.com   *.azds.com   *.zscalerthree.net   *.truetour.app   truetour.app   visitingmedia.com   *.vimeo.com   *.formcrafts.com   *.ibotta.com   *.contextall.com   *.canyonsdistrict.org   *.ggusd.us   *.menlosecurity.com   *.zscaler.net   *.snapchat.com   *.montage.com   blob:;  style-src * 'unsafe-inline'; img-src * data: blob:; font-src * data:; media-src * 'self' data:; manifest-src * 'self'; worker-src 'self' blob:; child-src 'self' blob:;  report-uri https:\/\/cfe87652b26de6b69f71ed43bef9cf37.report-uri.com\/r\/d\/csp\/reportOnly;","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.cit.com;           script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.cit.com https:\/\/snap.licdn.com https:\/\/munchkin.marketo.net https:\/\/www.googletagmanager.com https:\/\/googleads.g.doubleclick.net https:\/\/static.ads-twitter.com https:\/\/s.yimg.com https:\/\/bat.bing.com https:\/\/connect.facebook.net https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/utt.impactcdn.com https:\/\/cdn.cookielaw.org https:\/\/www.fdic.gov https:\/\/assets.adobedtm.com https:\/\/siteintercept.qualtrics.com https:\/\/siteimproveanalytics.com https:\/\/www.everestjs.net https:\/\/zn780vxspp4zyl7dr-citcx.siteintercept.qualtrics.com https:\/\/citgroup.demdex.net https:\/\/pixel.everesttech.net https:\/\/sp.analytics.yahoo.com https:\/\/g.3gl.net https:\/\/cg-7ce3a684-2bed-464c-8d1c-1a0e4cba69c6.s3.us-gov-west-1.amazonaws.com https:\/\/s.go-mpulse.net https:\/\/launchpad.privacymanager.io https:\/\/ats-wrapper.privacymanager.io;           connect-src 'self' https:\/\/*.cit.com https:\/\/graphql.contentful.com https:\/\/cms-images.cit.com https:\/\/cdn.cookielaw.org https:\/\/privacyportal.onetrust.com https:\/\/geolocation.onetrust.com https:\/\/dpm.demdex.net https:\/\/edge.adobedc.net https:\/\/bat.bing.com https:\/\/lib-us-2.brilliantcollector.com https:\/\/stats.g.doubleclick.net https:\/\/analytics.google.com https:\/\/www.google.com https:\/\/lasteventf-tm.everesttech.net https:\/\/s.yimg.com https:\/\/px.ads.linkedin.com https:\/\/siteintercept.qualtrics.com https:\/\/151-fhs-046.mktoresp.com https:\/\/894-itd-344.mktoresp.com https:\/\/284-lbb-572.mktoresp.com https:\/\/022-ygl-099151-fhs-046284-lbb-572.mktoresp.com https:\/\/c.go-mpulse.net https:\/\/citbank.sjv.io;           worker-src 'self';           style-src 'self' 'unsafe-inline' https:\/\/*.cit.com https:\/\/cdn.cookielaw.org;           style-src-elem 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdn.cookielaw.org;           img-src 'self' data: https:\/\/*.cit.com https:\/\/cms-images.cit.com https:\/\/2884.global.siteimproveanalytics.io https:\/\/dpm.demdex.net https:\/\/cdn.cookielaw.org https:\/\/px.ads.linkedin.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/googleads.g.doubleclick.net https:\/\/bat.bing.com https:\/\/sp.analytics.yahoo.com https:\/\/cm.everesttech.net https:\/\/www.linkedin.com;           frame-src 'self' https:\/\/*.cit.com https:\/\/citbankapp.cit.com https:\/\/uat-oao.cit.com https:\/\/stage-oao.cit.com https:\/\/sape-oao.cit.com https:\/\/pl-oao.cit.com https:\/\/qa-oao.cit.com https:\/\/www.googletagmanager.com https:\/\/fast.wistia.net https:\/\/citgroup.demdex.net;           frame-ancestors 'self' https:\/\/citbankapp.cit.com https:\/\/uat-oao.cit.com https:\/\/stage-oao.cit.com https:\/\/sape-oao.cit.com https:\/\/pl-oao.cit.com https:\/\/qa-oao.cit.com https:\/\/customerfinancing.directcapital2.com https:\/\/www.customerfinancing.com https:\/\/customerfinancing.directcapital-test1.com https:\/\/customerfinancing.directcapital-test2.com https:\/\/customerfinancing.directcapital-test3.com https:\/\/customerfinancing.directcapital-test4.com onlineapps-conv.readiness.ibanking-services.com onlineapps.ibanking-services.com ibanking-services.com https:\/\/*.fisglobal.com https:\/\/*.citbank.com https:\/\/citcom-dev.ase1-dev.citnet.cit.com https:\/\/*.firstcitizens.com;           media-src 'self' blob: *.wistia.com *.wistia.net;           font-src 'self' data: *.wistia.com *.onetrust.com *.wistia.net *.gstatic.com;           ","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.checkout.com *.cdn-apple.com *.careem-pay.com *.fontawesome.com https:\/\/fonts.bunny.net *.cloudflare.com *.bootstrapcdn.com 'unsafe-inline' data: static.sizebay.technology *.moengage.com fonts.googleapis.com data: checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai storage.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com connect.facebook.net www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.checkout.com *.klarna.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.b-cdn.net *.tap.company *.careem-pay.com https:\/\/c.sharethis.mgr.consensu.org gumi.criteo.com rivafashion.api.useinsider.com www.googletagmanager.com td.doubleclick.net fledge.eu.criteo.com static.criteo.net static.sizebay.technology ams.creativecdn.com js.checkout.com tr.snapchat.com *.moengage.com https:\/\/www.googletagmanager.com\/ checkout.tabby.ai 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.tamara.co *.checkout.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.b-cdn.net https:\/\/firebasestorage.googleapis.com *.meetanshi.com *.cloudflare.com www.rivafashion.com sentinel.api.useinsider.com t.co www.google.co.in analytics.twitter.com ad.360yield.com pixel.rubiconproject.com s.ad.smaato.net ade.clmbtech.com contextual.media.net sync-t1.taboola.com simage2.pubmatic.com eb2.3lift.com sync-criteo.ads.yieldmo.com x.bidswitch.net dis.criteo.com r.casalemedia.com c.bing.com criteo-sync.teads.tv rtb-csync.smartadserver.com idsync.rlcdn.com sync.outbrain.com cs.adingo.jp cdn.aralego.net tg.socdm.com adx.dable.io sync.targeting.unrulymedia.com cm.adgrx.com sync.aralego.com public-prod-dspcookiematching.dmxleo.com tr.snapchat.com cm.g.doubleclick.net sync.1rx.io\/ image-eu.moengage.com ib.adnxs.com ads.stickyadstv.com *.moengage.com moe-email-campaigns.s3.amazonaws.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai fonts.googleapis.com storage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.tamara.co *.checkout.com *.klarnacdn.net *.cdn-apple.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.b-cdn.net *.careem-pay.com *.cloudflare.com *.avada.io *.cloudflareinsights.com static.cloudflareinsights.com web-sdk.ackoo.app *.api.useinsider.com tags.creativecdn.com *.twitter.com *.fontawesome.com static.ads-twitter.com widget.eu.criteo.com ams.creativecdn.com sc-static.net static.sizebay.technology dynamic.criteo.com rivafashion.api.useinsider.com app.link cdn.branch.io analytics.tiktok.com www.gstatic.com cdn.moengage.com sslwidget.criteo.com cdn.checkout.com js-agent.newrelic.com tr.snapchat.com vfr-v3-production.sizebay.technology http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ libraries.unbxdapi.com checkout.tabby.ai widgets.tabby.ai cdn.segment.com www.google.com cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.tamara.co *.checkout.com *.b-cdn.net *.fontawesome.com https:\/\/fonts.bunny.net *.cloudflare.com *.bootstrapcdn.com www.rivafashion.com goselljslib.b-cdn.net static.sizebay.technology *.moengage.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tamara.co *.moengage.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.tamara.co *.checkout.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.browser-intake-datadoghq.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.dev.tap.company *.tap.company https:\/\/get.geojs.io *.avada.io *.api.useinsider.com api2.branch.io mug.criteo.com ams.creativecdn.com www.rivafashion.com segment.api.useinsider.com hit.api.useinsider.com measurement-api.criteo.com tr6.snapchat.com static.sizebay.technology tr.snapchat.com js.checkout.com stats.g.doubleclick.net get.geojs.io sdk-02.moengage.com api.ipify.org api.allorigins.win bam.eu01.nr-data.net *.twitter.com carrier.useinsider.com unification.useinsider.com analytics.tiktok.com vfr-v3-production.sizebay.technology *.moengage.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ checkout.tabby.ai widgets.tabby.ai cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.rivafashion.com www.google.com tr6.snapchat.com *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/www.rivafashion.com\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" font-src *.fontawesome.com fonts.gstatic.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https:\/\/www.merchante-solutions.com https:\/\/hostedpayments.merchante.com https:\/\/merchantacsstag.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com https:\/\/elements.sandbox.fortis.tech https:\/\/elements.fortis.tech https:\/\/merchantacsstag.cardinalcommerce.com *.weltpixel.com https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com js-agent.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/rum.hlx.page widget.freshworks.com m2epro.freshdesk.com https:\/\/developer.adobe.com https:\/\/magento.com https:\/\/js.sandbox.fortis.tech https:\/\/js.fortis.tech https:\/\/elements.sandbox.fortis.tech https:\/\/elements.fortis.tech https:\/\/api.merchante-solutions.com https:\/\/cert.merchante-solutions.com https:\/\/testapi.merchante-solutions.com bam.nr-data.net https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com https:\/\/www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com fonts.googleapis.com https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com bam.nr-data.net *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com widget.freshworks.com m2epro.freshdesk.com https:\/\/developer.adobe.com https:\/\/elements.sandbox.fortis.tech https:\/\/elements.fortis.tech https:\/\/api.merchante-solutions.com https:\/\/cert.merchante-solutions.com https:\/\/testapi.merchante-solutions.com https:\/\/writer.cardinalcommerce.com rs.fullstory.com edge.fullstory.com stats.g.doubleclick.net https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" upgrade-insecure-requests; default-src 'self' https: data: wss: 'unsafe-inline' 'unsafe-eval';","count":2},{"content-security-policy-report-only":" font-src sw-assets.ekomiapps.de *.contentbird-convert.com static-v2.unzer.com www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/static.unzer.com https:\/\/applepay.cdn-apple.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com *.fontawesome.com https:\/\/fonts.bunny.net https:\/\/geowidget.easypack24.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.usercentrics.eu td.doubleclick.net *.pinterest.com *.criteo.com www.sovendus-connect.com static.experimentation.dev static-cc.unzer.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net https:\/\/www.googletagmanager.com\/ https:\/\/payment.unzer.com https:\/\/payment.heidelpay.com https:\/\/sbx-payment.heidelpay.com https:\/\/sbx-payment.unzer.com https:\/\/static-cc.test.unzer.com https:\/\/h.online-metrix.net https:\/\/google.com\/pay https:\/\/pay.google.com\/ https:\/\/test-heidelpay.hpcgw.net\/ https:\/\/sbx-api.heidelpay.com\/ https:\/\/sandbox.clicktopay.auth.visa.com https:\/\/clicktopay.visa.com https:\/\/sandbox.secure.checkout.visa.com https:\/\/secure.checkout.visa.com https:\/\/www.google.com https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com https:\/\/geowidget-app.inpost.pl\/ 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.josera.de *.foodforplanet.de *.trbo.com sw-assets.ekomiapps.de *.usercentrics.eu www.google.de *.analytics.google.com bat.bing.com *.g.doubleclick.net ib.adnxs.com region1.google-analytics.com rtb-csync.smartadserver.com a.twiago.com sync-t1.taboola.com pixel.quantserve.com ad.360yield.com sync.1rx.io *.criteo.com sync.targeting.unrulymedia.com *.wepowerconnections.com lantern.roeye.com static.experimentation.dev *.contilla.de *.contentbird-convert.com static-v2.unzer.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.awin1.com *.zenaps.com https:\/\/ssl.ceneo.pl http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ https:\/\/static.unzer.com *.online-metrix.net https:\/\/www.gstatic.com magefan.com cm.magefan.com *.disqus.com https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com https:\/\/firebasestorage.googleapis.com https:\/\/geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org data: 'self' 'unsafe-inline'; script-src 'unsafe-inline' foodf11123.pcapredict.com *.trbo.com *.usercentrics.eu cdn.jsdelivr.net tierspuren.online *.upsellit.com *.cptrack.de lantern.roeyecdn.com *.brandswap.com brandswaptag.azureedge.net api.contester.net sw-assets.ekomiapps.de s.pinimg.com bat.bing.com *.facebook.net *.criteo.com *.criteo.net googleads.g.doubleclick.net www.clarity.ms secure.quantserve.com ad4m.at *.pinterest.com rules.quantcount.com *.sovendus.com static.experimentation.dev *.kameleoon.io *.contilla.de *.contentbird-convert.com static-v2.unzer.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com https:\/\/ssl.ceneo.pl widget.freshworks.com m2epro.freshdesk.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ *.amplifyapp.com https:\/\/static.unzer.com https:\/\/applepay.cdn-apple.com https:\/\/pay.google.com https:\/\/code.jquery.com https:\/\/h.online-metrix.net https:\/\/h64.online-metrix.net https:\/\/static-v2.unzer.com\/v2\/ui-components\/ https:\/\/www.google.com https:\/\/www.gstatic.com *.disqus.com *.snrbox.com https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com *.avada.io *.shopify.com https:\/\/geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org 'self' 'unsafe-inline' 'unsafe-eval'; style-src sw-assets.ekomiapps.de static.experimentation.dev *.contentbird-convert.com static-v2.unzer.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com https:\/\/sandbox.src.mastercard.com https:\/\/static-v2.unzer.com\/v2\/ui-components\/ *.snrcdn.net https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com *.fontawesome.com https:\/\/fonts.bunny.net https:\/\/geowidget.easypack24.net https:\/\/geowidget.inpost.pl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.josera.de tierspuren.online region1.google-analytics.com tagapi.brandswap.com sw-assets.ekomiapps.de *.usercentrics.eu www.google.com *.analytics.google.com *.googlesyndication.com googleads.g.doubleclick.net *.pinterest.com *.criteo.com *.clarity.ms *.sovendus.com *.googletagmanager.com bat.bing.com www.google.de static.experimentation.dev sdk-config.experimentation.dev eu-data.experimentation.dev *.contentbird-convert.com api.unzer.com static-cc.unzer.com *.google-analytics.com www.googleadservices.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com widget.freshworks.com m2epro.freshdesk.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ https:\/\/api.unzer.com https:\/\/api.heidelpay.com https:\/\/sbx-api.heidelpay.com https:\/\/sbx-api.unzer.com https:\/\/payment.unzer.com https:\/\/payment.heidelpay.com https:\/\/sbx-payment.heidelpay.com https:\/\/sbx-payment.unzer.com https:\/\/h.online-metrix.net https:\/\/h64.online-metrix.net https:\/\/google.com\/pay https:\/\/www.google.com\/pay https:\/\/pay.google.com https:\/\/test-heidelpay.hpcgw.net\/ https:\/\/sbx-api.heidelpay.com\/ https:\/\/static-cc.test.unzer.com https:\/\/static-v2.unzer.com\/v2\/ui-components\/ *.snrbox.com https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com api.addressy.com https:\/\/get.geojs.io *.avada.io *.easypack24.net *.inpost.pl *.openstreetmap.org 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" script-src-attr 'unsafe-inline'; font-src cash-f.squarecdn.com https:\/\/*.gstatic.com *.bglobale.com *.global-e.com https:\/\/use.typekit.net https:\/\/x.klarnacdn.net https:\/\/static.klaviyo.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.adyen.com https:\/\/www.shopmyexchange.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com * *.adyen.com *.bglobale.com *.global-e.com https:\/\/ct.pinterest.com https:\/\/*.fls.doubleclick.net https:\/\/postrelease.com https:\/\/*.rfihub.com *.yotpo.com https:\/\/frame.hub-box.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com validator.swagger.io * https:\/\/*.gstatic.com *.adyen.com *.bglobale.com *.global-e.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/alb.reddit.com https:\/\/analytics.twitter.com https:\/\/bat.bing.com https:\/\/*.doubleclick.net https:\/\/*.facebook.com https:\/\/sync.intentiq.com https:\/\/jadserve.postrelease.com https:\/\/t.co https:\/\/*.teads.tv https:\/\/r.turn.com https:\/\/*.yahoo.com *.yotpo.com https:\/\/i.lfi.media https:\/\/cdn.hub-box.com https:\/\/www.danner.com https:\/\/www.lacrossefootwear.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.bglobale.com *.global-e.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/cnstrc.com *.convertexperiments.com https:\/\/ads.pubmatic.com https:\/\/static.ads-twitter.com https:\/\/bat.bing.com https:\/\/cdn.attn.tv https:\/\/cdn.ravm.tv https:\/\/cdnjs.cloudflare.com https:\/\/ct.pinterest.com https:\/\/connect.facebook.net https:\/\/cdn.id5-sync.com https:\/\/agent.intentiq.com https:\/\/s.ntv.io https:\/\/s.pinimg.com https:\/\/platform.twitter.com https:\/\/jadserve.postrelease.com https:\/\/c1.rfihub.net https:\/\/*.taboola.com https:\/\/*.teads.tv https:\/\/s.yimg.com https:\/\/static.zdassets.com https:\/\/assets.calendly.com https:\/\/js.klarna.com https:\/\/*.klaviyo.com https:\/\/*.locally.com *.yotpo.com https:\/\/cdn.hub-box.com https:\/\/cdn.segment.com https:\/\/*.cdp.danner.com https:\/\/*.cdp.lacrossefootwear.com https:\/\/*.addressy.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app https:\/\/fonts.googleapis.com\/ *.bglobale.com *.global-e.com https:\/\/static.klaviyo.com https:\/\/cdnjs.cloudflare.com https:\/\/*.typekit.net https:\/\/x.klarnacdn.net https:\/\/*.klaviyo.com *.yotpo.com *.googleapis.com https:\/\/api.addressy.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https:\/\/i.lfi.media 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * *.adyen.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/ac.cnstrc.com https:\/\/*.attn.tv https:\/\/bat.bing.com https:\/\/cdn.ravm.tv https:\/\/gum.criteo.com https:\/\/id.crwdcntrl.net https:\/\/ct.pinterest.com https:\/\/*.doubleclick.net https:\/\/id5-sync.com https:\/\/eu-1-id5-sync.com\/ https:\/\/*.reddit.com https:\/\/*.redditstatic.com https:\/\/*.taboola.com https:\/\/*.teads.tv https:\/\/s.yimg.com https:\/\/*.zdassets.com https:\/\/*.zendesk.com https:\/\/tags.w55c.net https:\/\/js.klarna.com https:\/\/evt-na.klarnaservices.com https:\/\/*.klaviyo.com https:\/\/www.locally.com *.yotpo.com https:\/\/api.segment.io https:\/\/cdn.segment.com https:\/\/*.cdp.danner.com https:\/\/*.cdp.lacrossefootwear.com https:\/\/api.addressy.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/*.google.com https:\/\/*.google-analytics.com https:\/\/*.googleadservices.com https:\/\/*.g.doubleclick.net https:\/\/*.gstatic.com https:\/\/*.hs-scripts.com https:\/\/js-na2.hs-analytics.net https:\/\/js-na2.hs-banner.com https:\/\/*.hscollectedforms.net https:\/\/snap.licdn.com https:\/\/bat.bing.com https:\/\/sc.lfeeder.com https:\/\/plugins.flockler.com https:\/\/apibeta.iamgaia.com https:\/\/cdn.cookielaw.org https:\/\/cdn.onthe.io https:\/\/cdn.zingchart.com https:\/\/darkvisitors.com https:\/\/c.sproutvideo.com https:\/\/knownagents.com; connect-src 'self' data: https:\/\/www.googletagmanager.com https:\/\/*.google.com https:\/\/*.google-analytics.com https:\/\/*.googleadservices.com https:\/\/*.g.doubleclick.net https:\/\/*.hscollectedforms.net https:\/\/px.ads.linkedin.com https:\/\/tt.onthe.io https:\/\/listgrowth.ctctcdn.com https:\/\/apibeta.iamgaia.com https:\/\/privacyportal.onetrust.com https:\/\/geolocation.onetrust.com https:\/\/cdn.cookielaw.org https:\/\/api.flockler.app https:\/\/media-api.flockler.com https:\/\/stats-api.flockler.app https:\/\/darkvisitors.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/*.algolia.io https:\/\/www.googleadservices.com https:\/\/knownagents.com https:\/\/translate.googleapis.com; img-src 'self' https: data: blob: https:\/\/forms-na2.hsforms.com; media-src 'self' blob: data: https:\/\/videos.sproutvideo.com https:\/\/dms.licdn.com; style-src 'self' 'unsafe-inline' https:\/\/cdn.cookielaw.org https:\/\/static.ctctcdn.com https:\/\/www.gstatic.com https:\/\/fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https:\/\/www.gstatic.com https:\/\/static.ctctcdn.com https:\/\/fonts.googleapis.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/s0.wp.com https:\/\/assets.merci-app.com https:\/\/appdown.pstatic.net https:\/\/at.alicdn.com https:\/\/cdn.yiban.io; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/open.spotify.com https:\/\/player.vimeo.com https:\/\/videos.sproutvideo.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/challenges.cloudflare.com; worker-src 'self' blob:; report-uri https:\/\/cspreport.kla.com\/api\/reports\/csp;","count":2},{"content-security-policy-report-only":" font-src 'self' data:;","count":2},{"content-security-policy-report-only":" default-src 'self';  script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/consent.ory.com https:\/\/fast.wistia.com https:\/\/fast.wistia.net https:\/\/distillery.wistia.com https:\/\/js.hsforms.net;  script-src-elem blob: 'self' 'unsafe-inline' https:\/\/vercel.live https:\/\/fast.wistia.com https:\/\/fast.wistia.net https:\/\/js.hsforms.net https:\/\/static.hsappstatic.net https:\/\/js-eu1.hs-banner.com https:\/\/js-eu1.hs-analytics.net https:\/\/js-eu1.hsadspixel.net https:\/\/js-eu1.usemessages.com https:\/\/googleads.g.doubleclick.net https:\/\/js.zi-scripts.com https:\/\/*.hs-scripts.com https:\/\/script.crazyegg.com https:\/\/www.googletagmanager.com https:\/\/sqa-web.ory.com https:\/\/static.reo.dev https:\/\/s.ory.com https:\/\/consent.ory.com https:\/\/www.redditstatic.com https:\/\/core.sanity-cdn.com https:\/\/cdn.jsdelivr.net https:\/\/browser.sentry-cdn.com;  style-src 'self' 'unsafe-inline';  style-src-elem 'self' 'unsafe-inline' https:\/\/fast.wistia.com https:\/\/fast.wistia.net https:\/\/js.hsforms.net https:\/\/static.hsappstatic.net https:\/\/cdn.jsdelivr.net;  img-src 'self' data: blob: https:;  connect-src 'self' https:\/\/stats.g.doubleclick.net https:\/\/ws.zoominfo.com https:\/\/*.hubapi.com https:\/\/*.hubspot.com https:\/\/static.hsappstatic.net https:\/\/analytics.google.com https:\/\/js.zi-scripts.com https:\/\/script.crazyegg.com https:\/\/conversions-config.reddit.com https:\/\/www.redditstatic.com https:\/\/pixel-config.reddit.com https:\/\/www.google.com https:\/\/api.reo.dev https:\/\/project.console.ory.sh https:\/\/project.console.ory.com https:\/\/api.console.ory.sh https:\/\/api.console.ory.com https:\/\/sqa-web.ory.com https:\/\/consent.ory.com https:\/\/fast.wistia.net https:\/\/fast.wistia.com https:\/\/distillery.wistia.com https:\/\/embed-cloudfront.wistia.com https:\/\/forms.hsforms.com https:\/\/hubspot-forms-static-embed.s3.amazonaws.com https:\/\/forms-eu1.hsforms.com https:\/\/33xluxe1.api.sanity.io https:\/\/33xluxe1.apicdn.sanity.io https:\/\/cdn.sanity.io https:\/\/cdn.jsdelivr.net wss:\/\/33xluxe1.api.sanity.io https:\/\/pipedream.wistia.com https:\/\/fg8vvsvnieiv3ej16jby.litix.io https:\/\/raw.githubusercontent.com https:\/\/api.github.com https:\/\/www.googleadservices.com;  font-src 'self' data: https:\/\/fast.wistia.net https:\/\/cdn.jsdelivr.net;  worker-src blob: 'self';  media-src 'self' https:\/\/embed-ssl.wistia.com blob:;  frame-src 'self' https:\/\/*.hubspot.com https:\/\/vercel.live https:\/\/app-eu1.hubspot.com https:\/\/www.googletagmanager.com https:\/\/consent.ory.com https:\/\/sqa-web.ory.com https:\/\/fast.wistia.com https:\/\/fast.wistia.net https:\/\/embed-ssl.wistia.com https:\/\/www.youtube.com;  object-src 'none';  base-uri 'self';  form-action 'self';  frame-ancestors 'self' https:\/\/app-eu1.hubspot.com https:\/\/www.googletagmanager.com https:\/\/www.einpresswire.com https:\/\/*.vercel.app;  upgrade-insecure-requests;  report-uri https:\/\/o481709.ingest.us.sentry.io\/api\/4510205854482432\/security\/?sentry_key=62382f4c47aefd04c9afd518f417b97a;  report-to csp-endpoint;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.bootstrapcdn.com js.klevu.com *.finance-calculator.co.uk *.klarnacdn.net *.klevu.com *.ksearchnet.com *.magentocommerce.com *.googleapis.com *.cloudfront.net fonts.googleapis.com *.hotjar.com *.zopim.com *.fontawesome.com *.paypal.com *.feefo.com *.postcodeanywhere.co.uk *.magentosite.cloud https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com https:\/\/plumrocket.com www.facebook.com 1merchantacsstag.cardinalcommerce.com payments.securetrading.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.instagram.com https:\/\/www.google.com *.doubleclick.net *.facebook.com assets.braintreegateway.com tst.kaptcha.com c.paypal.com www.paypalobjects.com *.zopim.com *.finance-calculator.co.uk *.deko.finance *.dekopay.com *.dekopay.org *.klarnacdn.net https:\/\/plumrocket.com *.magentocommerce.com cdn.dnky.co *.hotjar.com www.facebook.com *.trustpilot.com *.feefo.com *.postcodeanywhere.co.uk *.magentosite.cloud x.klarnacdn.net *.pinterest.com *.pinterdev.com commerce-app.pintergration.com webservices.securetrading.net cdn.eu.trustpayments.com brw.3ds.trustpayments.com songbirdstag.cardinalcommerce.com 1merchantacsstag.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.cdninstagram.com 'self' data: https:\/\/*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.bing.com *.clarity.ms js.klevu.com cdn-cookieyes.com *.finance-calculator.co.uk *.dekopay.com *.klarnacdn.net *.klarnaevt.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com *.magentocommerce.com *.cloudfront.net https:\/\/*.gstatic.com www.google.nl connect.onlinesucces.nl px.ads.linkedin.com *.googleapis.com www.linkedin.com linkedin.com gallery.mailchimp.com *.trustedshops.com *.zopim.com cdn.jsdelivr.net *.feefo.com *.postcodeanywhere.co.uk *.magentosite.cloud *.increasingly.co services.postcodeanywhere.co.uk https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com https:\/\/www.magezon.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.instagram.com 'self' *.google.com\/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com bat.bing.com js.klevu.com *.clarity.ms c.paypal.com chimpstatic.com cdn-cookieyes.com *.hotjar.com sentry.bigeyedeers.dev browser.sentry-cdn.com *.finance-calculator.co.uk *.dekopay.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.ksearchnet.com *.magentocommerce.com *.cloudfront.net maps.googleapis.com *.trackedlink.net *.increasingly.co *.increasingly.com *.googleapis.com cdn.dnky.co api.comapi.com snap.licdn.com checkout.buckaroo.nl *.adyen.com *.zopim.com *.zdassets.com *.sendcloud.sc *.mailchimp.com *.trustedshops.com *.fontawesome.com www.feedbackcompany.com *.trustpilot.com cdn.jsdelivr.net www.googleoptimize.com *.paypal.com js.klarna.com *.eu-library.klarnaservices.com\/lib.js *.feefo.com *.postcodeanywhere.co.uk *.magentosite.cloud *.mouseflow.com *.webgains.io api.addressy.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com player.vimeo.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com https:\/\/apis.google.com webservices.securetrading.net cdn.eu.trustpayments.com songbirdstag.cardinalcommerce.com https:\/\/js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.bootstrapcdn.com *.typekit.net js.klevu.com *.klarnacdn.net https:\/\/static.klaviyo.com *.klevu.com *.ksearchnet.com 'self' *.magentocommerce.com *.cloudfront.net cdn.dnky.co *.fontawesome.com *.mailchimp.com *.finance-calculator.co.uk *.trustpilot.com cdn.jsdelivr.net *.paypal.com *.feefo.com *.postcodeanywhere.co.uk *.magentosite.cloud *.increasingly.co api.addressy.com https:\/\/fonts.googleapis.com https:\/\/statsjs.klevu.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com *.zopim.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.facebook.com *.facebook.net https:\/\/*.google.com *.sandbox.braintree-api.com *.clarity.ms *.cookieyes.com cdn-cookieyes.com *.doubleclick.net *.trustpilot.com *.hotjar.com *.googlesyndication.com sentry.bigeyedeers.dev *.finance-calculator.co.uk *.dekopay.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com *.cloudfront.net *.magentocommerce.com commerce.adobedc.net api.comapi.com *.googleapis.com *.zdassets.com *.hotjar.io *.zopim.com wss:\/\/*.zopim.com www.feedbackcompany.com *.zendesk.com *.eu-library.klarnaservices.com\/lib.js *.feefo.com *.postcodeanywhere.co.uk *.magentosite.cloud *.increasingly.co api.addressy.com https:\/\/ipinfo.io https:\/\/*.gstatic.com https:\/\/*.googleapis.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com o402164.ingest.sentry.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self';             script-src 'self' 'unsafe-inline' 'unsafe-eval'                 https:\/\/*.acer.org                 https:\/\/kit.fontawesome.com https:\/\/cdnjs.cloudflare.com                 https:\/\/code.jquery.com                 https:\/\/cdn.jsdelivr.net https:\/\/www.youtube.com                 https:\/\/player.vimeo.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com                 https:\/\/www.google-analytics.com https:\/\/cdn.monsido.com https:\/\/www.gstatic.com\/call-tracking\/ https:\/\/www.google.com\/recaptcha\/                 https:\/\/static.ads-twitter.com https:\/\/snap.licdn.com                 https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net                 https:\/\/maxcdn.bootstrapcdn.com\/bootstrap\/ https:\/\/stackpath.bootstrapcdn.com\/bootstrap\/                 https:\/\/*.adroll.com                 https:\/\/fast.wistia.com\/embed\/medias\/ https:\/\/fast.wistia.com\/assets\/external\/                 https:\/\/acer.tfaforms.net\/ https:\/\/www.tfaforms.com\/wForms\/                 https:\/\/platform.twitter.com\/                 https:\/\/widgets.sociablekit.com\/                 https:\/\/cdn.mouseflow.com\/                 https:\/\/js.createsend1.com\/javascript\/                 https:\/\/bat.bing.com;             style-src 'self' 'unsafe-inline'                 https:\/\/*.acer.org                 https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/www.gstatic.com                https:\/\/cdn.jsdelivr.net                 https:\/\/stackpath.bootstrapcdn.com\/font-awesome\/4.7.0\/                 https:\/\/acer.tfaforms.net\/dist\/ https:\/\/acer.tfaforms.net\/uploads\/themes\/ https:\/\/www.tfaforms.com\/dist\/                 https:\/\/widgets.sociablekit.com\/                 https:\/\/kit.fontawesome.com https:\/\/maxcdn.bootstrapcdn.com\/font-awesome\/;             img-src 'self' data: blob:                 https:\/\/*.acer.org https:\/\/www.acer-ibt.org https:\/\/www.researchconference.com.au https:\/\/www.immchallenge.org.au https:\/\/www.stemgames.org.au                 https:\/\/tracking.monsido.com                 https:\/\/www.google.com.au\/ads\/ https:\/\/www.google.com.au\/pagead\/ https:\/\/www.google.com https:\/\/www.google-analytics.com\/ https:\/\/www.googletagmanager.com                 https:\/\/px.ads.linkedin.com https:\/\/media.licdn.com\/dms\/image\/ https:\/\/media.licdn.com\/dms\/image\/                 https:\/\/sociablekit.com\/app\/ https:\/\/images.sociablekit.com\/                 https:\/\/t.co\/i\/ https:\/\/analytics.twitter.com\/i\/                 https:\/\/www.facebook.com\/tr\/                 https:\/\/ping.eeharbor.com                 https:\/\/*.adroll.com                 https:\/\/bat.bing.com;             font-src 'self' data:                 https:\/\/*.acer.org                 https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com                 https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net                 https:\/\/ka-p.fontawesome.com https:\/\/maxcdn.bootstrapcdn.com\/font-awesome\/ https:\/\/stackpath.bootstrapcdn.com\/font-awesome\/4.7.0\/;             media-src 'self' https:\/\/www.acer.org https:\/\/www.youtube.com https:\/\/player.vimeo.com;             frame-src                 https:\/\/www.google.com\/recaptcha\/ https:\/\/www.googletagmanager.com                 https:\/\/platform.twitter.com\/widgets\/                 https:\/\/www.acer.org https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/shorthand.com;             connect-src 'self'                 https:\/\/*.acer.org                 https:\/\/ka-p.fontawesome.com https:\/\/kit.fontawesome.com                 https:\/\/www.google.com https:\/\/googleads.g.doubleclick.net https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/www.google.com.au\/pagead\/                 https:\/\/acer.tfaforms.net\/api_v2\/                 https:\/\/stats.g.doubleclick.net\/                 https:\/\/www.facebook.com\/tr\/                 https:\/\/updates.expressionengine.com                 https:\/\/px.ads.linkedin.com\/wa\/;             object-src 'none';             base-uri 'self';             form-action 'self';             upgrade-insecure-requests;             report-uri https:\/\/csp-testing.acer.org\/reportOnly\/index;","count":2},{"content-security-policy-report-only":" default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; manifest-src 'self'; media-src 'self'; worker-src 'self' blob:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/*.privacy-center.org https:\/\/widget.trustpilot.com https:\/\/*.hotjar.com https:\/\/*.hubspot.com https:\/\/*.hsforms.net https:\/\/www.youtube.com https:\/\/*.doubleclick.net https:\/\/*.realytics.io https:\/\/*.realytics.net https:\/\/*.bing.com https:\/\/*.tiktok.com https:\/\/*.criteo.com https:\/\/*.taboola.com https:\/\/*.outbrain.com https:\/\/*.quora.com https:\/\/*.licdn.com https:\/\/*.roeyecdn.com https:\/\/*.hs-scripts.com https:\/\/*.hscollectedforms.net https:\/\/*.hs-analytics.net https:\/\/www.dwin1.com https:\/\/*.younited.com https:\/\/*.younited-credit.com;style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/www.googletagmanager.com https:\/\/*.typekit.net;img-src 'self' data: https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.google.fr https:\/\/www.google.it https:\/\/www.google.es https:\/\/www.google.pt https:\/\/www.google.de https:\/\/www.facebook.com https:\/\/fonts.gstatic.com https:\/\/aca-pr-cms-weu.ace1.younited-private.com https:\/\/designassets.younited.com https:\/\/*.doubleclick.net https:\/\/*.bing.com https:\/\/*.quora.com https:\/\/*.licdn.com https:\/\/*.linkedin.com https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/*.adnxs.com https:\/\/*.privacy-center.org https:\/\/*.analytics.google.com https:\/\/lantern.roeye.com https:\/\/*.younited.com https:\/\/*.younited-credit.com;font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/*.typekit.net;connect-src 'self' https:\/\/www.googletagmanager.com https:\/\/*.privacy-center.org https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/widget.trustpilot.com https:\/\/www.google.com https:\/\/*.tiktok.com https:\/\/*.tiktokw.us https:\/\/*.bing.com https:\/\/*.bing.net https:\/\/*.doubleclick.net https:\/\/www.googleadservices.com https:\/\/*.outbrain.com https:\/\/*.taboola.com https:\/\/*.creativecdn.com https:\/\/*.hubspot.com https:\/\/*.hubapi.com https:\/\/*.hsforms.com https:\/\/*.hscollectedforms.net https:\/\/*.licdn.com https:\/\/*.linkedin.com https:\/\/*.criteo.com https:\/\/*.younited.com https:\/\/*.younited-credit.com;frame-src 'self' https:\/\/widget.trustpilot.com https:\/\/www.googletagmanager.com https:\/\/*.criteo.com https:\/\/*.doubleclick.net https:\/\/*.youtube.com https:\/\/*.hsforms.net https:\/\/tr.cloud-media.fr;report-uri https:\/\/cspreport.services.younited-credit.com\/csp-report;","count":2},{"content-security-policy-report-only":" default-src 'self' data: blob: *.armstrong.com *.armstrongceilings.com armstrongceilings.my.salesforce-sites.com d2qrdklrsxowl2.cloudfront.net player.interactivity.brightcove.com fonts.gstatic.com www.google-analytics.com;style-src 'self' 'unsafe-inline' fast.fonts.net d2qrdklrsxowl2.cloudfront.net *.s3.amazonaws.com fonts.googleapis.com player.interactivity.brightcove.com;form-action 'self' *.armstrong.com  *.armstrongceilings.com  *.salesforceliveagent.com armstrongceilings.my.site.com;frame-ancestors 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.armstrong.com *.armstrongceilings.com *.analytics.google.com *.clearbitscripts.com *.google-analytics.com *.google.com *.mountain.com *.outbrain.com *.salesforceliveagent.com assets.adobedtm.com cdn-cookieyes.com connect.facebook.net d2qrdklrsxowl2.cloudfront.net googleads.g.doubleclick.net js-na1.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hscollectedforms.net js.hsforms.net lib-us-3.brilliantcollector.com players.brightcove.net scripts.clarity.ms snap.licdn.com vjs.zencdn.net www.googleadservices.com www.googletagmanager.com www.gstatic.com 100.20.58.101 18.210.229.244 3.212.39.155 34.215.155.61 35.160.46.251 35.85.84.151 44.212.189.233 44.228.85.26 44.238.122.172 52.22.50.55 52.71.121.170 54.156.2.105 54.156.2.105100.20.58.101;frame-src 'self' bid.g.doubleclick.net d2qrdklrsxowl2.cloudfront.net armstrong.demdex.net www.google.com;img-src 'self' data: *.armstrong.com *.armstrongceilings.com  *.brightcove.com *.outbrain.com armstrongceilings.my.salesforce-sites.com cdn-cookieyes.com cf-images.us-east-1.prod.boltdns.net cm.everesttech.net data.coremetrics.com dpm.demdex.net p.adsymptotic.com px.ads.linkedin.com s7d2.scene7.com www.google-analytics.com www.google.com www.googletagmanager.com track.hubspot.com www.facebook.com;connect-src 'self' *.armstrong.com *.armstrongceilings.com *.akamaihd.net *.brightcove.com *.clearbitscripts.com *.cookieyes.com *.google-analytics.com *.hapyak.com api.hubapi.com armstrong.tt.omtrdc.net brightcove.hs.llnwd.net cdn-cookieyes.com cdn.linkedin.oribi.io dpm.demdex.net edge.adobedc.net edge.api.brightcove.com forms.hsforms.com house-fastly-signed-us-east-1-prod.brightcovecdn.com i.clarity.ms lib-us-3.brilliantcollector.com manifest.prod.boltdns.net px.ads.linkedin.com stats.g.doubleclick.net 100.20.58.101 18.210.229.244 3.212.39.155 34.215.155.61 35.160.46.251 35.85.84.151 44.212.189.233 44.228.85.26 44.238.122.172 52.22.50.55 52.71.121.170 54.156.2.105","count":2},{"content-security-policy-report-only":" report-uri             https:\/\/gfcorporate.report-uri.com\/r\/d\/csp\/reportOnly ;         default-src             'self'             www.gfms.com             gfms.com             www.gfps.com             gfcorporate.report-uri.com             *.google.at *.google.be *.google.cz *.google.dk *.google.fi *.google.fr *.google.de *.google.it *.google.nl *.google.no *.google.pl *.google.ro *.google.ru *.google.es *.google.se *.google.ch *.google.com.tr *.google.co.uk *.google.com.ar *.google.ca *.google.com *.google.com.br *.google.com.mx *.google.com.au *.google.cn *.google.co.in *.google.co.id *.google.co.jp *.google.com.my *.google.co.nz *.google.com.sg *.google.co.kr *.google.com.tw *.google.com.vn *.google.bg *.google.hr *.google.ee *.google.gr *.google.hu *.google.lv *.google.lu *.google.mk *.google.pt *.google.rs *.google.si *.google.com.ph *.google.co.th *.google.com.eg *.google.co.il *.google.co.za *.google.ae ;         connect-src             'self'             *.google-analytics.com             apikeys.civiccomputing.com             *.googleapis.com             center.lon5.atomz.com             clapi.civiccomputing.com             sp1004e61f.guided.lon5.atomz.com             sp1004e61a.guided.lon5.atomz.com             sp1004e5dd.guided.lon5.atomz.com             stats.g.doubleclick.net             www.facebook.com             uberall.com             locator.uberall.com             api.moin.ai             www.gfps.com             www.gfpstools.com             neoflow.gfpstools.com             cdn.linkedin.oribi.io             assets.georgfischer.com             google.com             analytics.google.com             *.analytics.google.com             *.googletagmanager.com             *.g.doubleclick.net             *.google.com             *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat             cdn.cookielaw.org             *.onetrust.com             *.svc.dynamics.com             *.clarity.ms             ad.doubleclick.net             adservice.google.com             assets-eur.mkt.dynamics.com             public-eur.mkt.dynamics.com             assets.adobedtm.com             c-cdn.contentfry.com             catalog.contentfry.com             platform.contentfry.com             code.jquery.com             fbo-b.flippingbook.com             online.flippingbook.com             live.solique.ch             polyfilljs.org             s7e5a.scene7.com             s7mbrstream-g1.scene7.com             www.googleadservices.com ;         font-src             'self'             fonts.gstatic.com             www.gfms.com             widget.moin.ai             static-prod.uberall.com             static.prod.uberall.com ;         script-src             'self'             'unsafe-inline'             'unsafe-eval'             www.google.com             *.google-analytics.com             *.googletagmanager.com             assets.adobedtm.com             ajax.googleapis.com             assets.georgfischer.com             cc.cdn.civiccomputing.com             connect.facebook.net             cdnjs.cloudflare.com             gstatic.com             maps.googleapis.com             siteimproveanalytics.com             snap.licdn.com             static-prod.uberall.com             uberall.com             locator.uberall.com             www.youtube.com             www.pagespeed-mod.com             www.googleoptimize.com             mktdplp102cdn.azureedge.net             www.pagespeed-mod.com             widget.moin.ai             platform.contentfry.com             cdn.cookielaw.org             cookie-cdn.cookiepro.com             privacyportal.onetrust.com             geolocation.onetrust.com             r1.dotdigital-pages.com             r1-t.trackedlink.net             r1.ddlnk.net             www.googleadservices.com ;         script-src-elem             uberall.com             www.googletagmanager.com             'self'             assets.georgfischer.com             blob:             code.jquery.com             locator.uberall.com             maps.googleapis.com             s7e5a.scene7.com             www.clarity.ms             www.google.com             www.googleadservices.com             www.youtube.com ;         style-src             'self'             'unsafe-inline'             'unsafe-eval'             fonts.googleapis.com             assets.georgfischer.com             errors.adobeaemcloud.com             widget.moin.ai ;         style-src-elem             www.googletagmanager.com         \t'self'         \tassets.georgfischer.com         \tblob: s7e5a.scene7.com             www.gstatic.com ;         img-src             'self'             'unsafe-inline'             'unsafe-eval'             data:             *.georgfischer.com             www.linkedin.com             *.global.siteimproveanalytics.io             nswow-imageresizer.azurewebsites.net             px.ads.linkedin.com             www.facebook.com             connect.facebook.net             *.google.com             gfms.com             www.gfms.com             static-prod.uberall.com             static.prod.uberall.com             www.linkedin.com             s7e5a.scene7.com             *.g.doubleclick.net             *.svc.dynamics.com             i.ytimg.com             maps.gstatic.com             fonts.gstatic.com             www.gfps.com             www.gfpstools.com             locator.uberall.com             *.amazonaws.com             *.googletagmanager.com             *.googleapis.com             *.google-analytics.com             *.analytics.google.com             *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat             cdn.cookielaw.org             c.clarity.ms             m.youtube.com             *.onetrust.com ;         child-src             'self'             blob:             analytics-eu.clickdimensions.com             live.solique.ch             www.youtube.com ;         form-action             www.facebook.com             www.georgfischer.com             'self' ;         frame-ancestors             'self'             https:\/\/*.georgfischer.com;         frame-src             'self'             'unsafe-inline'             'unsafe-eval'             data:             analytics-eu.clickdimensions.com             google.com             ir.tools.investis.com             irs.tools.investis.com             live.solique.ch             recruitingapp-5505.de.umantis.com             registration.gesevent.com             six-swiss-exchange.com             tools.google.com             uberall.com             widget.moin.ai             *.svc.dynamics.com             *.ep-mimecast.dynamics.com             www.gfps.com             bim.gfps.com             ir2.flife.de             www.youtube.com             m.youtube.com             *.ep-mimecast.youtube-nocookie.com             www.youtube-nocookie.com.x.af435fba09eaa04ff30886e05784e20ddae5.d045227c.id.opendns.com             r1.dotdigital-pages.com             display.contentfry.com             googletagmanager.com             cad.georgfischer.com             forms.office.com             foundation-gf-dev.georgfischer.com             online.flippingbook.com             players.brightcove.net             youtube.com ;         manifest-src             'self' ;         media-src             'self'         \t  assets.georgfischer.com         \t  gfms.com         \t  s7e5a.scene7.com         \t  s7mbrstream-g1.scene7.com         \t  www.gfps.com ;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self';","count":2},{"content-security-policy-report-only":" font-src *.typekit.net fonts.gstatic.com use.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com *.klarnacdn.net *.klevu.com *.ksearchnet.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.instagram.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarna.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.trustpilot.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.cdninstagram.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.trackedlink.net *.klarna.com *.klarnaevt.com *.klarnacdn.net *.klevu.com *.ksearchnet.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com beacon-audiences.magento-ds.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.googleapis.com *.gstatic.com *.instagram.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com js.klevu.com *.ksearchnet.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com beacon-audiences.magento-ds.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarnacdn.net *.klevu.com *.ksearchnet.com *.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net p13n-mr.adobe.io beacon-audiences.magento-ds.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adobedc.net *.demdex.net *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.klevu.com *.ksearchnet.com *.stripe.com klarna.com *.link.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/7dc0cf2f-7ee0-4e32-abdf-e62b11896390.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' 'report-sample' cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/maps.googleapis.com https:\/\/unpkg.com maps.google.com; style-src 'self' 'report-sample' https:\/\/cdn.jsdelivr.net https:\/\/unpkg.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https:\/\/www.electronics.org\/log-report-uri\/reportOnly","count":2},{"content-security-policy-report-only":" object-src 'none'; form-action 'self'; frame-ancestors 'self';","count":2},{"content-security-policy-report-only":" frame-src 'self'; frame-ancestors 'self'; object-src 'none'","count":2},{"content-security-policy-report-only":" default-src 'self'; connect-src *; img-src * data:; script-src 'self' cdn.bizible.com; style-src 'self' 'unsafe-inline' https:\/\/404-tpa-276.mktoweb.com\/ https:\/\/*.qualified.com; font-src 'self' https:\/\/fast.wistia.com\/ https:\/\/fast.wistia.net\/ data:; form-action 'self'; object-src 'none'; media-src 'self' blob: mediastream: https:\/\/*.qualified.com; frame-src https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net\/ https:\/\/gtm.8am.com\/ https:\/\/insight.adsrvr.org\/ https:\/\/app.netlify.com\/ https:\/\/404-tpa-276.mktoweb.com\/ https:\/\/*.qualified.com; child-src https:\/\/*.qualified.com; frame-ancestors demo.affinipay.com https:\/\/app.contentful.com; upgrade-insecure-requests; block-all-mixed-content","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com https:\/\/*.gstatic.com *.googleapis.com fonts.googleapis.com *.gstatic.com https:\/\/d22j4fzzszoii2.cloudfront.net *.typekit.net https:\/\/plugin-magento-ui.glopalservice.com https:\/\/cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.adyen.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.palaisdesthes.com *.palaisdesthes.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com * *.adyen.com *.sharethis.com *.certcapture.com https:\/\/www.googletagmanager.com\/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * https:\/\/*.gstatic.com *.adyen.com *.sharethis.com *.googleapis.com https:\/\/aheadworks.com *.certcapture.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.openstreetmap.org maps.googleapis.com maps.gstatic.com magefan.com cm.magefan.com *.agkn.com *.360yield.com *.3lift.com *.abtasty.com *.adform.net *.adnxs.com *.avis-verifies.com *.bidswitch.net *.bing.com *.bing.net *.casalemedia.com *.clarity.ms *.criteo.com *.criteo.net *.doubleclick.net *.emxdgt.com *.exelator.com *.facebook.com *.google.fr *.google.ch *.gstatic.com *.rlcdn.com *.ivitrack.com *.klarna.com *.media.net *.mediavine.com *.mmtro.com https:\/\/mmtro.com *.omnitagjs.com *.outbrain.com *.palaisdesthes.com *.palaisdesthes.co.uk *.pubmatic.com *.rubiconproject.com *.sharethrough.com *.smaato.net *.smartadserver.com *.stickyadstv.com *.taboola.com *.teads.tv *.weborama.fr *.yahoo.com *.yieldlab.net *.yieldmo.com *.zebestof.com *.zdassets.com *.zendesk.com *.adscale.de *.id5-sync.com https:\/\/id5-sync.com *.liadm.com *.smartclip.net *.tremorhub.com *.krxd.net *.thebrighttag.com *.amazon-adsystem.com *.contentsquare.net *.privacy-center.org *.postrelease.com *.sc-trc.com *.surveyjs.io *.1rx.io *.join-stories.com *.parcellab.com *.opecloud.com *.zopim.io https:\/\/shareasale.com *.google.com *.unrulymedia.com *.hsforms.com *.hubspot.com *.hscollectedforms.net *.adsrvr.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com *.paypal.com s0.2mdn.net http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ https:\/\/cdn-redirector.glopal.com https:\/\/plugin-magento-ui.glopalservice.com https:\/\/redchamps.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https:\/\/rum.hlx.page *.sharethis.com *.googleapis.com *.certcapture.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https:\/\/widgets.rr.skeepers.io\/ https:\/\/api-product-reviews.cxr.skeepers.io\/ https:\/\/cl-ppr.rr.skeepers.io\/ https:\/\/cl-pbr.cxr.skeepers.io\/ *.abtasty.com *.acdn.adnxs.com *.avtm.fr *.amazon-adsystem.com *.bing.com *.bing.net *.capadresse.com ws2.capadresse.com:7455 ws2.capadresse.com:7456 *.clarity.ms *.criteo.com *.criteo.net *.doubleclick.net *.effiliation.com *.facebook.net *.mmtro.com https:\/\/mmtro.com *.privacy-center.org *.static-sb.com *.tradedoubler.com *.zdassets.com *.zendesk.com *.mouseflow.com *.servedby.flashtalking.com https:\/\/servedby.flashtalking.com *.secure.adnxs.com\/ https:\/\/secure.adnxs.com\/ *.tag.zebestof.com https:\/\/tag.zebestof.com *.contentsquare.com *.contentsquare.net *.thank-you.io *.tiktok.com *.palaisdesthes.com *.palaisdesthes.co.uk *.optimalpeople.fr https:\/\/d16fk4ms6rqz1v.cloudfront.net *.dwin1.com *.skeepers.io *.surveyjs.io *.amcharts.com *.parcellab.com *.zopim.io *.adnxs.com *.hsforms.net *.hs-scripts.com *.hs-banner.com *.hscollectedforms.net *.hs-analytics.net *.billetweb.fr *.brevo.com https:\/\/sibautomation.com *.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com p.teads.tv google.com recaptcha.net s0.2mdn.net http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ palais-des-thes.my.join-stories.com *.get-potions.com https:\/\/cdn-redirector.glopal.com https:\/\/plugin-magento-ui.glopalservice.com cdn-renderer.glopalstore.com https:\/\/cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https:\/\/fonts.googleapis.com\/ *.sharethis.com *.googleapis.com *.certcapture.com unpkg.com fonts.gstatic.com *.parcellab.com assets.braintreegateway.com *.typekit.net https:\/\/cdn-redirector.glopal.com https:\/\/plugin-magento-ui.glopalservice.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.zendesk.com *.join-stories.com *.zopim.io blob: http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.youtube.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * *.adyen.com *.sharethis.com *.googleapis.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.certcapture.com maps.googleapis.com https:\/\/widgets.rr.skeepers.io\/ https:\/\/api-product-reviews.cxr.skeepers.io\/ https:\/\/cl-ppr.rr.skeepers.io\/ https:\/\/cl-pbr.cxr.skeepers.io\/ *.abtasty.com *.clarity.ms *.googlesyndication.com *.google.com google.com *.palaisdesthes.com *.palaisdesthes.co.uk *.privacy-center.org *.social-sb.com *.zendesk.com *.zopim.io wss:\/\/widget-mediator.zopim.com *.mouseflow.com *.zdassets.com *.contentsquare.net *.thank-you.io *.tiktok.com *.zebestof.com *.doubleclick.net *.optimalpeople.fr *.criteo.com *.salecycle.com wss:\/\/ws.salecycle.com *.surveyjs.io *.paypal.com http:\/\/127.0.0.1:63342 *.bing.com *.bing.net *.stories.studio *.parcellab.com *.algolia.io *.adnxs.com *.hsforms.com *.s3.amazonaws.com *.hscollectedforms.net *.hubspot.com *.skeepers.io *.brevo.com *.braintreegateway.com *.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.join-stories.com *.teads.tv http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ https:\/\/api-plugin-facade.glopalservice.com https:\/\/cognito-idp.eu-west-1.amazonaws.com api.glopaltranslator.com www.googleapis.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" report-to https:\/\/r4com.report-uri.io\/r\/default\/csp\/reportOnly","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/www.googletagmanager.com\/ https:\/\/*.doubleclick.net\/ https:\/\/static.hotjar.com\/ https:\/\/cdn.cookielaw.org\/ https:\/\/imasdk.googleapis.com\/ https:\/\/*.hotjar.io\/ https:\/\/connect.facebook.net\/ https:\/\/*.facebook.com\/ https:\/\/*.facebook.net\/ https:\/\/analytics.tiktok.com\/ https:\/\/galt.hit.gemius.pl\/ https:\/\/cdn.ampproject.org\/ https:\/\/*.googlesyndication.com\/ https:\/\/*.adtrafficquality.google\/ https:\/\/*.2mdn.net\/ https:\/\/*.hotjar.com\/ https:\/\/connect.facebook.net\/ https:\/\/analytics.tiktok.com\/ https:\/\/cdn.cookielaw.org\/ https:\/\/www.googletagmanager.com\/ https:\/\/*.hotjar.io\/; style-src 'self' 'unsafe-inline' https:\/\/cdn.cookielaw.org\/ https:\/\/fonts.googleapis.com\/ https:\/\/www.biathlonworld.com\/embedded-player.css https:\/\/www.atletiek.nl\/build\/css\/css-ebu.build.css; img-src 'self' data: https:\/\/imageservice.evsports.opentv.com\/images\/v1\/image\/Sport\/ https:\/\/cabi.evsports.sports.opentv.com\/ https:\/\/*.sports.opentv.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/static.hotjar.com\/ https:\/\/cdn.cookielaw.org\/logos\/ https:\/\/www.google.com\/ https:\/\/www.google.co.uk\/ https:\/\/www.facebook.com\/ https:\/\/*.g.doubleclick.net\/ https:\/\/*.adtrafficquality.google\/pagead\/ https:\/\/*.googlesyndication.com\/ https:\/\/www.ebu.ch\/files\/live\/sites\/ebu\/files\/images\/ https:\/\/*.cloudfront.net\/EBU\/; font-src 'self' data: https:\/\/fonts.gstatic.com\/; connect-src 'self' https:\/\/cdn.cookielaw.org\/ https:\/\/api.evsports.opentv.com\/metadata\/delivery\/ https:\/\/www.google.com\/pagead\/form-data\/ https:\/\/www.google.com\/ccm\/ https:\/\/www.google.com\/rmkt\/collect\/ https:\/\/*.sports.opentv.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/*.googlesyndication.com\/ https:\/\/*.gstatic.com\/ https:\/\/*.adtrafficquality.google\/getconfig\/sodar https:\/\/securepubads.g.doubleclick.net\/ https:\/\/analytics.tiktok.com\/ https:\/\/www.facebook.com\/ https:\/\/*.tiktokw.us\/ https:\/\/*.hotjar.com\/ https:\/\/galt.hit.gemius.pl\/ https:\/\/firebase.googleapis.com\/ https:\/\/firebaseremoteconfig.googleapis.com\/v1\/projects\/eurovision-sport-prod-772510\/ https:\/\/firebaseinstallations.googleapis.com\/v1\/projects\/eurovision-sport-prod-772510\/ https:\/\/firebaseremoteconfig.googleapis.com\/v1\/projects\/eurovision-sport-dev-511366\/ https:\/\/firebaseinstallations.googleapis.com\/v1\/projects\/eurovision-sport-dev-511366\/ https:\/\/*.facebook.com\/ https:\/\/*.fbcdn.net\/ https:\/\/*.facebook.net\/ https:\/\/*.google-analytics.com\/ https:\/\/*.onetrust.com\/ https:\/\/*.hotjar.io\/ wss:\/\/ws.hotjar.com\/ https:\/\/*.akamaized.net\/ https:\/\/*.anycast.nagra.com\/ https:\/\/evs-dtvsports-vod-secure2.akamaized.net\/ https:\/\/*.ampproject.org\/ https:\/\/api.evsports.opentv.com\/ https:\/\/api.evsports.opentv.com\/useractivityvault\/v1\/useractivity\/; frame-src https:\/\/ads.eurovisionsport.com https:\/\/files.eurovisionsport.com\/ https:\/\/www.google.com\/ https:\/\/*.adtrafficquality.google\/ https:\/\/www.googletagmanager.com\/ https:\/\/*.g.doubleclick.net\/ https:\/\/*.safeframe.googlesyndication.com\/ https:\/\/imasdk.googleapis.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.ebu.ch\/ https:\/\/eurovisionsport.com\/ https:\/\/ls.hit.gemius.pl\/ https:\/\/pagead2.googlesyndication.com\/ https:\/\/www.facebook.com\/; media-src blob: https:; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/www.facebook.com\/; report-uri \/api\/csp-report; report-to csp-endpoint;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.fontawesome.com *.fontawesome.com audioeye.com *.audioeye.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.youtube.com youtu.be www.youtube-nocookie.com audioeye.com *.audioeye.com checkout.sezzle.com sandbox.checkout.sezzle.com https:\/\/www.googletagmanager.com\/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com shipping-offers-static-images-bucket-platformsandbox.s3.amazonaws.com shipping-offers-static-images-bucket-stage.s3.amazonaws.com shipping-offers-static-images-bucket-prod.s3.amazonaws.com shipping-offers-static-images-bucket-dev.s3.amazonaws.com shipping-offers-static-images-bucket-demo.s3.amazonaws.com helloextend-static-assets.s3.amazonaws.com https:\/\/s3.amazonaws.com\/ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm\/offers\/learnMoreModal-default-1654273334107-learnMoreModal.backgroundImageUrl_Generic_WomanwithBox2.jpg https:\/\/s3.amazonaws.com\/ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm\/offers\/shippingProtectionCartOffer-default-1720746621507-extend_svg_cart.svg https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ fortnine.ca *.fortnine.ca defender.com *.defender.com https:\/\/c683207.ssl.cf2.rackcdn.com www.youtube.com *.youtube.com youtu.be www.google.ca www.googletagmanager.com www.facebook.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ cdn.datamanager.arinet.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com polyfill.io apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com https:\/\/sdk.helloextend.com\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ fortnine.ca *.fortnine.ca defender.com *.defender.com *.newrelic.com bam.nr-data.net *.nr-data.net cdnjs.cloudflare.com fullstory.com www.youtube.com *.youtube.com youtu.be googleads.g.doubleclick.net connect.facebook.net static.cloudflareinsights.com *.cloudflareinsights.com js.authorize.net *.fontawesome.com audioeye.com *.audioeye.com bloomreach.com *.bloomreach.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com abtasty.com *.abtasty.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com display.ugc.bazaarvoice.com https:\/\/static.klaviyo.com fortnine.ca *.fortnine.ca defender.com *.defender.com fonts.googleapis.com use.fontawesome.com *.fontawesome.com audioeye.com *.audioeye.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.algolia.net *.algolia.com *.algolianet.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com https:\/\/*.helloextend.com\/ https:\/\/*.extend.com\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ fortnine.ca *.fortnine.ca defender.com *.defender.com algolianet.com *.algolianet.com bam.nr-data.net *.nr-data.net analytics.google.com www.facebook.com js.authorize.net jstest.authorize.net ws1.postescanada-canadapost.ca *.postescanada-canadapost.ca audioeye.com *.audioeye.com bloomreach.com *.bloomreach.com abtasty.com *.abtasty.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src fortnine.ca *.fortnine.ca defender.com *.defender.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:; connect-src 'self' https: wss:; img-src 'self' data: https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https:\/\/www.facebook.com https:\/\/*.facebook.com","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com *.klevu.com *.ksearchnet.com *.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors https:\/\/cdn.loadbee.com\/ https:\/\/petertysonelectricals.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * js.mollie.com https:\/\/www.googletagmanager.com\/ *.addthis.com *.googleapis.com https:\/\/service.loadbee.com\/ http:\/\/www.paypal.com http:\/\/www.sandbox.paypal.com *.trustpilot.com petertysonelectricals.co.uk 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/www.mollie.com *.facebook.com *.klevu.com *.ksearchnet.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ magefan.com cm.magefan.com *.disqus.com *.finance-calculator.co.uk *.dekopay.com 'self' data: maps.gstatic.com https:\/\/img.youtube.com *.bing.com *.opentracker.net *.clarity.ms *.adtrafficquality.google *.flix360.com *.google.co.uk *.sweetanalytics.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de widget.freshworks.com m2epro.freshdesk.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com js.mollie.com *.klevu.com *.ksearchnet.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ *.disqus.com *.addthis.com https:\/\/z.moatads.com https:\/\/v1.addthisedge.com https:\/\/cdn.jsdelivr.net *.finance-calculator.co.uk *.dekopay.com *.googleapis.com https:\/\/cdn.loadbee.com\/js\/loadbee_integration.js *.trustpilot.com *.smartsuppchat.com *.facebook.net *.hotjar.com *.bing.com *.clickguardian.app *.opentracker.net *.googlesyndication.com *.cloudfront.net *.cloudflare.com *.smartsuppcdn.com *.dwin1.com *.pinimg.com *.kk-resources.com *.clarity.ms *.pinterest.com *.adtrafficquality.google *.flixfacts.com *.flixcar.com *.sweetanalytics.com https:\/\/js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com assets.braintreegateway.com maxcdn.bootstrapcdn.com *.klevu.com *.ksearchnet.com https:\/\/static.klaviyo.com https:\/\/cdn.jsdelivr.net *.trustpilot.com *.smartsuppcdn.com *.klaviyo.com *.finance-calculator.co.uk *.flixcar.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.klevu.com *.ksearchnet.com api.addressy.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ *.finance-calculator.co.uk *.dekopay.com *.googleapis.com https:\/\/availability.loadbee.com *.smartsuppchat.com *.hotjar.com *.hotjar.io *.smartsuppcdn.com *.amazonaws.com *.clickguardian.app *.adtrafficquality.google *.smartsupp.com *.googlesyndication.com *.google-analytics.com *.pinterest.com *.clarity.ms wss: *.flixcar.com *.gstatic.com *.google.co.uk *.sweetanalytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/code.jquery.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' blob: https:; font-src 'self' data:; connect-src 'self'; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri \/api\/csp-report","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/fonts.gstatic.com *.fontawesome.com *.cloudflare.com *.klaviyo.com *.hotjar.com *.hotjar.io *.networkmerchants.com *.echeckpoint.com *.cdnfonts.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cybersource.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.cybersource.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https:\/\/plumrocket.com checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ magefan.com cm.magefan.com *.online-metrix.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com media.sezzle.com https:\/\/maps.gstatic.com https:\/\/maps.googleapis.com https:\/\/maps.google.com http:\/\/maps.google.com *.jotfor.ms *.jotform.com *.c3vault1.com *.storepoint.co https:\/\/res.cloudinary.com https:\/\/icons.storepoint-icons.com *.elfsight.com *.elfsightcdn.com *.commoninja.com *.cloudfront.net *.hotjar.com *.hotjar.io *.networkmerchants.com *.echeckpoint.com *.signifyd.com *.sezzle.com *.googleapis.com *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ player.vimeo.com *.cardinalcommerce.com *.online-metrix.net *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com https:\/\/static.cloudflareinsights.com *.cloudflare.com *.lr-ingest.com *.ingest-lr.com *.jotform.com *.jotfor.ms *.storepoint.co *.elfsight.com *.commoninja.com *.cloudfront.net *.hotjar.com *.hotjar.io *.networkmerchants.com *.echeckpoint.com *.signifyd.com *.sezzle.com *.googleapis.com www.gstatic.com maps.googleapis.com cdn.ampproject.org 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/static.klaviyo.com assets.braintreegateway.com fonts.cdnfonts.com https:\/\/fonts.googleapis.com *.jotfor.ms *.storepoint.co *.fontawesome.com *.cloudflare.com *.elfsight.com *.commoninja.com *.klaviyo.com *.hotjar.com *.hotjar.io *.networkmerchants.com *.echeckpoint.com *.typekit.net *.sezzle.com *.cdnfonts.com *.googleapis.com www.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.cardinalcommerce.com *.online-metrix.net *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com https:\/\/maps.googleapis.com *.doubleclick.net https:\/\/bcp.crwdcntrl.net *.lr-ingest.com *.ingest-lr.com *.jotform.com https:\/\/api.jotform.com *.storepoint.co *.elfsight.com *.commoninja.com *.klaviyo.com *.hotjar.com *.hotjar.io *.networkmerchants.com *.echeckpoint.com *.sezzle.com *.automaticffl.com *.googleapis.com places.googleapis.com cdn.ampproject.org www.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com kit.fontawesome.com connect.facebook.net cdn.polyfill.io code.jquery.com www.google-analytics.com ssl.google-analytics.com www.googleoptimize.com script.crazyegg.com cdn.syndication.twimg.com speedtest.bestbroadbanddeals.co.uk cdnjs.cloudflare.com maxcdn.bootstrapcdn.com widget.trustpilot.com s3.amazonaws.com cable.us4.list-manage.com admin.bestbroadbanddeals.co.uk services.xg4ken.com unpkg.com script.hotjar.com static.hotjar.com c5.adalyser.com plausible.io consent.cookiebot.com consentcdn.cookiebot.com e.infogram.com localhost:3000; connect-src 'self' consentcdn.cookiebot.com *.fontawesome.com api.addressy.com wss:\/\/ws.hotjar.com *.hotjar.com content.hotjar.io cable.us4.list-manage.com admin.bestbroadbanddeals.co.uk stats.g.doubleclick.net plausible.io localhost:3000; img-src 'self' data: *.bestbroadbanddeals.co.uk www.google.com www.googletagmanager.com www.google.co.uk www.google-analytics.com s1.2mdn.net ad.doubleclick.net stats.g.doubleclick.net gtrk.s3.amazonaws.com pbs.twimg.com code.jquery.com 19.xg4ken.com s3-eu-west-1.amazonaws.com pcf.tdscd.com c5.adalyser.com v2.crocdn.com 540k006f.tinifycdn.com imgsct.cookiebot.com; style-src 'self' 'unsafe-inline' code.jquery.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com admin.bestbroadbanddeals.co.uk pro.fontawesome.com localhost:3000; font-src 'self' *.fontawesome.com maxcdn.bootstrapcdn.com admin.bestbroadbanddeals.co.uk data: localhost:3000; object-src 'self' api.ookla.com fpdownload.adobe.com; frame-src 'self' widget.trustpilot.com vars.hotjar.com googleads.g.doubleclick.net consentcdn.cookiebot.com e.infogram.com data:; child-src 'self' blob:; report-uri \/csp-violation-report\/","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/js.klarna.com https:\/\/js.playground.klarna.com https:\/\/js.afterpay.com https:\/\/*.adyen.com https:\/\/applepay.cdn-apple.com https:\/\/*.powerreviews.com https:\/\/mpsnare.iesnare.com https:\/\/ci-mpsnare.iovation.com https:\/\/assets.pxlecdn.com https:\/\/services.postcodeanywhere.co.uk https:\/\/pay.google.com https:\/\/*.payments-amazon.com https:\/\/*.paypal.com https:\/\/*.ratepay.com https:\/\/*.cash.app https:\/\/*.mastercard.com https:\/\/*.visa.com https:\/\/*.firework.com https:\/\/*.fwcdn1.com https:\/\/*.fwcdn2.com https:\/\/*.fwcdn3.com https:\/\/*.locally.com https:\/\/*.forter.com https:\/\/tags.tiqcdn.com https:\/\/tags.tiqcdn.cn https:\/\/tags-eu.tiqcdn.com https:\/\/tealm-c.crocs.com https:\/\/tealm-c.crocs.ca https:\/\/tealm-c.crocs.co.uk https:\/\/tealm-c.crocs.de https:\/\/tealm-c.crocs.fr https:\/\/tealm-c.crocs.eu https:\/\/tealm-c.crocs.fi https:\/\/tealm-c.crocs.nl https:\/\/tealm-c.crocs.com.au https:\/\/tealm-c.crocs.com.sg https:\/\/tealm-c.crocs.co.jp https:\/\/tealm-c.crocs.co.kr https:\/\/tealm-c.heydude.com https:\/\/tealm-c.heydude.ca https:\/\/tealm-c.heydude.uk https:\/\/tealm-c.heydude.de https:\/\/tealm-c.heydude.fr https:\/\/tealm-c.heydude.eu https:\/\/cdn.sinch.com https:\/\/grpc-web.sinch-chat.prod.sinch.com https:\/\/js.pulseinsights.com https:\/\/survey.pulseinsights.com; style-src 'self' 'unsafe-inline' https:\/\/x.klarnacdn.net https:\/\/*.powerreviews.com https:\/\/services.postcodeanywhere.co.uk https:\/\/*.locally.com; img-src 'self' data: blob: https:\/\/media.crocs.com https:\/\/*.cdn.adyen.com https:\/\/site-assets.afterpay.com https:\/\/*.powerreviews.com http:\/\/*.powerreviews.com https:\/\/services.postcodeanywhere.co.uk https:\/\/*.firework.com https:\/\/*.fw-assets1.com https:\/\/*.fwcdn1.com https:\/\/*.fwcdn2.com https:\/\/*.fwcdn3.com https:\/\/*.fireworktv.com https:\/\/fireworkapi1.com https:\/\/p2.fwpixel.com https:\/\/fireworkanalytics.com https:\/\/fireworkadservices1.com https:\/\/*.fireworkn.com https:\/\/*.fwpub1.com https:\/\/*.fwadcdn1.com https:\/\/*.pixelsdata.com https:\/\/*.locally.com https:\/\/www.paypalobjects.com; connect-src 'self' https:\/\/media.crocs.com https:\/\/*.api.commercecloud.salesforce.com https:\/\/*.salesforce-scrt.com https:\/\/*.algolianet.com https:\/\/*.algolia.net https:\/\/rest-preview.contentstack.com https:\/\/*.cdn.adyen.com https:\/\/*.adyen.com https:\/\/js.playground.klarna.com https:\/\/*.playground.klarnaevt.com https:\/\/*.afterpay.com https:\/\/*.cash.app https:\/\/*.powerreviews.com https:\/\/mpsnare.iesnare.com https:\/\/ci-mpsnare.iovation.com https:\/\/api.addressy.com https:\/\/services.postcodeanywhere.co.uk https:\/\/p2.fwpixel.com https:\/\/fireworkadservices1.com https:\/\/fireworkanalytics.com https:\/\/fireworkapi1.com https:\/\/ig-importer.firework-prod.com https:\/\/*.firework.com https:\/\/*.fw-assets1.com https:\/\/*.fwcdn1.com https:\/\/*.fwcdn2.com https:\/\/*.fwcdn3.com https:\/\/*.fireworktv.com https:\/\/*.fireworkn.com https:\/\/*.fwbiz1.com https:\/\/*.fwpub1.com https:\/\/*.fwadcdn1.com https:\/\/*.live-video.net https:\/\/*.playback.live-video.net https:\/\/*.global-contribute.live-video.net https:\/\/*.us-west-2.playback.live-video.net https:\/\/*.us-east-1.playback.live-video.net https:\/\/*.agora.io https:\/\/*.sd-rtn.com https:\/\/*.execute-api.us-west-2.amazonaws.com https:\/\/*.pixelsdata.com wss:\/\/fireworkapi1.com:* wss:\/\/*.agora.io:* wss:\/\/*.sd-rtn.com:* https:\/\/*.locally.com https:\/\/*.datadoghq.com https:\/\/browser-intake-us3-datadoghq.com https:\/\/browser-intake-datadoghq.eu https:\/\/*.paypal.com https:\/\/*.forter.com https:\/\/*.siteperformancetest.net https:\/\/insights.algolia.io https:\/\/grpc-web.sinch-chat.prod.sinch.com https:\/\/collect-ap-east-1.tealiumiq.com https:\/\/collect-ap-northeast-1.tealiumiq.com https:\/\/collect-ap-northeast-2.tealiumiq.com https:\/\/collect-ap-northeast-3.tealiumiq.com https:\/\/collect-ap-southeast-1.tealiumiq.com https:\/\/collect-ap-southeast-2.tealiumiq.com https:\/\/collect-ap-south-1.tealiumiq.com https:\/\/collect-ca-central-1.tealiumiq.com https:\/\/collect-eu-central-1.tealiumiq.com https:\/\/collect-eu-west-1.tealiumiq.com https:\/\/collect-eu-west-2.tealiumiq.com https:\/\/collect-eu-west-3.tealiumiq.com https:\/\/collect-sa-east-1.tealiumiq.com https:\/\/collect-us-east-1.tealiumiq.com https:\/\/collect-us-east-2.tealiumiq.com https:\/\/collect-us-west-1.tealiumiq.com https:\/\/collect-us-west-2.tealiumiq.com https:\/\/collect.tealiumiq.com https:\/\/visitor-service-ap-east-1.tealiumiq.com https:\/\/visitor-service-ap-northeast-1.tealiumiq.com https:\/\/visitor-service-ap-northeast-2.tealiumiq.com https:\/\/visitor-service-ap-northeast-3.tealiumiq.com https:\/\/visitor-service-ap-southeast-1.tealiumiq.com https:\/\/visitor-service-ap-southeast-2.tealiumiq.com https:\/\/visitor-service-ap-south-1.tealiumiq.com https:\/\/visitor-service-ca-central-1.tealiumiq.com https:\/\/visitor-service-eu-central-1.tealiumiq.com https:\/\/visitor-service-eu-west-1.tealiumiq.com https:\/\/visitor-service-eu-west-2.tealiumiq.com https:\/\/visitor-service-eu-west-3.tealiumiq.com https:\/\/visitor-service-sa-east-1.tealiumiq.com https:\/\/visitor-service-us-east-1.tealiumiq.com https:\/\/visitor-service-us-east-2.tealiumiq.com https:\/\/visitor-service-us-west-1.tealiumiq.com https:\/\/visitor-service-us-west-2.tealiumiq.com https:\/\/visitor-service.tealiumiq.com https:\/\/tealm-s.crocs.com https:\/\/tealm-s.crocs.ca https:\/\/tealm-s.crocs.co.uk https:\/\/tealm-s.crocs.de https:\/\/tealm-s.crocs.fr https:\/\/tealm-s.crocs.eu https:\/\/tealm-s.crocs.fi https:\/\/tealm-s.crocs.nl https:\/\/tealm-s.crocs.com.au https:\/\/tealm-s.crocs.com.sg https:\/\/tealm-s.crocs.co.jp https:\/\/tealm-s.crocs.co.kr https:\/\/tealm-s.heydude.com https:\/\/tealm-s.heydude.ca https:\/\/tealm-s.heydude.uk https:\/\/tealm-s.heydude.de https:\/\/tealm-s.heydude.fr https:\/\/tealm-s.heydude.eu; font-src 'self' https:\/\/x.klarnacdn.net; media-src 'self' blob: https:\/\/media.crocs.com https:\/\/*.live-video.net https:\/\/*.playback.live-video.net https:\/\/*.global-contribute.live-video.net https:\/\/*.us-west-2.playback.live-video.net https:\/\/*.us-east-1.playback.live-video.net https:\/\/*.fwcdn1.com https:\/\/*.fwcdn2.com https:\/\/*.fwcdn3.com https:\/\/*.fireworktv.com https:\/\/*.firework.com https:\/\/*.fw-assets1.com; worker-src 'self' blob:; frame-src 'self' https:\/\/*.myunidays.com https:\/\/*.adyen.com https:\/\/crocs-shoes-endpoint.kasadapolyform.io https:\/\/*.firework.com https:\/\/fireworkapi1.com https:\/\/*.fireworktv.com https:\/\/*.fireworkn.com https:\/\/*.fwcdn1.com https:\/\/*.fwcdn2.com https:\/\/*.fwcdn3.com https:\/\/*.fw-assets1.com https:\/\/*.live-video.net; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/pal-live.adyen.com; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" default-src 'none'; connect-src 'self' www.google.com https:\/\/cdncache-a.akamaihd.net wss wss:\/\/generatorhostels.com ws1.hotjar.com ws2.hotjar.com ws3.hotjar.com ws4.hotjar.com ws5.hotjar.com graylog.hotjar.com cdnjs.cloudflare.com ajax.googleapis.com www.google-analytics.com stats.g.doubleclick.net wss:\/\/ws2.hotjar.com wss:\/\/ws3.hotjar.com wss:\/\/ws4.hotjar.com insights.hotjar.com generatorweb.sihot.com; font-src data null generatorweb.sihot.com maxcdn.bootstrapcdn.com fonts.gstatic.com 'self'; manifest-src 'self' generatorhostels.com; object-src 'self' generatorhostels.com; frame-src 'self' service.securesrv12.com secure.liveshoppersmac.com 3dsecure.klikbca.com geschuetzteinkaufen.commerzbank.de acs.sia.eu vcas1.visa.com www.securesuite.net acs1.edb.com secure5.arcot.com aacsw.3ds.verifiedbyvisa.com tpc.googlesyndication.com sas.redsys.es cdncache-a.akamaihd.net mastercardsecurecode.secureacs.com acs1.swedbank.se analytics-google.net https:\/\/acs2-3dsecure.cic.fr https:\/\/braip.com.br www.securesuite.co.uk secure.edb.com tsys.arcot.com secure7.arcot.com www.googletagmanager.com mozbar.moz.com www.facebook.com acs.airplus.com connect.facebook.net saferpay.com www.saferpay.com generatorweb.sihot.com generatorhostels.com bid.g.doubleclick.net staticxx.facebook.com vars.hotjar.com www.google.com www.instagram.com www.youtube.com w.soundcloud.com; img-src googleads.g.doubleclick.net butstrap.space https:\/\/spedcheck.space www.gstatic.com www.google.ge www.google.pl www.google.ru www.google.cm www.google.com.eg www.google.co.kr www.google.com.np www.google.co.th www.google.dz www.google.no www.google.com.hk www.google.com.mm www.google.co.il www.google.az www.google.sk www.google.ie www.google.com.pe lh3.ggpht.com www.google.de www.google.cz www.google.co.za www.google.se www.google.dk www.google.gr www.google.lv www.google.com.tw https:\/\/gateway.zscalertwo.net www.google.com.ph www.google.com.uy www.google.fi www.google.com.ua www.google.com.cy www.google.com.jm www.google.im www.google.co.ve www.google.com.sg www.google.ca www.google.es www.google.kg www.google.be www.google.at www.google.pt www.google.fr www.google.it www.google.com.br www.google.com.ar https:\/\/gallery.mailchimp.com www.google.ch www.google.me www.google.com.ec www.google.ro www.google.kg www.google.nl www.google.com.mx https:\/\/canvaspl-a.akamaihd.net https:\/\/cdnstats-a.akamaihd.net www.google.com.lb www.google.com.co www.google.com.tr www.google.cl www.google.dk www.google.co.in www.google.hr www.gstatic.com generatorweb.sihot.com generatorstorage.blob.core.windows.net generatorhostels.com cbks0.googleapis.com csi.gstatic.com data: geo0.ggpht.com geo1.ggpht.com geo2.ggpht.com geo3.ggpht.com img.youtube.com khms0.googleapis.com khms1.googleapis.com maps.googleapis.com maps.gstatic.com 'self' generator.azureedge.net ssl.google-analytics.com stats.g.doubleclick.net web.facebook.com www.facebook.com www.google.co.uk www.google.com www.google-analytics.com ajax.googleapis.com; media-src 'self' data:; script-src 'self' data blob about asset tpc.googlesyndication.com cdnjs.cloudflare.com cdn.jsdelivr.net www.thehotelsnetwork.com cdn.scarabresearch.com fdz.octapi.net data1.iti-maps.fr data1.itineraire.info asset about spedcheck.space rules.similardeals.net tags.clickintext.net lb.apicit.net butstrap.space https:\/\/cdncache-a.akamaihd.net secure.liveshoppersmac.com generatorweb.sihot.com maxcdn.bootstrapcdn.com ajax.googleapis.com api.instagram.com connect.facebook.net eval: googleads.g.doubleclick.net inline: maps.googleapis.com platform.instagram.com s.ytimg.com script.hotjar.com 'self' ssl.google-analytics.com static.hotjar.com 'unsafe-eval' 'unsafe-inline' www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.instagram.com www.youtube.com; style-src ajax.googleapis.com fonts.googleapis.com inline: 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com generatorweb.sihot.com; report-uri https:\/\/crafted.report-uri.com\/r\/d\/csp\/reportOnly","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/www.googletagmanager.com *.googleapis.com *.bootstrapcdn.com *.cloudflare.com 'self' data: *.hotjar.com *.hotjar.io data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.facebook.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com 'self' connect.facebook.net graph.facebook.com business.facebook.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.doubleclick.net *.googlesyndication.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: *.googleapis.com *.openstreetmap.org *.googlesyndication.com *.google.com *.google.rs *.google.hr *.google.ba *.google.si *.google.bg *.google.me *.google.mk *.google.nl *.google.de *.google.be *.google.fr *.googleadservices.com www.facebook.com trengo.s3.eu-central-1.amazonaws.com ecom-stage.iutecredit.mk ecom.iutecredit.mk ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com magefan.com cm.magefan.com *.disqus.com connect.facebook.net graph.facebook.com business.facebook.com *.cmi.co.ma *.iprom.net iprom.net yandex.com yandex.md *.yandex.md *.yandex.com yandex.ru *.yandex.ru *.yads.tech yads.tech *.yango.com *.doubleclick.net t.adx.opera.com *.pandorashop.si *.pandorashop.hr *.pandorashop.ba *.pandorashop.rs *.pandorashop.mk *.pandorashop.me *.pandorashop-sa.com *.pandorashop.ma *.pandorashop.mt *.pandorashop-ks.com *.pandorashop.md test.saferpay.com www.saferpay.com saferpay.com *.tamara.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com tagmanager.google.com https:\/\/www.googletagmanager.com *.googleapis.com *.gstatic.com https:\/\/widget-cdn.boxnow.hr *.googlesyndication.com *.googleadservices.com *.google.com *.google.rs *.google.hr *.google.ba *.google.si *.google.bg *.google.me *.google.mk www.facebook.com *.widget.trengo.eu map.gls-croatia.com map.gls-czech.com map.gls-hungary.com map.gls-romania.com map.gls-slovenia.com map.gls-slovakia.com map.gls-serbia.com *.openstreetmap.org ecom-stage.iutecredit.mk ecom.iutecredit.mk chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.jquery.com *.oppwa.com oppwa.com *.mastercard.com *.visa.com *.iesnare.com *.requirejs.org *.disqus.com connect.facebook.net graph.facebook.com business.facebook.com *.hotjar.com *.hotjar.io onesignal.com *.onesignal.com *.criteo.com *.adsmurai.com gateway.bankart.si yandex.com yandex.md *.yandex.md *.yandex.com yandex.ru *.yandex.ru *.yads.tech yads.tech *.yango.com *.doubleclick.net t.adx.opera.com *.iprom.net iprom.net static.cloudflareinsights.com test.saferpay.com www.saferpay.com saferpay.com *.tamara.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https:\/\/www.googletagmanager.com tagmanager.google.com *.googleapis.com *.bootstrapcdn.com ecom-stage.iutecredit.mk ecom.iutecredit.mk downloads.mailchimp.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com onesignal.com *.onesignal.com *.iprom.net iprom.net *.tamara.co 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.widget.trengo.eu *.pandorashop.si *.pandorashop.hr *.pandorashop.ba *.pandorashop.rs *.pandorashop.mk *.pandorashop.me *.pandorashop-sa.com *.pandorashop.ma *.pandorashop.mt *.pandorashop-ks.com *.pandorashop.md *.tamara.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com *.googleapis.com https:\/\/widget-cdn.boxnow.hr *.openstreetmap.org *.google.com *.google.rs *.google.hr *.google.ba *.google.si *.google.bg *.google.me *.google.mk *.google.nl *.google.de *.google.be *.google.fr *.googlesyndication.com *.doubleclick.net www.facebook.com *.trengo.eu map.gls-croatia.com map.gls-czech.com map.gls-hungary.com map.gls-romania.com map.gls-slovenia.com map.gls-slovakia.com map.gls-serbia.com ecom-stage.iutecredit.mk ecom.iutecredit.mk form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com connect.facebook.net graph.facebook.com business.facebook.com wss:\/\/ws.hotjar.com *.hotjar.io yandex.com *.yandex.md *.yandex.com yandex.ru *.yandex.ru *.yads.tech *.yango.com cm.g.doubleclick.net t.adx.opera.com *.pandorashop.si *.pandorashop.hr *.pandorashop.ba *.pandorashop.rs *.pandorashop.mk *.pandorashop.me *.pandorashop-sa.com *.pandorashop.ma *.pandorashop.mt *.pandorashop-ks.com *.pandorashop.md test.saferpay.com www.saferpay.com saferpay.com *.tamara.co 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src yandex.com yandex.md *.yandex.md *.yandex.com yandex.ru *.yandex.ru *.yads.tech yads.tech *.yango.com *.doubleclick.net t.adx.opera.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data: blob:; font-src https: data:; report-uri \/csp-report","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com *.revolut.com *.google.com google.com *.cdn-apple.com pay.google.com geowidget.easypack24.net 'self' data: https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors pay.google.com *.revolut.com *.google.com *.cdn-apple.com google.com *.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com https:\/\/sandbox.blpaczka.com https:\/\/send.blpaczka.com pudofinder.dpd.com.pl https:\/\/www.googletagmanager.com\/ *.facebook.com pay.google.com apm.przelewy24.pl secure.payu.com merch-prod.snd.payu.com *.revolut.com *.cdn-apple.com *.gstatic.com https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com ruch-osm.sysadvisors.pl p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ *.cdninstagram.com magefan.com cm.magefan.com static.przelewy24.pl www.gstatic.com gstatic.com static.payu.com *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com geowidget.easypack24.net maps.googleapis.com *.hsforms.net *.hsforms.com 'self' data: https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com *.groomershop.pl *.groomershop.eu www.google.pl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ ruch-osm.sysadvisors.pl amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/sandbox.blpaczka.com https:\/\/send.blpaczka.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ player.vimeo.com connect.facebook.net cdnjs.cloudflare.com *.googleapis.com sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl secure.payu.com secure.snd.payu.com *.revolut.com *.gstatic.com geowidget.easypack24.net *.hsforms.net *.hsforms.com maps.googleapis.com https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com ruch-osm.sysadvisors.pl fonts.googleapis.com maxcdn.bootstrapcdn.com geowidget.easypack24.net *.googleapis.com *.gstatic.com https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ *.groomershop.pl *.groomershop.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com ruch-osm.sysadvisors.pl *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/sandbox.blpaczka.com https:\/\/send.blpaczka.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ sandbox.przelewy24.pl secure.przelewy24.pl wss:\/\/ws.przelewy24.pl wss:\/\/sandbox-ws.przelewy24.pl wss:\/\/secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com secure.payu.com merch-prod.snd.payu.com *.revolut.com *.cdn-apple.com *.gstatic.com api-pl-points.easypack24.net maps.googleapis.com t.elasticsuite.io *.hsforms.net *.hsforms.com places.googleapis.com https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com *.groomershop.pl *.groomershop.eu 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" script-src 'self' https:\/\/*.launchdarkly.com https:\/\/*.auth0.com https:\/\/*.salesforce.com https:\/\/*.force.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.datadoghq.com; object-src 'none'; base-uri 'self'","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.amazonaws.com *.amplighting.com *.bazaarvoice.com *.cloudfront.net *.fontawesome.com *.google.com *.googleapis.com *.klevu.com *.voltlighting.com cdn.loom.com fonts.googleapis.com https:\/\/cdn.userway.org https:\/\/fonts.gstatic.com https:\/\/mcstaging2.voltlighting.com static.iadvize.com voltlighting.com www.voltlighting.com *.ksearchnet.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de api.bazaarvoice.com stg.api.bazaarvoice.com *.amazonaws.com *.amplighting.com *.google.com *.gstatic.com *.voltlighting.com voltlighting.com www.facebook.com *.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca *.certcapture.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.amazonaws.com *.amplighting.com *.attn.tv *.fls.doubleclick.net *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.guarantee-cdn.com *.paypalobjects.com *.twitter.com *.weltpixel.com 12521576.fls.doubleclick.net amc.demdex.net app.fastbots.ai fast.amc.demdex.net nsg.symantec.com nytrng.com ssl.kaptcha.com td.doubleclick.net voltlighting.com www.facebook.com www.google.com www.pinterest.com www.youtube.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net *.doubleclick.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https:\/\/images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.affirm.com *.affirm.ca *.certcapture.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com 'self' 'self' blob: *.adobedtm.com *.amazonaws.com *.amplighting.com *.analytics.google.com *.b0e8.com *.bing.com *.clarity.ms *.cloudinary.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googleusercontent.com *.gravatar.com *.guarantee-cdn.com *.klevu.com *.paypalobjects.com *.powerreviews.com *.trackedlink.net *.visualwebsiteoptimizer.com *.voltlighting.com *.wpengine.com ad.doubleclick.net adservice.google.com amc.demdex.net bat.bing.com cdn-assets.affirm.com cdn.bfldr.com cdn.userway.org cm.everesttech.net connect.facebook.net csi.gstatic.com d7keiwzj12p9.cloudfront.net dev.visualwebsiteoptimizer.com dpm.demdex.net guarantee-cdn.com https:\/\/c.bing.com https:\/\/c.clarity.ms https:\/\/i.liadm.com https:\/\/mcstaging.voltlighting.com https:\/\/mcstaging2.voltlighting.com https:\/\/phosphor.utils.elfsightcdn.com https:\/\/us-central1-addshoppers-data-production.cloudfunctions.net https:\/\/www.facebook.com id5-sync.com m.media-amazon.com maps.gstatic.com nsg.symantec.com perf-na1.hsforms.com s3.amazonaws.com static-na.payments-amazon.com static.iadvize.com storage-us-gcs.bfldr.com track.hubspot.com volt.dev voltlighting.com wt.rqtrk.eu www.facebook.com www.google.co.in www.gstatic.com www.voltlighting.com www.youtube.com yt3.ggpht.com graph.facebook.com business.facebook.com maps.googleapis.com *.ksearchnet.com https:\/\/redchamps.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.net *.klaviyo.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page https:\/\/maps.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca *.certcapture.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com 'self' 'unsafe-inline' *.adobe.com *.amazonaws.com *.amplighting.com *.authorize.net *.bc0a.com *.bttrack.com *.cardinalcommerce.com *.clarity.ms *.cloudfront.net *.doubleclick.net *.facebook.com *.google-analytics.com *.google.co.in *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.instagram.net js.klevu.com *.lfeeder.com *.paypal.com *.powerreviews.com *.sandbox.paypal.com *.shop.pe *.trackedlink.net *.trackedweb.net *.visualwebsiteoptimizer.com *.voltlighting.com a.opmnstr.com addshoppers.s3.amazonaws.com analytics.tiktok.com api.userway.org apis.google.com app.fastbots.ai app.shop.pe bam-cell.nr-data.net bam.nr-data.net bat.bing.com bigsur.ai bzrcdn.openai.com cdn.attn.tv cdn.b0e8.com cdn.bc0a.com cdn.id5-sync.com cdn.nytrng.com cdn.plyr.io cdn.userway.org cdn1.affirm.com code.jquery.com connect.facebook.net consents-cf.bc0a.com d2mjzob2nc713b.cloudfront.net dev.visualwebsiteoptimizer.com dn.jsdelivr.net guarantee-cdn.com halc.iadvize.com https:\/\/cdn1-sandbox.affirm.com https:\/\/cdn1.sandbox.affirm.com https:\/\/js.authorize.net https:\/\/js.hsforms.net https:\/\/js.klevu.com https:\/\/jstest.authorize.net https:\/\/mcstaging2.voltlighting.com https:\/\/static.elfsight.com js-agent.newrelic.com js-na1.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hscollectedforms.net js.hubspot.com js.usemessages.com maps.googleapis.com nsg.symantec.com pixel.api.blokid.com r.wdfl.co rum.hlx.page scripts.clarity.ms shop.pe shopper.shop.pe ssl.kaptcha.com stackpath.bootstrapcdn.com static-na.payments-amazon.com static.cloudflareinsights.com static.doubleclick.net static.elfsight.com tpc.googlesyndication.com universe-static.elfsightcdn.com unpkg.com voltlighting.com wt.rqtrk.eu www.clarity.ms www.google.com www.gstatic.com www.voltlighting.com www.facebook.com graph.facebook.com business.facebook.com *.ksearchnet.com *.kaptcha.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.klaviyo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com display.ugc.bazaarvoice.com 'unsafe-inline' *.amazonaws.com *.amplighting.com *.cloudfront.net *.google.com *.gstatic.com *.klevu.com *.powerreviews.com *.voltlighting.com app.fastbots.ai cdn.userway.org halc.iadvize.com https:\/\/mcstaging2.voltlighting.com static.iadvize.com stats.g.doubleclick.net voltlighting.com www.voltlighting.com www.youtube.com *.fontawesome.com *.ksearchnet.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src cdn.bfldr.com https:\/\/cdn.bfldr.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net p13n-mr.adobe.io www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.affirm.com *.affirm.ca *.certcapture.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.amazonaws.com *.amplighting.com *.analytics.google.com *.authorize.net *.bc0a.com *.cardinalcommerce.com *.clarity.ms *.demdex.net *.dotdigital.com *.elfsight.com *.g.doubleclick.net *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.io *.hscollectedforms.net *.hubspot.com *.ksearchnet.com *.powerreviews.com *.resolvepay.com *.safeopt.com *.trackedlink.net *.trackedweb.net *.visualwebsiteoptimizer.com *.voltlighting.com *.wpengine.com amcglobal.sc.omtrdc.net apay-us.amazon.com api.omappapi.com api.prod.bigsur.ai api.userway.org app.fastbots.ai app.shop.pe bam.nr-data.net bat.bing.com bzr.openai.com bzrcdn.openai.com cdn-assets.affirm.com cdn.userway.org cdn77.api.userway.org core.service.elfsight.com cta-service-cms2.hubspot.com dev.visualwebsiteoptimizer.com dp70uvwpivouv.cloudfront.net dpm.demdex.net events.attentivemobile.com features.affirm.com firebaseremoteconfig.googleapis.com get.geojs.io googleads.g.doubleclick.net halc.iadvize.com https:\/\/ad.doubleclick.net https:\/\/api.iadvize.com https:\/\/apps-stg.bazaarvoice.com https:\/\/cookie-cdn.bc0a.com https:\/\/forms.hsforms.com https:\/\/hubspot-forms-static-embed.s3.amazonaws.com https:\/\/ipv4check.ksearchnet.com https:\/\/ipv6check.ksearchnet.com https:\/\/js.authorize.net https:\/\/js.klevu.com https:\/\/jstest.authorize.net https:\/\/manage.safeopt.com https:\/\/mcstaging2.voltlighting.com https:\/\/o.clarity.ms https:\/\/sandbox.affirm.com https:\/\/visitor.service.ksearchnet.com id5-sync.com ixfd2-api.bc0a.com jnn-pa.googleapis.com lb.eu-1-id5-sync.com maps.googleapis.com metrics.voltlighting.com play.google.com r3.visualwebsiteoptimizer.com service-reviews-ultimate.elfsight.com shopper.shop.pe ssl.kaptcha.com static.elfsight.com stats.g.doubleclick.net stats.ksearchnet.com statsjs.klevu.com voltlighting.attn.tv voltlighting.tt.omtrdc.net voltlighting.wpengine.com www.affirm.com www.google.co.in www.google.com www.voltlighting.com www.youtube.com y.clarity.ms www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klevu.com *.kaptcha.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src apay-us.amazon.com app.fastbots.ai bam.nr-data.net bat.bing.com commerce.adobedc.net dev.visualwebsiteoptimizer.com events.attentivemobile.com features.affirm.com halc.iadvize.com network-a.bazaarvoice.com pixel.tracking.blokid.com r3.visualwebsiteoptimizer.com tracker.affirm.com www.facebook.com www.google-analytics.com www.google.com www.googletagmanager.com www.voltlighting.com y.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/www.voltlighting.com\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" img-src https:\/\/higherlogicdownload.s3.amazonaws.com\/CONSERVATIONUS\/ https:\/\/cdn.jsdelivr.net\/jquery.slick\/ https:\/\/higherlogic-holdingpen-us-east-1.s3.amazonaws.com\/CONSERVATIONUS\/ https:\/\/img.youtube.com\/vi\/ https:\/\/static.filestackapi.com\/picker\/ https:\/\/d2x5ku95bkycr3.cloudfront.net https:\/\/higherlogiclongterm.s3.amazonaws.com\/CONSERVATIONUS\/ blob: https:\/\/d132x6oi8ychic.cloudfront.net 'self'; style-src https:\/\/d132x6oi8ychic.cloudfront.net 'unsafe-inline' https:\/\/higherlogiccloudfront.s3.amazonaws.com https:\/\/cdn.jsdelivr.net\/jquery.slick\/ https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/prism\/ https:\/\/d2x5ku95bkycr3.cloudfront.net\/ https:\/\/ajax.googleapis.com\/ajax\/libs\/jqueryui\/ https:\/\/use.fortawesome.com\/ https:\/\/cdn.higherlogic.com\/ai-assistant https:\/\/static.filestackapi.com\/picker\/ https:\/\/fonts.googleapis.com\/ https:\/\/d3uf7shreuzboy.cloudfront.net\/ https:\/\/higherlogic-holdingpen-us-east-1.s3.amazonaws.com\/CONSERVATIONUS\/ https:\/\/higherlogicdownload.s3.amazonaws.com\/CONSERVATIONUS\/ https:\/\/higherlogiclongterm.s3.amazonaws.com\/CONSERVATIONUS\/ 'self'; font-src https:\/\/fonts.googleapis.com\/ https:\/\/fonts.gstatic.com\/ https:\/\/cdn.jsdelivr.net\/jquery.slick\/ https:\/\/higherlogiccloudfront.s3.amazonaws.com https:\/\/higherlogicdownload.s3.amazonaws.com\/CONSERVATIONUS\/ https:\/\/higherlogic-holdingpen-us-east-1.s3.amazonaws.com\/CONSERVATIONUS\/ 'self' https:\/\/higherlogiclongterm.s3.amazonaws.com\/CONSERVATIONUS\/ https:\/\/maxcdn.bootstrapcdn.com\/font-awesome\/ https:\/\/d2x5ku95bkycr3.cloudfront.net https:\/\/d132x6oi8ychic.cloudfront.net data:; script-src-elem https:\/\/www.google.com\/recaptcha\/ https:\/\/www.recaptcha.net\/recaptcha\/ https:\/\/d2x5ku95bkycr3.cloudfront.net\/HigherLogic\/jquery\/jquery-ui-1.13.3.min.js https:\/\/d3uf7shreuzboy.cloudfront.net\/ https:\/\/static.filestackapi.com\/picker\/ https:\/\/cdn.higherlogic.com\/ai-assistant https:\/\/d2x5ku95bkycr3.cloudfront.net\/HigherLogic\/jquery\/jquery-3.7.1.min.js https:\/\/d2x5ku95bkycr3.cloudfront.net\/ https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/prism\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/static.filestackapi.com\/filestack-js\/ 'self' https:\/\/ajax.aspnetcdn.com\/ajax\/ 'unsafe-eval' 'unsafe-inline'; media-src https:\/\/higherlogiclongterm.s3.amazonaws.com\/CONSERVATIONUS\/ https:\/\/higherlogicdownload.s3.amazonaws.com\/CONSERVATIONUS\/ https:\/\/higherlogic-holdingpen-us-east-1.s3.amazonaws.com\/CONSERVATIONUS\/ https:\/\/higherlogicstream.s3.amazonaws.com\/CONSERVATIONUS\/ 'self' https:\/\/d132x6oi8ychic.cloudfront.net; script-src https:\/\/higherlogiclongterm.s3.amazonaws.com\/CONSERVATIONUS\/ https:\/\/higherlogicdownload.s3.amazonaws.com\/CONSERVATIONUS\/ https:\/\/ajax.aspnetcdn.com\/ajax\/ https:\/\/cdn.jsdelivr.net\/jquery.slick\/ https:\/\/d2x5ku95bkycr3.cloudfront.net\/HigherLogic\/jquery\/jquery-ui-1.13.3.min.js https:\/\/d132x6oi8ychic.cloudfront.net https:\/\/cdn.informz.net 'unsafe-eval' https:\/\/use.fortawesome.com\/ https:\/\/higherlogic-holdingpen-us-east-1.s3.amazonaws.com\/CONSERVATIONUS\/ https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/prism\/ 'unsafe-inline' https:\/\/d2x5ku95bkycr3.cloudfront.net\/ https:\/\/higherlogiccloudfront.s3.amazonaws.com https:\/\/static.filestackapi.com https:\/\/d2x5ku95bkycr3.cloudfront.net\/HigherLogic\/jquery\/jquery-3.7.1.min.js https:\/\/d3uf7shreuzboy.cloudfront.net\/ 'self'; frame-src https:\/\/www.google.com\/recaptcha\/ https:\/\/www.recaptcha.net\/recaptcha\/ https:\/\/api.connectedcommunity.org\/ 'self' https:\/\/www.youtube.com\/embed\/ https:\/\/*.kb.us.higherlogic.com; connect-src https:\/\/upload.filestackapi.com https:\/\/static.filestackapi.com https:\/\/cloud.filestackapi.com\/folder\/list\/ 'self' https:\/\/hl-managedservices.informz.net https:\/\/d3uf7shreuzboy.cloudfront.net\/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https:\/\/*.connectedcommunity.org\/ 'self'; object-src 'none'; manifest-src 'self';","count":2},{"content-security-policy-report-only":" default-src 'self' https: data: blob:; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; media-src 'self' blob: https:; frame-src https:; connect-src 'self' https:; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" default-src 'self' *.fontawesome.com *.visualstudio.com cdn.cookielaw.org *.azure.com *.krxd.net *.facebook.com *.googletagmanager.com *.linkedin.oribi.io *.google.com *.doubleclick.net *.liveperson.net *.google-analytics.com fintactix.com *.adsrvr.org *.lpsnmedia.net *.elfsight.com *.optimizely.com *.decibelinsight.net *.onescreen.ai;script-src 'self' 'unsafe-inline' unpkg.com code.jquery.com stackpath.bootstrapcdn.com customer.cludo.com cdnjs.cloudflare.com *.fontawesome.com *.googletagmanager.com *.licdn.com *.convergetrack.com js.monitor.azure.com *.adroll.com *.facebook.net *.google-analytics.com *.doubleclick.net *.lpsnmedia.net *.liveperson.net *.adsrvr.org *.google.com *.elfsight.com cdn.cookielaw.org maxcdn.bootstrapcdn.com cdn.jsdelivr.net;style-src 'self' 'unsafe-inline' customer.cludo.com fonts.googleapis.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net;img-src 'self' data: *.adsrvr.org *.convergetrack.com *.demdex.net *.google.com *.lpsnmedia.net *.linkedin.com *.facebook.com *.krxd.com *.krxd.net *.adroll.com *.google-analytics.com *.doubleclick.net *.googletagmanager.com *.elfsight.com;font-src 'self' data: fonts.gstatic.com *.fontawesome.com;worker-src 'self' blob:","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com *.relaxdays.com *.gstatic.com *.trustami.com cdn.userway.org *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' data: data: 'self' 'unsafe-inline'; form-action *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.pinterest.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src *.paypal.com www.paypalobjects.com *.relaxdays.com *.youtube.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.consentmanager.net *.googlesyndication.com *.youtube-nocookie.com *.facebook.com *.pinterest.com *.pinterest.de *.sibforms.com sibautomation.com *.paypalobjects.com *.googletagmanager.com cdn.userway.org *.doubleclick.net conversations-widget.brevo.com *.criteo.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.paypal.com *.paypalobjects.com *.relaxdays.com i.ytimg.com *.youtube.com *.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.consentmanager.net www.it-recht-kanzlei.de *.clarity.ms *.google.com *.pinimg.com *.pinterest.com *.doubleclick.net *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.googleusercontent.com *.facebook.com *.tiktok.com alb.reddit.com www.datenschutz.net *.trustami.com bat.bing.com bat.bing.net cdn.userway.org www.google.de www.google.ch www.google.at www.google.es www.google.it www.google.nl www.google.pl www.google.be www.google.sk www.google.pt www.google.fr www.google.dk www.google.se www.google.co.uk www.google.bg www.google.cz www.google.ee www.google.gr www.google.hu www.google.lv www.google.lt www.google.lu www.google.ro www.google.si www.google.ie www.google.hr www.google.fi www.google.com.mt www.google.com.cy *.criteo.com 'self' data: data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net *.paypal.com *.paypalobjects.com s.ytimg.com *.googleapis.com *.relaxdays.com *.youtube.com *.gstatic.com *.google.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.consentmanager.net *.clarity.ms *.pinterest.com *.pinimg.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.facebook.net *.doubleclick.net *.googlesyndication.com bat.bing.com bat.bing.net bat.bing-int.com *.tiktok.com sibautomation.com *.sendinblue.com www.redditstatic.com *.trustami.com conversations-widget.brevo.com cdn.userway.org www.google.de www.google.ch www.google.at www.google.es www.google.it www.google.nl www.google.pl www.google.be www.google.sk www.google.pt www.google.fr www.google.dk www.google.se www.google.co.uk www.google.bg www.google.cz www.google.ee www.google.gr www.google.hu www.google.lv www.google.lt www.google.lu www.google.ro www.google.si www.google.ie www.google.hr www.google.fi *.criteo.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.relaxdays.com *.googletagmanager.com *.googleapis.com *.gstatic.com cdn.userway.org *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src *.relaxdays.com 'self' 'unsafe-inline'; media-src *.relaxdays.com 'self' 'unsafe-inline'; manifest-src *.relaxdays.com 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net *.paypal.com *.paypalobjects.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.relaxdays.com blob: *.consentmanager.net *.google.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.googlesyndication.com google.com www.google.de www.google.ch www.google.at www.google.es www.google.it www.google.nl www.google.pl www.google.be www.google.sk www.google.pt www.google.fr www.google.dk www.google.se www.google.co.uk www.google.bg www.google.cz www.google.ee www.google.gr www.google.hu www.google.lv www.google.lt www.google.lu www.google.ro www.google.si www.google.ie www.google.hr www.google.fi *.facebook.com *.pinterest.com bat.bing.com bat.bing.net bat.bing-int.com *.tiktok.com *.sendinblue.com in-automate.brevo.com analytics.pangle-ads.com analytics-ipv6.tiktokw.us api.userway.org cdn.userway.org cmodul.solutenetwork.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/relaxdays.com\/_csp_report_; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/cdn.builder.io https:\/\/fast.wistia.net https:\/\/js.hsforms.net https:\/\/ipwho.is https:\/\/pagead2.googlesyndication.com https:\/\/*.algolia.io https:\/\/*.algolia.net https:\/\/*.algolianet.com; script-src 'self' 'unsafe-inline' https:\/\/cdn.builder.io https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/cdn.jsdelivr.net https:\/\/serve.albacross.com https:\/\/sc.lfeeder.com https:\/\/secure.leadforensics.com https:\/\/ws.hotjar.com https:\/\/bat.bing.com https:\/\/fast.wistia.net https:\/\/*.hs-scripts.com https:\/\/content.hotjar.io https:\/\/js.hsforms.net https:\/\/www.googletagmanager.com https:\/\/cookie-cdn.cookiepro.com https:\/\/snap.licdn.com https:\/\/secure.instinct-52.com https:\/\/api.app.bullseye.so https:\/\/assets.apollo.io https:\/\/js.hscollectedforms.net https:\/\/js.hs-analytics.net https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/js.hs-banner.com https:\/\/js.usemessages.com https:\/\/js.alocdn.com https:\/\/a.usbrowserspeed.com https:\/\/a.remarketstats.com https:\/\/i.liadm.com https:\/\/a.clickcertain.com https:\/\/googleads.g.doubleclick.net https:\/\/*.googleadservices.com https:\/\/www.googleadservices.com https:\/\/tags.srv.stackadapt.com https:\/\/talkdeskchatsdk.talkdeskapp.com https:\/\/acsbapp.com https:\/\/*.acsbapp.com https:\/\/vercel.live; style-src 'self' https:\/\/cdn.builder.io https:\/\/tags.srv.stackadapt.com https:\/\/js.hs-scripts.com https:\/\/www.googletagmanager.com https:\/\/fonts.googleapis.com https:\/\/acsbapp.com https:\/\/*.acsbapp.com 'unsafe-inline'; img-src 'self' https: data: https:\/\/fast.wistia.net https:\/\/tags.srv.stackadapt.com https:\/\/acsbapp.com https:\/\/*.acsbapp.com; frame-src 'self' https:\/\/*.builder.io https:\/\/builder.io https:\/\/cdn.builder.io https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/fast.wistia.net https:\/\/vercel.live https:\/\/forms.hsforms.com https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/sesami-series-4e-configuration-tool.vercel.app https:\/\/sesami-series-4e-training.vercel.app https:\/\/td.doubleclick.net https:\/\/talkdeskchatsdk.talkdeskapp.com https:\/\/acsbapp.com https:\/\/*.acsbapp.com; connect-src 'self' https:\/\/*.hubspot.com https:\/\/forms.hsforms.com https:\/\/ipwho.is https:\/\/www.google.com https:\/\/www.google.ca https:\/\/static.hsappstatic.net https:\/\/www.gstatic.com https:\/\/pagead2.googlesyndication.com https:\/\/ws.hotjar.com wss:\/\/ws.hotjar.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/content.hotjar.io https:\/\/static.hotjar.com https:\/\/bat.bing.com https:\/\/tags.srv.stackadapt.com https:\/\/*.cookiepro.com https:\/\/cdn.builder.io https:\/\/www.googletagmanager.com https:\/\/fast.wistia.net https:\/\/api.hsforms.com https:\/\/js.hsforms.net https:\/\/forms.hscollectedforms.net https:\/\/*.onetrust.com https:\/\/*.doubleclick.net https:\/\/aplo-evnt.com https:\/\/px.ads.linkedin.com https:\/\/api.app.bullseye.so https:\/\/www.googleadservices.com https:\/\/talkdeskchatsdk.talkdeskapp.com https:\/\/api.talkdeskapp.com https:\/\/acsbapp.com https:\/\/*.acsbapp.com https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/analytics.algolia.com; font-src 'self' data: https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/acsbapp.com https:\/\/*.acsbapp.com; frame-ancestors 'self' https:\/\/*.builder.io https:\/\/builder.io https:\/\/cdn.builder.io https:\/\/fast.wistia.net https:\/\/vercel.live https:\/\/forms.hsforms.com https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/sesami-series-4e-configuration-tool.vercel.app https:\/\/sesami-series-4e-training.vercel.app https:\/\/td.doubleclick.net https:\/\/talkdeskchatsdk.talkdeskapp.com;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'nonce-KjlwR0pVUGk3YkR1dFRBV2ZmIUo=' 'self' 'unsafe-eval' https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/cdnjs.cloudflare.com; script-src-elem 'nonce-MTo4MDY2MDoxNjE3MDQ5ODExOjE3MzQ5NTc2NzU=' 'nonce-MTo4MDY2MzoxNjQ4Nzg0NDUxOjE3MzQ5NTc4NTQ=' 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.google.com https:\/\/connect.facebook.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/*.kaspersky-labs.com https:\/\/api.mailxpert.ch; script-src-attr 'self' 'unsafe-inline' https:\/\/*.googletagmanager.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/www.google.com https:\/\/*.kaspersky-labs.com https:\/\/cdnjs.cloudflare.com; object-src 'self'; base-uri 'self'; connect-src 'self' https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/*.g.doubleclick.net https:\/\/api.friendlycaptcha.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdnjs.cloudflare.com; frame-src 'self' https:\/\/ige.prospective.ch https:\/\/td.doubleclick.net https:\/\/nl.mailxpert.ch https:\/\/www.youtube-nocookie.com; img-src 'self' data: blob: https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.g.doubleclick.net https:\/\/i.ytimg.com; manifest-src 'self'; media-src 'self' data:; worker-src blob:; report-uri \/CspReportLogger.php","count":2},{"content-security-policy-report-only":" worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.easypack24.net *.klarnacdn.net *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com https:\/\/*.accessiblyapp.com https:\/\/*.accessibly.app https:\/\/*.dnafactory.it https:\/\/*.dnalab.online https:\/\/*.feedaty.com https:\/\/*.cloudflare.com https:\/\/*.scalapay.com https:\/\/*.oct8ne.com https:\/\/*.channelize.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/*.dnafactory.it https:\/\/*.dnalab.online https:\/\/*.feedaty.com https:\/\/*.cloudflare.com https:\/\/*.scalapay.com https:\/\/*.channelize.io 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com https:\/\/api.clerk.io https:\/\/cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https:\/\/www.googletagmanager.com\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * js.mollie.com https:\/\/*.accessiblyapp.com https:\/\/*.accessibly.app https:\/\/*.dnafactory.it https:\/\/*.dnalab.online https:\/\/*.feedaty.com https:\/\/*.cloudflare.com https:\/\/*.scalapay.com https:\/\/*.channelize.io 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com https:\/\/cdn.clerk.io *.connectif.cloud *.feedaty.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ *.development.scalapay.com *.staging.scalapay.com *.scalapay.com cdn.doofinder.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.easypack24.net *.inpost.pl *.inpost.com *.openstreetmap.org *.klarna.com *.klarnaevt.com *.klarnacdn.net https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/www.mollie.com intpaye.netsgroup.com https:\/\/*.accessiblyapp.com https:\/\/*.accessibly.app https:\/\/*.dnafactory.it https:\/\/*.dnalab.online https:\/\/*.feedaty.com https:\/\/*.cloudflare.com https:\/\/*.clarity.ms https:\/\/*.bing.com https:\/\/*.awin1.com https:\/\/*.scalapay.com https:\/\/*.anticafarmaciaorlandi.it https:\/\/*.farma.it https:\/\/*.oct8ne.com https:\/\/*.google.it https:\/\/*.channelize.io blob: www.gstatic.com pay.google.com google.com\/pay ecomms2s.sella.it sandbox.gestpay.net img.riskified.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.channelize.io https:\/\/api.clerk.io https:\/\/cdn.clerk.io https:\/\/custom.clerk.io https:\/\/*.connectif.cloud *.feedaty.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ *.development.scalapay.com *.staging.scalapay.com *.scalapay.com cdn.doofinder.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.inpost.pl *.inpost.it *.easypack24.net *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com js.mollie.com applepay.cdn-apple.com https:\/\/*.clerk.io https:\/\/*.accessiblyapp.com https:\/\/*.accessibly.app https:\/\/*.dnafactory.it https:\/\/*.dnalab.online https:\/\/*.facebook.net https:\/\/*.feedaty.com https:\/\/*.cloudflare.com https:\/\/*.clarity.com https:\/\/*.clarity.ms https:\/\/*.outbrain.com https:\/\/*.onesignal.com https:\/\/*.dwin1.com https:\/\/*.gestpay.net https:\/\/*.scalapay.com https:\/\/*.iubenda.com https:\/\/*.oct8ne.com https:\/\/*.getblue.io https:\/\/*.channelize.io https:\/\/*.bing.com https:\/\/*.cookieless-data.com https:\/\/*.sddan.com https:\/\/*.airtable.com https:\/\/*.awin1.com www.google.com www.gstatic.com beacon.riskified.com tracking.trovaprezzi.it tps.trovaprezzi.it www.trovaprezzi.it 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/api.clerk.io https:\/\/cdn.clerk.io *.feedaty.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.doofinder.com downloads.mailchimp.com geowidget.easypack24.net *.klarnacdn.net *.fontawesome.com https:\/\/fonts.bunny.net assets.braintreegateway.com maxcdn.bootstrapcdn.com https:\/\/*.accessiblyapp.com https:\/\/*.accessibly.app https:\/\/*.dnafactory.it https:\/\/*.dnalab.online https:\/\/*.feedaty.com https:\/\/*.cloudflare.com https:\/\/*.clarity.ms https:\/\/*.scalapay.com https:\/\/*.channelize.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/*.accessiblyapp.com https:\/\/*.accessibly.app https:\/\/*.dnafactory.it https:\/\/*.dnalab.online https:\/\/*.feedaty.com https:\/\/*.cloudflare.com https:\/\/*.scalapay.com https:\/\/*.channelize.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https:\/\/maps.googleapis.com https:\/\/player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.channelize.io https:\/\/*.connectif.cloud *.feedaty.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ *.doofinder.com wss:\/\/*.doofinder.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.inpost.pl *.inpost.it *.easypack24.net *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/*.accessiblyapp.com https:\/\/*.accessibly.app https:\/\/*.dnafactory.it https:\/\/*.dnalab.online https:\/\/*.google.com https:\/\/google.com https:\/\/*.google-analytics.com https:\/\/*.feedaty.com https:\/\/*.cloudflare.com https:\/\/*.outbrain.com https:\/\/*.clarity.ms https:\/\/*.amplitude.com https:\/\/*.bing.com https:\/\/*.scalapay.com https:\/\/*.iubenda.com https:\/\/*.oct8ne.com https:\/\/*.channelize.io https:\/\/*.wepowerconnections.com https:\/\/*.sciencebehindecommerce.com www.google.com www.gstatic.com pay.google.com google.com\/pay ecomms2s.sella.it sandbox.gestpay.net c.riskified.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.adnxs.com https:\/\/*.avanser.com https:\/\/*.hubapi.com https:\/\/*.algolia.com https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/*.readspeaker.com https:\/\/*.cloudflare.com https:\/\/*.facebook.net https:\/\/*.cdnfonts.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.hs-analytics.net https:\/\/*.hs-banner.com https:\/\/*.hsforms.net https:\/\/*.hs-scripts.com https:\/\/*.hsleadflows.net https:\/\/*.hsadspixel.net https:\/\/*.hsform.com https:\/\/*.hubspot.com https:\/\/*.google.com.au https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.clarity.ms https:\/\/*.doubleclick.net https:\/\/*.cdninstagram.com https:\/\/*.myhealthforlife.com.au https:\/\/*.myhealthforlife.org.au https:\/\/*.newrelic.com https:\/\/*.vimeo.com https:\/\/*.raisely.com https:\/\/*.siteimproveanalytics.com https:\/\/*.hotjar.com https:\/\/*.licdn.com https:\/\/*.ewaypayments.com https:\/\/*.linkedin.com https:\/\/*.google.com https:\/\/*.doubleclick.net https:\/\/*.yimg.com https:\/\/*.youtube.com; object-src 'none'; img-src * data:; script-src 'self' https:\/\/*.adnxs.com https:\/\/*.avanser.com https:\/\/*.hubapi.com https:\/\/*.algolia.com https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/*.readspeaker.com https:\/\/*.cloudflare.com https:\/\/*.facebook.net https:\/\/*.cdnfonts.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.hs-analytics.net https:\/\/*.hs-banner.com https:\/\/*.hsforms.net https:\/\/*.hs-scripts.com https:\/\/*.hsleadflows.net https:\/\/*.hsadspixel.net https:\/\/*.hsform.com https:\/\/*.hubspot.com https:\/\/*.google.com.au https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.clarity.ms https:\/\/*.doubleclick.net https:\/\/*.cdninstagram.com https:\/\/*.myhealthforlife.com.au https:\/\/*.myhealthforlife.org.au https:\/\/*.newrelic.com https:\/\/*.vimeo.com https:\/\/*.raisely.com https:\/\/*.siteimproveanalytics.com https:\/\/*.hotjar.com https:\/\/*.licdn.com https:\/\/*.ewaypayments.com https:\/\/*.linkedin.com https:\/\/*.google.com https:\/\/*.doubleclick.net https:\/\/*.yimg.com https:\/\/*.youtube.com; style-src 'self' * 'unsafe-inline'; font-src * data:; media-src *; frame-src *.vimeo.com *.googletagmanager.com *.doubleclick.net *.youtube.com;","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.recaptcha.net https:\/\/dev.visualwebsiteoptimizer.com https:\/\/tag.goadopt.io https:\/\/*.goadopt.io https:\/\/js.hs-scripts.com https:\/\/js.hsforms.net https:\/\/js.hs-analytics.net https:\/\/js.hsadspixel.net https:\/\/js.hs-banner.com https:\/\/js.usemessages.com https:\/\/static.clevertap.com https:\/\/*.clevertap.com https:\/\/*.wzrkt.com; connect-src 'self' https:\/\/api.gt7.com.br https:\/\/api.homolog.gt7.com.br https:\/\/api.checkout.global.cartaodetodos.com.br https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/dev.visualwebsiteoptimizer.com https:\/\/*.clevertap.com https:\/\/*.wzrkt.com https:\/\/*.hubspot.com https:\/\/forms.hsforms.com https:\/\/*.goadopt.io https:\/\/cdn.growthbook.io; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.recaptcha.net https:\/\/td.doubleclick.net; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' l.getsitecontrol.com www.googletagmanager.com region1.google-analytics.com www.google-analytics.com static.ads-twitter.com www.loom.com youtube.com www.youtube.com *.semaphoreci.com *.semaphore.io; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: secure.gravatar.com s.w.org www.google-analytics.com www.googletagmanager.com static.ads-twitter.com t.co analytics.twitter.com img.youtube.com *.semaphoreci.com *.semaphore.io; font-src 'self' fonts.gstatic.com data:; frame-src youtube.com www.youtube.com www.loom.com calendar.google.com www.googletagmanager.com; media-src audio.buzzsprout.com; connect-src 'self' https:\/\/region1.google-analytics.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/l.getsitecontrol.com; report-uri https:\/\/sentry.io\/api\/4509293704970240\/security\/?sentry_key=de4512f268813ed97e73abec15d22aab","count":2},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: tt.omtrdc.net *.akstat.io akstat.io https:\/\/dpm.demdex.net *.go-mpulse.net go-mpulse.net *.amazon-adsystem.com amazon-adsystem.com *.amazonaws.com amazonaws.com s3-eu-west-1.amazonaws.com *.bing.com bing.com *.virtualearth.net ssl.ak.dynamic.tiles.virtualearth.net virtualearth.net *.btttag.com btttag.com c212.net cloudflare.com *.decibelinsight.net wss:\/\/collection.decibelinsight.net decibelinsight.net g.doubleclick.net *.doubleclick.net doubleclick.net fls.doubleclick.net *.facebook.com *.facebook.net facebook.com facebook.net *.fanplayr.com fanplayr.com *.gigya.com gigya.com *.google.com *.google.de *.google.it *.googlesyndication.com *.gstatic.com *.youtube-nocookie.com google.co.uk google.com google.de google.it googlesyndication.com gstatic.com youtube-nocookie.com googleadservices.com *.googleapis.com googleapis.com *.googletagmanager.com googletagmanager.com *.google-analytics.com google-analytics.com *.jaguar.com jaguar.co.uk jaguar.com *.build.landrover *.jaguarlandrover.com *.landrover.com *.landrover.de *.landrover.it *.pds.jaguarlandrover.com build.landrover jaguarlandrover.com landrover.co.uk landrover.com landrover.de landrover.it pds.jaguarlandrover.com ads.linkedin.com linkedin.com linkedin.oribi.io licdn.com *.lpsnmedia.net lpsnmedia.net *.liadm.com liadm.com *.liveperson.net idp.liveperson.net liveperson.net msg.liveperson.net msghist.liveperson.net v.liveperson.net a.run.app *.thunderhead.com cdn.thunderhead.com thunderhead.com cookielaw.org *.netdirector.auto netdirector.auto onetrust.com *.a.run.app *.ads.linkedin.com *.amplitude.com *.b-cdn.net *.c212.net *.cloudflare.com *.config.landrover.com *.configureconnect.com *.connect.agency *.coreweave.com *.decibel.com *.fls.doubleclick.net *.google.co.uk *.googleadservices.com *.jaguar.co.uk *.jaguarlandroverclassic.com *.jlr-dev.com *.jlr-dev.gorillastreaming.com wss:\/\/*.jlr-dev.gorillastreaming.com *.jlr.gorillastreaming.com wss:\/\/*.jlr.gorillastreaming.com *.kampyle.com *.landrover.co.uk *.landroverusa.com *.licdn.com *.linkedin.com *.linkedin.oribi.io *.medallia.eu *.my.salesforce.com *.netdirector.co.uk *.omtrdc.net *.onetrust.com *.pinimg.com *.pinterest.com *.podscribe.com *.psyma.com *.rangerover.com *.sandbox.my.salesforce-scrt.com *.sandbox.my.site.com *.sc-static.net *.scene7.com *.securedvisit.com *.sfmc-content.com *.snapchat.com *.sophus3.com *.stripe.com *.sv.rkdms.com *.userlike.com *.web.app *.woosmap.com *.yahoo.co.jp wss:\/\/a3pm2e78krufa2-ats.iot.us-west-2.amazonaws.com https:\/\/accessories.landrover.prd.itg.co.uk https:\/\/aoc.jlr.com https:\/\/api.jlr-ddc.com https:\/\/api.jlr-dev.gorillarendering.com https:\/\/api.jlr.gorillarendering.com https:\/\/api.pre-prod.jlr-ddc.com api.pureweb.io https:\/\/api.staging.jlr-ddc.com https:\/\/api.tomtom.com assets.exatom.io c0.adalyser.com cashoffer.accu-trade.com cdn.cookielaw.org cdn.jsdelivr.net collector-37690.tvsquared.com config.landrover.com cookie-cdn.cookiepro.com d34r8q7sht0t9k.cloudfront.net decibel.com gtm-loadtest.mobify-storefront.com gtm-production.mobify-storefront.com gtm-uat.mobify-storefront.com jlr-360--naptdev1.sandbox.lightning.force.com jlr-360--prepgold.sandbox.lightning.force.com jlr-360.lightning.force.com jlr-360.my.salesforce-scrt.com jlr-360.my.site.com landroverusa.com ldti.syndication.kbb.com leasinglandrover.de lighthouse.edoinc.com wss:\/\/lo.msg.liveperson.net loadtest.reserve.landrover.com wss:\/\/o5fowqu27k.execute-api.us-west-2.amazonaws.com perseus-consumer-qa.rhcapl.com https:\/\/prelive.accessories.landrover.prd.itg.co.uk psyma.com rum.hlx.page https:\/\/services.postcodeanywhere.co.uk snippet.maze.co sophus3.com syndication.kbb.com uat.reserve.landrover.com wss:\/\/umd.userlike.com userlike.com web.app www.jnaevents.com www.leasinglandrover.de https:\/\/www.rsvpdefender.com wss:\/\/xbejkea53vcrjoora2bwxpvfha.appsync-realtime-api.us-west-2.amazonaws.com pinimg.com pinterest.com podscribe.com securedvisit.com *.serving-sys.com serving-sys.com sc-static.net snapchat.com stripe.com *.tiktok.com tiktok.com *.adsrvr.org adsrvr.org *.trustarc.com trustarc.com *.twitter.com twitter.com *.ads-twitter.com ads-twitter.com *.t.co t.co sv.rkdms.com *.unpkg.com unpkg.com *.vee24.com vee24.com woosmap.com *.yimg.jp yahoo.co.jp yimg.jp *.youtube.com *.ytimg.com youtube.com ytimg.com https:\/\/accessories.landrover.uat.itg.co.uk https:\/\/cdn.rudderlabs.com https:\/\/cdn.rudderstack.com https:\/\/prelive.accessories.landrover.uat.itg.co.uk https:\/\/api.rudderlabs.com https:\/\/api.rudderstack.com https:\/\/jaguarlandgfem.dataplane.rudderstack.com; img-src 'self' data: blob: b-cdn.net; font-src 'self' data: blob: b-cdn.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: b-cdn.net; style-src 'self' 'unsafe-inline' data: blob: b-cdn.net;","count":2},{"content-security-policy-report-only":" script-src 'self' 'unsafe-eval' blob: https:\/\/prod-bk-web.es.rbi.tools\/en\/static\/js\/vendor.5dc447bb.js https:\/\/prod-bk-web.es.rbi.tools\/en\/static\/js\/main.644da4a1.js https:\/\/prod-bk-web.es.rbi.tools\/en\/static\/js\/runtime.c8a28cdb.js https:\/\/*.mparticle.com https:\/\/cdn.cookielaw.org https:\/\/www.googletagmanager.com https:\/\/*.onetrust.com https:\/\/static.ads-twitter.com https:\/\/platform.twitter.com https:\/\/www.google-analytics.com https:\/\/connect.facebook.net https:\/\/secure.quantserve.com https:\/\/dynamic.criteo.com https:\/\/rules.quantcount.com https:\/\/cdn.branch.io https:\/\/app.link https:\/\/*.cdn4.forter.com https:\/\/dlthst9q2beh8.cloudfront.net https:\/\/sslwidget.criteo.com https:\/\/widget.eu.criteo.com https:\/\/pagead2.googlesyndication.com https:\/\/cdn.amplitude.com https:\/\/accounts.google.com https:\/\/appleid.cdn-apple.com https:\/\/analytics.tiktok.com https:\/\/c.amazon-adsystem.com https:\/\/js.adsrvr.org https:\/\/maps.googleapis.com https:\/\/googleads.g.doubleclick.net https:\/\/static.zdassets.com https:\/\/bat.bing.com https:\/\/cdn-st.adsmurai.com https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/prod-bk-web.es.rbi.tools\/en\/static\/js\/main.18993eaf.js https:\/\/prod-bk-web.es.rbi.tools\/en\/static\/js\/runtime.956dbfff.js; object-src 'none'; base-uri 'none'; worker-src 'self' blob:; report-uri https:\/\/intl-csp-service.rbictg.com\/report","count":2},{"content-security-policy-report-only":" require-trusted-types-for 'script'; trusted-types default","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/www.googletagmanager.com *.googleapis.com https:\/\/fonts.gstatic.com https:\/\/ws.colissimo.fr https:\/\/api-sogecommerce.societegenerale.eu\/static\/ *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com fonts.googleapis.com https:\/\/cdnjs.cloudflare.com 'self' data: https:\/\/widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/sogecommerce.societegenerale.eu\/vads-payment\/ https:\/\/api-sogecommerce.societegenerale.eu\/api-payment\/ https:\/\/api-sogecommerce.societegenerale.eu\/static\/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https:\/\/www.youtube.com https:\/\/form.typeform.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/sogecommerce.societegenerale.eu\/vads-payment\/ https:\/\/api-sogecommerce.societegenerale.eu\/static\/ *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.disqus.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/ws.colissimo.fr https:\/\/*.tile.openstreetmap.fr https:\/\/*.onyourmap.com https:\/\/google.fr integrations.etrusted.com res-1.cloudinary.com t4.my-probance.one https:\/\/sogecommerce.societegenerale.eu\/static\/latest\/images\/type-carte\/ https:\/\/api-sogecommerce.societegenerale.eu\/static\/ https:\/\/sogecommerce.societegenerale.eu\/vads-payment\/ https:\/\/img.youtube.com https:\/\/firebasestorage.googleapis.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com *.hsforms.net *.hsforms.com 'self' data: https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https:\/\/www.googletagmanager.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.disqus.com https:\/\/maps.googleapis.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/ws.colissimo.fr https:\/\/api.mapbox.com https:\/\/*.typeform.com app.zipchat.ai app.trygr.io cdn.trygr.io s.pinimg.com cdn.caast.tv ct.pinterest.com static.hotjar.com script.hotjar.com fast-static.smarketer.de widgets.trustedshops.com t4.my-probance.one https:\/\/api-sogecommerce.societegenerale.eu\/api-payment\/ https:\/\/api-sogecommerce.societegenerale.eu\/static\/ *.avada.io *.shopify.com player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https:\/\/cdnjs.cloudflare.com *.hsforms.net *.hsforms.com *.gstatic.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/www.googletagmanager.com tagmanager.google.com *.googleapis.com assets.braintreegateway.com https:\/\/fonts.googleapis.com https:\/\/ws.colissimo.fr https:\/\/api.mapbox.com https:\/\/*.typeform.com integrations.etrusted.com https:\/\/api-sogecommerce.societegenerale.eu\/static\/ *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com https:\/\/cdnjs.cloudflare.com *.gstatic.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/ws.colissimo.fr https:\/\/maps.googleapis.com https:\/\/nominatim.openstreetmap.org https:\/\/*.onyourmap.com https:\/\/*.mapbox.com app.zipchat.ai app.trygr.io cache.caast.tv ct.pinterest.com content.hotjar.io wss:\/\/ws.hotjar.com fast.smarketer.de https:\/\/sogecommerce.societegenerale.eu\/vads-payment\/ https:\/\/api-sogecommerce.societegenerale.eu\/api-payment\/ https:\/\/get.geojs.io *.avada.io maps.googleapis.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https:\/\/sogecommerce.societegenerale.eu\/vads-payment\/ https:\/\/api-sogecommerce.societegenerale.eu\/api-payment\/ https:\/\/api-sogecommerce.societegenerale.eu\/static\/ *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/csp-reporting-service.com\/my-project\/endpoint; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleusercontent.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com www.google.com *.newrelic.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.marker.io *.google-analytics.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.marker.io *.eu-west-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/6f9839f2-a620-4b69-8bd2-090aec0e506e.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https:\/\/fonts.bunny.net *.spotify.com *.recepta.pl https:\/\/geowidget.easypack24.net 'self' data: https:\/\/dimedic.eu https:\/\/*.dimedic.eu data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com pay.google.com apm.przelewy24.pl *.spotify.com https:\/\/aptekaradicula.pl *.googletagmanager.com gum.criteo.com https:\/\/geowidget-app.inpost.pl\/ https:\/\/sandbox-easy-geowidget.easypack24.net\/ https:\/\/dimedic.eu https:\/\/*.dimedic.eu 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https:\/\/images.unsplash.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com *.cloudfront.net *.martailer.com magefan.com cm.magefan.com *.disqus.com tile.openstreetmap.org mapa.orlenpaczka.pl ruch-osm.sysadvisors.pl https:\/\/img.youtube.com https:\/\/firebasestorage.googleapis.com static.przelewy24.pl gstatic.com *.spotify.com *.recepta.pl www.google.pl https:\/\/geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.hsforms.net *.hsforms.com 'self' data: https:\/\/dimedic.eu https:\/\/*.dimedic.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/cdn.jsdelivr.net\/npm\/@ryangjchandler\/spruce@2.x.x\/dist\/spruce.umd.js https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googletagmanager.com tagmanager.google.com *.disqus.com https:\/\/cdn.jsdelivr.net mapa.orlenpaczka.pl *.avada.io *.shopify.com sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl *.spotify.com *.cookiefirst.com *.recepta.pl mailing.pgf.com.pl an.gr-wcon.com us-an.gr-cdn.com svht.tradedoubler.com swrap.tradedoubler.com bat.bing.com connect.facebook.net https:\/\/geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.hsforms.net *.hsforms.com *.gstatic.com https:\/\/dimedic.eu https:\/\/*.dimedic.eu 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com tagmanager.google.com fonts.google.com https:\/\/cdn.jsdelivr.net *.fontawesome.com https:\/\/fonts.bunny.net *.spotify.com *.googleapis.com *.google.com *.recepta.pl https:\/\/geowidget.easypack24.net https:\/\/geowidget.inpost.pl *.gstatic.com https:\/\/dimedic.eu https:\/\/*.dimedic.eu 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cloudfront.net *.martailer.com https:\/\/geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com nominatim.openstreetmap.org https:\/\/get.geojs.io *.avada.io sandbox.przelewy24.pl secure.przelewy24.pl wss:\/\/sandbox-ws.przelewy24.pl wss:\/\/secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl *.spotify.com ga2.getresponse.com stats.g.doubleclick.net *.cookiefirst.com *.recepta.pl bat.bing.com *.easypack24.net *.inpost.pl *.openstreetmap.org t.elasticsuite.io *.hsforms.net *.hsforms.com https:\/\/dimedic.eu https:\/\/*.dimedic.eu 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.googleapis.com fonts.gstatic.com *.fontawesome.com https:\/\/cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.adyen.com pay.google.com *.paypal.com www.ups.com rms.ups.com maps.googleapis.com www.bing.com *.virtualearth.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.ups.com rms.ups.com maps.googleapis.com www.bing.com *.virtualearth.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https:\/\/*.gstatic.com\/ https:\/\/*.lisecharmel.com\/media\/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com chimpstatic.com downloads.mailchimp.com *.list-manage.com www.ups.com rms.ups.com maps.googleapis.com polyfill.io www.bing.com *.virtualearth.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https:\/\/*.doofinder.com\/ https:\/\/*.newrelic.com\/ https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com www.ups.com rms.ups.com maps.googleapis.com fonts.googleapis.com *.fontawesome.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com https:\/\/*.allfont.net\/ https:\/\/*.doofinder.com\/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adyen.com *.google.com google.com payments-eu.amazon.com *.paypal.com ws:\/\/localhost:9109\/ws wss:\/\/localhost:9109\/ws wss:\/\/localhost:9109\/ www.ups.com rms.ups.com maps.googleapis.com www.bing.com *.virtualearth.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com https:\/\/*.doofinder.com\/ https:\/\/*.googleapis.com\/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; img-src * data: https:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' *; frame-src https:; connect-src https:; font-src 'self' https:\/\/cdn.segmentify.com;","count":2},{"content-security-policy-report-only":" connect-src 'self' https: wss:; default-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self' data:; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'self'; script-src-elem 'self'; style-src 'self'; style-src-elem 'self'; worker-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https:\/\/csp.volet.com\/csp-reports; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" script-src 'self' 'report-sample' blob: data: https:\/\/static-web.jjdsn.vip https:\/\/bitkeep.page https:\/\/*.bitkeep.fun https:\/\/*.bitget.cloud https:\/\/bitkeep.com https:\/\/*.google.com https:\/\/*.bitkeep.com https:\/\/bitkeep.io https:\/\/*.bitkeep.io https:\/\/www.google-analytics.com https:\/\/fp-constantid.bitkeep.vip https:\/\/*.bitkeep.page https:\/\/bitkeep.org https:\/\/*.bitgetstatic.com https:\/\/*.bitkeep.vip https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/s3.infcrypto.com https:\/\/*.bitkeep.me https:\/\/*.jjdsn.vip https:\/\/*.bitget.com https:\/\/www.googletagmanager.com https:\/\/*.googleapis.com https:\/\/api-web.wwmxd.info https:\/\/api-web.wwmxd.site https:\/\/log.noxiaohao.com https:\/\/*.geetest.com https:\/\/*.geevisit.com https:\/\/*.gsensebot.com https:\/\/*.walletconnect.org wss:\/\/*.walletconnect.org https:\/\/*.walletconnect.com;connect-src 'self' 'report-sample' blob: data: https:\/\/*.bitkeep.fun https:\/\/bitkeep.page https:\/\/*.bitget.cloud https:\/\/bitkeep.com https:\/\/*.google.com https:\/\/*.bitkeep.com https:\/\/bitkeep.io https:\/\/*.bitkeep.io https:\/\/www.google-analytics.com https:\/\/fp-constantid.bitkeep.vip https:\/\/*.bitkeep.page https:\/\/bitkeep.org https:\/\/*.bitgetstatic.com https:\/\/*.bitkeep.vip https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/s3.infcrypto.com https:\/\/*.bitkeep.me https:\/\/*.jjdsn.vip https:\/\/*.bitget.com https:\/\/www.googletagmanager.com https:\/\/*.googleapis.com https:\/\/api-web.wwmxd.info https:\/\/api-web.wwmxd.site https:\/\/log.noxiaohao.com https:\/\/*.geetest.com https:\/\/*.geevisit.com https:\/\/*.gsensebot.com https:\/\/region1.google-analytics.com https:\/\/*.walletconnect.org wss:\/\/*.walletconnect.org https:\/\/*.walletconnect.com https:\/\/eth.llamarpc.com https:\/\/api-web.bitkeep.asia https:\/\/api-web.bitkeep.biz https:\/\/api-web.bitkeep.life https:\/\/api-web.chainnear.com https:\/\/api-web.bitkeep.fun;frame-src 'self' 'report-sample' https:\/\/www.google.com https:\/\/*.bitget.com https:\/\/static-web.jjdsn.vip https:\/\/*.geetest.com https:\/\/*.geevisit.com https:\/\/*.gsensebot.com https:\/\/*.walletconnect.org;frame-ancestors 'self' https:\/\/*.bitget.com https:\/\/static-web.jjdsn.vip https:\/\/www.google.com https:\/\/www.recaptcha.net https:\/\/*.geetest.com https:\/\/*.geevisit.com https:\/\/*.gsensebot.com;report-uri https:\/\/api-data.bitkeep.com\/log\/pivot\/cspSecurity;","count":2},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: ws: wss: https:; report-uri https:\/\/l.iplsc.com\/logger\/","count":2},{"content-security-policy-report-only":" style-src-elem w.vi.skadtec.com euc-widget.freshworks.com tags.srv.stackadapt.com static-tracking.klaviyo.com maxcdn.bootstrapcdn.com *.klarnaservices.com x.klarnacdn.net fonts.googleapis.com 'self' 'unsafe-inline' ff.kis.v2.scr.kaspersky-labs.com gc.kis.v2.scr.kaspersky-labs.com me.kis.v2.scr.kaspersky-labs.com static.trbo.com static.klaviyo.com cdn.jsdelivr.net; script-src-elem www.ladenzeile.de 3001.scriptcdn.net pix.hyj.mobi www.hammer.de euc-widget.freshworks.com t.adcell.com pagead2.googlesyndication.com connect.facebook.net analytics.tiktok.com collect.bannercrowd.net containertags.belboon.com bat.bing.com cdn.alevco.de neso.r.niwepa.com pluto.r.powuta.com s.kk-resources.com unpkg.com cdn-quick-ar.threedy.ai hammersport.trafft.com www.googletagmanager.com *.klarnaservices.com commerce.adobedtm.com maps.googleapis.com magento-recs-sdk.adobe.net *.cptrack.de secure.pay1.de www.google.com *.gstatic.com d.ratepay.com *.payments-amazon.com static-tracking.klaviyo.com static.klaviyo.com l.ecn-ldr.de *.trbo.com *.usercentrics.eu *.hammer.de www.googleadservices.com widgets.trustedshops.com *.ad-srv.net x.klarnacdn.net containertags.belboon.de *.hotjar.com *.adform.net ai.trk42.net *.retargeted.co pikkasrv.com analytics.bestofluck.io *.gsitrix.com tags.srv.stackadapt.com 'self' 'unsafe-inline' [Filtered]: app.usercentrics.eu blob: cdn.adt357.net cdn.jsdelivr.net content.cptrack.de eu-library.klarnaservices.com ff.kis.v2.scr.kaspersky-labs.com gc.kis.v2.scr.kaspersky-labs.com googleads.g.doubleclick.net infird.com me.kis.v2.scr.kaspersky-labs.com portal.threedy.ai secured-pixel.com static-na.payments-amazon.com static.getback.ch tm.ad-srv.net tm704.ad-srv.net tm710.ad-srv.net tm716.ad-srv.net tm717.ad-srv.net track.adform.net ubaslome.maynhtml.com valuesportal.com www.getback.ch www.google-analytics.com xeldurap.peazheut.com *.newrelic.com trk.cytelligence.io www.youtube.com rast.hammer-fitness.at bat.bing-int.com; font-src fonts.gstatic.com use.typekit.net https:\/\/fonts.gstatic.com *.gstatic.com data: ray.st w.vi.skadtec.com account.affilitizer.com cdn.scite.ai moz-extension: *.klarnacdn.net http:\/\/*.hotjar.com https:\/\/*.hotjar.com http:\/\/*.hotjar.io https:\/\/*.hotjar.io d3dc1lgancj6l0.cloudfront.net *.fontawesome.com https:\/\/www.google.com https:\/\/www.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.facebook.com http:\/\/*.facebook.com https:\/\/*.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com www.hammer-fitness.at www.hammer-fitness.ch www.hammer-fitness.be www.hammer-fitness.nl www.hammer.de 'self' 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de browserstart.org link.shoplooks.com osak.com r.secprf2.com qimp.net hammer-fitness.at bat.bing.com vently.com tatrck.com monetoad.com de.kweriee.com as.ad4m.at yaketar.com findarios.com *.ddev.site jsctool.com *.sendinblue.com sibautomation.com *.trbo.com containertags.belboon.com roxxtraxx.de *.ad-srv.net td.doubleclick.net pluto.r.powuta.com hammersport.trafft.com r.adserver01.de player.flipsnack.com nakoona.com ptclk.com www.linkbux.com neso.r.niwepa.com r.linksprf.com hammer.de oponas.com t.adcell.com bcsgsrv.com hammer-fitness.ch adnx.de quick-ar.threedy.ai www.facebook.com hammer-fitness.nl c1.adform.net such.de caclk.com osm.klarnaservices.com t.hammer.de 127.0.0.1:20489 admin.rewardoo.com affiliate.grabasaving.com atlas.r.akipam.com browsak.com clcktrck.com discountheld.de duertry.com everydaysi.com gateway.zscloud.net go.adt246.net hipodi.com janus.r.jakuli.com r.perfsimpl.com rast.hammer.de shopbuttler.com support.google.com vently.org www.hammer.de www.pickalink.com www.searchfor.org xgs.bdo.gi:8090 yazary.com *.klarna.com secure.pay1.de payments.amazon.de www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com https:\/\/*.hotjar.com http:\/\/*.hotjar.io https:\/\/*.hotjar.io https:\/\/www.google.com\/ http:\/\/*.facebook.com https:\/\/*.facebook.com www.xtento.com https:\/\/recaptcha.google.com\/recaptcha\/ https:\/\/pay.google.com\/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.gstatic.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com files.shoop.de www.google.pl www.google.nl www.google.dk www.google.lu www.google.com.hk www.google.mk www.google.ch www.google.no www.google.pt www.google.it www.google.es www.google.ae www.google.co.in www.google.com.bo *.ddev.site *.hammer.de *.hammer-fitness.at *.hammer-fitness.ch *.hammer-traning.se *.trbo.com widgets.trustedshops.com ai.trk42.net *.usercentrics.eu www.zenaps.com www.facebook.com bat.bing.net x.bidswitch.net bat.bing.com *.casalemedia.com www.google.de region1.analytics.google.com neso.r.niwepa.com s.ad.smaato.net pixel.rubiconproject.com sync.outbrain.com e1.emxdgt.com lh3.ggpht.com pluto.r.powuta.com translate.google.com www.hammerworkouts.de stats.g.doubleclick.net www.google.se w.vi.skadtec.com www.google.at server.seadform.net www.google.co.uk ad.yieldlab.net ih.adscale.de *.pubmatic.com *.openx.net *.adform.net *.smartadserver.com *.connectad.io *.loopme.me *.360yield.com *.1rx.io router.infolinks.com *.rmp.rakuten.com *.doubleclick.net unsafe-inline s.c.appier.net capi.connatix.com api.qrserver.com cdn.retailads.net cdn.valuesportal.com cnv.adt644.net connect.facebook.net d3k81ch9hvuctc.cloudfront.net dsum-sec.casalemedia.com lh3.google.com lh3.googleusercontent.com mitarchive.info my.productfruits.com ncr.preqservices.com s.kelkoogroup.net s3-eu-central-1.amazonaws.com st-filebanking.igstatic.com static.wixstatic.com t.adcell.com www.econda-monitor.de www.google.ba www.google.be www.google.bg www.google.ca www.google.co.kr www.google.co.ma www.google.co.nz www.google.co.th www.google.co.za www.google.com.au www.google.com.br www.google.com.do www.google.com.eg www.google.com.gi www.google.com.lb www.google.com.na www.google.com.om www.google.com.ph www.google.com.pk www.google.com.py www.google.com.tw www.google.com.ua www.google.com.vn www.google.cz www.google.ee www.google.fi www.google.fr www.google.gr www.google.hr www.google.hu www.google.ie www.google.jo www.google.li www.google.lt www.google.md www.google.ro www.google.rs www.google.ru www.google.si www.google.sk www.google.sn www.google.tn magefan.com cm.magefan.com *.disqus.com *.klarna.com *.klarnaevt.com *.klarnacdn.net maps.gstatic.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ http:\/\/*.hotjar.com https:\/\/*.hotjar.com http:\/\/*.hotjar.io https:\/\/*.hotjar.io http:\/\/*.linkedin.com https:\/\/*.linkedin.com http:\/\/*.facebook.com https:\/\/*.facebook.com http:\/\/www.google.com\/ https:\/\/www.google.com\/ http:\/\/www.google.de\/ https:\/\/www.google.de\/ https:\/\/www.googletagmanager.com http:\/\/www.googletagmanager.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com https:\/\/widgets.trustedshops.com\/ https:\/\/img.youtube.com www.xtento.com cdn.xtento.com sync.inmobi.com blob: www.hammer-fitness.nl www.google.com.tr *.google-analytics.com static.trbo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-ds.com https:\/\/rum.hlx.page *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de hammersport.trafft.com *.ddev.site *.hammer.de *.hammer-fitness.at *.hammer-fitness.ch *.hammer-traning.se *.sendinblue.com sibautomation.com *.emailsys1a.net *.trbo.com *.usercentrics.eu widgets.trustedshops.com content.cptrack.de t.adcell.com l.ecn-ldr.de containertags.belboon.de *.adform.net ai.trk42.net s.retargeted.co pix.hyj.mobi pikkasrv.com analytics.bestofluck.io *.gsitrix.com *.ad-srv.net trk.cytelligence.io tags.srv.stackadapt.com qvdt3feo.com cdn.alevco.de neso.r.niwepa.com pluto.r.powuta.com analytics.tiktok.com bat.bing.com collect.bannercrowd.net containertags.belboon.com connect.facebook.net cdn-quick-ar.threedy.ai s.kk-resources.com unsafe-inline bat.bing-int.com blob: cdn.adt357.net cdn.jsdelivr.net portal.threedy.ai static.getback.ch unpkg.com valuesportal.com www.getback.ch *.disqus.com *.klarna.com *.klarnacdn.net x.klarnacdn.net maps.googleapis.com *.klarnaservices.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/connect.facebook.net\/ https:\/\/snap.licdn.com\/li.lms-analytics\/insight.min.js http:\/\/*.hotjar.com https:\/\/*.hotjar.com http:\/\/*.hotjar.io https:\/\/*.hotjar.io userlike-cdn-widgets.s3-eu-west-1.amazonaws.com d3dc1lgancj6l0.cloudfront.net api.userlike.com http:\/\/www.google.com\/recaptcha\/ https:\/\/widgets.trustedshops.com\/ *.google.com *.tracify.ai www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com tags.srv.stackadapt.com euc-widget.freshworks.com static-tracking.klaviyo.com *.klarnacdn.net d.ratepay.com d.payla.io dr.payla.io src.mastercard.com https:\/\/static.klaviyo.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com static.trbo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com w.vi.skadtec.com www.hammerworkouts.de data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.sentry.io *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.ddev.site *.hammer.de *.hammer-fitness.at *.hammer-fitness.ch *.hammer-traning.se *.sendinblue.com sibautomation.com maps.googleapis.com *.usercentrics.eu *.econda-monitor.de t.adcell.com *.gsitrix.com analytics.bestofluck.io tags.srv.stackadapt.com bat.bing.net bat.bing.com region1.analytics.google.com www.google.se stats.g.doubleclick.net region1.google-analytics.com analytics.tiktok.com api.retargeted.co www.facebook.com quick-ar.threedy.ai static.trbo.com api.bannercrowd.net s.kelkoogroup.net www.google.com euc-widget.freshworks.com api-js.datadome.co api.killadsapi.com salesviewer.org api.global-data-lab.com api.solarspireconsulting.com hammer.freshdesk.com api.datacloudstat.com api.socialsolutionapp.com adtonus.com api.adtraction.net api.ipify.org api.smartblocker.org api.trustedshops.com api.video-adblock.com blob: cnv.adt644.net code.jquery.com data: go.adt246.net my.productfruits.com ncrfiles.s3.us-central-1.wasabisys.com overbridgenet.com rktds.net update.adblock360.org www.google.dk www.google.no api.qrserver.com cdn.retailads.net cdn.valuesportal.com connect.facebook.net d3k81ch9hvuctc.cloudfront.net dsum-sec.casalemedia.com googleads.g.doubleclick.net lh3.google.com lh3.googleusercontent.com mitarchive.info ncr.preqservices.com s3-eu-central-1.amazonaws.com st-filebanking.igstatic.com static.wixstatic.com www.econda-monitor.de www.google.ba www.google.be www.google.bg www.google.ca www.google.co.kr www.google.co.ma www.google.co.nz www.google.co.th www.google.co.za www.google.com.au www.google.com.br www.google.com.do www.google.com.eg www.google.com.gi www.google.com.lb www.google.com.na www.google.com.om www.google.com.ph www.google.com.pk www.google.com.py www.google.com.tw www.google.com.ua www.google.com.vn www.google.cz www.google.ee www.google.fi www.google.fr www.google.gr www.google.hr www.google.hu www.google.ie www.google.jo www.google.li www.google.lt www.google.md www.google.ro www.google.rs www.google.ru www.google.si www.google.sk www.google.sn www.google.tn x.bidswitch.net *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ http:\/\/*.hotjar.com:* https:\/\/*.hotjar.com:* http:\/\/*.hotjar.io https:\/\/*.hotjar.io wss:\/\/*.hotjar.com http:\/\/salesviewer.org\/ userlike-cdn-widgets.s3-eu-west-1.amazonaws.com http:\/\/dpm.demdex.net https:\/\/www.google.com https:\/\/www.gstatic.com *.tracify.ai bat.bing-int.com analytics-ipv6.tiktokw.us google.com https:\/\/www.google.com\/recaptcha\/ *.trbo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src storage.googleapis.com\/rtux-rtux-data-integration-rti\/ *.cloudflare.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action test.saferpay.com www.saferpay.com saferpay.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src bid.g.doubleclick.net player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ www.google.com *.prismic.io *.google.com *.criteo.com *.criteo.net *.doubleclick.net *.pinterest.com *.facebook.com *.sovendus-connect.com *.googletagmanager.com *.lehner-versand.ch *.bettwaesche.ch *.workgear.ch *.linge-de-lit.ch *.vedia.ch *.weltpixel.com test.saferpay.com www.saferpay.com saferpay.com www.xtento.com *.typeform.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com https:\/\/images.unsplash.com *.prism.app-us1.com *.prismic.io *.bing.com *.google.ch *.trackjs.com *.google.com *.twiago.com *.doubleclick.net *.bidswitch.net *.adnxs.com *.smartadserver.com *.taboola.com *.adform.net *.omnitagjs.com *.lehner-versand.ch *.casalemedia.com *.criteo.com id5-sync.com *.360yield.com *.ivitrack.com *.media.net *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.sharethrough.com *.teads.tv *.tremorhub.com *.3lift.com *.yieldlab.net *.yieldmo.com *.emxdgt.com *.demdex.net *.dmxleo.com *.profity.ch *.googleapis.com *.1rx.io *.typewise.app *.bettwaesche.ch *.workgear.ch *.linge-de-lit.ch *.vedia.ch test.saferpay.com www.saferpay.com saferpay.com www.xtento.com cdn.xtento.com *.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ bx-cdn.com\/static\/bav2.min.js track.bx-cloud.com\/static\/bav2.min.js r-st.bx-cloud.com\/static\/bav2.min.js r-st.bx-cloud.com\/static\/rti.min.js track.bx-cloud.com\/static\/rti.min.js bx-cdn.com\/static\/rti.min.js storage.googleapis.com\/rtux-rtux-data-integration-rti\/ *.prism.app-us1.com *.prismic.io *.trackjs.com *.gstatic.com *.cdn.prismic.io *.google.com *.criteo.com *.pinimg.com *.bing.com *.adt313.net htm1.ch *.pinterest.com profity.ch *.profity.ch\/clients\/main.js *.getback.ch *.sovendus.com *.sovendus-connect.com *.googleapis.com storage.googleapis.com\/*_rtux-data* *.wi-platform-cloud.com *.bx-cdn.com *.googletagmanager.com *.bx-cloud.com *.doubleclick.net *.typewise.app *.ct0.ch test.saferpay.com www.saferpay.com saferpay.com www.xtento.com cdn.xtento.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com unpkg.com *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.getback.ch *.cloudflare.com *.googleapis.com storage.googleapis.com\/*_rtux-data* *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src storage.googleapis.com\/rtux-rtux-data-integration-rti\/ *.googleapis.com storage.googleapis.com\/*_rtux-data* 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https:\/\/maps.googleapis.com https:\/\/player.vimeo.com track.bx-cloud.com main.bx-cloud.com track-gw1.bx-cloud.com bx-cloud.com main.wi-platform-cloud.com r-st.bx-cloud.com track.bx-cloud.com\/track\/v2 storage.googleapis.com\/rtux-rtux-data-integration-rti\/ *.prism.app-us1.com *.prismic.io htm1.ch *.pinterest.com *.lehner-versand.ch *.criteo.com *.google.com *.getback.ch *.doubleclick.net *.wi-platform-cloud.com *.trackjs.com *.sovendus.com *.googleapis.com storage.googleapis.com\/*_rtux-data* *.bing.com *.typewise.app *.bettwaesche.ch *.workgear.ch *.linge-de-lit.ch *.vedia.ch test.saferpay.com www.saferpay.com saferpay.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.net *.klaviyo.com *.clarity.ms *.pinimg.com sc-static.net *.snapchat.com *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klevu.com *.ksearchnet.com *.fontawesome.com maxcdn.bootstrapcdn.com *.google.com *.google.ca *.omappapi.com *.hotjar.com *.freshbots.ai *.pusher.com *.freshworksapi.com *.attn.tv *.route.io *.routeapp.io *.klaviyo.com d1cwup7r903a1d.cloudfront.net *.trycaddie.com caddie-ai-public.s3.us-east-2.amazonaws.com prod-caddie-public-custom-stylesheets.s3.us-east-2.amazonaws.com *.posthog.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.affirm.com *.affirm.ca c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.hotjar.com *.kaptcha.com *.tdotperformance.ca *.automotivestuff.com *.addthis.com *.nort.ca *.google.ca *.bing.com *.facebook.com *.freshbots.ai *.pusher.com *.freshworksapi.com *.attn.tv *.trycaddie.com caddie-ai-public.s3.us-east-2.amazonaws.com prod-caddie-public-custom-stylesheets.s3.us-east-2.amazonaws.com *.posthog.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.affirm.com *.affirm.ca https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.bing.com *.freshbots.ai *.googletagmanager.com *.shopperapproved.com *.tdotperformance.ca *.automotivestuff.com *.nort.ca *.google.com *.google.ca *.doubleclick.net *.facebook.net *.facebook.com *.hotjar.com *.riskified.com *.clarity.ms *.cloudfront.net *.omappapi.com *.crazyegg.com *.pusher.com *.freshworksapi.com *.attn.tv *.route.io *.routeapp.io *.convertexperiments.com *.trycaddie.com caddie-ai-public.s3.us-east-2.amazonaws.com prod-caddie-public-custom-stylesheets.s3.us-east-2.amazonaws.com *.posthog.com api.getblueshift.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.affirm.com *.affirm.ca https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ js.klevu.com *.ksearchnet.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.forter.com *.cloudfront.net *.optnmstr.com *.hotjar.com *.shopperapproved.com *.bing.com *.freshbots.ai *.clarity.ms *.googleapis.com *.tdotperformance.ca *.automotivestuff.com *.addthis.com *.addthisedge.com *.moatads.com *.nort.ca *.google.ca *.omappapi.com *.facebook.net *.facebook.com *.riskified.com *.doubleclick.net *.klaviyo.com *.crazyegg.com *.pusher.com *.freshworksapi.com *.noibu.com *.attn.tv *.omniconvert.com *.route.io *.routeapp.io *.route.com unpkg.com *.convertexperiments.com *.trycaddie.com caddie-ai-public.s3.us-east-2.amazonaws.com prod-caddie-public-custom-stylesheets.s3.us-east-2.amazonaws.com *.posthog.com *.amplitude.com cdn.getblueshift.com cdn.routeapp.io fonts.googleapis.com https:\/\/js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.omappapi.com *.freshbots.ai *.tdotperformance.ca *.automotivestuff.com *.nort.ca *.google.com *.google.ca *.shopperapproved.com *.klaviyo.com *.crazyegg.com *.pusher.com *.freshworksapi.com *.attn.tv *.route.io *.routeapp.io *.convertexperiments.com *.trycaddie.com caddie-ai-public.s3.us-east-2.amazonaws.com prod-caddie-public-custom-stylesheets.s3.us-east-2.amazonaws.com *.posthog.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.affirm.com *.affirm.ca https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudfront.net *.forter.com *.omappapi.com *.hotjar.com *.doubleclick.net *.shopperapproved.com *.freshbots.ai *.googleapis.com *.tdotperformance.ca *.automotivestuff.com *.addthis.com *.nort.ca *.clarity.ms *.youtube.com *.google.ca *.facebook.net *.facebook.com *.bing.com *.riskified.com *.klaviyo.com *.crazyegg.com *.hotjar.io *.pusher.com *.freshworksapi.com wss:\/\/rts-us.freshworksapi.com wss:\/\/ws.hotjar.com *.noibu.com wss:\/\/*.noibu.com *.attn.tv events.attentivemobile.com google.com\/pay *.omniconvert.com *.route.io *.routeapp.io *.route.com *.convertexperiments.com *.trycaddie.com caddie-ai-public.s3.us-east-2.amazonaws.com prod-caddie-public-custom-stylesheets.s3.us-east-2.amazonaws.com *.posthog.com *.amplitude.com api.getblueshift.com api.route.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.usablenet.com *.udev1a.net *.narvar.com *.narvar.qa *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.nexigroup.com *.pluscard.de *.qiib.com.qa *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk\/ *.lloydsbank.com\/ *.lloydsbankinggroup.com\/ *.channel-cards-auth-api.lloydsbankinggroup.com\/ *.sparebank1.no *.rabobank.nl *.s-id-check-sparkassen.de *.sparkassen-kreditkarten.de *.mbank.pl *.secure2gw.ro *.btrl.ro *.cafis-paynet.jp *.borica.bg *.fibank.bg *.cic.fr *.zaba.hr *.citibank.co.in *.centrum24.pl *.bankmillennium.pl *.icps.mu *.egolomt.mn *.lcl.fr *.ctbcbank.com *.qiwi.com *.postfinance.ch *.citadele.lv *.kib.com.kw *.cathaybk.com.tw *.pkobp.pl *.acdcproc.com *.abanca.com *.n26.com *.klikbca.com *.psa.at *.sumup.com *.eglobal.com.mx *.pl.ing.com *.qnb.com *.rpc-raiffeisen.com *.sebkort.com *.ocbc.com *.tapngo.com.hk *.stcpay.com.sa *.creditmutuel.fr *.luottokunta.fi *.swedbank.se *.unibank.am *.estcard.ee *.hyundaicard.com *.privatbank.ua *.fssnet.co.in *.kbcard.com *.luminorgroup.com *.mashreq.com *.mercurypaymentservices.it *.moneta.cz *.sensebank.com.ua *.sibs.pt *.stripeauthentications.com *.dskbank.bg *.otpbank.hu *.techcombank.com.vn *.touch.tech *.asseco-see.hr *.3dsecure-csas.cz *.cyris.com *.secureacs.com *.acb.com.vn https:\/\/logistics-stage.ecpay.com.tw\/Express\/map https:\/\/logistics.ecpay.com.tw\/Express\/map https:\/\/logistics-stage.ecpay.com.tw\/helper\/printTradeDocument https:\/\/logistics.ecpay.com.tw\/helper\/printTradeDocument *.twitter.com *.usablenet.com *.udev1a.net https:\/\/plumrocket.com *.authorize.net *.tawk.to 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.pluscard.de *.qiib.com.qa *.nexigroup.com *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk\/ *.lloydsbank.com\/ *.lloydsbankinggroup.com\/ *.channel-cards-auth-api.lloydsbankinggroup.com\/ *.sparebank1.no *.rabobank.nl *.s-id-check-sparkassen.de *.sparkassen-kreditkarten.de *.mbank.pl *.secure2gw.ro *.btrl.ro *.cafis-paynet.jp *.borica.bg *.fibank.bg *.cic.fr *.zaba.hr *.citibank.co.in *.centrum24.pl *.bankmillennium.pl *.icps.mu *.egolomt.mn *.lcl.fr *.ctbcbank.com *.qiwi.com *.postfinance.ch *.citadele.lv *.kib.com.kw *.cathaybk.com.tw *.pkobp.pl *.acdcproc.com *.abanca.com *.n26.com *.klikbca.com *.psa.at *.sumup.com *.eglobal.com.mx *.pl.ing.com *.qnb.com *.rpc-raiffeisen.com *.sebkort.com *.ocbc.com *.tapngo.com.hk *.stcpay.com.sa *.creditmutuel.fr *.luottokunta.fi *.swedbank.se *.unibank.am *.estcard.ee *.hyundaicard.com *.privatbank.ua *.fssnet.co.in *.kbcard.com *.luminorgroup.com *.mashreq.com *.mercurypaymentservices.it *.moneta.cz *.sensebank.com.ua *.sibs.pt *.stripeauthentications.com *.dskbank.bg *.otpbank.hu *.techcombank.com.vn *.touch.tech *.asseco-see.hr *.3dsecure-csas.cz *.cyris.com *.secureacs.com *.acb.com.vn landofcoder.com maps.googleapis.com chart.googleapis.com *.twitter.com *.usablenet.com *.udev1a.net https:\/\/plumrocket.com *.authorize.net https:\/\/accounts.google.com *.tawk.to 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com *.sagepay.com *.opayo.eu.elavon.com ebizmarts-website.s3.amazonaws.com magefan.com cm.magefan.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.usablenet.com *.udev1a.net *.clarity.ms *.bing.com *.nofraud.com *.googletagmanager.com *.doubleclick.net *.facebook.net *.facebook.com *.facebook.com\/tr\/ *.tiktok.com *.googlesyndication.com *.google.com *.criteo.com *.google.co.za *.google.co.uk *.google.co.jp *.narvar.com *.narvar.qa hexagon-analytics.com *.tawk.to cdn.jsdelivr.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com *.sagepay.com *.opayo.eu.elavon.com landofcoder.com maps.googleapis.com chart.googleapis.com *.mookie1.com 'self' *.paypal.com *.sandbox.paypal.com *.googletagmanager.com *.plumrocket.com *.tawk.to *.bam-cell.nr-data.net *.gstatic.com *.usablenet.com *.udev1a.net *.nofraud.com *.clarity.ms *.mmapiws.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.facebook.net *.facebook.com *.facebook.com\/tr\/ *.tiktok.com *.criteo.com *.bing.com cdn.sift.com api3.veritrans.co.jp *.authorize.net https:\/\/accounts.google.com https:\/\/www.gstatic.com cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com self *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.usablenet.com *.udev1a.net *.bing.com *.criteo.com https:\/\/accounts.google.com https:\/\/www.gstatic.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src landofcoder.com maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.narvar.com *.narvar.qa 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com *.sagepay.com *.opayo.eu.elavon.com landofcoder.com maps.googleapis.com chart.googleapis.com self *.cloudflare.com *.twitter.com *.twimg.com *.usablenet.com *.udev1a.net *.nofraud.com *.clarity.ms *.mmapiws.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.facebook.net *.facebook.com *.facebook.com\/tr\/ *.tiktok.com *.criteo.com api3.veritrans.co.jp *.authorize.net https:\/\/accounts.google.com *.tawk.to wss:\/\/*.tawk.to 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/mcstaging.mikimoto.com\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'","count":2},{"content-security-policy-report-only":" script-src 'self' ; img-src 'self' ; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; report-uri https:\/\/api.themobileshop.ca\/api\/csp-report\/TMS","count":2},{"content-security-policy-report-only":" font-src *.fontawesome.com https:\/\/fonts.gstatic.com https:\/\/www.google.com https:\/\/www.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-src secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googletagmanager.com *.retailrocket.net landofcoder.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com www.apptrian.com www.facebook.com assets.fintoc.com https:\/\/assets.fintoc.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.facebook.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.youtube.com www.googletagmanager.com www.apptrian.com www.facebook.com connect.facebook.net graph.facebook.com *.retailrocket.net landofcoder.com *.googleapis.com *.google.com *.gstatic.com *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.retailrocket.net *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src *.retailrocket.net landofcoder.com 'self' 'unsafe-inline'; media-src www.apptrian.com www.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com connect.facebook.net graph.facebook.com *.retailrocket.net landofcoder.com http:\/\/dpm.demdex.net https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https:\/\/www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de widget.freshworks.com m2epro.freshdesk.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com https:\/\/www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com analytics.google.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com *.googleapis.com https:\/\/fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https:\/\/use.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.stripe.com stripe.com *.link.com *.amazon.com https:\/\/mcstaging.booktrump.com https:\/\/mcstaging.trumphotels.com https:\/\/integration-5ojmyuq-r7ma66w2vxzgu.us-5.magentosite.cloud https:\/\/integration2-hohc4oi-r7ma66w2vxzgu.us-5.magentosite.cloud 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.certcapture.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https:\/\/mcstagingdoral.booktrump.com https:\/\/mcstagingireland.booktrump.com https:\/\/mcstaging.booktrump.com https:\/\/mcstaging.trumphotels.com https:\/\/integration-5ojmyuq-r7ma66w2vxzgu.us-5.magentosite.cloud https:\/\/integration2-hohc4oi-r7ma66w2vxzgu.us-5.magentosite.cloud 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.facebook.com https:\/\/firebasestorage.googleapis.com https:\/\/www.magezon.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/bat.bing.com https:\/\/*.bing.com https:\/\/*.synxis.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page *.certcapture.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.googletagmanager.com *.facebook.net www.termsfeed.com *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com *.sharethis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https:\/\/backend.alia-cloudflare.com https:\/\/capture.celopay.com https:\/\/api.cartstack.com https:\/\/*.cartstack.com https:\/\/script.hotjar.com https:\/\/www.thehotelsnetwork.com https:\/\/*.thehotelsnetwork.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com https:\/\/static.klaviyo.com *.fontawesome.com https:\/\/fonts.bunny.net assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com https:\/\/use.typekit.net https:\/\/p.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https:\/\/player.vimeo.com https:\/\/download-video.akamaized.net 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.google-analytics.com https:\/\/get.geojs.io *.avada.io *.sharethis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https:\/\/capture.celopay.com https:\/\/api.cartstack.com https:\/\/*.cartstack.com https:\/\/bat.bing.com https:\/\/*.bing.com https:\/\/www.thehotelsnetwork.com https:\/\/*.thehotelsnetwork.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" script-src 'self' https:\/\/js.pusher.com https:\/\/cdn.brevo.com https:\/\/www.googletagmanager.com https:\/\/challenges.cloudflare.com https:\/\/embed.sendcloud.sc https:\/\/www.gstatic.com https:\/\/www.clarity.ms https:\/\/*.clarity.ms; script-src-attr 'none'; object-src 'none'; base-uri 'self'","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.agrialpro.fr *.lamaison.fr *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.googleapis.com *.twitter.com nitropack.io *.nitrocdn.com https:\/\/cdnjs.cloudflare.com 'self' data: https:\/\/assets-staging.oney.io https:\/\/assets.oney.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors api.oney.io 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com youtu.be facebook.com *.addthis.com *.trustpilot.com *.twitter.com *.vimeo.com *.doubleclick.net nitropack.io c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.agrialpro.fr *.lamaison.fr maps.gstatic.com maps.google.com maps.googleapis.com *.googleusercontent.com cl.avis-verifies.com www.google.fr www.facebook.com *.dmxleo.com *.bidswitch.net *.adform.net *.casalemedia.com *.id5-sync.com id5-sync.com *.ivitrack.com *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.yieldmo.com *.yieldlab.net *.emxdgt.com *.doubleclick.net *.adnxs.com *.media.net *.rubiconproject.com *.smartadserver.com *.taboola.com *.teads.tv *.yahoo.net *.3lift.com *.omnitagjs.com *.360yield.com *.sharethrough.com *.tremorhub.com *.krxd.net ade.googlesyndication.com *.openstreetmap.org https:\/\/maps.googleapis.com *.hsforms.net *.hsforms.com *.disqus.com *.cloudflare.com *.twitter.com *.contentsquare.net nitropack.io *.nitrocdn.com https:\/\/img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: https:\/\/widget-stg.oney.io https:\/\/assets-staging.oney.io https:\/\/assets.oney.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page maps.google.com maps.googleapis.com *.googleusercontent.com *.agrialpro.fr *.lamaison.fr cdn.jsdelivr.net cl.avis-verifies.com connect.facebook.net js-agent.newrelic.com bam.nr-data.net cdn.webotit.ai secure.adnxs.com *.hsforms.net *.hsforms.com *.disqus.com https:\/\/cdn.jsdelivr.net\/npm\/pwacompat@2.0.8\/pwacompat.min.js *.addthis.com *.googleapis.com *.cloudflare.com *.fontawesome.com *.google-analytics.com googletagmanager.com graph.facebook.com *.gstatic.com *.moatads.com *.trustpilot.com widgets.pinterest.com *.contentsquare.com *.contentsquare.net cdn.tailwindcss.com https:\/\/widgets.rr.skeepers.io\/ https:\/\/api-product-reviews.cxr.skeepers.io\/ https:\/\/cl-ppr.rr.skeepers.io\/ https:\/\/cl-pbr.cxr.skeepers.io\/ https:\/\/cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com https:\/\/assets-staging.oney.io https:\/\/assets.oney.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.agrialpro.fr *.lamaison.fr *.cloudflare.com *.fontawesome.com *.googleapis.com *.gstatic.com *.twitter.com cdn.tailwindcss.com nitropack.io cdnjs.cloudflare.com *.nitrocdn.com cdn.jsdelivr.net https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.agrialpro.fr *.lamaison.fr blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.agrialpro.fr *.lamaison.fr www.google-analytics.com stats.g.doubleclick.net bam.nr-data.net maps.googleapis.com www.facebook.com oney.io widget-stg.oney.io *.cardinalcommerce.com *.cardinaltrusted.com widgets.rr.skeepers.io api-product-reviews.cxr.skeepers.io cl-ppr.rr.skeepers.io cl-pbr.cxr.skeepers.io *.demdex.net *.omtrdc.net *.contentsquare.net nitropack.io *.nitrocdn.com t.elasticsuite.io *.openstreetmap.org https:\/\/maps.googleapis.com *.hsforms.net *.hsforms.com *.cloudflare.com *.twitter.com https:\/\/widgets.rr.skeepers.io\/ https:\/\/api-product-reviews.cxr.skeepers.io\/ https:\/\/cl-ppr.rr.skeepers.io\/ https:\/\/cl-pbr.cxr.skeepers.io\/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com https:\/\/widget-stg.oney.io https:\/\/oney.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" script-src-elem *.crazyegg.com; style-src-elem *.stackadapt.com; font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com d1cwup7r903a1d.cloudfront.net *.mypurecloud.com *.cloudflare.com *.adnxs.com *.thecpapshop.com *.paypalobjects.com *.doubleclick.net *.adacado.com *.authorize.net *.oxygenconcentratorsupplies.com *.adapthealthmarketplace.com *.espssl.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.authorize.net *.facebook.com *.mypurecloud.com *.cloudflare.com *.adnxs.com *.thecpapshop.com *.paypalobjects.com *.doubleclick.net *.adacado.com *.oxygenconcentratorsupplies.com *.adapthealthmarketplace.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.getbread.com *.breadpayments.com *.rbcpayplan.com *.authorize.net *.visualwebsiteoptimizer.com https:\/\/cryptnsend.com *.cryptnsend.net *.bbb.org *.lpsnmedia.net *.salecycle.com *.facebook.com *.adsrvr.org *.mypurecloud.com *.cloudflare.com *.adnxs.com *.thecpapshop.com *.paypalobjects.com *.doubleclick.net *.adacado.com *.oxygenconcentratorsupplies.com *.adapthealthmarketplace.com *.webeyez.com storage.googleapis.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com widgets.automizely.com widgets.automizely.io *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.getbread.com *.breadpayments.com *.rbcpayplan.com *.alothemes.com *.magepow.com *.google.com *.googleadservices.com *.googletagmanager.com *.reddit.com *.visualwebsiteoptimizer.com *.listrakbi.com *.bing.com *.facebook.com *.lpsnmedia.net *.amazonaws.com *.routeapp.io *.mypurecloud.com *.adnxs.com *.cloudflare.com *.thecpapshop.com *.paypalobjects.com *.doubleclick.net *.adacado.com *.authorize.net *.oxygenconcentratorsupplies.com *.adapthealthmarketplace.com *.adsrvr.org data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page ajax.googleapis.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.googleapis.com *.gstatic.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.getbread.com *.breadpayments.com *.rbcpayplan.com *.alothemes.com *.magepow.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.authorize.net cdn.routeapp.io *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com protect-lightning-bolt-widget.route.com d3od5si8vgcekb.cloudfront.net ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com *.stackadapt.com\/events.js *.crazyegg.com *.redditstatic.com *.listrak.com *.listrakbi.com *.liveperson.net *.lpsnmedia.net *.tiqcdn.com *.bing.com *.cybba.solutions *.cloudfront.net *.adsrvr.org *.facebook.net *.pepperjam.com *.rtb123.com *.routeapp.io *.route.com *.mypurecloud.com https:\/\/sentry.io *.cloudflare.com *.adnxs.com *.paypalobjects.com *.doubleclick.net *.adacado.com *.thecpapshop.com *.oxygenconcentratorsupplies.com *.adapthealthmarketplace.com *.webeyez.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com widgets.automizely.com widgets.automizely.io *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com d1cwup7r903a1d.cloudfront.net *.listrak.com *.listrakbi.com *.googleapis.com *.mypurecloud.com *.cloudflare.com *.adnxs.com *.thecpapshop.com *.paypalobjects.com *.doubleclick.net *.adacado.com *.authorize.net *.oxygenconcentratorsupplies.com *.adapthealthmarketplace.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com api.automizely.com api.automizely.io *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.getbread.com *.breadpayments.com *.rbcpayplan.com *.breadgateway.net *.alothemes.com *.magepow.com *.googletagmanager.com stats.g.doubleclick.net *.authorize.net api.route.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com d3od5si8vgcekb.cloudfront.net protect-lightning-bolt-widget.route.com ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com *.stackadapt.com *.redditstatic.com *.reddit.com *.crazyegg.com *.visualwebsiteoptimizer.com *.listrak.com *.listrakbi.com *.sandbox.paypal.com *.googleadservices.com *.doubleclick.net *.salescycle.com wss:\/\/ws.salescycle.com *.salecycle.com wss:\/\/ws.salecycle.com *.facebook.com https:\/\/www.facebook.com *.route.com *.adnxs.com *.mypurecloud.com wss:\/\/webmessaging.mypurecloud.com *.cloudflare.com *.thecpapshop.com *.paypalobjects.com *.adacado.com *.oxygenconcentratorsupplies.com *.adapthealthmarketplace.com *.pro.ip-api.com *.ip-api.com *.amazonaws.com *.bing.com *.webeyez.com storage.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/smartsolutions.report-uri.com\/r\/d\/csp\/reportOnly; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.squarecdn.com *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' 'unsafe-inline' 'unsafe-eval'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com widgets.sandbox.afterpay.com *.cash.app https:\/\/www.facebook.com *.criteo.com\/ *.sandbox.paypal.com *.paypalobjects.com *.sandbox.clearpay.co.uk *.clearpay.co.uk *.afterpay.com *.sandbox.afterpay.com *.payway.com.au *.afterpay-beta.com *.weltpixel.com 'self' 'unsafe-inline' 'unsafe-eval'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com\/ *.cash.app *.jbmetro.com.au *.jbmetro-sc-act.com.au *.jbmetroadelaide.com.au *.jbmetro-sa-nt.com.au *.google.co.in *.google.com *.bing.com *.pinterest.com *.criteo.com magefan.com cm.magefan.com *.disqus.com https:\/\/firebasestorage.googleapis.com *.facebook.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com commerce.adobe.net *.commerce-payment-services.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net *.youtube.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.magento-datasolutions.com https:\/\/portal.sandbox.afterpay.com https:\/\/portal.afterpay.com https:\/\/static.afterpay.com *.squarecdn.com https:\/\/hbiq.net *.cash.app *.gstatic.com *.facebook.com *.criteo.com *.criteo.net https:\/\/www.google.com\/recaptcha\/api2\/webworker.js *.jbmetro.com.au *.jbmetro-sc-act.com.au *.jbmetroadelaide.com.au *.jbmetro-sa-nt.com.au *.hotjar.com https:\/\/static.hotjar.com *.googleapis.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.vimeo.com https:\/\/www.googletagmanager.com *.smartlook.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.sandbox.clearpay.co.uk *.clearpay.co.uk *.afterpay.com *.sandbox.afterpay.com *.payway.com.au *.afterpay-beta.com *.google.co.in *.www.google.co.in *.disqus.com *.avada.io tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com static.afterpay.com\/ *.squarecdn.com *.cash.app *.coolzcloud.com *.amazonaws.com *.fontawesome.com https:\/\/fonts.bunny.net tagmanager.google.com 'self' 'unsafe-inline'; object-src *.jbmetro.com.au *.jbmetro-sc-act.com.au *.jbmetroadelaide.com.au *.jbmetro-sa-nt.com.au *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.sandbox.clearpay.co.uk *.clearpay.co.uk *.afterpay.com *.sandbox.afterpay.com *.payway.com.au *.afterpay-beta.com 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.jbmetro.com.au *.jbmetro-sc-act.com.au *.jbmetroadelaide.com.au *.jbmetro-sa-nt.com.au 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com *.squarecdn.com https:\/\/hbiq.net https:\/\/iq.afterpay-beta.com https:\/\/iq.afterpay.com *.cash.app api.lab.amplitude.com *.doubleclick.net https:\/\/www.facebook.com *.googleapis.com *.criteo.com *.pinterest.com *.facebook.net *.hotjar.com *.hotjar.io wss:\/\/ws.hotjar.com *.sandbox.paypal.com *.paypalobjects.com *.sandbox.clearpay.co.uk *.clearpay.co.uk *.sandbox.afterpay.com *.payway.com.au *.afterpay-beta.com *.google.co.in *.www.google.co.in https:\/\/get.geojs.io *.avada.io *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https:\/\/*.publitas.com *.fontawesome.com *.kohlerbycochez.com https:\/\/script.hotjar.com *.algolia.com *.googleapis.com *.bootstrapcdn.com https:\/\/*.bazaarvoice.com c42eu1doj8gpxa9sp-1.a1.typesense.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com https:\/\/*.publitas.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.kohlerbycochez.com network-a.bazaarvoice.com maps.gstatic.com *.algolia.com media.flixcar.com rt.flix360.com *.google.com *.google-analytics.com *.googleadservices.com https:\/\/www.google.com https:\/\/www.google.com.co maps.googleapis.com *.facebook.com *.reddit.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/*.bazaarvoice.com https:\/\/*.google.com.pa c42eu1doj8gpxa9sp-1.a1.typesense.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https:\/\/*.publitas.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/apps.bazaarvoice.com *.kohlerbycochez.com apps.bazaarvoice.com static.hotjar.com script.hotjar.com h.online-metrix.net js-agent.newrelic.com www.google.com www.gstatic.com maps.googleapis.com *.algolia.com media.flixfacts.com media.flixcar.com https:\/\/www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/cdn.jsdelivr.net c42eu1doj8gpxa9sp-1.a1.typesense.net https:\/\/scripts.publitas.com https:\/\/view.publitas.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/*.publitas.com *.fontawesome.com *.kohlerbycochez.com *.algolia.com *.google.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com tagmanager.google.com assets.braintreegateway.com c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com videos.pexels.com *.algolia.com c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.kohlerbycochez.com bam.nr-data.net maps.googleapis.com https:\/\/surveystats.hotjar.io media.flixcar.com *.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/*.bazaarvoice.com https:\/\/*.hotjar.io c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com c42eu1doj8gpxa9sp-1.a1.typesense.net http: https: blob: 'self' 'unsafe-inline'; default-src bam.nr-data.net *.kohlerbycochez.com ws.hotjar.com c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com data: *.fontawesome.com *.cloudflare.com *.twitter.com *.bootstrapcdn.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com https:\/\/*.paypal.com * *.twitter.com https:\/\/*.cardinalcommerce.com https:\/\/plumrocket.com https:\/\/t.pepperjamnetwork.com https:\/\/*.dwin1.com https:\/\/*.awin1.com https:\/\/*.zenaps.com *.googleapis.com *.trustpilot.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: *.googleapis.com magefan.com cm.magefan.com http:\/\/hemin11112.pcapredict.com http:\/\/services.postcodeanywhere.co.uk *.cloudflare.com *.googleadservices.com *.twitter.com *.adobedtm.com https:\/\/firebasestorage.googleapis.com *.disqus.com https:\/\/img.youtube.com https:\/\/shareasale.com\/sale.cfm https:\/\/track.linksynergy.com https:\/\/www.bizrate.com https:\/\/*.dwin1.com https:\/\/*.awin1.com https:\/\/*.zenaps.com https:\/\/track.webgains.com https:\/\/prf.hn https:\/\/track.flexlinks.com https:\/\/scripts.affiliatefuture.com https:\/\/t.powerreviews.com https:\/\/match.sharethrough.com https:\/\/cm.g.doubleclick.net https:\/\/x.bidswitch.net https:\/\/ib.adnxs.com https:\/\/rtb-csync.smartadserver.com https:\/\/sync-t1.taboola.com https:\/\/visitor.omnitagjs.com https:\/\/r.casalemedia.com https:\/\/gum.criteo.com https:\/\/jadserve.postrelease.com https:\/\/id5-sync.com https:\/\/ad.360yield.com https:\/\/matching.ivitrack.com https:\/\/contextual.media.net https:\/\/exchange.mediavine.com https:\/\/sync.outbrain.com https:\/\/simage2.pubmatic.com https:\/\/pixel.rubiconproject.com https:\/\/criteo-sync.teads.tv https:\/\/criteo-partners.tremorhub.com https:\/\/eb2.3lift.com https:\/\/ad.yieldlab.net https:\/\/sync-criteo.ads.yieldmo.com https:\/\/e1.emxdgt.com https:\/\/sync.1rx.io https:\/\/dis.criteo.com https:\/\/dpm.demdex.net https:\/\/ps.eyeota.net https:\/\/public-prod-dspcookiematching.dmxleo.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com apis.google.com *.gstatic.com http:\/\/hemin11112.pcapredict.com http:\/\/services.postcodeanywhere.co.uk *.cloudflare.com *.twitter.com *.google-analytics.com googletagmanager.com *.trustedshops.com *.fontawesome.com graph.facebook.com *.adobedtm.com https:\/\/analytics.webgains.io https:\/\/www.paypal.com https:\/\/www.paypalobjects.com *.avada.io *.shopify.com *.disqus.com https:\/\/*.dwin1.com https:\/\/intljs.rmtag.com https:\/\/cdn.avmws.com https:\/\/images.bizrate.com https:\/\/*.awin1.com https:\/\/*.zenaps.com https:\/\/the.sciencebehindecommerce.com https:\/\/swrap.tradedoubler.com https:\/\/analytics.optimalpeople.fr https:\/\/www.linkconnector.com https:\/\/d3v27wwd40f0xu.cloudfront.net https:\/\/static.criteo.net https:\/\/sslwidget.criteo.com https:\/\/*.affiliatefuture.com https:\/\/static.powerreviews.com *.googleapis.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.fontawesome.com http:\/\/services.postcodeanywhere.co.uk *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.typekit.net *.bootstrapcdn.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com https:\/\/*.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.googleapis.com http:\/\/hemin11112.pcapredict.com http:\/\/services.postcodeanywhere.co.uk *.cloudflare.com *.twitter.com https:\/\/pay.google.com https:\/\/*.sandbox.paypal.com https:\/\/*.paypal.com https:\/\/*.cardinalcommerce.com https:\/\/*.braintreegateway.com https:\/\/*.braintree-api.com https:\/\/get.geojs.io *.avada.io api.addressy.com https:\/\/shareasale.com\/sale.cfm https:\/\/analytics.optimalpeople.fr https:\/\/measurement-api.criteo.com https:\/\/api.webgains.io https:\/\/the.sciencebehindecommerce.com https:\/\/*.wepowerconnections.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' data: gap: *.klarna.com *.freshchat.com *.vimeo.com *.youtube.com *.whittard.co.uk *.whittard.com mention-me.com *.zenaps.com *.sub2tech.com *.gstatic.com *.facebook.com *.bglobale.com *.global-e.com *.onetrust.com *.windows.net *.whittardofchelsea.freshdesk.com *.tvsquared.com; img-src data: blob: *.demandware.net *.commercecloud.salesforce.com *.ads.linkedin.com *.demdex.net *.amazonaws.com *.ometria.com *.googletagmanager.com *.facebook.net *.facebook.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com *.doubleclick.net *.googleapis.com *.google-analytics.com *.googleadservices.com *.google.com *.whittard.co.uk *.whittard.com *.postcodeanywhere.co.uk *.pcapredict.com *.yotpo.com *.tokywoky.com img.tokywoky.com *.klarnaservices.com *.klarnacdn.net *.mention-me.com *.awin1.com *.dwin1.com bda.bookatable.com i.ytimg.com *.contentsquare.net *.contentsquare.com *.sub2tech.com *.cloudfront.net *.youtube.com *.vimeo.com bat.bing.com *.zenaps.com *.msgfocus.com *.fbsbx.com *.fbcdn.net graph.facebook.com *.zscloud.net *.googleusercontent.com *.klarnaevt.com i.vimeocdn.com *.surveymonkey.com *.kaltura.com *.gocertify.me *.bglobale.com *.global-e.com *.bc0a.com *.b0e8.com *.onetrust.com *.windows.net *.particularaudience.com *.p-a.io *.googleanalytics.com *.google-analytics.com *.googleoptimize.com *.tvsquared.com analytics.whittard.com analytics.whittard.co.uk ade.googlesyndication.com *.abtasty.com *.roeyecdn.com *.roeye.com *.linkedin.com *.hotjar.com *.hotjar.io wss:\/\/*.hotjar.com; child-src 'self' blob: *.abtasty.com *.studentbeans.com *.google.com *.doubleclick.net *.facebook.com *.tokywoky.com *.freshchat.com mention-me.com *.mention-me.com *.klarna.com *.klarnaservices.com bda.bookatable.com *.sub2tech.com *.youtube.com *.vimeo.com *.zenaps.com *.googlesyndication.com *.online-metrix.net *.pagetiger.com *.googletagmanager.com connect.studentbeans.com *.googleapis.com *.surveymonkey.com *.paperform.co paperform.co *.ordergroove.com *.worldpay.com *.cardinalcommerce.com *.gocertify.me *.bglobale.com *.global-e.com whittardofchelsea.freshdesk.com *.pinterest.com *.whittard.co.uk *.whittard.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.postcodeanywhere.co.uk *.pcapredict.com *.bootstrapcdn.com *.myfonts.net cdnjs.cloudflare.com *.yotpo.com *.freshchat.com *.mention-me.com *.sub2tech.com bda.bookatable.com *.klarnacdn.net *.whittard.co.uk *.whittard.com *.ordergroove.com *.particularaudience.com *.p-a.io *.google.com *.amazonaws.com *.abtasty.com *.gstatic.com *.hotjar.com *.hotjar.io wss:\/\/*.hotjar.com; font-src 'self' data: *.gstatic.com *.g.doubleclick.net *.bootstrapcdn.com *.yotpo.com *.bookatable.com *.alicdn.com *.klarnacdn.net *.whittard.co.uk *.whittard.com *.ordergroove.com *.fontawesome.com *.bglobale.com *.global-e.com *.abtasty.com *.googleapis.com use.typekit.net *.hotjar.com *.hotjar.io wss:\/\/*.hotjar.com; media-src 'self' data: *.facebook.com *.youtube.com *.vimeo.com *.paypal.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' snap.licdn.com code.jquery.com *.pinimg.com *.cquotient.com *.ometria.com *.tryzens-analytics.com:12443 *.tvsquared.com *.facebook.net cdnjs.cloudflare.com cdn.cquotient.com *.googletagmanager.com www.googletagmanager.com *.g.doubleclick.net *.googleapis.com *.google-analytics.com *.googleadservices.com *.google.com *.gstatic.com *.dwin1.com *.postcodeanywhere.co.uk *.pcapredict.com *.z-analytics.net *.yotpo.com *.tokywoky.com *.msecnd.net *.freshchat.com *.klarnaservices.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.mention-me.com *.worldpay.com *.cardinalcommerce.com bda.bookatable.com bat.bing.com *.contentsquare.net *.contentsquare.com *.sub2tech.com *.yottaa.com *.cloudfront.net *.freshworksapi.com *.zenaps.com *.paypal.com *.paypalobjects.com *.awin1.com *.dwin1.com *.sessioncam.com *.whittard.co.uk *.whittard.com *.bootstrapcdn.com *.googlesyndication.com www.google.com *.studentbeans.com onlineerp.solution.quebec widget.surveymonkey.com *.paperform.co paperform.co *.ordergroove.com cdnapisec.kaltura.com *.gocertify.me *.bglobale.com *.global-e.com *.b0e8.com *.vimeo.com *.onetrust.com *.windows.net *.particularaudience.com *.p-a.io *.googleanalytics.com *.googleoptimize.com analytics.whittard.com analytics.whittard.co.uk *.amazonaws.com *.abtasty.com *.roeyecdn.com *.roeye.com *.pinterest.com *.zi-scripts.com *.roeye.com *.payments-amazon.com *.tryzens-analytics.com unpkg.com cdn.cookielaw.org *.hotjar.com *.hotjar.io wss:\/\/*.hotjar.com; connect-src 'self' *.ads.linkedin.com snap.licdn.com *.rapid.yottaa-network.net pagead2.googlesyndication.com *.google-analytics.com *.googleadservices.com *.g.doubleclick.net *.tryzens-analytics.com:12280 *.ometria.com *.postcodeanywhere.co.uk *.pcapredict.com *.yotpo.com *.tokywoky.com *.klarnauserservices.com *.klarnaservices.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.mention-me.com mention-me.com bda.bookatable.com *.z-analytics.net *.contentsquare.net *.contentsquare.com *.sub2tech.com *.cloudfront.net *.awin1.com *.dwin1.com *.yottaa.net *.sessioncam.com bat.bing.com *.facebook.com *.google.com *.facebook.net *.googleapis.com widget.surveymonkey.com *.s3.amazonaws.com *.ordergroove.com *.worldpay.com *.cardinalcommerce.com *.gocertify.me *.bglobale.com *.global-e.com *.vimeo.com *.onetrust.com *.windows.net *.particularaudience.com *.p-a.io *.gstatic.com *.abtasty.com analytics.whittard.com analytics.whittard.co.uk ade.googlesyndication.com *.whittard.com *.whittard.co.uk *.amazonaws.com *.pinterest.com *.zi-scripts.com *.zoominfo.com *.tryzens-analytics.com unpkg.com cdn.cookielaw.org *.google.co.uk *.bing.net payments-eu.amazon.com *.hotjar.com *.hotjar.io wss:\/\/*.hotjar.com; manifest-src 'self'; ; report-uri https:\/\/whtd-csp.tryzens-analytics.com;","count":2},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/checkoutshopper-live.adyen.com https:\/\/checkoutshopper-test.cdn.adyen.com https:\/\/homologation-payment.cdn.payline.com https:\/\/payment.cdn.payline.com https:\/\/static.addtoany.com https:\/\/uberall.com https:\/\/unpkg.com https:\/\/www.google.com https:\/\/www.youtube.com; script-src-attr 'self'; style-src 'self' https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/checkoutshopper-live.adyen.com https:\/\/checkoutshopper-test.cdn.adyen.com https:\/\/homologation-payment.cdn.payline.com https:\/\/payment.cdn.payline.com https:\/\/unpkg.com; style-src-attr 'self'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" default-src 'self' https: wss:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;style-src 'self' 'unsafe-inline' https:;object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'none';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.paddle.com https:\/\/cdn.firstpromoter.com https:\/\/*.firstpromoter.com https:\/\/*.clarity.ms https:\/\/analytics.ahrefs.com https:\/\/static.cloudflareinsights.com https:\/\/ajax.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' https: data:; font-src 'self' data:; connect-src 'self' https:; media-src 'self' https: blob:; frame-src https:\/\/*.paddle.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com; object-src 'none'; base-uri 'self'","count":2},{"content-security-policy-report-only":" font-src cdn.jsdelivr.net fonts.gstatic.com cdn.almapay.com *.dinhvan.com https:\/\/fonts.gstatic.com https:\/\/ws.colissimo.fr data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.getalma.eu *.almapay.com\/ *.stripe.com\/ *.checkout.com\/ *.adyen.com\/ https:\/\/www.youtube.com https:\/\/form.typeform.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io magefan.com cm.magefan.com *.dinhvan.com *.doubleclick.net *.google.fr *.googlesyndication.com *.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/ws.colissimo.fr https:\/\/*.tile.openstreetmap.fr https:\/\/*.onyourmap.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeocdn.com www.vimeo.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ cdn.jsdelivr.net *.dinhvan.com *.tiktok.com *.axept.io chimpstatic.com s.pinimg.com ct.pinterest.com *.facebook.net downloads.mailchimp.com *.list-manage.com https:\/\/maps.googleapis.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/ws.colissimo.fr https:\/\/api.mapbox.com https:\/\/*.typeform.com *.disqus.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.jsdelivr.net fonts.googleapis.com *.dinhvan.com downloads.mailchimp.com https:\/\/fonts.googleapis.com https:\/\/ws.colissimo.fr https:\/\/api.mapbox.com https:\/\/*.typeform.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.dinhvan.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.getalma.eu *.almapay.com *.axept.io *.google.fr *.dinhvan.com analytics.tiktok.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com ct.pinterest.com s.pinimg.com *.vimeocdn.com vimeo.com https:\/\/ws.colissimo.fr https:\/\/maps.googleapis.com https:\/\/nominatim.openstreetmap.org https:\/\/*.onyourmap.com https:\/\/*.mapbox.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src *.bglobale.com *.global-e.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com *.fontawesome.com https:\/\/cdnjs.cloudflare.com *.maisonkitsune.com *.maisonkitsune.test maisonkitsune.com preprod-m2.maisonkitsune.com maisonkitsune.test vestiaire.maisonkitsune.com preprod-vest.maisonkitsune.com vestiaire.test data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https:\/\/pinterest.com https:\/\/www.pinterest.com appleid.apple.com www.apptrian.com facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.bglobale.com *.global-e.com https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com https:\/\/www.googletagmanager.com\/ ssmkt.maisonkitsune.com *.kleep.ai embed.pimster.app *.cookieinformation.com https:\/\/open.spotify.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/images.unsplash.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.bglobale.com *.global-e.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ *.maisonkitsune.com *.maisonkitsune.test maisonkitsune.com preprod-m2.maisonkitsune.com maisonkitsune.test vestiaire.maisonkitsune.com preprod-vest.maisonkitsune.com vestiaire.test *.line.me *.bing.com https:\/\/bat.bing.net https:\/\/cdn.cookielaw.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/cdn.jsdelivr.net\/npm\/@ryangjchandler\/spruce@2.x.x\/dist\/spruce.umd.js www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com cdn.jsdelivr.net\/npm\/@floating-ui\/core@1.6.0 cdn.jsdelivr.net\/npm\/@floating-ui\/dom@1.6.3 *.bglobale.com *.global-e.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ *.avada.io https:\/\/cdnjs.cloudflare.com *.maisonkitsune.com *.maisonkitsune.test maisonkitsune.com preprod-m2.maisonkitsune.com maisonkitsune.test vestiaire.maisonkitsune.com preprod-vest.maisonkitsune.com vestiaire.test *.kleep.ai cdn.pimster.app *.cookieinformation.com *.bing.com *.line-scdn.net *.jsdelivr.net *.zdassets.com https:\/\/cdn.cookielaw.org wss:\/\/widget-mediator.zopim.com https:\/\/ssmkt.maisonkitsune.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.bglobale.com *.global-e.com https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.fontawesome.com https:\/\/cdnjs.cloudflare.com *.maisonkitsune.com *.maisonkitsune.test maisonkitsune.com preprod-m2.maisonkitsune.com maisonkitsune.test vestiaire.maisonkitsune.com preprod-vest.maisonkitsune.com vestiaire.test *.kleep.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ *.zdassets.com https:\/\/cdn.cookielaw.org 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ https:\/\/get.geojs.io *.avada.io *.maisonkitsune.com *.maisonkitsune.test maisonkitsune.com preprod-m2.maisonkitsune.com maisonkitsune.test vestiaire.maisonkitsune.com preprod-vest.maisonkitsune.com vestiaire.test *.kleep.ai https:\/\/bat.bing.net *.googlesyndication.com *.cookieinformation.com *.zendesk.com *.zdassets.com wss:\/\/widget-mediator.zopim.com https:\/\/cdn.cookielaw.org *.onetrust.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com https:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/mobbex.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com https:\/\/accounts.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/mobbex.com *.weltpixel.com *.getblue.io *.doubleclick.net *.criteo.com *.groovinads.com www.tfaforms.com https:\/\/mercadopago.com.ar https:\/\/www.mercadopago.com.ar https:\/\/*.tiktok.com https:\/\/pixel.servicesadmedia.com\/ https:\/\/s.pinimg.com\/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mobbex.com https:\/\/res.sugaway.io *.visualwebsiteoptimizer.com https:\/\/*.g.doubleclick.net *.clarity.ms *.bing.com mcstaging.sommiercenter.com *.groovinads.com *.criteo.com https:\/\/facebook.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.google.com https:\/\/www.gstatic.com https:\/\/ssl.gstatic.com https:\/\/ad.doubleclick.net https:\/\/ade.googlesyndication.com https:\/\/www.mercadopago.com.ar https:\/\/m.facebook.com https:\/\/maps.googleapis.com https:\/\/www.afip.gob.ar https:\/\/www.google.com.ar data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page https:\/\/live.decidir.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mobbex.com https:\/\/www.google.com https:\/\/maps.googleapis.com api.wcx.cloud f.wcentrix.com https:\/\/www.googletagmanager.com tagmanager.google.com https:\/\/merchants.playdigital.com.ar\/ https:\/\/merchants.preprod.playdigital.com.ar\/ https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ *.hotjar.com *.cardinalcommerce.com *.embluemail.com *.navdmp.com *.zdassets.com *.visualwebsiteoptimizer.com *.getblue.io *.zopim.com *.clarity.ms *.groovinads.com *.criteo.net *.criteo.com *.decidir.com https:\/\/*.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/www.googleadservices.com https\/\/static.zdassets.com https:\/\/v2.zopim.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https:\/\/accounts.google.com https:\/\/static.klaviyo.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com tagmanager.google.com https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ *.embluemail.com https:\/\/fonts.googleapis.com https:\/\/*.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com bedtime.com.ar *.bedtime.com.ar 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https:\/\/developers.decidir.com\/ https:\/\/accounts.google.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mobbex.com https:\/\/www.google-analytics.com https:\/\/merchants.playdigital.com.ar\/ https:\/\/merchants.preprod.playdigital.com.ar\/ https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ wss:\/\/widget-mediator.zopim.com *.braindw.com *.clarity.ms *.zdassets.com *.zendesk.com *.embluemail.com *.visualwebsiteoptimizer.com *.criteo.com *.decidir.com https:\/\/*.google-analytics.com https:\/\/*.google.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/maps.googleapis.com https:\/\/www.google.com.ar https:\/\/analytics.google.com\/g\/collect https:\/\/www.google.com.ar\/ads https:\/\/ad.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' *.google.com google.com *.google.de google.de *.google.at google.at *.google.be google.be *.google.fi google.fi *.google.no google.no *.google.ru google.ru *.google.se google.se *.google.co.uk google.co.uk *.google.nl google.nl *.google.fr google.fr *.google.pl google.pl *.google.es google.es *.google.it google.it *.google.ch google.ch *.google.dk google.dk *.google.it google.it *.google.cz google.cz *.google-analytics.com google-analytics.com *.googletagmanager.com googletagmanager.com *.googleapis.com googleapis.com *.sharp.de sharp.de *.sharp.at sharp.at *.sharp.be sharp.be *.sharp.fi sharp.fi *.sharp.no sharp.no *.sharp.ru sharp.ru *.sharp.se sharp.se *.sharp.co.uk sharp.co.uk *.sharp.nl sharp.nl *.sharp.fr sharp.fr *.sharp.pl sharp.pl *.sharp.es sharp.es *.sharp.it sharp.it *.sharp.ch sharp.ch *.sharp.se sharp.se *.sharp.dk sharp.dk *.sharp.cz sharp.cz *.sharp.eu sharp.eu *.sharpmarketing.eu imgs.aws.sharp.eu *.actonsoftware.com *.cookielaw.org *.onetrust.com onetrust.com stats.g.doubleclick.net; script-src 'self' 'unsafe-inline' *.actonservice.com actonservice.com *.googletagmanager.com googletagmanager.com *.google-analytics.com *.google.com googleapis.com *.googleapis.com *.youtube.com youtube.com bam.nr-data.net js-agent.newrelic.com *.cookielaw.org *.onetrust.com *.sharpmarketing.eu *.gstatic.com *.hotjar.com snap.licdn.com bat.bing.com; style-src 'self' 'unsafe-inline' *.sharpmarketing.eu; img-src 'self' data: *.cookielaw.org cookielaw.org *.onetrust.com onetrust.com *.google.ca google.ca *.google.co.in google.co.in *.google.ro google.ro *.google.co.jp google.co.jp *.gogle.co.id google.co.id *.google.co.th google.co.th *.google.ae google.ae *.google.co.nz google.co.nz *.google.com google.com *.google.de google.de *.google.at google.at *.google.be google.be *.google.fi google.fi *.google.no google.no *.google.ru google.ru *.google.se google.se *.google.co.uk google.co.uk *.google.nl google.nl *.google.fr google.fr *.google.pl google.pl *.google.es google.es *.google.it google.it *.google.ch google.ch *.google.dk google.dk *.google.lt google.it *.google.cz google.cz imgs.aws.sharp.eu i.ytimg.com d35hoao4dw4qk2.cloudfront.net www.google-analytics.com *.sharpmarketing.eu *.actonsoftware.com px.ads.linkedin.com bat.bing.com px4.ads.linkedin.com www.google.co.za www.google.bg googleads.g.doubleclick.net www.google.gr; frame-src *; frame-ancestors 'self' *.sharp.de sharp.de *.sharp.at sharp.at *.sharp.be sharp.be *.sharp.fi sharp.fi *.sharp.no sharp.no *.sharp.ru sharp.ru *.sharp.sk sharp.sk *.sharp.se sharp.se *.sharp.co.uk sharp.co.uk *.sharp.nl sharp.nl *.sharp.fr sharp.fr *.sharp.pl sharp.pl *.sharp.es sharp.es *.sharp.it sharp.it *.sharp.ch sharp.ch *.sharp.se sharp.se *.sharp.dk sharp.dk *.sharp.hu sharp.hu *.sharp.it sharp.it *.sharp.co.jp sharp.co.jp *.sharp.cz sharp.cz  *.sharp.eu sharp.eu; child-src *; font-src 'self' data:; connect-src 'self' *.google-analytics.com google-analytics.com cdn.linkedin.oribi.io bam.nr-data.net *.onetrust.com *.cookielaw.org stats.g.doubleclick.net privacyportal-eu.onetrust.com *.sharpmarketing.eu *.hotjar.com vc.hotjar.io bat.bing.com; report-uri https:\/\/apps.sharp.eu\/sharp\/apps\/eu\/csp-violation\/report.php; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.authorized.by *.bewakingscamera.nl *.bing.com *.bing.net *.doubleclick.net *.googleadservices.com *.google-analytics.com *.googleapis.com www.google.at www.google.be www.google.ch www.google.com.au www.google.com.bd www.google.com.br www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.hk www.google.com.kh www.google.com.mm www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.uk www.google.cz www.google.de www.google.dk www.google.es www.google.fr www.google.it www.google.nl www.google.pl www.google.pt www.google.ru *.google.com google.com *.googletagmanager.com *.gstatic.com *.mouseflow.com *.multisafepay.com *.newrelic.com *.nr-data.net *.returnless.com *.smartlook.com *.storyblok.com vercel.live api.marker.io ssr.marker.io s3.eu-west-1.amazonaws.com\/marker.sessions.prod; default-src 'self' 'unsafe-inline' 'unsafe-eval' *.authorized.by *.bing.com *.bing.net *.doubleclick.net *.googleadservices.com *.googleapis.com www.google.at www.google.be www.google.ch www.google.co.uk www.google.de www.google.fr www.google.nl *.google.com *.googletagmanager.com *.gstatic.com *.mouseflow.com *.smartlook.com *.storyblok.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' *.authorized.by *.bing.com *.bing.net *.doubleclick.net *.googleadservices.com *.google-analytics.com *.googleapis.com www.google.at www.google.be www.google.ch www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.uk www.google.cz www.google.de www.google.dk www.google.es www.google.fr www.google.it www.google.nl www.google.pl www.google.pt www.google.ru *.google.com *.googletagmanager.com *.gstatic.com *.multisafepay.com *.storyblok.com blob: data: media.marker.io app.marker.io edge.marker.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bewakingscamera.nl *.bing.com *.doubleclick.net *.googleapis.com *.google.com *.googletagmanager.com *.mouseflow.com *.multisafepay.com *.newrelic.com *.returnless.com *.smartlook.com *.storyblok.com vercel.live edge.marker.io app.marker.io; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com *.gstatic.com *.multisafepay.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.multisafepay.com *.returnless.com vercel.live app.marker.io; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com app.marker.io edge.marker.io; media-src 'self' 'unsafe-inline' 'unsafe-eval' *.storyblok.com media.marker.io app.marker.io edge.marker.io; child-src 'self' 'unsafe-inline' 'unsafe-eval'  app.marker.io; form-action 'self' 'unsafe-inline' 'unsafe-eval' app.marker.io api.marker.io; report-uri https:\/\/14edc0c0-b3cc-497c-8aa2-2e84efa49370.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" frame-ancestors *.vee24.com","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com script.hotjar.com hyfin.app *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com data: maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.weltpixel.com *.wesupply.xyz https:\/\/wesupplylabs.com vars.hotjar.com maps.googleapis.com stats.g.doubleclick.net *.fls.doubleclick.net cdn.evgnet.com hyfin.app *.globalpay.com *.verygoodvault.com 17squares.com *.twitter.com *.addthis.com www.facebook.com *.addtoany.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io static.hotjar.com script.hotjar.com maps.googleapis.com stats.g.doubleclick.net cdn.evgnet.com hyfin.app *.globalpay.com *.verygoodvault.com * *.googleapis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.cdninstagram.com *.fbcdn.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.cloudflare.com script.hotjar.com static.hotjar.com maps.googleapis.com stats.g.doubleclick.net cdn.evgnet.com *.us-6.evergage.com hyfin.app *.globalpay.com *.verygoodvault.com *.smartystreets.com 17squares.com * *.googleapis.com *.gstatic.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com www.facebook.com *.jsdelivr.net *.addtoany.com https:\/\/includes.ccdc02.com\/cardinalcruise\/v1\/songbird.js https:\/\/includestest.ccdc02.com\/cardinalcruise\/v1\/songbird.js https:\/\/includestest.ccdc02.com\/cardinalcruise\/v1\/0a125400b09de2105a63\/5.0a125400b09de2105a63.songbird.js https:\/\/includes.ccdc02.com\/cardinalcruise\/v1\/b109e0c6fd2a5b6b93b2\/1.b109e0c6fd2a5b6b93b2.songbird.js https:\/\/jstest.authorize.net\/v1\/Accept.js https:\/\/jstest.authorize.net\/v1\/AcceptCore.js https:\/\/js.authorize.net\/v1\/Accept.js https:\/\/js.authorize.net\/v1\/AcceptCore.js connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com ajax.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com static.hotjar.com script.hotjar.com cdn.evgnet.com hyfin.app *.globalpay.com *.verygoodvault.com *.gstatic.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.bootstrapcdn.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.hotjar.com *.hotjar.io wss:\/\/*.hotjar.com bam.nr-data.net stats.g.doubleclick.net cookie-cdn.cookiepro.com maps.googleapis.com cdn.evgnet.com *.us-6.evergage.com wss:\/\/*.hyfin.app hyfin.app *.globalpay.com *.verygoodvault.com *.smartystreets.com 17squares.com *.cloudflare.com *.twitter.com *.twimg.com *.g.doubleclick.net *.addthis.com *.pinterest.com *.addtoany.com https:\/\/apitest.authorize.net\/xml\/v1\/request.api https:\/\/api.authorize.net\/xml\/v1\/request.api https:\/\/includes.ccdc02.com\/cardinalcruise\/v1\/songbird.js https:\/\/includestest.ccdc02.com\/cardinalcruise\/v1\/songbird.js https:\/\/includestest.ccdc02.com\/cardinalcruise\/v1\/0a125400b09de2105a63\/5.0a125400b09de2105a63.songbird.js https:\/\/includes.ccdc02.com\/cardinalcruise\/v1\/b109e0c6fd2a5b6b93b2\/1.b109e0c6fd2a5b6b93b2.songbird.js https:\/\/jstest.authorize.net\/v1\/Accept.js https:\/\/jstest.authorize.net\/v1\/AcceptCore.js https:\/\/js.authorize.net\/v1\/Accept.js https:\/\/js.authorize.net\/v1\/AcceptCore.js www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com * data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https:\/\/images.unsplash.com https:\/\/www.mollie.com * www.google.com.ua www.xtento.com cdn.xtento.com https:\/\/goggles4u.com\/metrics data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com js.mollie.com * www.xtento.com cdn.xtento.com https:\/\/goggles4u.com\/metrics 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com * 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/checkout.iwdagency.com * https:\/\/goggles4u.com\/metrics 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.cloudfront.net https:\/\/fonts.gstatic.com https:\/\/maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.facebook.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.paypal.com *.vimeo.com *.google.com *.googletagmanager.com https:\/\/tag.heylink.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.everesttech.net *.demdex.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com imgsct.cookiebot.com https:\/\/info.dibs.se magefan.com cm.magefan.com *.facebook.com *.facebook.net *.cloudfront.net *.adobe.com *.adobe.net *.google.com *.googleapis.com *.gstatic.com https:\/\/bat.bing.com https:\/\/instore.prisjakt.no https:\/\/pricerunner.dk https:\/\/pricerunner.se *.googleadservices.com *.google-analytics.com *.googletagmanager.com https:\/\/www.postnord.com https:\/\/www.mybring.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.adobedtm.com *.sentry.io *.sentry-cdn.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com *.magento-datasolutions.com *.magento-ds.com consent.cookiebot.com https:\/\/*.dibspayment.eu *.facebook.com *.facebook.net *.cloudfront.net *.adobe.com *.adobe.net *.google.com *.googleapis.com *.gstatic.com https:\/\/cdn.cookie-script.com https:\/\/bat.bing.com *.clarity.ms *.doubleclick.net https:\/\/r1-t.trackedlink.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.paypal.com https:\/\/tag.heylink.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https:\/\/*.dibspayment.eu *.cloudfront.net *.adobe.com *.adobe.net *.google.com *.facebook.com *.facebook.net *.googleapis.com *.gstatic.com https:\/\/bat.bing.com https:\/\/maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io amcglobal.sc.omtrdc.net p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com performance.typekit.net *.magento-datasolutions.com *.magento-ds.com *.adobe.io https:\/\/*.dibspayment.eu *.facebook.com *.facebook.net *.cloudfront.net *.adobe.com *.adobe.net *.google.com *.googleapis.com *.gstatic.com https:\/\/bat.bing.com *.clarity.ms *.doubleclick.net https:\/\/fraktguide.bring.no *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.jsdelivr.net https:\/\/maps.googleapis.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/connect.facebook.net https:\/\/script.crazyegg.com https:\/\/static.addtoany.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/snap.licdn.com https:\/\/static.ads-twitter.com https:\/\/cdn.resonate.com https:\/\/doublethedonation.com https:\/\/cdn.evgnet.com https:\/\/analytics.tiktok.com https:\/\/tags.srv.stackadapt.com https:\/\/www.helpmakemiracles.org https:\/\/donordrivecontent.com https:\/\/*.donordrivecontent.com https:\/\/cdnjs.cloudflare.com https:\/\/*.braintreegateway.com https:\/\/cdn.givechariot.com https:\/\/*.givechariot.com https:\/\/paypal.com https:\/\/*.paypal.com; style-src 'self' 'unsafe-inline' https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/cdn.jsdelivr.net https:\/\/fonts.googleapis.com https:\/\/doublethedonation.com https:\/\/tags.srv.stackadapt.com https:\/\/www.helpmakemiracles.org https:\/\/donordrivecontent.com https:\/\/*.donordrivecontent.com https:\/\/paypal.com https:\/\/*.paypal.com https:\/\/*.paypalobjects.com; font-src 'self' data: blob: https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com https:\/\/maps.gstatic.com https:\/\/doublethedonation.com https:\/\/www.helpmakemiracles.org https:\/\/donordrivecontent.com https:\/\/*.donordrivecontent.com https:\/\/cdnjs.cloudflare.com https:\/\/*.braintreegateway.com https:\/\/cdn.givechariot.com https:\/\/*.givechariot.com https:\/\/paypal.com https:\/\/*.paypal.com https:\/\/*.paypalobjects.com; img-src 'self' data: https:\/\/img.youtube.com https:\/\/i.ytimg.com https:\/\/www.facebook.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/stats.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/www.google.com https:\/\/www.google.ca https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/*.basemaps.cartocdn.com https:\/\/*.tile.openstreetmap.org https:\/\/static.addtoany.com https:\/\/script.crazyegg.com https:\/\/*.ads.linkedin.com https:\/\/www.linkedin.com https:\/\/snap.licdn.com https:\/\/t.co https:\/\/analytics.twitter.com https:\/\/static.ads-twitter.com https:\/\/cdn.resonate.com https:\/\/doublethedonation.com https:\/\/analytics.tiktok.com https:\/\/tags.srv.stackadapt.com https:\/\/*.srv.stackadapt.com https:\/\/www.helpmakemiracles.org https:\/\/donordrivecontent.com https:\/\/*.donordrivecontent.com https:\/\/images.childrensmiraclenetwork.org https:\/\/donate.childrensmiraclenetworkhospitals.org https:\/\/paypal.com https:\/\/*.paypal.com https:\/\/*.paypalobjects.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/cdn.jsdelivr.net https:\/\/region1.google-analytics.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/maps.googleapis.com https:\/\/script.crazyegg.com https:\/\/static.addtoany.com https:\/\/snap.licdn.com https:\/\/*.ads.linkedin.com https:\/\/www.linkedin.com https:\/\/static.ads-twitter.com https:\/\/analytics.twitter.com https:\/\/t.co https:\/\/cdn.resonate.com https:\/\/ds.reson8.com https:\/\/doublethedonation.com https:\/\/cdn.evgnet.com https:\/\/*.us-7.evergage.com https:\/\/analytics.tiktok.com https:\/\/tags.srv.stackadapt.com https:\/\/*.srv.stackadapt.com https:\/\/www.helpmakemiracles.org https:\/\/donordrivecontent.com https:\/\/*.donordrivecontent.com https:\/\/*.braintreegateway.com https:\/\/*.braintree-api.com https:\/\/paypal.com https:\/\/*.paypal.com https:\/\/*.kaptcha.com https:\/\/cdn.givechariot.com https:\/\/*.givechariot.com; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/www.google.com https:\/\/static.addtoany.com https:\/\/www.helpmakemiracles.org https:\/\/donate.childrensmiraclenetworkhospitals.org https:\/\/*.braintreegateway.com https:\/\/paypal.com https:\/\/*.paypal.com https:\/\/cdn.givechariot.com https:\/\/*.givechariot.com https:\/\/*.kaptcha.com https:\/\/*.cardinalcommerce.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/www.google.com https:\/\/www.salesforce.com https:\/\/*.salesforce.com https:\/\/www.helpmakemiracles.org https:\/\/donate.childrensmiraclenetworkhospitals.org; frame-ancestors 'self'; worker-src 'self' blob:","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klevu.com *.ksearchnet.com checkout.getbread.com *.paypal.com *.google-analytics.com *.mmapiws.com *.doubleclick.net *.searchspring.io *.turnto.com bat.bing.com datalayer.jumpfly.com *.mouseflow.com *.nr-data.net *.newrelic.com *.google.com *.clarity.ms analytics.google.com tgscript.s3.amazonaws.com *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com js.klevu.com data: *.shopperapproved.com use.fontawesome.com maxcdn.bootstrapcdn.com *.iadvize.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https:\/\/www.shopperapproved.com hpp-sandbox.worldpay.com payments-test.worldpay.com payments.worldpay.com *.authorize.net *.twitter.com *.facebook.com connect.facebook.net yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com hpp.worldpay.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com hpp-sandbox.worldpay.com payments-test.worldpay.com payments.worldpay.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.authorize.net *.liveperson.net checkout.getbread.com *.doubleclick.net *.lpsnmedia.net *.googletagmanager.com *.facebook.com platform.twitter.com td.doubleclick.net *.twitter.com *.google.co.in www.xtento.com photos.pixlee.co *.weltpixel.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com *.paypalobjects.com airtable.com *.lightingwarehouse.com e.sprinklerwarehouse.com hpp.worldpay.com youtu.be 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/www.shopperapproved.com *.trackedlink.net *.klevu.com *.ksearchnet.com https:\/\/maps.gstatic.com https:\/\/maps.googleapis.com *.ftcdn.net *.behance.net https:\/\/images.unsplash.com *.googleadservices.com blob: https:\/\/meetanshi.com\/media\/logo.png *.cloudflare.com *.google.com *.google.co.in *.facebook.com *.klarna.com *.google-analytics.com * *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net stats.g.doubleclick.net d.adroll.com pixel.advertising.com pixel.rubiconproject.com simage2.pubmatic.com dsum-sec.casalemedia.com ads.yahoo.com eb2.3lift.com sync.outbrain.com trc.taboola.com x.bidswitch.net\/sync ib.adnxs.com idsync.rlcdn.com us-u.openx.net ups.analytics.yahoo.com segments.company-target.com sync.tidaltv.com *.trustgaurd.com content.sprinklerwarehouse.com bat.bing.com www.xtento.com cdn.xtento.com wac.edgecastcdn.net yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/www.shopperapproved.com https:\/\/direct.shopperapproved.com hpp-sandbox.worldpay.com payments-test.worldpay.com payments.worldpay.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klevu.com *.ksearchnet.com https:\/\/maps.googleapis.com\/maps\/api\/ https:\/\/maps.googleapis.com\/ *.authorize.net *.liveperson.net *.lpsnmedia.net cdn.searchspring.net checkout.getbread.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com www.gstatic.com bat.bing.com *.mouseflow.com services.nofraud.com *.doubleclick.net widgets.turnto.com js.klevu.com stats.g.doubleclick.net static.trackedweb.net tgscript.s3.amazonaws.com *.clarity.ms platform.twitter.com connect.facebook.net cdn-ws.turnto.com *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.paypalobjects.com *.paypal.com chimpstatic.com s.adroll.com d.adroll.com d.adroll.mgr.consensu.org *.bootstrapcdn.com player.vimeo.com content.sprinklerwarehouse.com www.xtento.com cdn.xtento.com *.turnto.com https:\/\/www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com googletagmanager.com *.lightingwarehouse.com code.jquery.com *.sprinklerwarehouse.com *.vimeo.com *.shopperapproved.com *.breadpayments.com *.gstatic.com accdn.lpsnmedia.net lpcdn.lpsnmedia.net static.elfsight.com halc.iadvize.com cdn.brcdn.com *.iadvize.com elfsightcdn.com bat.bing.net cdn-4.convertexperiments.com https:\/\/js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klevu.com *.ksearchnet.com *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.youtube.com cdn.searchspring.net widgets.turnto.com js.klevu.com tgscript.s3.amazonaws.com *.bootstrapcdn.com *.turnto.com tagmanager.google.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com maxcdn.bootstrapcdn.com  *.bootstrapcdn.com cdn.dnky.co *.yotpo.complete content.sprinklerwarehouse.com *.lightingwarehouse.com *.nr-data.net *.iadvize.com https:\/\/statsjs.klevu.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.lpsnmedia.net data: *.trustguard.com content.sprinklerwarehouse.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com hpp-sandbox.worldpay.com payments-test.worldpay.com payments.worldpay.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klevu.com *.ksearchnet.com https:\/\/maps.googleapis.com *.authorize.net *.lpsnmedia.net data: *.cloudflare.com *.twitter.com *.twimg.com *.google.co.in *.facebook.com checkout.getbread.com *.mmapiws.com *.doubleclick.net *.searchspring.io *.turnto.com bat.bing.com datalayer.jumpfly.com *.mouseflow.com *.clarity.ms tgscript.s3.amazonaws.com content.sprinklerwarehouse.com *.facebook.net yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com *.lightingwarehouse.com adservice.google.com fonts.googleapis.com core.service.elfsight.com maps.googleapis.com *.fontawesome.com halc.iadvize.com api.iadvize.com cdn.brcdn.com services.nofraud.com learn.sprinklerwarehouse.com p.brsrvr.com *.iadvize.com learn.lightingwarehouse.com cdn-4.convertexperiments.com curbside.ua872158.serversignin.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src checkout.getbread.com *.klevu.com static.iadvize.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: ace.de *.ace.de ace-clubinitiative.de *.ace-clubinitiative.de 360yield.com 3lift.com adform.net adnxs.com adsrvr.org agkn.com bidr.io bidswitch.net bing.com bugsnag.com bussgeldrechner.org casalemedia.com clarity.ms clmbtech.com co.kr cookielaw.org criteo.com *.criteo.com demdex.net dmxleo.com doubleclick.net *.doubleclick.net dwin1.com facebook.net *.facebook.net finanzcheck.de *.finanzcheck.de fwmrm.net ggpht.com google.com *.google.com googleadservices.com googlesyndication.com googletagmanager.com *.googletagmanager.com gsitrix.com gstatic.com *.gstatic.com ioadentifi.com *.ioadentifi.com liadm.com media.net mediavine.com mediawallahscript.com outbrain.com pippio.com postrelease.com pubmatic.com revcontent.com rezync.com rfihub.com roeye.com roeyecdn.com rubiconproject.com smartadserver.com springserve.com stape.net stapecdn.com stickyadstv.com taboola.com tapad.com teads.tv thrtle.com tpmn.io tremorhub.com turn.com ubembed.com unrulymedia.com usemaxserver.de *.usemaxserver.de w55c.net yahoo.com *.yahoo.com youtube.com *.youtube.com ytimg.com; frame-ancestors 'self' ace.de *.ace.de ace-clubinitiative.de *.ace-clubinitiative.de;","count":2},{"content-security-policy-report-only":" default-src https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https:; report-uri \/_csp","count":2},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' js.stripe.com *.googletagmanager.com *.google-analytics.com *.crisp.chat challenges.cloudflare.com; frame-src js.stripe.com hooks.stripe.com challenges.cloudflare.com *.crisp.chat; worker-src 'self' blob:; object-src 'none'; base-uri 'self'","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: data: *.tiktok.com *.ttcdn-row.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com cdn.dnky.co amc.demdex.net www.google.com youtube.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' data: maps.gstatic.com maps.googleapis.com accounts.google.com *.tiktok.com *.ttcdn-row.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/www.google.com *.gstatic.com cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com player.vimeo.com https:\/\/maps.googleapis.com *.tiktok.com *.ttcdn-row.com *.bytedance.com analytics.tiktok.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com cdn.dnky.co *.googletagmanager.com *.cookielaw.org *.tiktok.com *.ttcdn-row.com 'self' 'unsafe-inline'; object-src *.tiktok.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maps.googleapis.com api.comapi.com bam.nr-data.net *.cookielaw.org analytics.tiktok.com business-api.tiktok.com *.ttcdn-row.com *.bytedance.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" script-src-elem 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem 'self' 'unsafe-inline'; font-src *.gstatic.com www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net https:\/\/use.fontawesome.com https:\/\/fonts.gstatic.com *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.tawk.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com pilot-payflowlink.paypal.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypalobjects.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sendy.nl *.tawk.to 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com data: validator.swagger.io *.adobe.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com magefan.com cm.magefan.com *.disqus.com *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com\/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com vimeo.com www.vimeo.com *.vimeocdn.com maps.googleapis.com www.googletagmanager.com *.adobe.com googleads.g.doubleclick.net analytics.google.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.googleapis.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sendy.nl *.disqus.com *.tawk.to cdn.jsdelivr.net commerce-payments-sdk.adobe.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/use.fontawesome.com https:\/\/fonts.googleapis.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/olegnax.com https:\/\/api.instagram.com https:\/\/graph.instagram.com\/ *.tawk.to wss:\/\/*.tawk.to places.googleapis.com *.pay.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/api-maps.yandex.ru https:\/\/www.google.com https:\/\/www.gstatic.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:\/\/api-maps.yandex.ru https:\/\/www.gstatic.com; font-src 'self'; connect-src 'self' https:\/\/www.google.com https:\/\/www.gstatic.com; frame-src https:\/\/www.google.com; child-src https:\/\/www.google.com;","count":2},{"content-security-policy-report-only":" default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.audioeye.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.brightcove.net *.brightcove.com *.weltpixel.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.wesupply.xyz https:\/\/wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net annies-livesearch.s3.amazonaws.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.brightcove.net *.brightcove.com *.boltdns.net *.googlesyndication.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/prf.hn maps.gstatic.com *.facebook.com *.reddit.com *.adtrafficquality.google *.cookielaw.org *.lightboxcdn.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com annies-livesearch.s3.amazonaws.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.brightcove.net *.brightcove.com *.ordergroove.com *.attn.tv events.attentivemobile.com *.googlesyndication.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/prf.hn https:\/\/pzapi-nb.com https:\/\/pzapi-kg.com https:\/\/pzapi-ij.com\/ maps.googleapis.com *.cloudflare.com https:\/\/www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.adtrafficquality.google *.audioeye.com *.clarity.ms *.cookielaw.org *.gstatic.com *.lightboxcdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net annies-livesearch.s3.amazonaws.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app assets.braintreegateway.com *.typekit.net *.googlesyndication.com tagmanager.google.com *.audioeye.com *.lightboxcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net annies-livesearch.s3.amazonaws.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.typekit.net *.googlesyndication.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com annies-livesearch.s3.amazonaws.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.typekit.net *.googlesyndication.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com annies-livesearch.s3.amazonaws.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.brightcove.net *.brightcove.com *.boltdns.net *.brightcovecdn.com maps.googleapis.com *.ordergroove.com *.attn.tv events.attentivemobile.com *.googlesyndication.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.adtrafficquality.google *.audioeye.com *.clarity.ms *.cookielaw.org *.onetrust.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net annies-livesearch.s3.amazonaws.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.brightcovecdn.com *.typekit.net *.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' *.google-analytics.com *.googleapis.com *.googletagmanager.com *.facebook.com *.acsbapp.com *.google.com *.s3-eu-west-1.amazonaws.com *.amazone.de ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube-nocookie.com *.amazone.de; script-src-elem 'self' 'unsafe-inline' amazone.concludis.de player.podigee-cdn.net *.googleapis.com *.youtube.com *.amazone.de *.consentmanager.net *.googletagmanager.com *.google-analytics.com connect.facebook.net *.acsbapp.com *.s3-eu-west-1.amazonaws.com *.doubleclick.net; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' *.googleapis.com amazone.concludis.de cdn.consentmanager.net *.amazone.de; img-src 'self' googleads.g.doubleclick.net *.googleapis.com  *.gstatic.com *.amazonaws.com *.cleverreach.com *.consentmanager.net *.facebook.com *.amazone.de amazone.de *.googletagmanager.com data:; font-src 'self' *.amazone.de data:; frame-src facebook.com player.podigee-cdn.net *.consentmanager.net *.google.com amazone.de amazone.net *.amazone.de *.amazone.net *.googletagmanager.com *.youtube-nocookie.com;","count":2},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/youtube-marketing\/artists_youtube","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com *.googleapis.com *.livechatinc.com *.acsbap.com *.acsbapp.com https:\/\/acsbapp.com\/apps\/app\/dist\/fonts\/ *.fontawesome.com *.stripecdn.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com www.facebook.com www.googletagmanager.com www.google-analytics.com *.icims.eu www.youtube.com cookiepedia.co.uk www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.livechatinc.com *.trustpilot.com *.trustpilot.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.wiltshirefarmfoods.com https:\/\/seo.mageplaza.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net www.youtube.com *.youtube-nocookie.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com vars.hotjar.com www.facebook.com www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.livechatinc.com *.trustpilot.com *.trustpilot.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.wiltshirefarmfoods.com td.doubleclick.net pagead2.googlesyndication.com analytics.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com www.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.amplience.net fpdbs.paypal.com fpdbs.sandbox.paypal.com *.yotpo.com p.adsymptotic.com bat.bing.com www.facebook.com cdn-ukwest.onetrust.com *.livechatinc.com cookiesuksouth.blob.core.windows.net www.google.co.in www.google-analytics.com px.ads.linkedin.com cookiepedia.co.uk www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.wiltshirefarmfoods.com *.trustpilot.com *.trustpilot.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.postcodeanywhere.co.uk acsbap.com acsbapp.com *.acsbap.com *.acsbapp.com https:\/\/cdn.acsbapp.com\/apps\/app\/dist\/media\/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page *.youtube.com *.vimeo.com secure.authorize.net test.authorize.net www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com *.cardinalcommerce.com geo.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.onetrust.com *.livechatinc.com static.hotjar.com www.gstatic.com *.trackedlink.net *.stripe.com *.trustpilot.com maps.googleapis.com *.pcapredict.com snap.licdn.com connect.facebook.net bat.bing.com secure.leadforensics.com js-agent.newrelic.com script.hotjar.com ict.infinity-tracking.net cookiepedia.co.uk www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.trustpilot.net *.bam.nr-data.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.wiltshirefarmfoods.com *.dwin1.com acsbap.com acsbapp.com *.acsbap.com *.acsbapp.com https:\/\/acsbapp.com\/apps\/app\/dist\/ https:\/\/acsbapp.com\/apps\/app\/assets\/js\/ td.doubleclick.net pagead2.googlesyndication.com *.conoret.com https:\/\/services.postcodeanywhere.co.uk https:\/\/cdn.mouseflow.com https:\/\/cdn.cookielaw.org *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.postcodeanywhere.co.uk *.fontawesome.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.ideal-postcodes.co.uk *.stripe.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com maps.googleapis.com *.onetrust.com *.livechatinc.com bam.nr-data.net in.hotjar.com ict.infinity-tracking.net stats.g.doubleclick.net bat.bing.com www.youtube.com cookiepedia.co.uk www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.trustpilot.com *.trustpilot.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.wiltshirefarmfoods.com acsbap.com acsbapp.com *.acsbap.com *.acsbapp.com *.wikipedia.org\/w\/api.php https:\/\/process.acsbapp.com\/apps\/app\/ https:\/\/cdn.acsbapp.com\/resources\/ https:\/\/cdn.acsbapp.com\/cache\/app\/ https:\/\/cdn.acsbapp.com\/config\/ https:\/\/acsbapp.com\/apps\/app\/assets\/js\/ td.doubleclick.net pagead2.googlesyndication.com analytics.google.com https:\/\/services.postcodeanywhere.co.uk https:\/\/o2.mouseflow.com https:\/\/www.google.com https:\/\/cdn.cookielaw.org klarna.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/fonts.gstatic.com; style-src-elem 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/ctrack.trafficjunky.net https:\/\/geo-tracker.smadex.com https:\/\/newassets.hcaptcha.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; script-src 'self' 'unsafe-inline' https:\/\/*.googletagmanager.com https:\/\/mc.yandex.ru https:\/\/*.google-analytics.com https:\/\/*.youtube.com https:\/\/mc.yandex.com https:\/\/mc.yandex.ru https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.mightytips.com https:\/\/my.rtmark.net https:\/\/*.hybrid.ai https:\/\/*.g.doubleclick.net https:\/\/ctrack.trafficjunky.net https:\/\/geo-tracker.smadex.com https:\/\/challenges.cloudflare.com; img-src * data:; font-src 'self' https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/*.customer.io https:\/\/*.youtube.com https:\/\/mc.yandex.ru https:\/\/*.clariti.ws https:\/\/*.analytics.google.com https:\/\/*.google-analytics.com https:\/\/doubleclick.net https:\/\/*.googletagmanager.com https:\/\/mc.yandex.com https:\/\/mc.yandex.ru https:\/\/mc.yandex.md https:\/\/yandexmetrica.com https:\/\/*.mightytips.com https:\/\/*.g.doubleclick.net https:\/\/ctrack.trafficjunky.net https:\/\/geo-tracker.smadex.com https:\/\/analytics.google.com https:\/\/challenges.cloudflare.com; frame-src 'self' https:\/\/*.youtube.com https:\/\/*.instagram.com https:\/\/*.twitter.com https:\/\/*.yandex.com https:\/\/*.google.com https:\/\/my.rtmark.net https:\/\/*.hybrid.ai https:\/\/*.g.doubleclick.net https:\/\/ctrack.trafficjunky.net https:\/\/geo-tracker.smadex.com https:\/\/newassets.hcaptcha.com https:\/\/hcaptcha.com https:\/\/challenges.cloudflare.com; script-src-elem 'self' 'unsafe-inline' https:\/\/*.instagram.com https:\/\/*.googletagmanager.com https:\/\/*.yandex.ru https:\/\/*.google-analytics.com https:\/\/*.twitter.com https:\/\/*.youtube.com https:\/\/mc.yandex.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/mc.yandex.ru https:\/\/*.mightytips.com https:\/\/my.rtmark.net https:\/\/*.hybrid.ai https:\/\/*.g.doubleclick.net https:\/\/ctrack.trafficjunky.net https:\/\/geo-tracker.smadex.com https:\/\/track.trackingtraffo.com https:\/\/www.hcaptcha.com https:\/\/newassets.hcaptcha.com https:\/\/challenges.cloudflare.com; frame-ancestors 'self'; report-uri \/cspreport.php;","count":2},{"content-security-policy-report-only":" default-src https:; connect-src https: wss:; font-src https: data:; frame-src https:; img-src https: data:; media-src https:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'unsafe-inline' https:; report-uri https:\/\/www.tarifcheck-partnerprogramm.de\/csp-violation-ezmd9dpdxv7nb0ecejb9\/","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' data: https:\/\/www.googletagmanager.com https:\/\/*.usercentrics.eu https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/*.doubleclick.net https:\/\/join.com https:\/\/*.join.com https:\/\/sc.lfeeder.com https:\/\/snap.licdn.com https:\/\/connect.facebook.net https:\/\/s3.eu-central-1.amazonaws.com https:\/\/destination-data-map.guest.net; style-src 'self' 'unsafe-inline' https:\/\/*.join.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/*.join.com; connect-src 'self' https:\/\/*.usercentrics.eu https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.basemaps.cartocdn.com https:\/\/destination-data-map.guest.net https:\/\/pro.guest.net https:\/\/join.com https:\/\/*.join.com https:\/\/www.google.com https:\/\/www.google.at https:\/\/www.google.it https:\/\/www.googleadservices.com https:\/\/*.doubleclick.net https:\/\/px.ads.linkedin.com https:\/\/sc.lfeeder.com; worker-src 'self' blob:; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.facebook.com; form-action 'self' https:\/\/www.facebook.com; report-uri \/csp-report","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/fonts.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net eu.mindtheg.com us.mindtheg.com upgrade.mindtheg.com dev.mindtheg.com b2b.dev.mindtheg.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com static.addtoany.com www.googletagmanager.com consentcdn.cookiebot.com app-eu1.hubspot.com ct.pinterest.com m.stripe.network b.stripecdn.com newassets.hcaptcha.com https:\/\/js.stripe.com https:\/\/pay.google.com *.wesupply.xyz https:\/\/wesupplylabs.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com magefan.com cm.magefan.com https:\/\/firebasestorage.googleapis.com eu.mindtheg.com us.mindtheg.com upgrade.mindtheg.com dev.mindtheg.com b2b.dev.mindtheg.com mindtheg.com forms-eu1.hsforms.com www.google.ro bat.bing.com px.ads.linkedin.com imgsct.cookiebot.com track-eu1.hubspot.com track.hubspot.com 143839764.fs1.hubspotusercontent-eu1.net www.gstatic.com js.stripe.com blob: https:\/\/pay.google.com https:\/\/*.googleusercontent.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com static.addtoany.com eu.mindtheg.com us.mindtheg.com upgrade.mindtheg.com dev.mindtheg.com b2b.dev.mindtheg.com cdn.jsdelivr.net mindtheg.com js-eu1.hs-scripts.com widget.trustpilot.com invitejs.trustpilot.com js-eu1.hsadspixel.net js-eu1.hs-banner.com js-eu1.hs-analytics.net js-eu1.usemessages.com consent.cookiebot.com bat.bing.com s.pinimg.com js-eu1.hscollectedforms.net snap.licdn.com consentcdn.cookiebot.com www.clarity.ms static.hsappstatic.net scripts.clarity.ms www.gstatic.com ct.pinterest.com static.cloudflareinsights.com js.braintreegateway.com m.stripe.network pay.google.com hcaptcha.com newassets.hcaptcha.com https:\/\/js.stripe.com *.stripecdn.com *.cloudflare.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.stripe.com *.stripe.network klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com maps.googleapis.com *.trustpilot.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https:\/\/fonts.bunny.net *.googleapis.com *.addtoany.com eu.mindtheg.com us.mindtheg.com upgrade.mindtheg.com dev.mindtheg.com b2b.dev.mindtheg.com cdn.jsdelivr.net static.hsappstatic.net www.gstatic.com js.stripe.com b.stripecdn.com assets.braintreegateway.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.hsappstatic.net eu.mindtheg.com us.mindtheg.com upgrade.mindtheg.com dev.mindtheg.com b2b.dev.mindtheg.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com https:\/\/get.geojs.io *.avada.io http:\/\/dpm.demdex.net eu.mindtheg.com us.mindtheg.com upgrade.mindtheg.com dev.mindtheg.com b2b.dev.mindtheg.com api-eu1.hubspot.com api-eu1.hubapi.com consentcdn.cookiebot.com forms-eu1.hscollectedforms.net mindtheg.com ct.pinterest.com region1.analytics.google.com px.ads.linkedin.com exceptions-eu1.hubspot.com z.clarity.ms app-eu1.hubspot.com region1.google-analytics.com ad.doubleclick.net m.stripe.com js.stripe.com r.stripe.com ppm.stripe.com merchant-ui-api.stripe.com play.google.com pay.google.com 91b83f9b1acc.w.hcaptcha.com api.hcaptcha.com dc6fbc6f88a3.w.hcaptcha.com cloudflareinsights.com *.googlesyndication.com https:\/\/api.stripe.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com places.googleapis.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src mindtheg.com eu.mindtheg.com us.mindtheg.com upgrade.mindtheg.com dev.mindtheg.com b2b.dev.mindtheg.com bat.bing.com metrics-fe-eu1.hubspot.com app-eu1.hubspot.com z.clarity.ms r.stripe.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.fontawesome.com 'self' data: *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.addthis.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.facebook.com *.decta.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com maps.google.com maps.googleapis.com maps.gstatic.com https:\/\/images.unsplash.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net https:\/\/maps.omnivasiunta.lt *.hsforms.net *.hsforms.com 'self' data: *.facebook.com *.facebook.net *.googletagmanager.com *.google.lv *.salidzini.lv *.ceno.lv *.kurpirkt.lv *.googleusercontent.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.commerce-payment-services.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com maps.google.com maps.googleapis.com s7.addthis.com *.addthis.com https:\/\/z.moatads.com https:\/\/v1.addthisedge.com https:\/\/cdn.jsdelivr.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net https:\/\/unpkg.com *.hsforms.net *.hsforms.com *.facebook.com *.facebook.net infimv.com *.stripe.com *.decta.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/cdn.jsdelivr.net *.googleapis.com *.googletagmanager.com *.fontawesome.com *.gstatic.com *.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com maps.googleapis.com ekr.zdassets.com\/ *.google-analytics.com *.doubleclick.net *.googlesyndication.com https:\/\/geocode.arcgis.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src https: wss: 'self'; script-src https: wss: 'self' 'unsafe-eval' 'unsafe-inline'; style-src https: 'self' 'unsafe-inline'; img-src https: data: 'self'; font-src https: data: 'self'; report-uri \/csp-report","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https:\/\/fonts.gstatic.com data: *.fontawesome.com *.azureedge.net *.oct8ne.com *.klevu.com *.ksearchnet.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com ecommerce.raiffeisen.al *.upc.ua 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com www.google.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.addtoany.com *.gstatic.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.facebook.com *.googleapis.com *.trackedlink.net magefan.com cm.magefan.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.disqus.com *.cloudflare.com *.amazonaws.com *.facebook.com *.doubleclick.net *.pinterest.com *.taboola.com r1-t.trackedlink.net *.azureedge.net oct8necdneu.azureedge.net *.cdninstagram.com *.klevu.com *.ksearchnet.com https:\/\/firebasestorage.googleapis.com https:\/\/bank.paysera.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com connect.facebook.net *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ collector-1.audits.report *.auditiq.cloud *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.disqus.com *.cloudflare.com *.doubleclick.net *.facebook.net *.addtoany.com *.oct8ne.com *.taboola.com js.klevu.com *.ksearchnet.com *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.gstatic.com *.klevu.com *.ksearchnet.com https:\/\/fonts.bunny.net *.addtoany.com maxcdn.bootstrapcdn.com https:\/\/statsjs.klevu.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com collector-1.audits.report *.auditiq.cloud *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net *.doubleclick.net *.facebook.com *.oct8ne.com *.gstatic.com *.cloudflare.com *.klevu.com *.ksearchnet.com https:\/\/get.geojs.io *.avada.io http:\/\/dpm.demdex.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com 'self' data: https:\/\/widgets.trustedshops.com *.hsappstatic.net *.jsdelivr.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.youtube-nocookie.com *.braintreegateway.com *.paypal.com google.com *.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net js.mollie.com www.xtento.com *.googletagmanager.com caclk.com *.doubleclick.net *.googlesyndication.com *.maconline.de maconline.de oponas.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.awin1.com *.zenaps.com *.wepowerconnections.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https:\/\/images.unsplash.com https:\/\/www.mollie.com *.hsforms.net *.hsforms.com 'self' data: https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com *.awinblackfriday.com *.doubleclick.net *.googleapis.com www.google.ae www.google.al www.google.at www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.by www.google.ca www.google.ch www.google.ci www.google.cl www.google.co.ao www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zw www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gm www.google.gr www.google.hr www.google.hu www.google.ie www.google.iq www.google.it www.google.kz www.google.li www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sn www.google.so www.google.tn *.google.com *.googlesyndication.com *.maconline.de *.roeye.com *.trustedshops.com yastatic.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com lantern.roeyecdn.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com widget.freshworks.com m2epro.freshdesk.com cdn.kiprotect.com js.mollie.com *.hsforms.net *.hsforms.com *.gstatic.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com https:\/\/www.dwin1.com *.doubleclick.net *.googleapis.com *.googlesyndication.com *.jsdelivr.net *.kiprotect.com *.maconline.de *.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src fonts.googleapis.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com tagmanager.google.com fonts.google.com *.googletagmanager.com *.hsappstatic.net *.jsdelivr.net *.kiprotect.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com widget.freshworks.com m2epro.freshdesk.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site *.analytics.google.com *.googletagmanager.com *.awinblackfriday.com *.doubleclick.net *.googleapis.com www.google.ae www.google.al www.google.at www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.cl www.google.co.ao www.google.co.cr www.google.co.id www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.br www.google.com.co www.google.com.cy www.google.com.ec www.google.com.eg www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.mt www.google.com.mx www.google.com.na www.google.com.ng www.google.com.pe www.google.com.pk www.google.com.py www.google.com.sa www.google.com.tr www.google.com.ua www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.uk www.google.co.uz www.google.co.za www.google.co.zw www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.gr www.google.hr www.google.hu www.google.ie www.google.it www.google.kz www.google.lt www.google.lu www.google.lv www.google.md www.google.mu www.google.ne www.google.nl www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.se www.google.si www.google.sk www.google.tn *.googlesyndication.com *.maconline.de 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';, report-uri https:\/\/6789b68f-1d66-4713-b07a-512bc59f2728.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" default-src 'none' 'self'; script-src 'self' https:\/\/butterfly-cdn.masterworks.com https:\/\/sonic.masterworks.com https:\/\/cdn.mxpnl.com https:\/\/connect.facebook.net https:\/\/js.hs-analytics.net https:\/\/js-na1.hs-scripts.com https:\/\/js.hs-banner.com https:\/\/js.hsadspixel.net https:\/\/cdn.plaid.com https:\/\/sdk.onfido.com https:\/\/cdn.moderntreasury.com https:\/\/maps.googleapis.com https:\/\/applepay.cdn-apple.com https:\/\/static.cloudflareinsights.com https:\/\/api.cloudsponge.com https:\/\/cdn.addevent.com; connect-src 'self' https:\/\/account.masterworks.com https:\/\/api.masterworks.com\/graphql wss:\/\/api.masterworks.com\/graphqlws https:\/\/butterfly-cdn.masterworks.com https:\/\/butterfly-api.masterworks.com https:\/\/api.segment.io https:\/\/sonic.masterworks.com https:\/\/api-js.mixpanel.com https:\/\/api.hubapi.com https:\/\/*.ingest.sentry.io https:\/\/*.onfido.com https:\/\/maps.googleapis.com https:\/\/cloudflareinsights.com https:\/\/api.cloudsponge.com https:\/\/collect.cloudsponge.com https:\/\/cdn.addevent.com; img-src 'self' data: blob: https:\/\/cdn.masterworks.com https:\/\/static.masterworks.io https:\/\/s3.amazonaws.com\/works.masterworks.io\/* https:\/\/www.facebook.com https:\/\/track.hubspot.com https:\/\/images.ctfassets.net https:\/\/contentful.masterworks.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/api.cloudsponge.com; style-src 'self' 'unsafe-inline' https:\/\/api.cloudsponge.com https:\/\/cdn.addevent.com; frame-ancestors 'none'; form-action 'self'; manifest-src 'self'; font-src 'self' https:\/\/fonts.gstatic.com; media-src 'self' blob: https:\/\/cdn.masterworks.com https:\/\/static.masterworks.io https:\/\/videos.ctfassets.net; worker-src 'self' blob:; base-uri 'none'; frame-src https:\/\/cdn.plaid.com https:\/\/sdk.onfido.com https:\/\/app.moderntreasury.com https:\/\/sso.tabapay.com https:\/\/cdn.addevent.com https:\/\/calendly.com https:\/\/player.vimeo.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" frame-src 'self'; report-uri https:\/\/browser-intake-datadoghq.eu\/api\/v2\/logs?dd-api-key=pub562a4db9f5cdd594e2b1fb6204de1caf&dd-evp-origin=content-security-policy&ddsource=csp-report","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' *.googletagmanager.com *.cookiebot.eu *.cookiebot.com *.google.com *.gstatic.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' fonts.googleapis.com fonts.gstatic.com 'unsafe-inline'; object-src 'none'; base-uri 'self'; connect-src 'self' *.b2clogin.com *.vandijk.nl *.studieshop.be *.google-analytics.com *.google.com *.cookiebot.com *.monitor.azure.com *.applicationinsights.azure.com *.services.visualstudio.com *.azure-api.net *.cookiebot.eu; font-src 'self' *.gstatic.com fonts.googleapis.com data:; frame-src 'self' *.googletagmanager.com *.cookiebot.eu *.cookiebot.com *.google-analytics.com *.powerbi.com vandijk.eziner.nl *.b2clogin.com *.google.com login.microsoftonline.com; img-src 'self' *.vandijk.nl *.studieshop.be *.cookiebot.com *.cookiebot.eu *.google-analytics.com 6y0n6ghym354.b-cdn.net 4wyh1ikoms18.b-cdn.net *.usercentrics.eu data:; manifest-src 'self'; media-src 'self'; worker-src 'self' blob:; upgrade-insecure-requests; report-to \/_\/csp-reports","count":2},{"content-security-policy-report-only":" default-src 'self' *.ultramusicfestival.com ultramusicfestival.com umfworldwide.com ultrapassport.com *.ultrapassport.net resistancemusic.com *.resistancemusic.com roadtoultra.com *.roadtoultra.com; font-src 'self' *.ultramusicfestival.com ultramusicfestival.com umfworldwide.com ultrapassport.com *.ultrapassport.net resistancemusic.com *.resistancemusic.com roadtoultra.com *.roadtoultra.com data: *.olark.com fonts.gstatic.com; script-src 'self' *.ultramusicfestival.com ultramusicfestival.com umfworldwide.com ultrapassport.com *.ultrapassport.net resistancemusic.com *.resistancemusic.com roadtoultra.com *.roadtoultra.com 'unsafe-inline' 'unsafe-eval' *.turn.com static.cloudflareinsights.com ajax.cloudflare.com *.youtube.com *.ytimg.com *.datadoghq-browser-agent.com *.getclicky.com clicky.com *.twitter.com *.ads-twitter.com *.facebook.net analytics.tiktok.com www.recaptcha.net recaptcha.net www.gstatic.com www.gstatic.cn www.google.com *.olark.com *.adroll.com *.googletagmanager.com tagmanager.google.com analytics.google.com google-analytics.com *.google-analytics.com *.g.doubleclick.net *.doubleclick.net *.googleadservices.com *.google.com *.googlesyndication.com *.googletagservices.com; style-src 'self' *.ultramusicfestival.com ultramusicfestival.com umfworldwide.com ultrapassport.com *.ultrapassport.net resistancemusic.com *.resistancemusic.com roadtoultra.com *.roadtoultra.com 'unsafe-inline' *.getclicky.com clicky.com *.olark.com *.googletagmanager.com tagmanager.google.com *.google.com fonts.googleapis.com; img-src 'self' *.ultramusicfestival.com ultramusicfestival.com umfworldwide.com ultrapassport.com *.ultrapassport.net resistancemusic.com *.resistancemusic.com roadtoultra.com *.roadtoultra.com 'unsafe-inline' data: *.turn.com secure.gravatar.com *.ytimg.com *.youtube.com *.getclicky.com *.twitter.com t.co *.facebook.com www.gstatic.com\/recaptcha *.olark.com *.adroll.com d.adroll.com *.googletagmanager.com analytics.google.com *.analytics.google.com google-analytics.com *.google-analytics.com *.gstatic.com *.google.com *.doubleclick.net *.g.doubleclick.net *.googlesyndication.com www.googleadservices.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat https:\/\/umfworldwide.com https:\/\/ultrapassport.com https:\/\/umfstage.com https:\/\/london.resistancemusic.com https:\/\/poland.resistancemusic.com https:\/\/resistanceibiza.com https:\/\/ultrasouthafrica.com https:\/\/ultraeurope.com https:\/\/ultrabuenosaires.com https:\/\/ultranewzealand.com https:\/\/ultraperu.com https:\/\/ultraaustralia.com https:\/\/resistancemiami.com https:\/\/ultramusicfestival.com https:\/\/medellin.resistancemusic.com https:\/\/santiago.resistancemusic.com https:\/\/lima.resistancemusic.com https:\/\/ultrataiwan.com https:\/\/guatemala.roadtoultra.com https:\/\/ecuador.roadtoultra.com https:\/\/ultrajapan.com https:\/\/ultramexico.com https:\/\/ultrahongkong.com https:\/\/ultrakorea.com https:\/\/resistancemusic.com https:\/\/ultrabali.com https:\/\/ultrachile.com https:\/\/thailand.roadtoultra.com https:\/\/india.roadtoultra.com https:\/\/ultraabudhabi.com https:\/\/costadelsol.ultrabeach.com https:\/\/costarica.roadtoultra.com https:\/\/ultrabrasil.com https:\/\/buenosaires.resistancemusic.com https:\/\/guatemala.resistancemusic.com https:\/\/colombia.roadtoultra.com https:\/\/australia.resistancemusic.com https:\/\/mexico.resistancemusic.com https:\/\/santacruz.resistancemusic.com https:\/\/panama.resistancemusic.com https:\/\/sanjose.resistancemusic.com https:\/\/uruguay.resistancemusic.com https:\/\/ultrasingapore.com https:\/\/quito.resistancemusic.com https:\/\/ultrabeijing.com https:\/\/ultrashanghai.com https:\/\/philippines.roadtoultra.com https:\/\/paraguay.roadtoultra.com https:\/\/roadtoultra.com https:\/\/bolivia.roadtoultra.com https:\/\/*.umfworldwide.com https:\/\/*.ultrapassport.com https:\/\/*.umfstage.com https:\/\/*.london.resistancemusic.com https:\/\/*.poland.resistancemusic.com https:\/\/*.resistanceibiza.com https:\/\/*.ultrasouthafrica.com https:\/\/*.ultraeurope.com https:\/\/*.ultrabuenosaires.com https:\/\/*.ultranewzealand.com https:\/\/*.ultraperu.com https:\/\/*.ultraaustralia.com https:\/\/*.resistancemiami.com https:\/\/*.ultramusicfestival.com https:\/\/*.medellin.resistancemusic.com https:\/\/*.santiago.resistancemusic.com https:\/\/*.lima.resistancemusic.com https:\/\/*.ultrataiwan.com https:\/\/*.guatemala.roadtoultra.com https:\/\/*.ecuador.roadtoultra.com https:\/\/*.ultrajapan.com https:\/\/*.ultramexico.com https:\/\/*.ultrahongkong.com https:\/\/*.ultrakorea.com https:\/\/*.resistancemusic.com https:\/\/*.ultrabali.com https:\/\/*.ultrachile.com https:\/\/*.thailand.roadtoultra.com https:\/\/*.india.roadtoultra.com https:\/\/*.ultraabudhabi.com https:\/\/*.costadelsol.ultrabeach.com https:\/\/*.costarica.roadtoultra.com https:\/\/*.ultrabrasil.com https:\/\/*.buenosaires.resistancemusic.com https:\/\/*.guatemala.resistancemusic.com https:\/\/*.colombia.roadtoultra.com https:\/\/*.australia.resistancemusic.com https:\/\/*.mexico.resistancemusic.com https:\/\/*.santacruz.resistancemusic.com https:\/\/*.panama.resistancemusic.com https:\/\/*.sanjose.resistancemusic.com https:\/\/*.uruguay.resistancemusic.com https:\/\/*.ultrasingapore.com https:\/\/*.quito.resistancemusic.com https:\/\/*.ultrabeijing.com https:\/\/*.ultrashanghai.com https:\/\/*.philippines.roadtoultra.com https:\/\/*.paraguay.roadtoultra.com https:\/\/*.roadtoultra.com https:\/\/*.bolivia.roadtoultra.com; media-src 'self' *.ultramusicfestival.com ultramusicfestival.com umfworldwide.com ultrapassport.com *.ultrapassport.net resistancemusic.com *.resistancemusic.com roadtoultra.com *.roadtoultra.com *.olark.com; connect-src 'self' *.ultramusicfestival.com ultramusicfestival.com umfworldwide.com ultrapassport.com *.ultrapassport.net resistancemusic.com *.resistancemusic.com roadtoultra.com *.roadtoultra.com cloudflareinsights.com *.datadoghq.com *.browser-intake-datadoghq.com *.getclicky.com *.facebook.com analytics.tiktok.com analytics.pangle-ads.com *.olark.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.analytics.google.com *.g.doubleclick.net *.doubleclick.net *.google.com *.googlesyndication.com www.googletagservices.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat; frame-src 'self' *.ultramusicfestival.com ultramusicfestival.com umfworldwide.com ultrapassport.com *.ultrapassport.net resistancemusic.com *.resistancemusic.com roadtoultra.com *.roadtoultra.com *.zohopublic.com *.apple.com open.spotify.com *.soundcloud.com *.youtube.com *.youtube-nocookie.com www.facebook.com *.recaptcha.net recaptcha.net www.google.com recaptcha.google.com *.olark.com *.googletagmanager.com bid.g.doubleclick.net *.google.com *.doubleclick.net *.googlesyndication.com; child-src *.youtube.com *.youtube-nocookie.com *.googletagmanager.com; worker-src www.recaptcha.net; object-src *.googlesyndication.com; report-uri https:\/\/csp-report.browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub7c55919a7d54d6386d0f0b19bc82e82f&dd-evp-origin=content-security-policy&ddsource=csp-report;","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net *.tawk.to www.bedrukken.nl www.logomokken.nl www.stravers.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com https:\/\/www.googletagmanager.com\/ https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com js.mollie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https:\/\/images.unsplash.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ magefan.com cm.magefan.com *.disqus.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com https:\/\/www.mollie.com flagpedia.net https:\/\/img.youtube.com https:\/\/firebasestorage.googleapis.com maps.gstatic.com www.google.nl tawk.link *.tawk.to s3.amazonaws.com dev.visualwebsiteoptimizer.com www.google.com.bd www.google.be www.google.fr www.google.ch www.google.pl www.google.com.pk pagead2.googlesyndication.com stats.g.doubleclick.net www.google.es www.google.pt mageside.com www.bedrukken.nl www.logomokken.nl www.stravers.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https:\/\/maps.googleapis.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ *.disqus.com https:\/\/cdn.jsdelivr.net https:\/\/*.google.com *.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com js.mollie.com maps.googleapis.com *.avada.io *.shopify.com *.tawk.to static.cloudflareinsights.com static.hotjar.com script.hotjar.com d3niuqph2rteir.cloudfront.net dev.visualwebsiteoptimizer.com sc-static.net www.bedrukken.nl www.logomokken.nl www.stravers.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com https:\/\/cdn.jsdelivr.net maxcdn.bootstrapcdn.com https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net *.tawk.to embed.tawk.to www.bedrukken.nl www.logomokken.nl www.stravers.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ *.tawk.to www.bedrukken.nl www.logomokken.nl www.stravers.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com www.gstatic.com maps.googleapis.com https:\/\/get.geojs.io *.avada.io dev.visualwebsiteoptimizer.com www.google.nl pagead2.googlesyndication.com *.tawk.to vc.hotjar.io freeipapi.com api.gostellar.app wss:\/\/*.tawk.to www.google.com.bd www.google.be www.google.es www.google.com.pk www.google.hr www.google.pl metrics.hotjar.io stats.g.doubleclick.net www.google.ch www.google.pt www.google.fr www.bedrukken.nl www.logomokken.nl www.stravers.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.bedrukken.nl www.logomokken.nl www.stravers.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/unpkg.com https:\/\/cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdn.jsdelivr.net; font-src 'self' https:\/\/fonts.gstatic.com https:\/\/cdn.jsdelivr.net data:; img-src 'self' data: blob: https:; media-src 'self' blob: data:; worker-src 'self' blob: https:\/\/cdn.jsdelivr.net; connect-src 'self' https: wss:; frame-src 'self' https:","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self' https:\/\/forms.hsforms.com https:\/\/webto.salesforce.com; frame-ancestors 'self'; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/*.hubspotusercontent-na1.net; img-src 'self' data: blob: https:; media-src 'self' blob: https:; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/play.hubspotvideo.com https:\/\/app.hubspot.com https:\/\/app.trinethire.com https:\/\/forms.hsforms.com https:\/\/intercom-sheets.com; connect-src 'self' https:\/\/*.soundthinking.com https:\/\/*.tmxio.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.posthog.com https:\/\/*.hubspot.com https:\/\/*.hubapi.com https:\/\/*.hsforms.com https:\/\/static.hsappstatic.net https:\/\/*.intercom.io wss:\/\/*.intercom.io https:\/\/*.cookielaw.org https:\/\/*.onetrust.com https:\/\/*.leadfeeder.com https:\/\/*.lfeeder.com https:\/\/*.linkedin.com https:\/\/*.doubleclick.net https:\/\/cs.lf-discover.com https:\/\/*.hubspotusercontent-na1.net; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests; script-src 'self' https:\/\/www.googletagmanager.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/snap.licdn.com https:\/\/sc.lfeeder.com https:\/\/lens.tmxio.com https:\/\/widget.intercom.io https:\/\/cdn.cookielaw.org https:\/\/js.hsforms.net https:\/\/js.hs-analytics.net https:\/\/js.usemessages.com https:\/\/js.hsadspixel.net https:\/\/js.hubspot.com https:\/\/js.hs-banner.com https:\/\/static.hsappstatic.net https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/us-assets.i.posthog.com https:\/\/cdn.jsdelivr.net https:\/\/cs.lf-discover.com https:\/\/*.hubspotusercontent-na1.net 'unsafe-inline'; style-src 'self' https:\/\/cdn.cookielaw.org https:\/\/fonts.googleapis.com https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/*.intercom.io 'sha384-DLJp3qhLmkudlqf4mXciKN\/mkU96wiy+AprHKMDIYzEom1dhk6UUHp+OsvLYD3Vc' 'sha384-ef9rscQ8JsdJm9AkU7ZttTXi1MoMfgkrwFmhqpy19HSpNY6AbLfd1muVmM4fMr8F' 'sha384-oGur53gASKSDoRt59K+vzhyCaWd5pLZG3EWGjRLI2ba2H0jk\/iV9sWvHW+SrfyB1' 'sha384-2nQlirwD+wX9SIKXYEUDjiKParhMFLFi\/8xNTQP6fvRau78F0XX93pR8\/9HsY+C5' 'sha384-OLBgp1GsljhM2TJ+sbHjaiH9txEUvgdDTAzHv2P24donTt6\/529l+9Ua0vFImLlb'; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https:\/\/cdn.cookielaw.org https:\/\/fonts.googleapis.com https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/*.intercom.io;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.certcapture.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * *.googleapis.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com www.gstatic.com *.trackedlink.net *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com cdn-cookieyes.com dev.visualwebsiteoptimizer.com px.ads.linkedin.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.magento-datasolutions.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.certcapture.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com js.klevu.com *.ksearchnet.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.googleapis.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net dev.visualwebsiteoptimizer.com rum.hlx.page cdn.shipup.co tracker.marinsm.com marinsoftware.com *.amleo.com snap.licdn.com script.hotjar.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klevu.com *.ksearchnet.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com cdn.shipup.co https:\/\/statsjs.klevu.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com cdn.shipup.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com maps.googleapis.com *.googleapis.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app *.amleo.com ws.hotjar.com content.hotjar.io px.ads.linkedin.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src *.googleapis.com *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.restorio.cz *.restorio.sk *.restorio.eu *.vegadesign.cz *.vegadesign.local 'self' data: *.twitter.com *.twimg.com *.zopim.com https:\/\/www.ppl.cz https:\/\/api.mapy.cz https:\/\/api.dhl.com data: 'self' 'unsafe-inline'; form-action self *.restorio.cz *.restorio.sk *.restorio.eu *.vegadesign.cz *.vegadesign.local *.facebook.com *.twitter.com yaby.eu 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.restorio.cz 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.google.com www.facebook.com platform.twitter.com *.restorio.cz *.restorio.sk *.restorio.eu *.vegadesign.cz *.vegadesign.local *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.google.com *.googletagmanager.com *.ladesk.com elibro.ladesk.com *.ec1.vbus.apps.ladesk.com *.gopay.cz *.gopay.com *.hotjar.com *.outfindo.com *.packeta.com *.pinterest.com *.twitter.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com data: *.facebook.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.restorio.cz *.restorio.sk *.restorio.eu media.restorio.cz media.restorio.sk media.restorio.eu yaby.eu *.yaby.eu *.vegadesign.cz *.vegadesign.local blob: *.ceneo.pl *.bing.com *.bing.net *.clarity.ms *.doofinder.com eu1-doofinderuser.s3.amazonaws.com *.doubleclick.net *.g.doubleclick.net *.facebook.net *.google.at *.google.be *.google.bg *.google.com google.com *.google.com.au *.google.com.cr *.google.com.cy *.google.com.do *.google.com.eg *.google.com.mt *.google.com.mx *.google.com.ph *.google.com.tr *.google.com.ua *.google.co.il *.google.co.in *.google.co.jp *.google.co.ma *.google.co.nz *.google.co.th *.google.co.tw *.google.co.uk *.google.ae *.google.by *.google.ca *.google.ch *.google.cz *.google.de *.google.dk *.google.es *.google.fi *.google.fr *.google.gr *.google.hr *.google.hu *.google.ie *.google.is *.google.it *.google.lu *.google.lv *.google.md *.google.me *.google.nl *.google.no *.google.pl *.google.pt *.google.ro *.google.ru *.google.rs *.google.se *.google.sk *.google.tn *.google.tr *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.googleusercontent.com *.googlesyndication.com *.heureka.cz *.heureka.sk im9.cz *.imedia.cz *.packeta.com *.seznam.cz t.co *.tiktok.com img.tiplicdn.com *.twiago.com *.twitter.com *.twimg.com *.ytimg.com *.zopim.com *.ziskejte.cz *.zbozi.cz *.criteo.com *.criteo.net ad.360yield.com eb2.3lift.com *.adform.net *.adnxs.com *.adnxs.net *.bidswitch.net r.casalemedia.com *.emxdgt.com id5-sync.com matching.ivitrack.com beacon.krxd.net *.1rx.io exchange.mediavine.com contextual.media.net visitor.omnitagjs.com sync.outbrain.com jadserve.postrelease.com simage2.pubmatic.com pixel.rubiconproject.com match.sharethrough.com rtb-csync.smartadserver.com sync-t1.taboola.com\/ criteo-sync.teads.tv criteo-partners.tremorhub.com sync.targeting.unrulymedia.com *.yahoo.net ad.yieldlab.net sync-criteo.ads.yieldmo.com https:\/\/www.ppl.cz https:\/\/api.mapy.cz https:\/\/api.dhl.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ https:\/\/browser.sentry-cdn.com *.googletagmanager.com *.facebook.net cdn.jsdelivr.net connect.facebook.net twitter.com platform.twitter.com *.restorio.cz *.restorio.sk *.restorio.eu static.restorio.cz static.restorio.sk static.restorio.eu *.vegadesign.cz *.vegadesign.local *.addthis.com *.adform.net *.bing.com *.cloudflare.com *.ceneo.pl *.clarity.ms *.cloudflareinsights.com *.cookiehub.com cookiehub.net *.cookiehub.eu restorio.bot.coworkers.ai *.criteo.com *.criteo.net *.daktela.com *.dognet.sk login.dognet.sk *.doofinder.com *.doubleclick.net *.facebook.com *.fontawesome.com *.googleadservices.com *.google-analytics.com *.googlesyndication.com *.google.com *.google.cz *.gopay.cz *.gopay.com *.hotjar.com im9.cz *.im9.cz *.imedia.cz *.ladesk.com *.outfindo.com *.packeta.com *.pinterest.com *.pinimg.com *.selltoro.com *.seznam.cz sc-static.net *.srovname.cz stapecdn.com *.tiktok.com *.ads-twitter.com *.twitter.com *.twimg.com *.zbozi.cz *.zdassets.com *.zopim.com https:\/\/www.ppl.cz https:\/\/api.mapy.cz https:\/\/api.dhl.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.restorio.cz *.restorio.sk *.restorio.eu static.restorio.cz static.restorio.sk static.restorio.eu *.vegadesign.cz *.vegadesign.local *.cloudflare.com *.cookiehub.com *.cookiehub.eu cookiehub.net *.doofinder.com *.googleapis.com *.gstatic.com *.twitter.com *.twimg.com *.zopim.com https:\/\/www.ppl.cz https:\/\/api.mapy.cz https:\/\/api.dhl.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com *.googleapis.com https:\/\/*.ingest.sentry.io *.google-analytics.com *.restorio.cz *.restorio.sk *.restorio.eu yaby.eu *.vegadesign.cz *.vegadesign.local *.bing.com *.bing.net *.clarity.ms *.cookiehub.com *.cookiehub.net cookiehub.net *.cookiehub.eu restorio.bot.coworkers.ai wss:\/\/restorio.bot.coworkers.ai *.criteo.com *.criteo.net *.doofinder.com wss:\/\/eu1-layer.doofinder.com wss:\/\/eu1-recommendations.doofinder.com *.doubleclick.net *.facebook.com *.facebook.net google.com *.google.com *.google.cz *.google.sk adservice.google.com *.googleadservices.com *.googlesyndication.com *.gopay.cz *.gopay.com *.outfindo.com *.packeta.com *.pinterest.com *.selltoro.com *.seznam.cz *.srovname.cz *.tiktok.com *.tiktokw.us *.twitter.com *.twimg.com *.yaby.eu *.zdassets.com wss:\/\/widget-mediator.zopim.com https:\/\/www.ppl.cz https:\/\/api.mapy.cz https:\/\/api.dhl.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.restorio.cz *.restorio.sk *.restorio.eu *.vegadesign.cz *.vegadesign.local *.gopay.cz *.gopay.com *.yaby.eu yaby.eu 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/sentry.vegadesign.cz\/api\/4\/security\/?sentry_key=aabf49608cca46b2bf8fb3c0ad2a8eba; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net https:\/\/d3js.org https:\/\/www.gstatic.com https:\/\/cse.google.com https:\/\/www.googleadservices.com cdn.jsdelivr.net https:\/\/cdn.ckeditor.com https:\/\/cdn.datatables.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com https:\/\/www.google.com https:\/\/www.lbtu.lv; script-src-elem 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net https:\/\/d3js.org https:\/\/www.gstatic.com https:\/\/cse.google.com https:\/\/www.googleadservices.com cdn.jsdelivr.net https:\/\/cdn.ckeditor.com https:\/\/cdn.datatables.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com https:\/\/www.google.com https:\/\/www.lbtu.lv; style-src 'self' 'report-sample' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdn.datatables.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/unpkg.com; style-src-elem 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdn.datatables.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/unpkg.com; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" default-src 'self' ; style-src 'self' 'unsafe-inline' optimize.google.com www.googletagmanager.com fonts.googleapis.com *.typekit.net *.yotpo.com *.myfonts.net *.cloudfront.net; font-src 'self' data: optimize.google.com fonts.gstatic.com *.abtasty.com *.dwin1.com *.typekit.net *.livechatinc.com snap.licdn.com *.tiktok.com static.ads-twitter.com ct.pinterest.com *.yotpo.com *.addthis.com *.moatads.com *.curalate.com *.cloudflare.com *.cloudfront.net; img-src 'self' data: *; base-uri 'self' ;  form-action *; frame-ancestors 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.sandersondesigngroup.com *.googleapis.com translate.google.com www.googleanalytics.com www.google-analytics.com www.googleoptimize.com www.googleadservices.com maps.googleapis.com polyfill.io player.vimeo.com connect.facebook.net *.klevu.com *.searchspring.com api.exponea.com s.pinimg.com intljs.rmtag.com assistjs.skimresources.com googleads.g.doubleclick.net bat.bing.com t.contentsquare.net track.sweetanalytics.com *.yotpo.com snap.licdn.com static.ads-twitter.com *.tiktok.com *.abtasty.com *.adobedc.net *.dwin1.com *.livechatinc.com *.voyado.com *.ksearchnet.com *.hotjar.com *.veinteractive.com *.mouseflow.com *.sleeknote.com *.stripe.com *.zdassets.com *.trustpilot.com *.clarity.ms *.addthis.com *.addthisedge.com *.moatads.com *.clearpay.co.uk *.amplitude.com *.sagepay.com snapppt.com *.snapppt.com; connect-src 'self' www.mage.sandersondesigngroup.com *.sandersondesigngroup.com *.google-analytics.com *.klevu.com *.searchspring.com api.exponea.com ct.pinterest.com *.abtasty.com *.adobedc.net *.tiktok.com *.yotpo.com maps.googleapis.com vimeo.com *.addthis.com *.moatads.com *.dwin1.com *.54proxy.com *.ksearchnet.com *.hotjar.com *.hotjar.io *.zdassets.com *.clarity.ms *.amplitude.com *.sweetanalytics.com snapppt.com *.snapppt.com api.addressy.com *.zendesk.com; frame-src 'self' player.vimeo.com *.fls.doubleclick.net ct.pinterest.com vimeo.com secure.livechatinc.com *.addthis.com *.curalate.com *.54proxy.com *.hotjar.com *.stripe.com *.trustpilot.com *.paypal.com *.zendesk.com *.zdassets.com; worker-src 'self' ; media-src 'self' data: ;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'unsafe-inline' data: *.paypal.com *.yotpo.com eventstable.com *.eventstable.com *.atlaschairs.com *.globaleventsupply.com *.braintreegateway.com *.signifyd.com *.trustspot.io trustspot.io s3.amazonaws.com trustspot-app-assets.s3.amazonaws.com *.klaviyo.com stackpath.bootstrapcdn.com *.accessibly.app *.accessiblyapp.com *.octocom.ai data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'unsafe-inline' data: *.eventstable.com eventstable.com *.atlaschairs.com *.globaleventsupply.com *.braintreegateway.com *.signifyd.com *.trustspot.io *.klaviyo.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'unsafe-inline' data: *.online-metrix.net *.signifyd.com www.google.com *.doubleclick.net *.eventstable.com eventstable.com *.atlaschairs.com *.globaleventsupply.com www.youtube.com www.youtube-nocookie.com *.vimeo.com *.demdex.net *.trustspot.io *.klaviyo.com www.socialintents.com *.octocom.ai *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com https:\/\/plumrocket.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.omtrdc.net *.yotpo.com *.bing.com *.signifyd.com *.online-metrix.net *.google.com p.adsymptotic.com *.linkedin.com *.atdmt.com *.eventstable.com eventstable.com *.atlaschairs.com *.globaleventsupply.com *.bbb.org *.scanalert.com *.cloudfront.net *.demdex.net *.klaviyo.com *.creditkey.com creditkey-assets.s3-us-west-2.amazonaws.com *.shopperapproved.com *.braintreegateway.com *.ravecapture.com ravecapture-app-assets.s3.amazonaws.com trustspot-logos.imgix.net trustspot-product-photos.imgix.net productphotos.trustspot.io *.roundprincemusic.com *.searchspring.io *.accessibly.app *.accessiblyapp.com *.octocom.ai *.facebook.com *.reddit.com *.hubspot.com *.hsforms.com *.clarity.ms www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ www.xtento.com cdn.xtento.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'unsafe-eval' data: www.google.com static.doubleclick.net maps.googleapis.com www.gstatic.com *.klaviyo.com *.signifyd.com static-na.payments-amazon.com a.optmnstr.com snap.licdn.com *.yotpo.com *.pushalert.co bat.bing.com www.socialintents.com www.clickcease.com *.paypal.com eventstable.com *.eventstable.com *.atlaschairs.com *.globaleventsupply.com bam.nr-data.net *.shopperapproved.com *.ravecapture.com trustspot.io cdn.jsdelivr.net *.adobetm.com *.roundprincemusic.com *.hotjar.com *.mouseflow.com *.online-metrix.net analytics.tiktok.com *.accessibly.app *.accessiblyapp.com rum.hlx.page *.octocom.ai https:\/\/www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.hs-scripts.com *.hscollectedforms.net *.hs-analytics.net *.hsadspixel.net *.usemessages.com *.hs-banner.com *.hsforms.net *.hsforms.com *.clarity.ms https:\/\/cdn.mida.so ddwl4m2hdecbv.cloudfront.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ www.xtento.com cdn.xtento.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.googletagmanager.com https:\/\/cdn-scripts.signifyd.com https:\/\/cdn-scripts.signifyd.com\/api\/script-tag.js https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com 'unsafe-inline' data: *.yotpo.com www.socialintents.com *.paypal.com eventstable.com *.eventstable.com *.atlaschairs.com *.globaleventsupply.com *.klaviyo.com *.braintreegateway.com *.signifyd.com *.ravecapture.com trustspot.io s3.amazonaws.com www.shopperapproved.com stackpath.bootstrapcdn.com unpkg.com *.vimeocdn.com www.youtube.com www.youtube-nocookie.com www.gstatic.com *.octocom.ai tagmanager.google.com *.hs-scripts.com *.hscollectedforms.net *.hs-analytics.net *.hsadspixel.net *.usemessages.com *.hs-banner.com assets.braintreegateway.com https:\/\/static.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'unsafe-inline' data: *.demdex.net *.yotpo.com api.omappapi.com *.klaviyo.com payments.amazon.com *.signifyd.com *.cardinalcommerce.com *.doubleclick.net eventstable.com *.eventstable.com *.atlaschairs.com *.globaleventsupply.com *.pushalert.co bam.nr-data.net www.creditkey.com *.ravecapture.com static-forms.klaviyo.com telemetrics.klaviyo.com https:\/\/px.ads.linkedin.com *.hotjar.io *.vimeocdn.com analytics.tiktok.com *.tiktokw.us jnn-pa.googleapis.com www.youtube.com www.youtube-nocookie.com www.gstatic.com *.accessibly.app *.accessiblyapp.com *.octocom.ai *.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app *.hubspot.com *.hscollectedforms.net *.hubapi.com *.hsappstatic.net *.hsforms.net *.hsforms.com https:\/\/bat.bing.com *.clarity.ms https:\/\/cdn.mida.so https:\/\/api.mida.so https:\/\/api-us.mida.so ddwl4m2hdecbv.cloudfront.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.pinterest.com *.pinterdev.com commerce-app.pintergration.com https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.klaviyo.com fonts.googleapis.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/cdn.loadbee.com *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud www.google.com.ua ts.tradetracker.net www.magmodules.eu www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/static.cloudflareinsights.com https:\/\/cdn.loadbee.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud tm.tradetracker.net www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/availability.loadbee.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com fonts.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl\/mapsplatform_google_com","count":2},{"content-security-policy-report-only":" default-src 'self' https:; connect-src 'self' https: wss: javascript:; font-src 'self' data: use.typekit.net fonts.gstatic.com *.cloudfront.net fonts.googleapis.com assets.parentsquare.com assets.sandbox.parentsquare.com assets.staging.parentsquare.com themes.googleusercontent.com; form-action 'self' https:; frame-ancestors 'self'; img-src 'self' blob: data: https: pbs.twimg.com; media-src 'self' data: blob: https:; object-src 'self' parentsquare-restricted-data-production.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; upgrade-insecure-requests; worker-src 'self' blob:; report-uri \/csp_report","count":2},{"content-security-policy-report-only":" default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' https:; frame-ancestors 'none'; object-src 'none'; report-to csp-endpoint; report-uri https:\/\/www.marken.com\/api\/csp-report","count":2},{"content-security-policy-report-only":" frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; style-src-elem app.leadfox.co blog.clubtissus.com www.clubtissus.com fonts.googleapis.com; form-action www.facebook.com payflowlink.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com connect.facebook.net graph.facebook.com https:\/\/seo.mageplaza.com *.facebook.com 'self' 'unsafe-inline'; img-src www.facebook.com ct.pinterest.com google.com www.google.com www.google.ca admin.thefabricclub.ca data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com www.apptrian.com facebook.com connect.facebook.net graph.facebook.com https:\/\/firebasestorage.googleapis.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src-elem script.hotjar.com www.googletagmanager.com www.clubtissus.com clubtissus.com www.thefabricclub.ca www.google-analytics.com static.hotjar.com www.youtube.com s.pinimg.com google.com connect.facebook.net app.leadfox.co blog.clubtissus.com www.google.com www.gstatic.com 'sha256-B4yPHKaXnvFWtRChIbabYmUBFZdVfKKXHbWtWidDVF8=-0'; frame-src www.google.com vars.hotjar.com www.facebook.com payflowlink.paypal.com ct.pinterest.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com connect.facebook.net graph.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; style-src fonts.googleapis.com *.adobe.com https:\/\/fonts.googleapis.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; font-src fonts.gstatic.com www.paypalobjects.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/fonts.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; script-src www.google-analytics.com www.googletagmanager.com www.google.com www.gstatic.com static.hotjar.com s.pinimg.com connect.facebook.net clubtissus.com www.clubtissus.com www.thefabricclub.ca assets.adobedtm.com *.adobe.com www.googleadservices.com googleads.g.doubleclick.net analytics.google.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.apptrian.com facebook.com www.facebook.com graph.facebook.com *.avada.io *.shopify.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; connect-src www.google-analytics.com ct.pinterest.com in.hotjar.com stats.g.doubleclick.net ws17.hotjar.com wss:\/\/ws17.hotjar.com blog.clubtissus.com rest.leadfox.co app.leadfox.co dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com https:\/\/widgets.trustedshops.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ bid.g.doubleclick.net https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.google.com js.mollie.com www.xtento.com consentcdn.cookiebot.com consentcdn.cookiebot.eu 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https:\/\/images.unsplash.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com https:\/\/www.mollie.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com imgsct.cookiebot.com imgsct.cookiebot.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.google.com js.mollie.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com consent.cookiebot.com consent.cookiebot.eu 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https:\/\/static.klaviyo.com https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site *.google-analytics.com *.analytics.google.com *.googletagmanager.com consentcdn.cookiebot.com consentcdn.cookiebot.eu 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com https:\/\/geowidget.easypack24.net *.googleapis.com data: *.fontawesome.com https:\/\/widgets.trustedshops.com 'self' data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https:\/\/pinterest.com https:\/\/www.pinterest.com appleid.apple.com 'self' 'self' 'unsafe-inline'; frame-ancestors pay.google.com www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com pay.google.com apm.przelewy24.pl https:\/\/geowidget-app.inpost.pl\/ https:\/\/sandbox-easy-geowidget.easypack24.net\/ *.instagram.com js.mollie.com 'self' integrations.etrusted.com consentcdn.cookiebot.eu pudofinder.dpd.com.pl  *.facebook.com *.pinterest.com payment-widget.przelewy24.pl 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io tile.openstreetmap.org mapa.orlenpaczka.pl ruch-osm.sysadvisors.pl static.przelewy24.pl www.gstatic.com gstatic.com https:\/\/geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org https:\/\/images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.cdninstagram.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com magefan.com cm.magefan.com *.facebook.com https:\/\/www.mollie.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com 'self' integrations.etrusted.com consentcdn.cookiebot.eu c pagead2.googlesyndication.com bat.bing.com *.google.pl *.etrusted.com *.klarna.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com polyfill.io apis.google.com mapa.orlenpaczka.pl sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl https:\/\/geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org https:\/\/maps.googleapis.com https:\/\/player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com *.instagram.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googletagmanager.com *.facebook.net js.mollie.com applepay.cdn-apple.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com 'self' integrations.etrusted.com consent.cookiebot.eu *.pinimg.com *.tiktok.com bat.bing.com *.clarity.ms *.pinterest.com consentcdn.cookiebot.eu *.fontawesome.com 'sha256-Go1QIADXFiD0buF9JrRxW0PJxLZe+fGmnWVsCyISbfA=' 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/geowidget.easypack24.net https:\/\/geowidget.inpost.pl *.googleapis.com *.fontawesome.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline' integrations.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https:\/\/geowidget.easypack24.net *.cdninstagram.com 'self' 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io nominatim.openstreetmap.org sandbox.przelewy24.pl secure.przelewy24.pl wss:\/\/ws.przelewy24.pl wss:\/\/sandbox-ws.przelewy24.pl wss:\/\/secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com *.easypack24.net *.inpost.pl *.openstreetmap.org https:\/\/maps.googleapis.com https:\/\/player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site 'self' integrations.etrusted.com consentcdn.cookiebot.eu c pagead2.googlesyndication.com *.stape.de *.pinterest.com bat.bing.com *.tiktok.com *.clarity.ms *.pinimg.com *.fontawesome.com *.tiktokw.us *.doubleclick.net payment-widget.przelewy24.pl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/static.hivebrite.com https:\/\/*.hivebrite.com https:\/\/*.cloudfront.net https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/www.gstatic.com https:\/\/api.mapbox.com https:\/\/*.launchdarkly.com https:\/\/assets.zendesk.com https:\/\/static.zdassets.com https:\/\/*.zendesk.com https:\/\/widget.intercom.io https:\/\/*.intercomcdn.com https:\/\/app.planhat.com https:\/\/*.usejimo.com https:\/\/cdn.walkme.com https:\/\/consent.cookiebot.com https:\/\/*.cookiebot.com https:\/\/connect.facebook.net https:\/\/assets2.omniapp.co https:\/\/hivebrite-external.embed-omniapp.co; style-src 'self' 'unsafe-inline' https: data:; font-src 'self' data: https:\/\/static.hivebrite.com https:\/\/fonts.gstatic.com https:\/\/fonts.bunny.net; connect-src 'self' https:\/\/*.hivebrite.com https:\/\/*.cloudfront.net https:\/\/*.launchdarkly.com wss:\/\/*.launchdarkly.com https:\/\/*.ably.net wss:\/\/*.ably.net https:\/\/*.ably.io wss:\/\/*.ably.io https:\/\/*.datadoghq.com https:\/\/*.datadoghq.eu https:\/\/*.sentry.io https:\/\/*.sendbird.com wss:\/\/*.sendbird.com https:\/\/maps.googleapis.com https:\/\/api.mapbox.com https:\/\/*.tiles.mapbox.com https:\/\/www.google-analytics.com https:\/\/*.intercom.io wss:\/\/*.intercom.io https:\/\/app.planhat.com https:\/\/*.usejimo.com https:\/\/*.omniapp.co https:\/\/*.zendesk.com https:\/\/*.zopim.com https:\/\/*.zdassets.com https:\/\/api.klipy.com https:\/\/graph.facebook.com https:\/\/*.facebook.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; frame-src 'self' https:; worker-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' hivebrite.com; form-action 'self' https:; report-uri \/csp-reports","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/static.klaviyo.com https:\/\/www.paypal.com https:\/\/*.paypal.com https:\/\/web.squarecdn.com https:\/\/sandbox.web.squarecdn.com https:\/\/*.squarecdn.com https:\/\/*.squareup.com https:\/\/pay.google.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/js.sentry-cdn.com https:\/\/*.algolianet.com https:\/\/*.algolia.net https:\/\/us.i.posthog.com https:\/\/connect.facebook.net https:\/\/*.yotpo.com https:\/\/cdn-widgetsrepository.yotpo.com https:\/\/staticw2.yotpo.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/web.squarecdn.com https:\/\/*.squarecdn.com https:\/\/*.yotpo.com https:\/\/staticw2.yotpo.com; font-src 'self' https:\/\/fonts.gstatic.com data: https:\/\/*.squarecdn.com https:\/\/square-fonts-production-f.squarecdn.com https:\/\/d1g145x70srn7h.cloudfront.net https:\/\/cash-f.squarecdn.com; img-src 'self' https: data: blob:; connect-src 'self' https: https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/connect.squareup.com https:\/\/pci-connect.squareup.com https:\/\/*.squareup.com https:\/\/pay.google.com https:\/\/api.stripe.com https:\/\/r.stripe.com https:\/\/m.stripe.com https:\/\/merchant-ui-api.stripe.com https:\/\/*.stripe.com https:\/\/*.hcaptcha.com https:\/\/*.yotpo.com https:\/\/api.yotpo.com https:\/\/cdn-widgetsrepository.yotpo.com https:\/\/staticw2.yotpo.com; frame-src https:\/\/www.paypal.com https:\/\/*.paypal.com https:\/\/www.google.com https:\/\/*.squareup.com https:\/\/*.squarecdn.com https:\/\/pay.google.com https:\/\/*.arcot.com https:\/\/*.cardinalcommerce.com https:\/\/centinelapi.cardinalcommerce.com https:\/\/js.stripe.com https:\/\/hooks.stripe.com https:\/\/*.stripe.com https:\/\/b.stripecdn.com https:\/\/*.hcaptcha.com https:\/\/*.yotpo.com; form-action 'self' https:\/\/*.arcot.com https:\/\/*.cardinalcommerce.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none'","count":2},{"content-security-policy-report-only":" base-uri 'self'; default-src 'self' https:; connect-src 'self' data: blob: h https:\/\/ga.jspm.io *.sentry.io https:\/\/consentcdn.cookiebot.com https:\/\/consent.cookiebot.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.googleapis.com *.google.com https:\/\/*.gstatic.com https:\/\/static.raspberrypi.org; font-src 'self' https: data: https:\/\/fonts.gstatic.com https:\/\/*.hotjar.com; frame-src 'self' https:\/\/challenges.cloudflare.com https:\/\/consentcdn.cookiebot.com *.google.com e.issuu.com prezi.com storify.com youtube.com www.youtube.com youtube-nocookie.com www.youtube-nocookie.com; img-src 'self' https: data: https:\/\/*.raspberrypi.org https:\/\/*.hotjar.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com *.google.com *.googleusercontent.com; media-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'unsafe-inline' blob: https:\/\/static.raspberrypi.org\/js\/global-nav-web-component\/ https:\/\/challenges.cloudflare.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com *.google.com https:\/\/*.ggpht.com *.googleusercontent.com https:\/\/*.googletagmanager.com https:\/\/*.hotjar.com https:\/\/browser.sentry-cdn.com https:\/\/js.sentry-cdn.com; style-src 'self' https: 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/*.hotjar.com https:\/\/static.raspberrypi.org\/styles\/design-system\/ https:\/\/*.cookiebot.com; worker-src blob:; report-uri https:\/\/o17504.ingest.us.sentry.io\/api\/4507769026707457\/security\/?sentry_key=53fc037dc5040a1a9fe07334577adc13&sentry_environment=production","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https:\/\/fonts.gstatic.com https:\/\/pro.fontawesome.com https:\/\/www.tolvnow.com data: *.fontawesome.com *.alothemes.com *.magepow.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors https:\/\/h.online-metrix.net 'self' *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googletagmanager.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com https:\/\/h.online-metrix.net *.cardinalcommerce.com https:\/\/d2d7do8qaecbru.cloudfront.net https:\/\/google.com https:\/\/ls.smct.io https:\/\/www.mercadolibre.com https:\/\/www.tolvnow.com https:\/\/tracker.tolvnow.com *.widde.io *.rdstation.com.br *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com connect.facebook.net *.pagaleve.io *.pagaleve.com.br c.paypal.com checkout.paypal.com assets.braintreegateway.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https:\/\/h.online-metrix.net *.d.aa.online-metrix.net https:\/\/p.afilio.com.br https:\/\/newimgebit-a.akamaihd.net https:\/\/amcglobal.sc.omtrdc.net https:\/\/assets.adobedtm.com https:\/\/assets.braintreegateway.com https:\/\/*.behance.net https:\/\/c.bing.com https:\/\/b.stats.paypal.com https:\/\/c.paypal.com https:\/\/checkout.paypal.com https:\/\/c.clarity.ms https:\/\/o.clarity.ms https:\/\/cm.everesttech.net https:\/\/connect.facebook.net https:\/\/conectiva.io https:\/\/*.d.aa.online-metrix.net https:\/\/device.clearsale.com.br https:\/\/receiver.posclick.dinamize.com https:\/\/dpm.demdex.net https:\/\/dub.stats.paypal.com https:\/\/events.smct.co https:\/\/www.facebook.com\/privacy_sandbox\/ https:\/\/www.facebook.com\/tr\/ https:\/\/fpdbs.paypal.com https:\/\/fpdbs.sandbox.paypal.com https:\/\/*.ftcdn.net *.analytics.google.com https:\/\/www.google.com.br https:\/\/www.google.com\/pagead\/ https:\/\/ssl.gstatic.com https:\/\/googletagmanager.com https:\/\/*.mlstatic.com https:\/\/*.mercadopago.com https:\/\/mercadopago.com.br https:\/\/*.mercadopago.com.br https:\/\/*.mercadolibre.com https:\/\/*.mercadolibre.com.br https:\/\/*.mercadolivre.com https:\/\/www.paypal.com https:\/\/*.paypal.com https:\/\/www.paypalobjects.com https:\/\/www.sandbox.paypal.com https:\/\/t.paypal.com https:\/\/tracker.tolvnow.com https:\/\/p.typekit.net https:\/\/validator.swagger.io https:\/\/*.vimeocdn.com https:\/\/widgets.magentocommerce.com https:\/\/i.ytimg.com *.widde.io *.rdstation.com.br https:\/\/d335luupugsy2.cloudfront.net https:\/\/rate.trustvox.com.br https:\/\/certificate.trustvox.com.br https:\/\/colt.trustvox.com.br *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br *.mercadopago.com.br *.mlstatic.com connect.facebook.net *.pagaleve.com.br *.alothemes.com *.magepow.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com *.vimeocdn.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/h.online-metrix.net https:\/\/h.online-metrix.net\/fp\/tags.js *.cardinalcommerce.com https:\/\/assets.adobedtm.com https:\/\/api.braintreegateway.com https:\/\/api.sandbox.braintreegateway.com https:\/\/api.edrone.me https:\/\/api-s.edrone.me https:\/\/app.cartstack.com.br https:\/\/assets.braintreegateway.com https:\/\/bam.nr-data.net https:\/\/c.paypal.com https:\/\/*.cardinalcommerce.com https:\/\/clarity.ms https:\/\/www.clarity.ms https:\/\/d3bo67muzbfgtl.cloudfront.net https:\/\/d2vfa2a1j2oldr.cloudfront.net https:\/\/d3vhsxl1pwzf0p.cloudfront.net https:\/\/dgk28ckagqims.cloudfront.net https:\/\/commerce.adobedtm.com https:\/\/commerce.adobe.net https:\/\/*.commerce-quick-checkout.com https:\/\/connect.facebook.net https:\/\/device.clearsale.com.br https:\/\/receiver.posclick.dinamize.com https:\/\/www.feedrapp.info https:\/\/geostag.cardinalcommerce.com https:\/\/google.com https:\/\/www.google-analytics.com https:\/\/googleads.g.doubleclick.net https:\/\/tagmanager.google.com https:\/\/includestest.ccdc02.com https:\/\/js-agent.newrelic.com https:\/\/js.braintreegateway.com https:\/\/js.smct.io https:\/\/magento-recs-sdk.adobe.net https:\/\/*.mercadopago.com https:\/\/mercadopago.com.br https:\/\/*.mercadopago.com.br https:\/\/*.mercadolibre.com https:\/\/*.mercadolibre.com.br https:\/\/*.mercadolivre.com https:\/\/*.mlstatic.com https:\/\/*.nr-data.net https:\/\/www.paypal.com https:\/\/www.paypalobjects.com https:\/\/www.sandbox.paypal.com https:\/\/t.paypal.com https:\/\/*.paypal.com https:\/\/imgs.ebit.com.br https:\/\/*.ebit.com.br https:\/\/sdk.mercadopago.com https:\/\/secure.afilio.com.br https:\/\/smct.co https:\/\/*.smct.co https:\/\/songbird.cardinalcommerce.com https:\/\/songbirdstag.cardinalcommerce.com https:\/\/s.ytimg.com https:\/\/tracker.tolvnow.com https:\/\/tracker5.tolvnow.com https:\/\/unpkg.com https:\/\/use.typekit.net https:\/\/*.vimeocdn.com https:\/\/v18dxapjmd.execute-api.eu-west-1.amazonaws.com https:\/\/www.googletagmanager.com\/gtag\/js https:\/\/www.googletagmanager.com\/gtm.js https:\/\/z.clarity.ms *.conectiva.io conectiva.io *.hotjar.com script.hotjar.com *.tolvnow.com tracker4.tolvnow.com static.trustvox.com.br https:\/\/*.widde.io *.widde.io popups.rdstation.com.br *.rdstation.com.br *.sentry.io *.ingest.sentry.io https:\/\/popups.rdstation.com.br https:\/\/widde.io https:\/\/analytics.tiktok.com https:\/\/rate.trustvox.com.br https:\/\/certificate.trustvox.com.br https:\/\/colt.trustvox.com.br https:\/\/d335luupugsy2.cloudfront.net https:\/\/d1sag09wwfbul8.cloudfront.net https:\/\/googleads.g.doubleclick.net\/pagead\/viewthroughconversion\/ https:\/\/static.trustvox.com.br *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br *.mercadopago.com.br *.mlstatic.com connect.facebook.net *.pagaleve.com.br *.avada.io *.alothemes.com *.magepow.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https:\/\/assets.adobedtm.com https:\/\/clarity.ms https:\/\/d3bo67muzbfgtl.cloudfront.net https:\/\/cdn.dnky.co https:\/\/pro.fontawesome.com https:\/\/getfirebug.com https:\/\/fonts.googleapis.com https:\/\/webchat.dotdigital.com https:\/\/www.tolvnow.com https:\/\/tracker.tolvnow.com https:\/\/rate.trustvox.com.br https:\/\/certificate.trustvox.com.br https:\/\/colt.trustvox.com.br *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.fontawesome.com *.alothemes.com *.magepow.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'none'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.nr-data.net api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https:\/\/h.online-metrix.net https:\/\/mpisandbox.braspag.com.br\/v2\/3ds\/validate https:\/\/writer.cardinalcommerce.com\/stag\/log https:\/\/mpisandbox.braspag.com.br\/v2\/3ds\/enroll https:\/\/centinelapistag.cardinalcommerce.com\/V1\/Order\/JWT\/Continue *.amazonaws.com *.braspag.com.br https:\/\/assets.adobedtm.com https:\/\/amcglobal.sc.omtrdc.net https:\/\/api.braintreegateway.com https:\/\/api.sandbox.braintreegateway.com https:\/\/api.edrone.me https:\/\/api-s.edrone.me https:\/\/api.mercadopago.com https:\/\/api.mercadolibre.com https:\/\/api.performa.ai https:\/\/assets.braintreegateway.com https:\/\/bam.nr-data.net https:\/\/c.bing.com https:\/\/*.cardinalcommerce.com https:\/\/*.clarity.ms https:\/\/n.clarity.ms https:\/\/o.clarity.ms https:\/\/l.clarity.ms https:\/\/z.clarity.ms https:\/\/d3vhsxl1pwzf0p.cloudfront.net https:\/\/d3bo67muzbfgtl.cloudfront.net https:\/\/dgk28ckagqims.cloudfront.net https:\/\/d2vfa2a1j2oldr.cloudfront.net https:\/\/commerce.adobedtm.com https:\/\/commerce.adobe.net https:\/\/newimgebit-a.akamaihd.net https:\/\/*.akamaihd.net https:\/\/connect.facebook.net https:\/\/www.google.com https:\/\/www.google.com\/ccm\/collect https:\/\/*.google-analytics.com https:\/\/googleads.g.doubleclick.net https:\/\/www.feedrapp.info https:\/\/firehose.eu-west-1.amazonaws.com https:\/\/geostag.cardinalcommerce.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/includestest.ccdc02.com https:\/\/js-agent.newrelic.com https:\/\/js.braintreegateway.com https:\/\/*.mercadopago.com https:\/\/mercadopago.com.br https:\/\/*.mercadolibre.com https:\/\/*.mercadolivre.com https:\/\/*.mlstatic.com https:\/\/*.nr-data.net https:\/\/www.paypal.com https:\/\/www.paypalobjects.com https:\/\/receiver.posclick.dinamize.com https:\/\/songbird.cardinalcommerce.com https:\/\/js.smct.io https:\/\/*.smct.co https:\/\/tracker.tolvnow.com https:\/\/tracker5.tolvnow.com https:\/\/unpkg.com https:\/\/use.typekit.net https:\/\/*.vimeocdn.com wss:\/\/v18dxapjmd.execute-api.eu-west-1.amazonaws.com https:\/\/www.facebook.com https:\/\/api.ipify.org *.widde.io *.rdstation.com.br *.ingest.sentry.io https:\/\/d335luupugsy2.cloudfront.net https:\/\/popups.rdstation.com.br https:\/\/pageview-notify.rdstation.com.br https:\/\/trackings.nemu.com.br https:\/\/api-admin.widde.io https:\/\/analytics.tiktok.com https:\/\/trustvox.com.br https:\/\/rate.trustvox.com.br https:\/\/certificate.trustvox.com.br https:\/\/colt.trustvox.com.br https:\/\/d1sag09wwfbul8.cloudfront.net https:\/\/googleads.g.doubleclick.net\/pagead\/viewthroughconversion\/ https:\/\/static.trustvox.com.br *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br *.mercadopago.com.br *.mlstatic.com connect.facebook.net https:\/\/get.geojs.io *.avada.io *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https:\/\/commerce.adobedc.net https:\/\/n.clarity.ms 'self' 'unsafe-inline'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https:\/\/use.typekit.net https:\/\/static.formstack.com https:\/\/css.zohocdn.com https:\/\/fonts.gstatic.com https:\/\/maxcdn.bootstrapcdn.com maxcdn.bootstrapcdn.com *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https:\/\/www.google.com https:\/\/www.youtube.com https:\/\/www.bullseyelocations.com landofcoder.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/www.truck-lite.com https:\/\/www.rigidindustries.com https:\/\/www.clariencetechnologies.com https:\/\/www.lumiteclighting.com https:\/\/www.truck-lite.eu.com https:\/\/mcstaging.truck-lite.com https:\/\/trucklite.localhost https:\/\/mcstaging.clariencetechnologies.com https:\/\/pm.geniusmonkey.com https:\/\/css.zohocdn.com https:\/\/static.ctctcdn.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.googleapis.com https:\/\/www.gstatic.com https:\/\/www.google.com *.google.bg *.googletagmanager.com https:\/\/connect.facebook.net *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/browser-update.org https:\/\/wwwtrucklitecom.formstack.com https:\/\/static.formstack.com https:\/\/www.google.com\/recaptcha\/api.js https:\/\/code.jquery.com https:\/\/cdnjs.cloudflare.com https:\/\/static.ctctcdn.com https:\/\/salesiq.zoho.com https:\/\/js.zohocdn.com https:\/\/static.zohocdn.com https:\/\/js-agent.newrelic.com https:\/\/www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/googleads.g.doubleclick.net https:\/\/www.truck-lite.com https:\/\/mcstaging.truck-lite.com https:\/\/cdn.jsdelivr.net landofcoder.com *.avada.io *.shopify.com https:\/\/js.stripe.com https:\/\/www.gstatic.com\/recaptcha\/releases\/Trd6gj1dhC_fx0ma_AWHc1me\/recaptcha__en.js 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com assets.braintreegateway.com https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/static.ctctcdn.com https:\/\/css.zohocdn.com https:\/\/fonts.googleapis.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/www.truck-lite.com https:\/\/mcstaging.truck-lite.com https:\/\/cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.fontawesome.com https:\/\/fonts.bunny.net 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/wwwtrucklitecom.formstack.com https:\/\/listgrowth.ctctcdn.com https:\/\/bam.nr-data.net https:\/\/salesiq.zohopublic.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/www.facebook.com https:\/\/maps.googleapis.com https:\/\/www.truck-lite.com https:\/\/mcstaging.truck-lite.com landofcoder.com https:\/\/get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' blob: data:; connect-src 'self' https:\/\/*.analytics.google.com https:\/\/graphql.landsbankinn.is https:\/\/www.google-analytics.com cdn.landsbankinn.is https:\/\/log.landsbankinn.is https:\/\/www.google.com https:\/\/landsbankinn.boost.ai\/ https:\/\/googleads.g.doubleclick.net https:\/\/region1.google-analytics.com\/ https:\/\/stats.g.doubleclick.net\/ events.mapbox.com https:\/\/landsbankinn.cdn.prismic.io\/ api.mapbox.com https:\/\/a.landsbankinn.is\/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/connect.facebook.net\/ https:\/\/www.googletagmanager.com\/ https:\/\/www.google-analytics.com\/ https:\/\/landsbankinn.boost.ai https:\/\/www.google.com https:\/\/www.gstatic.com cdn.landsbankinn.is https:\/\/static.cdn.prismic.io blob: data: https:\/\/td.doubleclick.net https:\/\/graphql.landsbankinn.is https:\/\/e.infogram.com\/ https:\/\/prismic.io\/ https:\/\/*.jotform.com https:\/\/a.landsbankinn.is\/; style-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/www.gstatic.com; img-src 'self' blob: data: images.prismic.io https:\/\/prismic-io.s3.amazonaws.com\/ www.gstatic.com www.google-analytics.com\/ api.mapbox.com cdn.landsbankinn.is https:\/\/landsbankinn.is\/ https:\/\/www.googletagmanager.com https:\/\/www.facebook.com\/tr\/ https:\/\/www.facebook.com\/ https:\/\/boost-files-general-eu-west-1-prod.s3-eu-west-1.amazonaws.com\/files\/LANDSBANKINN\/ https:\/\/www.google.is\/ https:\/\/www.google.com\/ https:\/\/landsbankinn.cdn.prismic.io\/; font-src 'self' cdn.landsbankinn.is fonts.gstatic.com https:\/\/unpkg.com blob: data:; object-src 'self' https:\/\/graphql.landsbankinn.is; base-uri 'self'; form-action 'self' https:\/\/graphql.landsbankinn.is; frame-ancestors 'self' cdn.landsbankinn.is; frame-src 'self' https:\/\/www.googletagmanager.com\/ https:\/\/landsbankinn.prismic.io\/ cdn.landsbankinn.is https:\/\/td.doubleclick.net\/ https:\/\/landsbankinn.boost.ai https:\/\/www.google.com\/ https:\/\/www.google.is\/ https:\/\/e.infogram.com\/ https:\/\/*.jotform.com; style-src-elem https:\/\/fonts.googleapis.com 'self' https:\/\/unpkg.com 'unsafe-eval' 'unsafe-inline' https:\/\/a.landsbankinn.is\/; media-src 'self' blob: https:\/\/prismic-io.s3.amazonaws.com\/landsbankinn\/ cdn.landsbankinn.is https:\/\/landsbankinn.cdn.prismic.io\/; worker-src 'self' blob:; child-src 'self' blob:; script-src-elem 'self' 'unsafe-inline' https:\/\/connect.facebook.net\/ https:\/\/www.googletagmanager.com\/ https:\/\/www.google-analytics.com\/ https:\/\/landsbankinn.boost.ai https:\/\/www.google.com https:\/\/www.gstatic.com cdn.landsbankinn.is https:\/\/static.cdn.prismic.io https:\/\/td.doubleclick.net https:\/\/graphql.landsbankinn.is https:\/\/e.infogram.com\/ https:\/\/prismic.io\/ https:\/\/*.jotform.com https:\/\/a.landsbankinn.is\/ https:\/\/cdnjs.cloudflare.com\/polyfill\/v3\/polyfill.js https:\/\/*.ci.landsbankinn.is; manifest-src 'self'; report-to name-of-endpoint; report-uri https:\/\/log.landsbankinn.is\/api\/20\/security\/?sentry_key=5619b3ff53a764b525920b31d3e32e4a;","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: cdn-prod.toolweb.com cdn.toolweb.ca *.fontawesome.com https:\/\/fonts.bunny.net 'self' data: maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com cdn-prod.toolweb.com cdn.toolweb.ca 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.hotjar.com *.doubleclick.net td.doubleclick.net cdn-prod.toolweb.com cdn.toolweb.ca https:\/\/*.moneris.com\/ www.facebook.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com track.hubspot.com servedbyadbutler.com img.youtube.com www.facebook.com www.google.co.in twin-iq.kickfire.com ad.doubleclick.net *.clarity.ms c.bing.com maps.googleapis.com cdn-prod.toolweb.com cdn.toolweb.ca https:\/\/firebasestorage.googleapis.com *.hsforms.net *.hsforms.com 'self' data: *.pixriot.com *.storeimaging.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.hotjar.com js.hs-banner.com js.hs-scripts.com js.hs-analytics.net servedbyadbutler.com js.hscollectedforms.net js.hubspot.com js.hsadspixel.net tracker.gaconnector.com *.clarity.ms tag.simpli.fi twin-iq.kickfire.com js.usemessages.com static.hsappstatic.net cdn-prod.toolweb.com cdn.toolweb.ca https:\/\/*.moneris.com\/ *.avada.io *.shopify.com *.hsforms.net *.hsforms.com *.gstatic.com maps.googleapis.com connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn-prod.toolweb.com cdn.toolweb.ca https:\/\/*.moneris.com\/ *.fontawesome.com https:\/\/fonts.bunny.net *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.doubleclick.net www.google-analytics.com maps.googleapis.com www.google.com *.hotjar.com cta-service-cms2.hubspot.com forms.hscollectedforms.net api.hubapi.com api.hubspot.com wss:\/\/ws.hotjar.com *.hotjar.io *.clarity.ms www.facebook.com static.hsappstatic.net cdn-prod.toolweb.com cdn.toolweb.ca https:\/\/get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com places.googleapis.com www.googleapis.com *.pixriot.com *.storeimaging.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' www.clarity.ms js.braintreegateway.com assets.braintreegateway.com www.paypalobjects.com *.paypal.com songbird.cardinalcommerce.com static.client.cardinaltrusted.com https:\/\/client.rum.us-east-1.amazonaws.com https:\/\/integrations.etrusted.com https:\/\/apps.mypurecloud.ie https:\/\/cookie-cdn.cookiepro.com https:\/\/pay.google.com\/gp\/p\/js\/pay.js https:\/\/services.postcodeanywhere.co.uk\/js\/address-3.91.min.js static.cloudflareinsights.com https:\/\/ajax.cloudflare.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/bat.bing.com https:\/\/*.tradedoubler.com https:\/\/cdn.studentbeans.com https:\/\/googleads.g.doubleclick.net https:\/\/bat.bing.com\/p\/action\/5035386.js https:\/\/www.paypal.com https:\/\/loader.wisepops.com https:\/\/wisepops.net https:\/\/widget.trustpilot.com https:\/\/widgets.trustedshops.com https:\/\/tag.mention-me.com https:\/\/static.mention-me.com https:\/\/*.klarnacdn.net https:\/\/*.criteo.com maps.googleapis.com https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/ob.segreencolumn.com https:\/\/obs.segreencolumn.com https:\/\/tags.tiqcdn.com https:\/\/scripts.clarity.ms https:\/\/connect.facebook.net https:\/\/*.dycdn.net https:\/\/api.addressy.com https:\/\/*.tealiumiq.com; style-src 'report-sample' 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/services.postcodeanywhere.co.uk https:\/\/integrations.etrusted.com https:\/\/api.addressy.com; object-src 'none'; base-uri 'self'; connect-src 'self' api.lenstore.co.uk api.lenstore.de api.lenstore.it api.lenstore.fr api.lenstore.es api.lenstore.ie api.lenstore.nl api.lenstore.pt https:\/\/*.clarity.ms\/collect https:\/\/*.mypurecloud.ie dataplane.rum.eu-west-1.amazonaws.com https:\/\/cognito-identity.eu-west-1.amazonaws.com\/ api.braintreegateway.com client-analytics.braintreegateway.com https:\/\/*.etrusted.com https:\/\/auth.split.io https:\/\/cookie-cdn.cookiepro.com https:\/\/klarna.com https:\/\/*.klarnaevt.com https:\/\/x.klarnacdn.net https:\/\/*.klarna.com https:\/\/events.split.io https:\/\/google.com https:\/\/pay.google.com https:\/\/google.com\/pay https:\/\/*.braintree-api.com https:\/\/sdk.split.io https:\/\/streaming.split.io https:\/\/www.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/www.google.com\/ccm\/collect https:\/\/*.google-analytics.com *.analytics.google.com https:\/\/*.wisepops.com https:\/\/wisepops.net https:\/\/obs.segreencolumn.com cardinalcommerce.com *.cardinalcommerce.com *.cardinaltrusted.com https:\/\/privacyportal.cookiepro.com *.trustedshops.com trustedshops.com services.postcodeanywhere.co.uk sts.eu-west-1.amazonaws.com bat.bing.net https:\/\/bat.bing.com *.doubleclick.net wss:\/\/am.freshrelevance.com https:\/\/www.google.com https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/tag.mention-me.com https:\/\/*.dycdn.net wss:\/\/*.dycdn.net https:\/\/www.google.co.uk https:\/\/www.google.it https:\/\/www.google.ie https:\/\/*.tealiumiq.com https:\/\/*.criteo.com wss:\/\/webmessaging.mypurecloud.ie https:\/\/analytics.google.com; font-src 'self' https:\/\/fonts.gstatic.com data:; frame-src 'self' *; img-src 'self' assets.lenstore.co.uk assets.lenstore.de assets.lenstore.it assets.lenstore.fr assets.lenstore.es assets.lenstore.ie assets.lenstore.nl assets.lenstore.pt data: assets.braintreegateway.com checkout.paypal.com https:\/\/c.clarity.ms https:\/\/www.gstatic.com https:\/\/integrations.etrusted.com https:\/\/www.paypalobjects.com https:\/\/cookie-cdn.cookiepro.com https:\/\/bat.bing.com https:\/\/www.google.com https:\/\/www.google.co.uk https:\/\/criteo-partners.tremorhub.com\/ https:\/\/x.bidswitch.net https:\/\/cm.g.doubleclick.net\/pixel https:\/\/ib.adnxs.com\/getuid https:\/\/r.casalemedia.com\/rum https:\/\/gum.criteo.com https:\/\/id5-sync.com\/ https:\/\/ad.360yield.com https:\/\/contextual.media.net https:\/\/exchange.mediavine.com\/usersync\/push https:\/\/jadserve.postrelease.com https:\/\/sync.outbrain.com\/cookie-sync https:\/\/simage2.pubmatic.com\/AdServer\/Pug https:\/\/pixel.rubiconproject.com https:\/\/rtb-csync.smartadserver.com https:\/\/sync-t1.taboola.com https:\/\/criteo-sync.teads.tv https:\/\/eb2.3lift.com https:\/\/ad.yieldlab.net https:\/\/sync.1rx.io https:\/\/dis.criteo.com https:\/\/sync.targeting.unrulymedia.com https:\/\/www.google-analytics.com\/collect https:\/\/x.klarnacdn.net https:\/\/services.postcodeanywhere.co.uk trustedshops.com https:\/\/www.googletagmanager.com https:\/\/cs.media.net https:\/\/*.pubmatic.com https:\/\/www.facebook.com https:\/\/*.paypal.com https:\/\/*.googlesyndication.com https:\/\/www.google.ie https:\/\/www.google.it https:\/\/www.google.de https:\/\/www.googleadservices.com https:\/\/*.omtrdc.net https:\/\/obs.segreencolumn.com https:\/\/*.adnxs.com https:\/\/*.dmxleo.com; manifest-src 'self'; media-src 'self'; worker-src 'none' blob:; report-uri https:\/\/api.lenstore.co.uk\/event\/csp-report","count":2},{"content-security-policy-report-only":" script-src-attr https:\/\/cdn.evgnet.com https:\/\/*.googleapis.com https:\/\/tag.rmp.rakuten.com\/ https:\/\/js.squarecdn.com\/ https:\/\/unpkg.com\/ https:\/\/livesearch-metrics.magento-ds.com\/ https:\/\/*.addressfinder.io https:\/\/cdn.jsdelivr.net\/ https:\/\/*.newrelic.com https:\/\/*.freshchat.com https:\/\/commerce.adobedtm.com\/ https:\/\/*.braintreegateway.com https:\/\/*.stripe.com https:\/\/www.google.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/*.trackedlink.net https:\/\/*.trackedweb.net https:\/\/t.cfjump.com\/ https:\/\/s.pinimg.com\/ https:\/\/tags.creativecdn.com\/ https:\/\/analytics.tiktok.com\/ https:\/\/www.clarity.ms\/ https:\/\/connect.facebook.net\/ https:\/\/www.gstatic.com\/ https:\/\/pt.wisernotify.com\/ https:\/\/ct.pinterest.com\/ https:\/\/*.paypal.com https:\/\/*.google.com  'self' 'unsafe-inline'; script-src-elem https:\/\/cdn.evgnet.com https:\/\/*.googleapis.com https:\/\/tag.rmp.rakuten.com\/ https:\/\/js.squarecdn.com\/ https:\/\/unpkg.com\/ https:\/\/livesearch-metrics.magento-ds.com\/ https:\/\/*.addressfinder.io https:\/\/cdn.jsdelivr.net\/ https:\/\/*.newrelic.com https:\/\/*.freshchat.com https:\/\/commerce.adobedtm.com\/ https:\/\/*.braintreegateway.com https:\/\/*.stripe.com https:\/\/www.google.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/*.trackedlink.net https:\/\/*.trackedweb.net https:\/\/t.cfjump.com\/ https:\/\/s.pinimg.com\/ https:\/\/tags.creativecdn.com\/ https:\/\/analytics.tiktok.com\/ https:\/\/www.clarity.ms\/ https:\/\/connect.facebook.net\/ https:\/\/www.gstatic.com\/ https:\/\/pt.wisernotify.com\/ https:\/\/ct.pinterest.com\/ https:\/\/*.paypal.com https:\/\/*.google.com  'self' 'unsafe-inline'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.squarecdn.com *.googleapis.com https:\/\/stackpath.bootstrapcdn.com *.fontawesome.com https:\/\/fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com widgets.sandbox.afterpay.com *.cash.app www.google.com *.dotdigital-pages.com *.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com\/ *.cash.app *.googleapis.com *.trackedlink.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/www.tagalys.com *.disqus.com https:\/\/img.youtube.com https:\/\/firebasestorage.googleapis.com https:\/\/sdk.giftflick.com.au\/ https:\/\/cdn.giftflick.com.au\/ https:\/\/gf-cdn.s3-ap-southeast-2.amazonaws.com\/ *.clarity.ms *.google.com https:\/\/c.bing.com\/ *.facebook.com https:\/\/www.google.com.au\/ https:\/\/ad.doubleclick.net\/ https:\/\/*.rubiconproject.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/api.addressfinder.io https:\/\/rum.hlx.page https:\/\/portal.sandbox.afterpay.com https:\/\/portal.afterpay.com https:\/\/static.afterpay.com *.squarecdn.com https:\/\/hbiq.net *.cash.app apis.google.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.googleapis.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.convertexperiments.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/cdnjs.cloudflare.com https:\/\/d3htxdwqp62ai4.cloudfront.net http:\/\/d2r9py2hfy5mgp.cloudfront.net http:\/\/d3fzz8zsf83ont.cloudfront.net https:\/\/storage.googleapis.com *.disqus.com *.avada.io *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https:\/\/player.vimeo.com\/ https:\/\/www.giftflick.com.au\/ https:\/\/sdk.giftflick.com.au\/ *.creativecdn.com https:\/\/s.pinimg.com\/ *.pinterest.com *.clarity.ms https:\/\/dusk-455267821617990643-help.freshchat.com\/ https:\/\/analytics.tiktok.com\/ https:\/\/connect.facebook.net\/ *.wisernotify.com t.cfjump.com *.dusk.com.au *.attn.tv https:\/\/cdn.jsdelivr.net\/npm\/@growthbook\/ https:\/\/tag.rmp.rakuten.com\/ https:\/\/cdn.evgnet.com https:\/\/*.googleapis.com https:\/\/js.squarecdn.com\/ https:\/\/unpkg.com\/ https:\/\/livesearch-metrics.magento-ds.com\/ https:\/\/*.addressfinder.io https:\/\/cdn.jsdelivr.net\/ https:\/\/*.newrelic.com https:\/\/*.freshchat.com https:\/\/commerce.adobedtm.com\/ https:\/\/*.braintreegateway.com https:\/\/*.stripe.com https:\/\/www.google.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/*.trackedlink.net https:\/\/*.trackedweb.net https:\/\/t.cfjump.com\/ https:\/\/tags.creativecdn.com\/ https:\/\/www.clarity.ms\/ https:\/\/www.gstatic.com\/ https:\/\/pt.wisernotify.com\/ https:\/\/ct.pinterest.com\/ https:\/\/*.paypal.com https:\/\/*.google.com  'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https:\/\/api.addressfinder.io static.afterpay.com\/ *.squarecdn.com *.cash.app assets.braintreegateway.com https:\/\/cdnjs.cloudflare.com https:\/\/tagalys-assets.s3-ap-southeast-1.amazonaws.com https:\/\/d3htxdwqp62ai4.cloudfront.net https:\/\/stackpath.bootstrapcdn.com *.fontawesome.com https:\/\/fonts.bunny.net *.stripe.network *.stripecdn.com *.amazon.com https:\/\/sdk.giftflick.com.au\/ https:\/\/dusk-455267821617990643-help.freshchat.com\/ *.wisernotify.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https:\/\/player.vimeo.com\/ https:\/\/cdn.giftflick.com.au\/ https:\/\/videos-demo.giftflick.com.au\/ https:\/\/download-video.akamaized.net\/ https:\/\/*.vimeocdn.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https:\/\/api.addressfinder.io *.afterpay.com *.squarecdn.com https:\/\/hbiq.net https:\/\/iq.afterpay-beta.com https:\/\/iq.afterpay.com *.cash.app api.lab.amplitude.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.convertexperiments.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/api-r1.tagalys.com https:\/\/api-r2.tagalys.com https:\/\/api-r3.tagalys.com https:\/\/api-r4.tagalys.com https:\/\/staging-api-r2.tagalys.com http:\/\/tagalys-api.docker:3000 https:\/\/get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https:\/\/www.giftflick.com.au\/ https:\/\/api-demo.giftflick.com.au\/ https:\/\/api.giftflick.com.au\/ *.creativecdn.com *.pinterest.com *.clarity.ms https:\/\/analytics.tiktok.com\/ *.wisermapp.com *.azurewebsites.net *.doubleclick.net *.attn.tv https:\/\/cdn.growthbook.io\/ https:\/\/*.evergage.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/googleads.g.doubleclick.net https:\/\/js.hs-scripts.com https:\/\/js.hs-analytics.net https:\/\/js.hs-banner.com https:\/\/js.hsadspixel.net https:\/\/js.hscollectedforms.net https:\/\/js.hsforms.net https:\/\/js.hubspot.com https:\/\/js.usemessages.com https:\/\/bat.bing.com https:\/\/scripts.clarity.ms https:\/\/www.clarity.ms https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/cdn.resonate.com https:\/\/maps.google.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' data: https:\/\/fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:\/\/forms.hsforms.com https:\/\/forms-na1.hsforms.com https:\/\/perf-na1.hsforms.com https:\/\/*.clarity.ms https:\/\/*.hubspot.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.facebook.com https:\/\/forms.hsforms.com https:\/\/maps.google.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; report-uri https:\/\/csp-report-collector-340111234959.europe-central2.run.app\/csp","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.espssl.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.googleapis.com *.bootstrapcdn.com *.cloudflare.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.ladesk.com *.twitter.com *.google.co.in *.kaptcha.com *.google.com\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/www.magezon.com *.espssl.com *.payments-amazon.com *.listrakbi.com *.pinterest.com *.facebook.com *.google.com *.google.co.in *.klarna.com *.twitter.com *.ytimg.com stats.g.doubleclick.net *.connect.facebook.net pixel.advertising.com *.googletagmanager.com *.twimg.com *.placehold.it blob: www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com cdnjs.cloudflare.com *.pinterest.com *.listrakbi.com *.listrak.com *.ladesk.com s.pinimg.com *.facebook.net *.twitter.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com connect.facebook.net *.googletagmanager.com static-na.payments-amazon.com js-agent.newrelic.com *.jquery.com 'self' *.google.com\/ https:\/\/rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdnjs.cloudflare.com *.jquery.com *.espssl.com *.fontawesome.com *.typekit.net https:\/\/use.typekit.net *.listrakbi.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.youtube.com *.bootstrapcdn.com 'unsafe-inline' assets.braintreegateway.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.listrakbi.com *.doubleclick.net *.algolia.io *.pinterest.com *.twitter.com *.twimg.com *.google.co.in *.facebook.com *.amazon.com bam.nr-data.net *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de 'self' 'unsafe-inline'; child-src 'self' blob: assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/actionis.report-uri.com\/a\/d\/g; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" frame-src 'self' *.app.baqend.com www.youtube.com www.google.com js.playground.klarna.com js.klarna.com https:\/\/checkoutshopper-test.adyen.com https:\/\/pay.google.com https:\/\/wchat.freshchat.com return.4sellers.de *.webpush.freshchat.com ct.pinterest.com vercel.live *.sovendus.com *.adyen.com gum.criteo.com fledge.eu.criteo.com *.cnstrc.com cnstrc.com graphical-editor.kameleoon.com *.vimeo.com vimeo.com www.googletagmanager.com","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.velux.de *.paypalobjects.com *.oney.io *.staging.oney.io *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.jsctool.com *.googleapis.com *.pay1.de *.hotjar.com *.solutect.de *.awin1.com *.sovendus.com *.paypalobjects.com *.taboola.com *.googlesyndication.com zaunplaner.traumgarten.de *.criteo.com *.criteo.net *.doubleclick.net *.googletagmanager.com *.demdex.net *.sovendus-benefits.com *.sovendus-connect.com *.hipay-tpp.com *.hipay.com *.mondu.ai\/ *.mondu.local localhost:*\/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com https:\/\/maps.gstatic.com benz24.de benz24.at benz24.ch benz24.fr *.consentmanager.net *.pay1.de *.consensu.org *.bing.com *.bing.net *.googleapis.com *.google.de *.google.ch *.google.at *.google.fr *.google.nl *.google.be *.google.li *.google.lu *.awin1.com *.bizrate.com *.ladenzeile.de *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.trustedshops.com *.velux.de *.twiago.com *.1rx.io *.adnxs.com *.smartadserver.com *.taboola.com *.360yield.com *.criteo.com *.criteo.net *.unrulymedia.com *.zdassets.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.hipay.com *.oney.io *.staging.oney.io https:\/\/firebasestorage.googleapis.com mageside.com *.mondu.ai\/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com https:\/\/maps.googleapis.com cdnjs.cloudflare.com *.consentmanager.net *.pay1.de *.paypal.com *.ratepay.com *.googleapis.com *.sovendus.com *.googletagmanager.com *.consensu.org *.dwin1.com *.bing.com *.hotjar.com *.cnnx.link *.ladenzeile.de *.solutect.de *.awin1.com *.sciencebehindecommerce.com *.trustedshops.com benz24.de benz24.at benz24.ch benz24.fr *.velux.de chimpstatic.com *.paqato.com *.benz24.app mtm.benz24.de *.taboola.com *.googlesyndication.com *.s24.com *.nextleveldefend.com nextleveldefend.com zaunplaner.traumgarten.de *.criteo.com *.doubleclick.net *.detailsdata7.com *.upsellit.com *.zdassets.com *.zendesk.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.oney.io *.staging.oney.io *.avada.io *.shopify.com *.mondu.ai\/widget.js *.mondu.local\/widget.js localhost:*\/dist\/widget.js 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.consensu.org *.velux.de downloads.mailchimp.com *.hipay.com *.googleapis.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com data: mpsnare.iesnare.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com *.ratepay.com *.doubleclick.net *.googleapis.com *.google.de *.bing.com *.bing.net *.hotjar.com *.hotjar.io *.sovendus.com *.sciencebehindecommerce.com *.trustedshops.com *.etrusted.com *.velux.de *.benz24.app mtm.benz24.de *.taboola.com *.googlesyndication.com zaunplaner.traumgarten.de *.nextleveldefend.com nextleveldefend.com *.criteo.com googleapis.com *.googletagmanager.com *.zdassets.com *.zendesk.com pod-18-sunco-ws.zendesk.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.hipay-tpp.com *.hipay.com wss:\/\/mpsnare.iesnare.com *.oney.io *.staging.oney.io https:\/\/get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src *.fontawesome.com https:\/\/fonts.bunny.net www.searchanise.com *.searchserverapi.com *.gstatic.com 'self' data: fonts.gstatic.com *.yotpo.com *.googleapis.com *.cloudflare.com fonts.googleapis.com 'unsafe-inline' data: *.abakhan.co.uk *.woolbox.co.uk *.fabriczone.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.searchanise.com *.searchserverapi.com *.twitter.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.meetanshi.com js.mollie.com www.searchanise.com *.searchserverapi.com *.twitter.com www.xtento.com *.googletagmanager.com *.yotpo.com widget.trustpilot.com lpcdn.lpsnmedia.net www.paypalobjects.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/images.unsplash.com *.awin1.com *.zenaps.com *.wepowerconnections.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ magefan.com cm.magefan.com https:\/\/firebasestorage.googleapis.com https:\/\/meetanshi.com\/media\/logo.png *.meetanshi.com https:\/\/www.mollie.com *.twitter.com *.twimg.com www.google.ru www.searchanise.com *.searchserverapi.com s3.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com *.yotpo.com *.cloudflare.com *.mdoq.io *.ibottles.co.uk *.google.com *.google.co.uk *.abakhan.co.uk *.woolbox.co.uk *.fabriczone.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com lantern.roeyecdn.com widget.freshworks.com m2epro.freshdesk.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.avada.io *.shopify.com *.meetanshi.com js.mollie.com searchanise-ef84.kxcdn.com s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi.com *.searchanise.com api.amplitude.com *.twitter.com *.twimg.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com *.yotpo.com *.cloudflare.com *.fontawesome.com *.liveperson.net *.trustpilot.com static.zdassets.com *.abakhan.co.uk *.woolbox.co.uk *.fabriczone.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com widget.freshworks.com m2epro.freshdesk.com unsafe-inline assets.braintreegateway.com https:\/\/static.klaviyo.com *.fontawesome.com https:\/\/fonts.bunny.net www.searchanise.com *.searchserverapi.com searchanise-ef84.kxcdn.com s3.amazonaws.com *.twitter.com ton.twimg.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com *.yotpo.com *.cloudflare.com *.bootstrapcdn.com fonts.googleapis.com *.abakhan.co.uk *.woolbox.co.uk *.fabriczone.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.ideal-postcodes.co.uk https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/get.geojs.io *.avada.io *.meetanshi.com api.amplitude.com stats.g.doubleclick.net t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.yotpo.com *.cloudflare.com *.abakhan.co.uk *.woolbox.co.uk *.fabriczone.co.uk *.zendesk.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' *.microvision.com; script-src 'self' 'unsafe-inline' *.jobvite.com *.onlyfy.jobs *.googletagmanager.com 'unsafe-eval' https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/www.google.com *.vimeo.com www.youtube.com; object-src 'none'; font-src 'self' data:; style-src 'self' 'unsafe-inline'; img-src 'self' *.microvision.com data: *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.com.br *.google.com.my *.google.com.hk *.google.com.ng *.google.com.pk *.google.com.uk *.google.de *.google.it *.google.fr *.google.at *.google.ch *.google.ca *.google.co.ao *.google.co.nz *.google.co.jp *.google.co.in https:\/\/www.google.com https:\/\/google.com i.ytimg.com; connect-src 'self' *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.com.br *.google.com.my *.google.com.hk *.google.com.ng *.google.com.pk *.google.com.uk *.google.de *.google.it *.google.fr *.google.at *.google.ch *.google.ca *.google.co.ao *.google.co.nz *.google.co.jp *.google.co.in noembed.com; frame-src 'self' *.jobvite.com *.onlyfy.jobs https:\/\/bid.g.doubleclick.net https:\/\/td.doubleclick.net *.vimeo.com www.youtube.com www.youtube-nocookie.com; report-uri https:\/\/sentry.networkteam.com\/api\/321\/security\/?sentry_key=86c8eb4a595a42448a455afac3f49ef6","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/plausible.io https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/c.seznam.cz https:\/\/ssp.seznam.cz https:\/\/h.seznam.cz; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https:\/\/plausible.io https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/consentcdn.cookiebot.com https:\/\/api.coingecko.com https:\/\/c.seznam.cz https:\/\/ssp.seznam.cz; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/td.doubleclick.net https:\/\/consentcdn.cookiebot.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/bat.bing.com https:\/\/cdn.jsdelivr.net https:\/\/connect.facebook.net https:\/\/dntfctn.com https:\/\/*.doubleclick.net https:\/\/maps.googleapis.com https:\/\/*.hotjar.com https:\/\/*.clarity.ms https:\/\/snap.licdn.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/analytics.synaxon.com https:\/\/stackpath.bootstrapcdn.com https:\/\/*.gstatic.com https:\/\/*.adform.net https:\/\/*.google.com https:\/\/www.youtube.com https:\/\/*.googlesyndication.com https:\/\/*.twitter.com https:\/\/pixel.mathtag.com https:\/\/widget.tabnav.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/*.gstatic.com https:\/\/stackpath.bootstrapcdn.com; img-src 'self' data: 'self' data: https: https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/maps.googleapis.com https:\/\/*.gstatic.com https:\/\/px.ads.linkedin.com https:\/\/www.facebook.com https:\/\/*.google.com https:\/\/www.google.de https:\/\/www.googletagmanager.com; font-src 'self' data: https:\/\/*.gstatic.com https:\/\/static2.sharepointonline.com https:\/\/*.wp.com; connect-src 'self' https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/maps.googleapis.com https:\/\/px.ads.linkedin.com https:\/\/region1.google-analytics.com https:\/\/*.google.com https:\/\/www.googletagmanager.com https:\/\/www.youtube-nocookie.com https:\/\/*.clarity.ms https:\/\/analytics.synaxon.com https:\/\/web-api.synaxon.de https:\/\/www.facebook.com https:\/\/www.google-analytics.com https:\/\/region1.analytics.google.com https:\/\/*.adform.net https:\/\/*.doubleclick.net https:\/\/www.googleadservices.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/analytics.google.com https:\/\/*.googlesyndication.com https:\/\/widget-config.tabnav.com; media-src 'self'; frame-src https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/*.google.com https:\/\/www.googletagmanager.com https:\/\/www.youtube.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; report-uri \/csp-report-endpoint;","count":2},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: tt.omtrdc.net *.akstat.io https:\/\/dpm.demdex.net akstat.io *.go-mpulse.net go-mpulse.net *.amazon-adsystem.com amazon-adsystem.com *.amazonaws.com amazonaws.com s3-eu-west-1.amazonaws.com *.bing.com bing.com *.virtualearth.net ssl.ak.dynamic.tiles.virtualearth.net virtualearth.net *.btttag.com btttag.com c212.net cloudflare.com *.decibelinsight.net wss:\/\/collection.decibelinsight.net decibelinsight.net g.doubleclick.net *.doubleclick.net doubleclick.net fls.doubleclick.net *.facebook.com *.facebook.net facebook.com facebook.net *.fanplayr.com fanplayr.com *.gigya.com gigya.com *.google.com *.google.de *.google.it *.googlesyndication.com *.gstatic.com *.youtube-nocookie.com google.co.uk google.com google.de google.it googlesyndication.com gstatic.com youtube-nocookie.com googleadservices.com *.googleapis.com googleapis.com *.googletagmanager.com googletagmanager.com *.google-analytics.com google-analytics.com *.jaguar.com jaguar.co.uk jaguar.com *.build.landrover *.jaguarlandrover.com *.landrover.com *.landrover.de *.landrover.it *.pds.jaguarlandrover.com build.landrover jaguarlandrover.com landrover.co.uk landrover.com landrover.de landrover.it pds.jaguarlandrover.com ads.linkedin.com linkedin.com linkedin.oribi.io licdn.com *.lpsnmedia.net lpsnmedia.net *.liadm.com liadm.com *.liveperson.net idp.liveperson.net liveperson.net msg.liveperson.net msghist.liveperson.net v.liveperson.net a.run.app *.thunderhead.com cdn.thunderhead.com thunderhead.com cookielaw.org *.netdirector.auto netdirector.auto onetrust.com *.a.run.app *.ads.linkedin.com *.amplitude.com *.b-cdn.net *.c212.net *.cloudflare.com *.config.landrover.com *.configureconnect.com *.connect.agency *.coreweave.com *.decibel.com *.fls.doubleclick.net *.google.co.uk *.googleadservices.com *.jaguar.co.uk *.jaguarlandroverclassic.com *.jlr-dev.com *.jlr-dev.gorillastreaming.com wss:\/\/*.jlr-dev.gorillastreaming.com *.jlr.gorillastreaming.com wss:\/\/*.jlr.gorillastreaming.com *.kampyle.com *.landrover.co.uk *.landroverusa.com *.licdn.com *.linkedin.com *.linkedin.oribi.io *.medallia.eu *.my.salesforce.com *.netdirector.co.uk *.omtrdc.net *.onetrust.com *.pinimg.com *.pinterest.com *.podscribe.com *.psyma.com *.rangerover.com *.sandbox.my.salesforce-scrt.com *.sandbox.my.site.com *.sc-static.net *.scene7.com *.securedvisit.com *.sfmc-content.com *.snapchat.com *.sophus3.com *.stripe.com *.sv.rkdms.com *.userlike.com *.web.app *.woosmap.com *.yahoo.co.jp wss:\/\/a3pm2e78krufa2-ats.iot.us-west-2.amazonaws.com https:\/\/accessories.landrover.prd.itg.co.uk https:\/\/aoc.jlr.com https:\/\/api.jlr-ddc.com https:\/\/api.jlr-dev.gorillarendering.com https:\/\/api.jlr.gorillarendering.com https:\/\/api.pre-prod.jlr-ddc.com api.pureweb.io https:\/\/api.staging.jlr-ddc.com https:\/\/api.tomtom.com assets.exatom.io c0.adalyser.com cashoffer.accu-trade.com cdn.cookielaw.org cdn.jsdelivr.net collector-37690.tvsquared.com config.landrover.com cookie-cdn.cookiepro.com d34r8q7sht0t9k.cloudfront.net decibel.com gtm-loadtest.mobify-storefront.com gtm-production.mobify-storefront.com gtm-uat.mobify-storefront.com jlr-360--naptdev1.sandbox.lightning.force.com jlr-360--prepgold.sandbox.lightning.force.com jlr-360.lightning.force.com jlr-360.my.salesforce-scrt.com jlr-360.my.site.com landroverusa.com ldti.syndication.kbb.com leasinglandrover.de lighthouse.edoinc.com wss:\/\/lo.msg.liveperson.net loadtest.reserve.landrover.com wss:\/\/o5fowqu27k.execute-api.us-west-2.amazonaws.com perseus-consumer-qa.rhcapl.com https:\/\/prelive.accessories.landrover.prd.itg.co.uk psyma.com rum.hlx.page https:\/\/services.postcodeanywhere.co.uk snippet.maze.co sophus3.com syndication.kbb.com uat.reserve.landrover.com wss:\/\/umd.userlike.com userlike.com web.app www.jnaevents.com www.leasinglandrover.de https:\/\/www.rsvpdefender.com wss:\/\/xbejkea53vcrjoora2bwxpvfha.appsync-realtime-api.us-west-2.amazonaws.com pinimg.com pinterest.com podscribe.com securedvisit.com *.serving-sys.com serving-sys.com sc-static.net snapchat.com stripe.com *.tiktok.com tiktok.com *.adsrvr.org adsrvr.org *.trustarc.com trustarc.com *.twitter.com twitter.com *.ads-twitter.com ads-twitter.com *.t.co t.co sv.rkdms.com *.unpkg.com unpkg.com *.vee24.com vee24.com woosmap.com *.yimg.jp yahoo.co.jp yimg.jp *.youtube.com *.ytimg.com youtube.com ytimg.com https:\/\/accessories.landrover.uat.itg.co.uk https:\/\/cdn.rudderlabs.com https:\/\/cdn.rudderstack.com https:\/\/prelive.accessories.landrover.uat.itg.co.uk https:\/\/api.rudderlabs.com https:\/\/api.rudderstack.com https:\/\/jaguarlandgfem.dataplane.rudderstack.com; img-src 'self' data: blob: b-cdn.net; font-src 'self' data: blob: b-cdn.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: b-cdn.net; style-src 'self' 'unsafe-inline' data: blob: b-cdn.net;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.chase.hostedpaymentservice.net *.chase-var.hostedpaymentservice.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com google.com *.braintreegateway.com *.paypal.com *.google.com *.certcapture.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.chase.hostedpaymentservice.net *.chase-var.hostedpaymentservice.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net youtu.be *.nr-data.net 'self' 'unsafe-inline'; img-src *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com *.trackedlink.net https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com *.yahoo.com *.bing.com *.facebook.com mossmotors.com *.mossmotors.com services.postcodeanywhere.co.uk www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page *.certcapture.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.hotjar.com *.facebook.net *.bing.com *.murdoog.com *.pcapredict.com *.jsdelivr.net *.yimg.com *.maxmind.com services.postcodeanywhere.co.uk *.cloudfront.net *info.mossmotors.com form.jotform.com *.freshrelevance.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.chase.hostedpaymentservice.net *.chase-var.hostedpaymentservice.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.gstatic.com dmp.info.mossmotors.com dmp.info.mossmiata.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.pcapredict.com services.postcodeanywhere.co.uk assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.certcapture.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.yimg.com *.doubleclick.net *.adobedtm.com *.mmapiws.com *.cloudfront.net connect.facebook.net *.facebook.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.chase.hostedpaymentservice.net *.chase-var.hostedpaymentservice.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app dmp.info.mossmotors.com dmp.info.mossmiata.com *.dycdn.net *.freshrelevance.com wss:\/\/am.freshrelevance.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com *.googleapis.com cdn.jsdelivr.net *.cloudflare.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https:\/\/pinterest.com https:\/\/www.pinterest.com appleid.apple.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.amazon.de *.bing.com *.clarity.ms *.protectgroup.com *.theticketmerchant.com.au *.cfjump.com *.gstatic.com *.stripe.com *.cloudflare.com *.signifyd.com *.affyi.com *.fishrobotflower.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.gstatic.com *.trustedshops.com *.etrusted.com *.amazon.de *.payments-amazon.de *.bing.com *.clarity.ms *.protectgroup.com *.theticketmerchant.com.au *.cfjump.com *.trustpilot.com *.aptrinsic.com *.stripe.com *.cloudflare.com *.signifyd.com *.affyi.com *.fishrobotflower.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com *.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.google.com *.google.lv *.googletagmanager.com stats.g.doubleclick.net *.trustedshops.com *.etrusted.com *.amazon.de d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.de *.media-amazon.de *.bing.com *.clarity.ms *.protectgroup.com *.theticketmerchant.com.au *.cfjump.com *.roeye.com *.stripe.com *.cloudflare.com *.signifyd.com *.brilliantlocco.com *.esnlocco.com *.affyi.com *.fishrobotflower.com https:\/\/firebasestorage.googleapis.com https:\/\/meetanshi.com\/media\/logo.png flagpedia.net t.zip.co static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/www.googletagmanager.com tagmanager.google.com *.facebook.net *.fontawesome.com *.googleapis.com *.gstatic.com s7.addthis.com chimpstatic.com *.googletagmanager.com *.zip.co *.sandbox.zip.co *.trustedshops.com *.etrusted.com *.amazon.de *.payments-amazon.de *.bing.com *.doubleclick.net *.clarity.ms *.protectgroup.com *.theticketmerchant.com.au *.cfjump.com *.trustpilot.com *.chimpstatic.com *.aptrinsic.com *.roeyecdn.com *.cloudflareinsights.com *.stripe.com *.cloudflare.com *.signifyd.com *.brilliantlocco.com *.esnlocco.com *.theticketmerchant.co.nz *.affyi.com *.fishrobotflower.com thanks.is *.avada.io *.shopify.com maps.googleapis.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com static.zip.co zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/static.klaviyo.com assets.braintreegateway.com *.fontawesome.com tagmanager.google.com cdn.jsdelivr.net *.aptrinsic.com *.stripe.com *.cloudflare.com *.signifyd.com *.affyi.com *.fishrobotflower.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com analytics.google.com *.facebook.net ekr.zdassets.com\/ dpe0djwch8671.cloudfront.net *.sandbox.zip.co *.zip.co *.gstatic.com stats.g.doubleclick.net *.trustedshops.com *.etrusted.com *.amazon.de mws.amazonservices.de *.bing.com *.clarity.ms *.protectgroup.com *.theticketmerchant.com.au *.cfjump.com *.zipmoney.com.au *.amazon.fr *.amazon.es *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es cdn.ampproject.org *.edge.zip.co *.aptrinsic.com *.stripe.com *.cloudflare.com *.signifyd.com *.brilliantlocco.com *.esnlocco.com *.affyi.com *.fishrobotflower.com https:\/\/get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' *.audioeye.com akstat.io *.akstat.io cookielaw.org cdn.cookielaw.org *.google-analytics.com *.quantummetric.com quantummetric.com *.typekit.net www.googletagmanager.com tapestry.com *.tapestry.com tapestry.support *.licdn.com *.jwplatform.com *.jwpcdn.com cdn.jwplayer.com prd.jwpltx.com *.jwpsrv.com jsdelivr.net *.jsdelivr.net *.newrelic.com *-tapestry-news.pantheonsite.io cdnjs.cloudflare.com fonts.googleapis.com secure.gravatar.com px.ads.linkedin.com cdn.linkedin.oribi.io p.adsymptotic.com tapestry.gcs-web.com opensupplyhub.org *.akamaihd.net go-mpulse.net *.go-mpulse.net geolocation.onetrust.com stats.g.doubleclick.net fonts.gstatic.com data: blob:;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.cloudfront.net *.klaviyo.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net https:\/\/*.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com widgets.sandbox.afterpay.com widgets.sandbox.clearpay.co.uk www.google.com https:\/\/*.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.braintreegateway.com *.google.com *.doubleclick.net *.shophumm.com.au *.criteo.com *.hotjar.com *.adsrvr.org *.freshchat.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.wesupply.xyz https:\/\/wesupplylabs.com guarantee-cdn.com *.weltpixel.com *.googletagmanager.com *.typeform.com www.xtento.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com https:\/\/img.youtube.com validator.swagger.io https:\/\/static.afterpay.com https:\/\/site-assets.afterpay.com\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/*.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klevu.com *.cloudflare.com https:\/\/cdn.klarna.com *.paypal.com *.afterpay.com *.cloudfront.net https:\/\/*.paypal.com *.nextopia.net https:\/\/*.zipmoney.com.au *.data-dynamic.net images.latitudepayapps.com *.godfreys.com.au *.feefo.com *.google.com *.google.com.au *.googletagmanager.com.au *.googletagmanager.com *.gstatic.com *.googleapis.com *.bing.com *.criteo.com *.bluekai.com *.socdm.com *.krxd.net *.pubmatic.com *.outbrain.com *.mediavine.com *.aralego.com *.aralego.net *.smaato.net *.clmbtech.com *.yieldmo.com *.emxdgt.com *.doubleclick.net *.bidswitch.net *.adnxs.com *.media.net *.rubiconproject.com *.sharethrough.com *.smartadserver.com *.taboola.com *.teads.tv *.yahoo.com *.casalemedia.com *.dable.io *.adingo.jp *.stickyadstv.com *.rlcdn.com *.3lift.com *.360yield.com *.mytopia.com.au *.clarity.ms *.edisons.com.au *.google.co.in *.1rx.io sync.targeting.unrulymedia.com aa.agkn.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com guarantee-cdn.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.google-analytics.com www.xtento.com cdn.xtento.com t.zip.co static.zipmoney.com.au static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-ds.com https:\/\/rum.hlx.page https:\/\/portal.sandbox.clearpay.co.uk https:\/\/portal.clearpay.co.uk https:\/\/portal.sandbox.afterpay.com https:\/\/portal.afterpay.com https:\/\/static.afterpay.com https:\/\/js.sandbox.afterpay.com https:\/\/js.afterpay.com polyfill.io www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com app.alhena.ai *.forter.com *.cloudfront.net *.openpay.com.au https:\/\/js-agent.newrelic.com https:\/\/oc-library.playground.klarnaservices.com\/lib.js *.bing.com *.criteo.com *.mytopia.com.au *.google.com *.googleoptimize.com *.cfjump.com *.freshchat.com *.zip.co *.clarity.ms *.hotjar.com *.edisons.com.au commerce.adobe.io cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.cloudflare.com guarantee-cdn.com *.googletagmanager.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com www.xtento.com cdn.xtento.com static.zipmoney.com.au static.zip.co zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com static.afterpay.com\/ js.sandbox.afterpay.com js.afterpay.com https:\/\/static.klaviyo.com cdn.jsdelivr.net https:\/\/js.klevu.com\/klevu-css\/* *.klevu.com *.cloudflare.com *.bootstrapcdn.com *.fontawesome.com *.googleapis.com *.ecomm-nav.com https:\/\/*.zipmoney.com.au *.nextopiasoftware.com https:\/\/*.facebook.com https:\/\/*.safelinks.protection.outlook.com\/ *.zdassets.com *.barilliance.com *.barilliance.net *.newrelic.com *.nr-data.net data: https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/use.typekit.net https:\/\/p.typekit.net *.nextopia.net *.cloudfront.net *.freshchat.com unsafe-inline assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.sentry.io static.afterpay.com static.sandbox.afterpay.com js.sandbox.afterpay.com js.afterpay.com *.algolia.net *.algolia.io *.algolianet.com *.insights.algolia.io insights.algolia.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com app.alhena.ai *.cloudfront.net *.forter.com *.zipmoney.com.au *.zip.co *.criteo.com *.googlesyndication.com *.googleapis.com *.afterpay.com https:\/\/ipapi.co\/json\/ *.clarity.ms *.hotjar.com *.bugsnag.com millsbrands.app.n8n.cloud siteperformancetest.net *.siteperformancetest.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com maps.googleapis.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https:\/\/fonts.bunny.net https:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.facebook.com https:\/\/firebasestorage.googleapis.com *.sooqr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com ts.tradetracker.net www.magmodules.eu assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googletagmanager.com *.facebook.net www.termsfeed.com *.avada.io *.sooqr.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tm.tradetracker.net *.trustpilot.com https:\/\/static.spotlersearch.com\/sooqr.js 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https:\/\/fonts.bunny.net *.sooqr.com assets.braintreegateway.com *.trustpilot.com https:\/\/fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pay.nl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/voormijndier.nl\/paynl\/csp\/report; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" default-src https: wss:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; report-uri \/csp-report","count":2},{"content-security-policy-report-only":" default-src 'unsafe-inline' 'unsafe-eval' 'self' data: wss: https: blob:","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https:\/\/plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.affirm.com *.affirm.ca www.facebook.com platform.twitter.com https:\/\/plumrocket.com https:\/\/accounts.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.affirm.com *.affirm.ca https:\/\/images.unsplash.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.affirm.com *.affirm.ca https:\/\/maps.googleapis.com https:\/\/player.vimeo.com connect.facebook.net twitter.com platform.twitter.com https:\/\/accounts.google.com https:\/\/www.gstatic.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com https:\/\/accounts.google.com https:\/\/www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.affirm.com *.affirm.ca https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/accounts.google.com places.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.fontawesome.com https:\/\/fonts.bunny.net *.gstatic.com 'self' data: https:\/\/fonts.gstatic.com *.googleapis.com *.hsappstatic.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action *.facebook.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.cookiebot.com *.doubleclick.net js.mollie.com *.weltpixel.com www.xtento.com *.googletagmanager.com *.bing.com *.facebook.com *.google.com google.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.bing.com *.hsforms.net *.hsforms.com *.prism.app-us1.com *.prismic.io https:\/\/images.unsplash.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/firebasestorage.googleapis.com https:\/\/www.mollie.com 'self' data: www.google.com.ua www.xtento.com cdn.xtento.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com *.cookiebot.com *.doubleclick.net *.facebook.com *.facebook.net *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.tr www.google.com.tw www.google.com.uy www.google.com.vn www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.hn www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sm www.google.sn www.google.sr www.google.td www.google.tm www.google.tn www.google.vu *.google.com google.com *.googlesyndication.com *.googleusercontent.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.cookiebot.com *.cloudfront.net *.bing.com *.facebook.net *.hsforms.net *.hsforms.com *.prism.app-us1.com *.prismic.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.avada.io *.shopify.com js.mollie.com *.google.com *.gstatic.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com *.doubleclick.net *.googleapis.com *.googlesyndication.com *.klaviyo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src fonts.googleapis.com https:\/\/static.klaviyo.com *.fontawesome.com https:\/\/fonts.bunny.net *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com https:\/\/fonts.googleapis.com *.klaviyo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.adobe.io performance.typekit.net *.sentry.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.prism.app-us1.com *.prismic.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/get.geojs.io *.avada.io *.googletagmanager.com *.pay.nl *.bing.com *.cookiebot.com *.doubleclick.net *.facebook.com *.facebook.net *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bi www.google.bj www.google.bs www.google.ca www.google.cd www.google.ch www.google.cl www.google.cm www.google.co.ao www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.hk www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gm www.google.gr www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kz www.google.lk www.google.lt www.google.lu www.google.lv www.google.me www.google.mg www.google.mk www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.se www.google.si www.google.sk www.google.sn www.google.sr www.google.td www.google.tn *.google.com google.com *.googlesyndication.com *.klaviyo.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com rkkck31tec.execute-api.eu-central-1.amazonaws.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/cc69216c-160f-49b7-b5a2-f80ae473753e.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net data: *.fontawesome.com *.gstatic.com 'self' data: *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https:\/\/www.facebook.com\/tr\/ *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.bebemundo.com.do *.jugueton.com.do *.zdassets.com *.hotjar.com 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.dnky.co amc.demdex.net www.google.com www.facebook.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com https:\/\/www.hotjar.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/www.facebook.com\/tr\/ *.youtube.com *.yotpo.com *.doubleclick.net *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: p.typekit.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de maps.gstatic.com maps.googleapis.com accounts.google.com www.google.com www.facebook.com https:\/\/googleads.g.doubleclick.net www.google.com.ar www.google.com.do https:\/\/www.googletagmanager.com https:\/\/www.m.casacuesta.com *.youtube.com https:\/\/connect.facebook.net https:\/\/notifications-icommkt.website *.yotpo.com *.notifications-icommkt.com *.simpleanalyticscdn.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net amazonclode.com commerce.adobedtm.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.sandbox.paypal.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com video.google.com vimeo.com www.vimeo.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.avada.io *.google.com *.gstatic.com https:\/\/www.hotjar.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/www.google-analytics.com https:\/\/stats.g.doubleclick.net http:\/\/www.google.com\/recaptcha\/api.js https:\/\/d12zyq17vm1xwx.cloudfront.net\/v2\/wpn.min.js https:\/\/static.cloudflareinsights.com\/ https:\/\/www.gstatic.com\/recaptcha\/releases\/tFhBvPrftr7Y91fo1S1ASkA6\/recaptcha__es.js https:\/\/externalassets.icommarketing.com\/icomMkt_tracking_jquery.min.js *.youtube.com https:\/\/static.zdassets.com ekr.zdassets.com *.yotpo.com *.simpleanalyticscdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.googleapis.com *.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src https:\/\/static.zdassets.com *.youtube.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net amazonclode.com api.magento.com commerce.adobe.io commerce.adobedtm.com commerce.adobedc.net *.adobe.io performance.typekit.net commerce.adobe.net qa-api.magedevteam.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.comapi.com bam.nr-data.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.google-analytics.com https:\/\/www.hotjar.com https:\/\/script.hotjar.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/www.facebook.com\/tr\/ http:\/\/ccnecommerce.com\/ https:\/\/notifications-icommkt.com\/ https:\/\/track-icommkt.com\/ wss:\/\/widget-mediator.zopim.com\/ *.youtube.com https:\/\/static.zdassets.com ekr.zdassets.com jugueton.zendesk.com bebemundord.zendesk.com casacuesta.zendesk.com *.googletagmanager.com *.yotpo.com *.googleapis.com *.zdassets.com *.hotjar.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src *.typekit.net *.gstatic.com fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com 'self' data: *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.weltpixel.com www.facebook.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.wesupply.xyz https:\/\/wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com p.typekit.net validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.googleapis.com *.hsforms.net *.hsforms.com 'self' data: *.cdninstagram.com *.fbcdn.net *.google.co.in *.sansha.com *.magento2.sansha.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.commerce-payment-services.com *.typekit.net google.com *.google.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.chimpstatic.com downloads.mailchimp.com *.list-manage.com widget.freshworks.com m2epro.freshdesk.com connect.facebook.net twitter.com platform.twitter.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleadservices.com *.google-analytics.com *.doubleclick.net *.googletagmanager.com *.cardinalcommerce.com *.ccdc02.com *.paypalobjects.com *.ytimg.com *.googleapis.com *.vimeo.eu *.vimeo.com *.gstatic.com *.omtrdc.net *.mailchimp.com *.braintreegateway.com *.packeta.com *.app-wallee.com *.cdek.ru *.chronopost.fr *.authorize.net *.stripe.com *.hsforms.net *.hsforms.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.cloudflare.com *.instagram.com maps.googleapis.com klarna.com ajax.googleapis.com https:\/\/www.googletagmanager.com tagmanager.google.com embed.tawk.to *.tawk.to *.jsdelivr.net www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com embed.tawk.to *.tawk.to *.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.adobe.io performance.typekit.net *.sentry.io widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https:\/\/www.google-analytics.com *.instagram.com *.googleusercontent.com embed.tawk.to *.tawk.to *.jsdelivr.net vsa104.tawk.to vsa94.tawk.to vsa79.tawk.to 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src api.adyenpaylink.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.googletagmanager.com https:\/\/call.chatra.io https:\/\/static.zdassets.com https:\/\/widget.intercom.io https:\/\/js.intercomcdn.com https:\/\/*.zoho.com https:\/\/*.zoho.eu https:\/\/cdn.livechatinc.com https:\/\/*.freshchat.com https:\/\/*.freshworks.com https:\/\/widgets.sir.sportradar.com https:\/\/www.datadoghq-browser-agent.com https:\/\/cdn.onesignal.com https:\/\/*.seals.dlagglobal.com https:\/\/*.snippet.anjouangaming.org https:\/\/*.snippet.antillephone.com https:\/\/cdn.jsdelivr.net https:\/\/casino.betbook.host; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: https:\/\/assets.betbook.host https:\/\/*.googletagmanager.com; connect-src 'self' https:\/\/betbook.host wss:\/\/betbook.host https:\/\/sentry-sportsbook.s7s.ai https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/rum.browser-intake-datadoghq.eu https:\/\/call.chatra.io https:\/\/*.freshchat.com https:\/\/*.freshworks.com https:\/\/*.zopim.com https:\/\/*.zendesk.com https:\/\/ekr.zdassets.com https:\/\/api-iam.intercom.io wss:\/\/*.intercom.io https:\/\/*.intercom.io https:\/\/*.zoho.com https:\/\/*.zoho.eu https:\/\/api.livechatinc.com https:\/\/*.livechat.com https:\/\/cdp-eu.customer.io; frame-src 'self' https:\/\/widget-iframe.awidua.io https:\/\/widget-iframe.wadua.io https:\/\/casino.betbook.host; frame-ancestors 'self' https:\/\/casino.betbook.host https:\/\/local.betbook.dev:3002; object-src 'none'; worker-src 'self' blob:; form-action 'self'; base-uri 'none'; report-uri https:\/\/csp-ingest.sec.s7s.ai\/csp-report; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com fonts.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com 'self' 'unsafe-inline'; img-src 'self' data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com quickchart.io img.youtube.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com cdn.jsdelivr.net *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com downloads.mailchimp.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net fonts.gstatic.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.cloudflare.com *.twitter.com *.twimg.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http:\/\/csp-reporting-service.com\/my-project\/endpoint; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.securetrustbank.com https:\/\/*.v12retailfinance.com https:\/\/*.googletagmanager.com;; connect-src 'self' https:\/\/*.securetrustbank.com https:\/\/*.v12retailfinance.com https:\/\/stats.g.doubleclick.net https:\/\/*.google-analytics.com https:\/\/cdn.cookielaw.org https:\/\/*.feefo.com https:\/\/*.trustpilot.com https:\/\/*.civiccomputing.com;; img-src 'self' https:\/\/*.securetrustbank.com https:\/\/*.v12retailfinance.com data: https:\/\/*.google-analytics.com https:\/\/*.google.com https:\/\/*.google.co.uk https:\/\/siteimproveanalytics.com https:\/\/*.siteimproveanalytics.com https:\/\/*.siteimproveanalytics.io https:\/\/*.feefo.com https:\/\/*.trustpilot.com;; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.securetrustbank.com https:\/\/*.v12retailfinance.com https:\/\/*.googletagmanager.com https:\/\/static.srcspot.com https:\/\/cdn.cookielaw.org https:\/\/*.google-analytics.com https:\/\/siteimproveanalytics.com https:\/\/*.siteimproveanalytics.com https:\/\/code.jquery.com https:\/\/*.feefo.com; https:\/\/*.trustpilot.com;; style-src 'self' 'unsafe-inline' https:\/\/*.securetrustbank.com https:\/\/*.v12retailfinance.com https:\/\/siteimproveanalytics.com https:\/\/*.siteimproveanalytics.com https:\/\/*.feefo.com https:\/\/*.trustpilot.com;; font-src 'self' https:\/\/*.securetrustbank.com https:\/\/*.v12retailfinance.com https:\/\/*.trustpilot.com;; frame-src 'self' https:\/\/*.securetrustbank.com https:\/\/*.v12retailfinance.com https:\/\/*.youtube-nocookie.com https:\/\/*.trustpilot.com;; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" default-src https: data: wss: blob: 'unsafe-inline' 'unsafe-eval'; report-uri \/csp-violation-report.php","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com https:\/\/*.customily.com https:\/\/*.amazonaws.com https:\/\/*.mapbox.com 'self' data: *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.hostedpayments.com *.demdex.net *.hubspot.com *.hsforms.com *.hsforms.net wave-utility-stage.azurewebsites.net wave-utility.azurewebsites.net https:\/\/wavedealerapp.azurewebsites.net https:\/\/wavedealerapp-stage.azurewebsites.net https:\/\/wavedealerapp-live.azurewebsites.net https:\/\/voodoo-tacos-utility-b7e6d5cfeeedajg7.southcentralus-01.azurewebsites.net https:\/\/voodoo-tacos-utility-staging-hwascfctf8edg2g4.southcentralus-01.azurewebsites.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/*.customily.com https:\/\/*.amazonaws.com https:\/\/*.mapbox.com 'self' data: *.uber.com *.ubereats.com maps.gstatic.com *.newrelic.com *.nr-data.net *.google.com *.linkedin.com *.salsify.com *.hubspot.com *.hsforms.com i.vimeocdn.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page https:\/\/*.customily.com https:\/\/*.amazonaws.com https:\/\/*.mapbox.com maps.googleapis.com unpkg.com *.unpkg.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.salsify.com *.hubspot.com *.hsforms.com *.hsforms.net *.hs-scripts.com *.hscollectedforms.net *.hs-analytics.net *.hs-banner.com *.hsadspixel.net *.hubspotfeedback.com *.licdn.com *.usemessages.com api.ipify.org *.elfsight.com f.vimeocdn.com www.gstatic.com magento-recs-sdk.adobe.net *.hotjar.com *.jsdelivr.net *.cloudflare.com *.cloudflareinsights.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https:\/\/*.mapbox.com *.fontawesome.com maxcdn.bootstrapcdn.com f.vimeocdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.newrelic.com *.nr-data.net *.google.com *.salsify.com *.hubspot.com *.hsforms.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https:\/\/*.customily.com https:\/\/*.amazonaws.com https:\/\/*.mapbox.com 'self' data: maps.googleapis.com unpkg.com *.unpkg.com *.googletagmanager.com *.doubleclick.net *.googleapis.com *.salsify.com *.linkedin.com *.hubspot.com *.hsforms.com *.hubapi.com *.hscollectedforms.net *.elfsight.com *.cloudflare.com *.cloudflareinsights.com *.hsappstatic.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src fresnel-events.vimeocdn.com player-telemetry.vimeo.com commerce.adobedc.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' http:\/\/*.hs-scripts.com https:\/\/*.googletagmanager.com https:\/\/*.hs-analytics.net https:\/\/*.hs-banner.com https:\/\/*.hs-scripts.com https:\/\/*.hubspot.com https:\/\/*.springernature.com https:\/\/*.user.com; script-src-attr 'unsafe-hashes' 'sha256-bwK6T5wZVTANitXbrTsel7kl\/PyCjCd\/Dq5Qoz3imjM='; style-src 'self' 'unsafe-inline' https:\/\/*.typekit.net; img-src 'self' data: https:; connect-src 'self' https:\/\/*.hubspot.com https:\/\/*.user.com https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com wss:\/\/macmillan-english.user.com; font-src 'self' data: https:\/\/*.typekit.net; frame-src https:\/\/*.buzzsprout.com https:\/\/*.youtube-nocookie.com; frame-ancestors 'none'; report-to csp-report; report-uri \/csp-report","count":2},{"content-security-policy-report-only":" font-src *.fontawesome.com fonts.gstatic.com 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src *.vimeo.com *.texdecor.test *.texdecor.com www.google.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com *.vimeocdn.com s.ytimg.com data *.cdninstagram.com 'self' 'unsafe-inline'; script-src *.sbc29.com *.sbc30.net *.sbc33.com *.sbc35.com www.vimeo.com cdn-scripts.signifyd.com www.youtube.com *.texdecor.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.fontawesome.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src api.sarbacane.com *.texdecor.test *.texdecor.com *.fact-finder.fr www.google-analytics.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" object-src 'none' ;  base-uri 'self' ;  font-src 'self' https:\/\/fonts.gstatic.com https:\/\/www.booxi.eu;  manifest-src 'self' ;  media-src 'self' ;  frame-ancestors 'self' ;  worker-src 'none' ;  connect-src 'self' https:\/\/cognito-idp.eu-west-3.amazonaws.com https:\/\/maps.googleapis.com https:\/\/api.opngo.com https:\/\/static.indigoneo.eu https:\/\/auth.opngo.com;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/cdn.cookielaw.org https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/js.hsforms.net https:\/\/js.hs-scripts.com https:\/\/js.hs-analytics.net https:\/\/js.hs-banner.com https:\/\/js.usemessages.com https:\/\/js.hscollectedforms.net https:\/\/static.hsappstatic.net https:\/\/48752163.fs1.hubspotusercontent-na1.net https:\/\/*.appcues.com https:\/\/*.appcues.net https:\/\/edge.fullstory.com https:\/\/snap.licdn.com; style-src 'self' 'unsafe-inline' https:\/\/cdn.cookielaw.org https:\/\/*.appcues.com https:\/\/*.appcues.net https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:\/\/brand.cf.com https:\/\/assets.cf.com https:\/\/assets.chathamfinancial.com https:\/\/a.storyblok.com https:\/\/cdn.storyblok.com https:\/\/cdn.cookielaw.org https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/track.hubspot.com https:\/\/forms.hsforms.com https:\/\/forms-na1.hsforms.com https:\/\/*.appcues.com https:\/\/*.appcues.net https:\/\/rs.fullstory.com https:\/\/www.linkedin.com https:\/\/px.ads.linkedin.com https:\/\/cdn.jsdelivr.net https:\/\/static.hsappstatic.net; font-src 'self' data: https:\/\/*.appcues.com https:\/\/*.appcues.net https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/cdn.cookielaw.org https:\/\/geolocation.onetrust.com https:\/\/privacyportal.onetrust.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.analytics.google.com https:\/\/www.google.com https:\/\/stats.g.doubleclick.net https:\/\/api.hsforms.com https:\/\/forms.hsforms.com https:\/\/api.hubapi.com https:\/\/track.hubspot.com https:\/\/forms.hscollectedforms.net https:\/\/*.appcues.com https:\/\/*.appcues.net wss:\/\/*.appcues.com wss:\/\/*.appcues.net https:\/\/edge.fullstory.com https:\/\/rs.fullstory.com https:\/\/px.ads.linkedin.com https:\/\/app.launchdarkly.com https:\/\/clientstream.launchdarkly.com https:\/\/events.launchdarkly.com https:\/\/*.ingest.us.sentry.io https:\/\/directline.botframework.com wss:\/\/*.botframework.com https:\/\/auth.cf.com; frame-src 'self' https:\/\/fast.wistia.net https:\/\/www.youtube-nocookie.com https:\/\/*.appcues.com https:\/\/forms.hsforms.com https:\/\/auth.cf.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/forms.hsforms.com https:\/\/api.hsforms.com; frame-ancestors 'self'; report-uri https:\/\/o4506622090018816.ingest.us.sentry.io\/api\/4510943602933760\/security\/?sentry_key=610e426c36ea6bf2bac5d8a48de83e09&sentry_environment=prod","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/trusted-scripts.example.com;style-src 'self';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com 'self' data: *.doubleclick.net stats.g.doubleclick.net sgtm.trudon.com *.facebook.com *.googlesyndication.com *.fontawesome.com https:\/\/fonts.bunny.net https:\/\/cdnjs.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com trudon-prod.b-cdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.facebook.com *.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.google.com\/ *.doubleclick.net stats.g.doubleclick.net sgtm.trudon.com *.facebook.com *.googlesyndication.com *.certcapture.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.youtube.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com 'self' data: *.google.com *.google.fr *.facebook.com *.facebook.net *.doubleclick.net stats.g.doubleclick.net sgtm.trudon.com *.googletagmanager.com *.googlesyndication.com *.certcapture.com https:\/\/www.magezon.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/firebasestorage.googleapis.com maps.gstatic.com trudon-prod.b-cdn.net *.adobedtm.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.googleapis.com *.gstatic.com *.google.com\/ *.google.fr *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net stats.g.doubleclick.net sgtm.trudon.com *.google-analytics.com *.googlesyndication.com *.certcapture.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.avada.io *.shopify.com https:\/\/cdnjs.cloudflare.com maps.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com trudon-prod.b-cdn.net www.youtube.com player.vimeo.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.googleapis.com .doubleclick.net stats.g.doubleclick.net sgtm.trudon.com *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.certcapture.com https:\/\/static.klaviyo.com *.fontawesome.com https:\/\/fonts.bunny.net https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com *.stripe.network *.stripecdn.com *.amazon.com trudon-prod.b-cdn.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.amazonaws.com *.googleapis.com *.google.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.googleapis.com *.facebook.com *.facebook.net *.doubleclick.net stats.g.doubleclick.net sgtm.trudon.com *.googlesyndication.com *.certcapture.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/get.geojs.io *.avada.io maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com trudon-prod.b-cdn.net cdn.plyr.io noembed.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/b0a24144-3357-4f12-b5c2-c9c89923ac50.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net cash-f.squarecdn.com *.googleapis.com *.gstatic.com data: maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com player.vimeo.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https:\/\/www.google.com\/recaptcha\/ * www.google.com mcstaging2.koffievoordeel.xyz *.koffievoordeel.xyz www.koffievoordeel.nl c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net * *.gstatic.com *.googleapis.com mcstaging2.koffievoordeel.xyz *.koffievoordeel.xyz www.koffievoordeel.nl https:\/\/api.mapbox.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https:\/\/rum.hlx.page *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app maxcdn.bootstrapcdn.com mcstaging2.koffievoordeel.xyz *.koffievoordeel.xyz www.koffievoordeel.nl assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * *.googleapis.com mcstaging2.koffievoordeel.xyz *.koffievoordeel.xyz www.koffievoordeel.nl api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com autocomplete2.postdirekt.de 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/*.hscollectedforms.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/*.hs-scripts.com https:\/\/js.hs-analytics.net https:\/\/js.hs-banner.com https:\/\/*.hsadspixel.net https:\/\/*.hubapi.com https:\/\/js.hscta.net https:\/\/js-eu1.hscta.net https:\/\/static.hsappstatic.net https:\/\/*.usemessages.com https:\/\/*.hsleadflows.net https:\/\/*.hsforms.net https:\/\/*.hubspotfeedback.com https:\/\/feedback.hubapi.com https:\/\/feedback-eu1.hubapi.com; style-src 'self' 'unsafe-inline' https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/fonts.googleapis.com https:\/\/*.hubspotusercontent00.net https:\/\/*.hubspotusercontent-na1.net https:\/\/*.hubspotusercontent-eu1.net https:\/\/cdn2.hubspot.net; img-src 'self' data: https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/*.hscollectedforms.net https:\/\/*.hubspotusercontent00.net https:\/\/*.hubspotusercontent-na1.net https:\/\/*.hubspotusercontent-eu1.net https:\/\/no-cache.hubspot.com https:\/\/js.hscta.net https:\/\/js-eu1.hscta.net https:\/\/cdn2.hubspot.net https:\/\/*.hubspot.net; font-src 'self' https:\/\/fonts.gstatic.com https:\/\/*.hubspot.com; connect-src 'self' https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/api.hubapi.com https:\/\/*.hubapi.com https:\/\/*.hs-banner.com https:\/\/js.hscta.net https:\/\/js-eu1.hscta.net https:\/\/*.hscollectedforms.net; frame-src 'self' https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/*.hs-sites.com https:\/\/*.hs-sites-eu1.com https:\/\/*.hubspot.net https:\/\/play.hubspotvideo.com https:\/\/play-eu1.hubspotvideo.com https:\/\/*.hsforms.net; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/*.hubspot.com https:\/\/*.hsforms.com;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; worker-src 'self' blob:; form-action 'self';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com www.apptrian.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com https:\/\/firebasestorage.googleapis.com https:\/\/www.mollie.com 'self' *.signifyd.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com www.xtento.com cdn.xtento.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.apptrian.com chimpstatic.com downloads.mailchimp.com *.list-manage.com widget.freshworks.com m2epro.freshdesk.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com 'self' *.signifyd.com 'self' *.online-metrix.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com maps.googleapis.com www.xtento.com cdn.xtento.com https:\/\/cdn-scripts.signifyd.com https:\/\/cdn-scripts.signifyd.com\/api\/script-tag.js https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.fontawesome.com https:\/\/fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.apptrian.com widget.freshworks.com m2epro.freshdesk.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com https:\/\/imgs.signifyd.com *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" script-src 'self' https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/maps.googleapis.com https:\/\/polyfill.io https:\/\/unpkg.com; script-src-attr 'self'; style-src 'self' https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com; style-src-attr 'self'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/cdn.rudderlabs.com https:\/\/*.helpscout.net https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/a.optnmstr.com https:\/\/googleads.g.doubleclick.net https:\/\/analytics.ahrefs.com https:\/\/*.cdn.prismic.io https:\/\/app.termly.io https:\/\/*.firstpromoter.com https:\/\/cdn.mxpnl.com https:\/\/*.chargebee.com; style-src 'self' https:\/\/fonts.googleapis.com https:\/\/*.omappapi.com; img-src 'self' data: blob: https:\/\/*.prismic.io https:\/\/*.cdn.prismic.io https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/*.omappapi.com https:\/\/alb.reddit.com https:\/\/analytics.twitter.com https:\/\/t.co; font-src 'self' https:\/\/fonts.gstatic.com; media-src 'self' https:\/\/*.cdn.prismic.io; connect-src 'self' https:\/\/api.pixellu.com https:\/\/sentry.ops.px-dev.com https:\/\/api-es-1.pixellu.com https:\/\/api.rudderstack.com https:\/\/api-js.mixpanel.com https:\/\/app.termly.io https:\/\/us.consent.api.termly.io https:\/\/analytics.ahrefs.com https:\/\/www.facebook.com https:\/\/*.smartalbums.com https:\/\/d3hb14vkzrxvla.cloudfront.net https:\/\/*.omappapi.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/*.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/www.google.com https:\/\/ad.doubleclick.net https:\/\/www.googleadservices.com https:\/\/pixel-config.reddit.com; frame-src https:\/\/*.prismic.io https:\/\/www.googletagmanager.com https:\/\/*.chargebee.com https:\/\/www.youtube.com https:\/\/*.smartalbums.com https:\/\/pixellu-slideshows.smartslides.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri https:\/\/sentry.ops.px-dev.com\/api\/77\/security\/?sentry_key=aebeff312386310b0c71112783cd8996&sentry_environment=prod;","count":2},{"content-security-policy-report-only":" font-src *.fontawesome.com https:\/\/fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com https:\/\/static.addtoany.com\/ *.dotdigital-pages.com *.dotdigital.com *.affirm.com *.affirm.ca cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.googletagmanager.com https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.trackedlink.net *.affirm.com *.affirm.ca https:\/\/firebasestorage.googleapis.com *.alothemes.com *.magepow.com https:\/\/www.magezon.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net scontent-sea1-1.cdninstagram.com scontent.cdninstagram.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/rum.hlx.page https:\/\/static.addtoany.com\/ *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.affirm.com *.affirm.ca cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com tagmanager.google.com https:\/\/cdn-scripts.signifyd.com https:\/\/cdn-scripts.signifyd.com\/api\/script-tag.js https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.fontawesome.com https:\/\/fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/stats.addtoany.com\/menu *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.affirm.com *.affirm.ca webchat.dotdigital.com webchat.staging.dotdigital.com https:\/\/get.geojs.io *.avada.io *.alothemes.com *.magepow.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com https:\/\/imgs.signifyd.com api.livechatinc.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src wsv3cdn.audioeye.com fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de wsv3cdn.audioeye.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * bid.g.doubleclick.net\/ ssl.kaptcha.com tst.kaptcha.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https: https:\/\/meetanshi.com\/media\/logo.png data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de chimpstatic.com downloads.mailchimp.com *.list-manage.com wsmcdn.audioeye.com wsv3cdn.audioeye.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com buttons-config.sharethis.com platform-api.sharethis.com t.sharethis.com www.redditstatic.com www.mczbf.com connect.facebook.net cmp.osano.com appleid.cdn-apple.com https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com wsv3cdn.audioeye.com unsafe-inline assets.braintreegateway.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com s3.amazonaws.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de analytics.audioeye.com wsv3cdn.audioeye.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com googleads.g.doubleclick.net stats.g.doubleclick.net ad.doubleclick.net l.sharethis.com platform-api.sharethis.com *.braintreegateway.com *.sandbox.paypal.com www.mczbf.com cmp.osano.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https:\/\/cdn.aniculis.nl https:\/\/dev.hoezo-kado.nl https:\/\/www.aniforte.nl https:\/\/www.aniculis.nl https:\/\/www.vogelhuisje.com https:\/\/www.allesfuervoegel.de https:\/\/www.reavet.nl https:\/\/www.hoezo-kado.nl *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com https:\/\/*.dpdconnect.nl https:\/\/cdn.aniculis.nl https:\/\/dev.hoezo-kado.nl https:\/\/www.aniforte.nl https:\/\/www.aniculis.nl https:\/\/www.vogelhuisje.com https:\/\/www.allesfuervoegel.de https:\/\/www.reavet.nl https:\/\/www.hoezo-kado.nl https:\/\/www.googletagmanager.com js.mollie.com www.facebook.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/cdn.aniculis.nl https:\/\/dev.hoezo-kado.nl https:\/\/www.aniforte.nl https:\/\/www.aniculis.nl https:\/\/www.vogelhuisje.com https:\/\/www.allesfuervoegel.de https:\/\/www.reavet.nl https:\/\/www.hoezo-kado.nl https:\/\/www.google.nl https:\/\/firebasestorage.googleapis.com https:\/\/www.mollie.com maps.gstatic.com blob: https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/*.dpdconnect.nl https:\/\/cdn.aniculis.nl https:\/\/dev.hoezo-kado.nl https:\/\/www.aniforte.nl https:\/\/www.aniculis.nl https:\/\/www.vogelhuisje.com https:\/\/www.allesfuervoegel.de https:\/\/www.reavet.nl https:\/\/www.hoezo-kado.nl https:\/\/static.getclicky.com https:\/\/in.getclicky.com https:\/\/static.cloudflareinsights.com *.avada.io *.shopify.com js.mollie.com maps.googleapis.com cdn.ampproject.org www.gstatic.com connect.facebook.net https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/cdn.aniculis.nl https:\/\/dev.hoezo-kado.nl https:\/\/www.aniforte.nl https:\/\/www.aniculis.nl https:\/\/www.vogelhuisje.com https:\/\/www.allesfuervoegel.de https:\/\/www.reavet.nl https:\/\/www.hoezo-kado.nl *.fontawesome.com https:\/\/fonts.bunny.net www.gstatic.com maxcdn.bootstrapcdn.com https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.googleapis.com https:\/\/cdn.aniculis.nl https:\/\/dev.hoezo-kado.nl https:\/\/www.aniforte.nl https:\/\/www.aniculis.nl https:\/\/www.vogelhuisje.com https:\/\/www.allesfuervoegel.de https:\/\/www.reavet.nl https:\/\/www.hoezo-kado.nl https:\/\/stats.g.doubleclick.net https:\/\/in.getclicky.com https:\/\/get.geojs.io *.avada.io cdn.ampproject.org *.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/analytics.wpmucdn.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/connect.facebook.net https:\/\/www.youtube.com; script-src-elem 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/analytics.wpmucdn.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/connect.facebook.net https:\/\/www.youtube.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:\/\/www.google.com https:\/\/www.google.nl https:\/\/www.google.de https:\/\/www.google.com.co https:\/\/www.google.sk https:\/\/www.google.cz https:\/\/www.google.co.in https:\/\/www.google.co.uk https:\/\/www.google.at https:\/\/www.google.ro https:\/\/www.google.be https:\/\/www.googletagmanager.com https:\/\/stats.g.doubleclick.net https:\/\/lh3.googleusercontent.com https:\/\/i0.wp.com; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.google-analytics.com https:\/\/region1.analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/www.google.nl https:\/\/www.google.co.uk https:\/\/api.ipify.org https:\/\/api64.ipify.org https:\/\/account.interwijs.nl https:\/\/www.google.com https:\/\/www.ictwaarborg.nl https:\/\/www.facebook.com https:\/\/twitter.com https:\/\/www.instagram.com https:\/\/www.linkedin.com https:\/\/cookiedatabase.org https:\/\/www.googletagmanager.com https:\/\/analytics3.wpmudev.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/interwijs.us7.list-manage.com; upgrade-insecure-requests; report-uri https:\/\/csp.interwijs.nl\/","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com challenges.cloudflare.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com *.sendcloud.sc *.jsdelivr.net *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com https:\/\/connect.ekomi.de\/ *.amazonaws.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com challenges.cloudflare.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com https:\/\/connect.ekomi.de\/ *.sendcloud.sc *.jsdelivr.net *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com *.sendcloud.sc *.jsdelivr.net tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/api.w3-edge.com https:\/\/www.googletagmanager.com https:\/\/www.googletagservices.com https:\/\/cdn.privacy-mgmt.com https:\/\/cdnjs.cloudflare.com https:\/\/secure.hook6vein.com https:\/\/a.usbrowserspeed.com https:\/\/www.details-enterprise-7.com https:\/\/pi.pardot.com https:\/\/www.google.com https:\/\/www.google-analytics.com https:\/\/go.skymedia.co.uk https:\/\/js-agent.newrelic.com https:\/\/bam.nr-data.net https:\/\/yoast.com https:\/\/ajax.googleapis.com https:\/\/assets.adobedtm.com https:\/\/www.gstatic.com https:\/\/skymediaglobal.b-cdn.net https:\/\/cdn.skymedia.de https:\/\/cdn.skymedia.ie https:\/\/cdn.skymedia.co.uk https:\/\/cdn.adsmartfromsky.co.uk https:\/\/cdn.adsmartfromsky.ie https:\/\/cdn.cflight.co.uk https:\/\/gdpr-tcfv2.sp-prod.net https:\/\/fluid.4strokemedia.com https:\/\/cdnb.4strokemedia.com https:\/\/z.moatads.com https:\/\/imasdk.googleapis.com https:\/\/pagead2.googlesyndication.com https:\/\/s0.2mdn.net;connect-src 'self' https:\/\/bam.nr-data.net https:\/\/cdn.privacy-mgmt.com https:\/\/my.yoast.com https:\/\/www.skymedia.co.uk https:\/\/cdn.skymedia.co.uk https:\/\/cdn.skymedia.ie https:\/\/cmp.skymedia.de https:\/\/edge.adobedc.net https:\/\/region1.google-analytics.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/fluid.4strokemedia.com https:\/\/feed.4strokemedia.com https:\/\/cdnb.4strokemedia.com https:\/\/api.condatis.sky https:\/\/playback.brightcovecdn.com https:\/\/videos.skysports.com https:\/\/manifest.prod.boltdns.net https:\/\/securepubads.g.doubleclick.net https:\/\/videos.skynews.com https:\/\/csi.gstatic.com https:\/\/idx.liadm.com; img-src 'self' data: https: https:\/\/skymediaglobal.b-cdn.net https:\/\/cdn.skymedia.de https:\/\/cdn.skymedia.ie https:\/\/cdn.skymedia.co.uk https:\/\/cdn.adsmartfromsky.co.uk https:\/\/cdn.adsmartfromsky.ie; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/skymediaglobal.b-cdn.net https:\/\/cdn.skymedia.de https:\/\/cdn.skymedia.ie https:\/\/cdn.skymedia.co.uk https:\/\/cdn.adsmartfromsky.co.uk https:\/\/cdn.adsmartfromsky.ie https:\/\/fonts.bunny.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/skymediaglobal.b-cdn.net https:\/\/cdn.skymedia.de https:\/\/cdn.skymedia.ie https:\/\/cdn.skymedia.co.uk https:\/\/cdn.adsmartfromsky.co.uk https:\/\/cdn.adsmartfromsky.ie https:\/\/fonts.bunny.net;media-src 'self' https: blob: data: https:\/\/skymediaglobal.b-cdn.net https:\/\/cdn.skymedia.de https:\/\/cdn.skymedia.ie https:\/\/cdn.skymedia.co.uk https:\/\/cdn.adsmartfromsky.co.uk https:\/\/cdn.adsmartfromsky.ie https:\/\/playback.brightcovecdn.com https:\/\/videos.skysports.com https:\/\/videos.skynews.com;frame-src 'self' https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.recaptcha.net https:\/\/players.brightcove.net https:\/\/www.youtube.com https:\/\/securepubads.g.doubleclick.net https:\/\/tpc.googlesyndication.com  https:\/\/skymediaglobal.b-cdn.net https:\/\/cdn.skymedia.de https:\/\/cdn.skymedia.ie https:\/\/cdn.skymedia.co.uk https:\/\/cdn.adsmartfromsky.co.uk https:\/\/cdn.adsmartfromsky.ie https:\/\/cdnb.4strokemedia.com https:\/\/imasdk.googleapis.com https:\/\/skymedia-sportkalender.nureg.de;","count":2},{"content-security-policy-report-only":" font-src *.googleapis.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https:\/\/pay.google.com 'self'; frame-src bid.g.doubleclick.net player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.google.com *.multisafepay.com https:\/\/pay.google.com *.smartsupp.com *.smartsuppcdn.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com *.googleapis.com *.gstatic.com https:\/\/images.unsplash.com https:\/\/firebasestorage.googleapis.com *.multisafepay.com *.smartsuppcdn.com www.google.nl bat.bing.com www.golfplaatje.nl www.lichtkoepeltje.nl www.dakraampje.nl www.platdakraamshop.nl data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.googleapis.com https:\/\/www.gstatic.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/www.google.com https:\/\/cdn.polyfill.io https:\/\/browser.sentry-cdn.com *.avada.io *.shopify.com *.multisafepay.com https:\/\/pay.google.com *.smartsuppchat.com *.smartsuppcdn.com consent.cookiefirst.com bat.bing.com platform.getqonfi.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com https:\/\/fonts.bunny.net *.multisafepay.com *.smartsuppcdn.com consent.cookiefirst.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.googleapis.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/*.ingest.sentry.io https:\/\/get.geojs.io *.avada.io *.multisafepay.com *.smartsupp.com wss:\/\/*.smartsupp.com *.smartsuppcdn.com *.smartsuppchat.com pagead2.googlesyndication.com www.google.com www.google.nl *.analytics.google.com bat.bing.com consent.cookiefirst.com edge.cookiefirst.com platform.getqonfi.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/cdn.segment.com https:\/\/*.segment.io https:\/\/copilotplatforms.chilipiper.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:\/\/images.ctfassets.net https:\/\/storage.ghost.io https:\/\/images.unsplash.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/cdn.segment.com https:\/\/api.segment.io https:\/\/*.customer.io https:\/\/copilotplatforms.chilipiper.com https:\/\/graphql.contentful.com https:\/\/storage.ghost.io; frame-src 'self' https:\/\/www.youtube.com https:\/\/copilotplatforms.chilipiper.com; media-src 'self' data:; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/copilotplatforms.chilipiper.com; frame-ancestors 'none'","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/*.svea.com https:\/\/*.vipps.no https:\/\/*.trustly.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https:\/\/*.svea.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io textilgallerian.b-cdn.net https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/www.googletagmanager.com tagmanager.google.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ js.klevu.com *.ksearchnet.com s7.addthis.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/*.svea.com https:\/\/js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com tagmanager.google.com https:\/\/static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com https:\/\/fonts.bunny.net assets.braintreegateway.com https:\/\/statsjs.klevu.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/www.google-analytics.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com ekr.zdassets.com\/ https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.klaviyo.com *.cdnfonts.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com js.mollie.com checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.facebook.com *.amazon-adsystem.com *.doubleclick.net *.sitescout.com *.adsrvr.org *.locally.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https:\/\/images.unsplash.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ magefan.com cm.magefan.com *.disqus.com *.googleapis.com https:\/\/www.mollie.com media.sezzle.com *.hsforms.net *.hsforms.com 'self' data: *.gstatic.com\/mapfiles\/api-3\/images\/* *.s3.amazonaws.com *.net\/company\/SPJKye\/images\/* *.google.co.in *.cloudfront.net *.facebook.com *.amazonaws.com https:\/\/maps.googleapis.com *.sitescout.com trkn.us *.zdassets.com *.zendesk.com *.zdusercontent.com *.nextdoor.com *.redditstatic.com *.reddit.com *.amazon-adsystem.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.disqus.com https:\/\/cdn.jsdelivr.net *.googleapis.com js.mollie.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com *.hsforms.net *.hsforms.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.cloudfront.net\/js\/grin-sdk.js *.googleapis.com\/maps\/* *.googleapis.com\/maps-api-v3\/api\/js *.zdassets.com *.mouseflow.com *.jquery.com *.direct\/feathersnap.js *.facebook.net\/en_US\/fbevents.js *.facebook.net *.facebook.com *.googletagmanager.com *.amazon-adsystem.com *.googleadservices.com *.google-analytics.com *.klaviyo.com q.stripe.com *.basis.net *.smooch.io *.adsrvr.org *.redditstatic.com *.nextdoor.com safevisit.online *.locally.com tagmanager.google.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/static.klaviyo.com https:\/\/cdn.jsdelivr.net *.gstatic.com *.googleapis.com maxcdn.bootstrapcdn.com fonts.cdnfonts.com *.stripe.network *.stripecdn.com *.amazon.com *.cdnfonts.com *.typekit.net *.sezzle.com *.net\/ffj4apz.css *.klaviyo.com tagmanager.google.com fonts.google.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ maps.googleapis.com gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.cloudflare.com\/cdn-cgi\/trace *.googleapis.com\/maps\/api\/* *.grin.co\/fingerprint\/* *.sezzle.com *.grin.co *.g.doubleclick.net https:\/\/ipapi.co *.zendesk.com *.googleapis.com *.ipdata.co *.googletagmanager.com *.mouseflow.com *.amazon-adsystem.com *.paa-reporting-advertising.amazon *.webpagefx.org *.facebook.com *.zdassets.com *.smooch.io wss:\/\/api.smooch.io *.redditstatic.com *.reddit.com *.adsrvr.org *.locally.com *.analytics.google.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.flixcar.com *.flixfacts.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.monetico-services.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.monetico-services.com https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com cdn.doofinder.com *.flix360.com *.flix360.io https:\/\/images.unsplash.com *.openstreetmap.org *.flixcar.com *.bazaarvoice.com *.jwpsrv.com *.flixfacts.com *.imgix.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com cdn.doofinder.com *.channelsight.com media.flixfacts.com *.flix360.io *.flixcar.com *.cloudflareinsights.com *.gitem.fr fghcx.gitem.fr xvvcw.procie.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com display.ugc.bazaarvoice.com *.doofinder.com *.flixcar.com https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.fontawesome.com https:\/\/fonts.bunny.net assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.monetico-services.com *.doofinder.com wss:\/\/*.doofinder.com *.flixcar.com *.openstreetmap.org *.axept.io https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.zopim.com *.zopim.io *.jivosite.com *.netcore.co.in\/ *.hansel.io\/ *.netcoresmartech.com https:\/\/local.netcoresmartech.com:3000 *.boxx.ai *.netcorein.com *.netcore.co.in https:\/\/fonts.bunny.net data: checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai fonts.googleapis.com storage.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.postpay.io https:\/\/www.youtube.com http:\/\/www.sandbox.paypal.com www.paypal.com *.twitter.com checkout.tabby.ai 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.postpay.io *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.com *.zopim.io *.doubleclick.net *.google.com *.google.co.in *.ftcdn.net *.behance.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.jivosite.com *.cdninstagram.com https:\/\/firebasestorage.googleapis.com magefan.com cm.magefan.com *.disqus.com https:\/\/img.youtube.com checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai fonts.googleapis.com storage.googleapis.com *.tamara.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page maps.googleapis.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.postpay.io *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bing.com *.zopim.com *.zdassets.com www.google.com *.payments-amazon.com *.jivosite.com *.netcore.co.in\/ *.hansel.io\/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in *.avada.io *.shopify.com *.disqus.com player.vimeo.com checkout.tabby.ai widgets.tabby.ai cdn.segment.com connect.facebook.net cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com *.tamara.co https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com *.postpay.io *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.vimeocdn.com *.jivosite.com *.netcore.co.in\/ *.hansel.io\/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in https:\/\/fonts.bunny.net *.tamara.co 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com *.zopim.io *.jivosite.com *.tamara.co 'self' 'unsafe-inline'; manifest-src *.netcore.co.in\/ *.hansel.io\/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com *.postpay.io www.google-analytics.com *.cloudflare.com *.twitter.com *.twimg.com *.zdassets.com *.zopim.com *.zopim.io wss:\/\/widget-mediator.zopim.com https:\/\/stats.g.doubleclick.net *.amazon.com *.amazon.co.jp *.amazon.co.uk *.amazon.jp *.jivosite.com *.netcore.co.in\/ *.hansel.io\/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in https:\/\/get.geojs.io *.avada.io checkout.tabby.ai widgets.tabby.ai cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com *.tamara.co 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com maxcdn.bootstrapcdn.com cdn.userway.org *.userway.org *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/plumrocket.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com www.facebook.com platform.twitter.com https:\/\/plumrocket.com https:\/\/accounts.google.com www.clarity.ms *.clarity.ms cdn.userway.org *.userway.org *.omniconvert.com js.mollie.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com https:\/\/applepay.cdn-apple.com checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https:\/\/images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com www.clarity.ms *.clarity.ms cdn.userway.org *.userway.org *.omniconvert.com https:\/\/www.mollie.com *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com https:\/\/applepay.cdn-apple.com media.sezzle.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.commerce-payment-services.com assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page https:\/\/maps.googleapis.com https:\/\/player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.plugins.emarsys.net *.scarabresearch.com https:\/\/cdn.jsdelivr.net connect.facebook.net twitter.com platform.twitter.com https:\/\/accounts.google.com https:\/\/www.gstatic.com www.clarity.ms *.clarity.ms cdn.userway.org *.userway.org *.omniconvert.com https:\/\/www.googletagmanager.com tagmanager.google.com https:\/\/www.googleadservices.com widget.freshworks.com m2epro.freshdesk.com js.mollie.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com https:\/\/applepay.cdn-apple.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com https:\/\/cdn-scripts.signifyd.com https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com unsafe-inline assets.braintreegateway.com https:\/\/accounts.google.com https:\/\/www.gstatic.com www.clarity.ms *.clarity.ms cdn.userway.org *.userway.org *.omniconvert.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com maxcdn.bootstrapcdn.com fonts.cdnfonts.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com *.magento-datasolutions.com *.magento-ds.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.scarabresearch.com *.eservice.emarsys.net https:\/\/commerce.adobe.io https:\/\/commerce.adobedc.net https:\/\/accounts.google.com www.clarity.ms *.clarity.ms cdn.userway.org *.userway.org api.userway.org *.omniconvert.com widget.freshworks.com m2epro.freshdesk.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' *.zdassets.com *.zopim.com *.zendesk.com wss:\/\/*.zendesk.com wss:\/\/*.zopim.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' d1qmrxg9gbf226.cloudfront.net api-accent.bloomreach.co *.qantasloyalty.com api.smooch.io applepay.cdn-apple.com *.googleadservices.com assets.braintreegateway.com\/web *.bazaarvoice.com *.doubleclick.net storage.googleapis.com\/workbox-cdn www.google.com\/pagead *.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ cfjump.platypusshoes.com.au cfjump.platypusshoes.co.nz *.fullstory.com www.googletagmanager.com analytics.tiktok.com cdn.unidays.world *.truefitcorp.com www.paypalobjects.com\/api\/checkout.min.js *.klaviyo.com t.cfjump.com *.zdassets.com connect.facebook.net maps.googleapis.com js-agent.newrelic.com js.datadome.co ct.captcha-delivery.com *.adobedtm.com *.afterpay.com *.demdex.net *.forter.com dlthst9q2beh8.cloudfront.net d2nww8zpyj5pk0.cloudfront.net *.google-analytics.com *.paypal.com afterpay.com foursixty.com *.useinsider.com *.roymorgan.com s.pinimg.com lantern.roeyecdn.com ct.pinterest.com js-sandbox.squarecdn.com js.squarecdn.com ; style-src 'self' 'unsafe-inline' display.ugc.bazaarvoice.com maxcdn.bootstrapcdn.com\/font-awesome *.typekit.net fonts.googleapis.com assets.braintreegateway.com *.adobetm.com foursixty.com assets.api.useinsider.com *.adobemc.com ; img-src data: 'self' api-accent.bloomreach.co *.zendesk.com dpm.demdex.net www.googleadservices.com\/ccm www.magentocommerce.com\/products\/media *.platypusshoes.co.nz *.platypusshoes.com.au googleads.g.doubleclick.net ad.doubleclick.net www.google.com\/ccm www.paypalobjects.com www.google.com www.google.com.au www.google.co.nz www.google.com.vn maps.gstatic.com\/mapfiles scontent.cdninstagram.com *.afterpay.com *.accentgra.com www.googletagmanager.com www.facebook.com *.bazaarvoice.com t.paypal.com duuytoqss3gu4.cloudfront.net df45ay5pw60dy.cloudfront.net d3nocrch4qti4v.cloudfront.net *.google-analytics.com *.pinterest.com *.twilio.com *.tiktok.com *.useinsider.com maps.googleapis.com\/maps developers.google.com *.zopim.io *.zdassets.com amcglobal.sc.omtrdc.net adservice.google.com lantern.roeye.com accentgroupxpdev.112.2o7.net\/b\/ss\/accentgroup-xpdev i.vimeocdn.com\/video ; object-src 'none' ; base-uri 'self' ; child-src 'self' blob: ; connect-src 'self' api-accent.bloomreach.co *.qantasloyalty.com analytics.google.com\/g\/collect iq.afterpay.com\/us\/v1 iq.afterpay-beta.com\/us\/v1 *.my.sentry.io wss:\/\/api.smooch.io *.accentgra.com www.facebook.com\/tr google.com www.google.com collect-ap2.attraqt.io smetrics.platypusshoes.co.nz *.fullstory.com *.klaviyo.com smetrics.platypusshoes.com.au api-js.datadome.co *.adobedc.net *.afterpay.com *.bazaarvoice.com *.braintree-api.com *.braintreegateway.com *.demdex.net *.forter.com *.foursixty.com google.com\/ccm www.google.com\/ccm *.google-analytics.com *.googleapis.com www.google.com.au\/ads\/ga-audiences *.nr-data.net *.paypal.com *.truefitcorp.com *.zdassets.com *.zendesk.com *.zopim.com accentgroupxpdev.112.2o7.net afterpay.com analytics.tiktok.com facebook.com *.roymorgan.com foursixty.com kleber.datatoolscloud.net.au sentry.io vimeo.com wss:\/\/*.twilio.com wss:\/\/widget-mediator.zopim.com d2o5idwacg3gyw.cloudfront.net dz8rit8v72mig.cloudfront.net d2lxqodqbpy7c2.cloudfront.net d6rak4b14t5gp.cloudfront.net d3k4bt74u9esq1.cloudfront.net wss:\/\/cdn0.forter.com api.myunidays.com ct.pinterest.com stats.g.doubleclick.net *.useinsider.com ; font-src data: 'self' maxcdn.bootstrapcdn.com\/font-awesome fonts.gstatic.com *.truefitcorp.com *.useinsider.com static.klaviyo.com use.typekit.net shopping.qantas.com ; frame-src 'self' api-accent.bloomreach.co *.qlstg.qantas.com www.googletagmanager.com geo.captcha-delivery.com *.formstack.com *.afterpay.com *.bazaarvoice.com *.demdex.net *.doubleclick.net *.facebook.com *.myunidays.com *.omniparcelreturns.com *.paypal.com *.paypalobjects.com *.truefitcorp.com *.useinsider.com *.vimeo.com *.youtu.be *.youtube.com afterpay.com assets.braintreegateway.com facebook.com foursixty.com google.com www.google.com vimeo.com ct.pinterest.com ; worker-src 'self' blob: *.accentgra.com *.platypusshoes.co.nz *.platypusshoes.com.au;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/tagmanager.google.com https:\/\/munchkin.marketo.net https:\/\/*.marketo.com https:\/\/*.marketo.net https:\/\/info.printerlogic.com https:\/\/cdn-cookieyes.com https:\/\/*.cookieyes.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/app.vwo.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/chat.conversica.com https:\/\/*.conversica.com https:\/\/cdn.leandata.com https:\/\/*.leandata.com https:\/\/unpkg.com https:\/\/va.vercel-scripts.com https:\/\/*.vercel-scripts.com https:\/\/cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/*.cookieyes.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/info.printerlogic.com https:\/\/chat.conversica.com https:\/\/*.conversica.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/script.hotjar.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/chat.conversica.com https:\/\/*.conversica.com; connect-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/www.google.com https:\/\/region1.google-analytics.com https:\/\/munchkin.marketo.net https:\/\/*.marketo.com https:\/\/*.marketo.net https:\/\/info.printerlogic.com https:\/\/*.cookieyes.com https:\/\/log.cookieyes.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/app.vwo.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/chat.conversica.com https:\/\/*.conversica.com https:\/\/cdn.leandata.com https:\/\/*.leandata.com https:\/\/a-us.storyblok.com https:\/\/a.storyblok.com https:\/\/api-us.storyblok.com https:\/\/api.storyblok.com https:\/\/img.storyblok.com https:\/\/img2.storyblok.com https:\/\/sheets.googleapis.com https:\/\/www.workable.com https:\/\/api.rippling.com https:\/\/va.vercel-scripts.com https:\/\/*.vercel-insights.com https:\/\/vitals.vercel-insights.com; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/td.doubleclick.net https:\/\/*.cookieyes.com https:\/\/*.hotjar.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/app.vwo.com https:\/\/chat.conversica.com https:\/\/*.conversica.com https:\/\/*.leandata.com https:\/\/info.printerlogic.com https:\/\/app.storyblok.com https:\/\/editor.storyblok.com https:\/\/m.storyblok.com https:\/\/app.zoominfo.com https:\/\/vercel.live; worker-src 'self' blob:; media-src 'self' blob: https:\/\/a-us.storyblok.com https:\/\/a.storyblok.com https:\/\/img.storyblok.com https:\/\/img2.storyblok.com; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/info.printerlogic.com https:\/\/*.marketo.com https:\/\/*.marketo.net; report-uri \/api\/csp-report\/; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" default-src 'self' ; script-src 'report-sample' 'self' ; connect-src 'self' ; img-src 'self' data: ; style-src 'self' ; font-src 'self' ; object-src 'none'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-src 'self' blob: ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html html lit-html 'allow-duplicates'; upgrade-insecure-requests; report-uri https:\/\/api-data.bitkeep.com\/log\/pivot\/cspSecurity;","count":2},{"content-security-policy-report-only":" font-src *.cloudflare.com *.bootstrapcdn.com *.googleapis.com *.gstatic.com *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.youtube.com *.g.doubleclick.net *.facebook.com *.facebook.net https:\/\/payment-stage.ecpay.com.tw\/ https:\/\/payment.ecpay.com.tw\/ 'self' 'unsafe-inline'; frame-ancestors *.tappaysdk.com google.com *.google.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com *.tappaysdk.com google.com *.google.com *.facebook.com *.g.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https:\/\/live-chat-console.no8.io https:\/\/*.useinsider.com *.wesupply.xyz https:\/\/wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.cloudflare.com *.ytimg.com *.googletagmanager.com *.google-analytics.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.tappaysdk.com google.com *.google.com *.cloudflare.com *.twitter.com *.fontawesome.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.zdassets.com *.facebook.net *.g.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https:\/\/live-chat-console.no8.io https:\/\/js-agent.newrelic.com https:\/\/bam.nr-data.net https:\/\/*.useinsider.com https:\/\/www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.tappaysdk.com google.com *.google.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.googleapis.com *.gstatic.com https:\/\/live-chat-console.no8.io tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src *.tappaysdk.com google.com *.google.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.tappaysdk.com google.com *.google.com *.cloudflare.com *.google-analytics.com *.googletagmanager.com *.zendesk.com *.zopim.com *.zdassets.com *.gstatic.com *.google.com.tw *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https:\/\/api-next.no8.io https:\/\/js-agent.newrelic.com https:\/\/bam.nr-data.net https:\/\/*.useinsider.com https:\/\/www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com isst.fietsonline.com *.fontawesome.com maxcdn.bootstrapcdn.com https:\/\/widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com isst.fietsonline.com https:\/\/seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https:\/\/pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com isst.fietsonline.com *.multisafepay.com https:\/\/pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com isst.fietsonline.com backend.chatbase.co www.google.co.uk www.google.fr www.google.nl www.google.de www.google.es www.google.it www.google.ch www.google.se www.google.pl www.google.co.in magefan.com cm.magefan.com *.disqus.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https:\/\/cdn.jsdelivr.net *.tiktok.com isst.fietsonline.com consentcdn.cookiebot.com consent.cookiebot.com cdn-eu.pagesense.io static.zohocdn.com www.chatbase.co *.disqus.com *.multisafepay.com https:\/\/pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com isst.fietsonline.com https:\/\/cdn.jsdelivr.net *.fontawesome.com maxcdn.bootstrapcdn.com *.multisafepay.com assets.braintreegateway.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com isst.fietsonline.com consentcdn.cookiebot.com *.pagesense.io *.zoho.eu *.zohocdn.com www.chatbase.co *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/pagead2.googlesyndication.com https:\/\/adservice.google.com https:\/\/js.hsforms.net https:\/\/tpc.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/cdn.cookielaw.org https:\/\/cdn.cookieyes.com https:\/\/cdn-cookieyes.com https:\/\/*.adtrafficquality.google; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/forms.hubspot.com https:\/\/*.googlesyndication.com https:\/\/*.google.com https:\/\/log.cookieyes.com https:\/\/cdn-cookieyes.com https:\/\/*.adtrafficquality.google; frame-src https:\/\/www.youtube.com https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net https:\/\/forms.hubspot.com https:\/\/tpc.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/*.adtrafficquality.google https:\/\/www.google.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self' https:\/\/forms.hubspot.com","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.klarnacdn.net *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors https:\/\/api.clerk.io https:\/\/cdn.clerk.io *.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.klarna.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com *.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io https:\/\/cdn.clerk.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https:\/\/firebasestorage.googleapis.com https:\/\/www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.zonos.com *.postcodeanywhere.co.uk *.bing.net *.google.rs *.google.com *.bing.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https:\/\/api.clerk.io https:\/\/cdn.clerk.io chimpstatic.com downloads.mailchimp.com *.list-manage.com widget.freshworks.com m2epro.freshdesk.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https:\/\/cdn.logrocket.io https:\/\/cdn.logr-ingest.com https:\/\/cdn.lr-ingest.io https:\/\/cdn.lr-in.com https:\/\/cdn.lr-in-prod.com https:\/\/cdn.lr-ingest.com https:\/\/cdn.ingest-lr.com https:\/\/cdn.lr-intake.com https:\/\/cdn.intake-lr.com *.avada.io js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com https:\/\/www.googletagmanager.com tagmanager.google.com *.zonos.com *.cloudflareinsights.com *.clerk.io *.pcapredict.com *.postcodeanywhere.co.uk *.bing.com *.clarity.ms *.hotjar.com *.lrkt-in.com https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/api.clerk.io https:\/\/cdn.clerk.io downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com tagmanager.google.com *.postcodeanywhere.co.uk *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io widget.freshworks.com m2epro.freshdesk.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https:\/\/*.logrocket.io https:\/\/*.lr-ingest.io https:\/\/*.logrocket.com https:\/\/*.lr-in.com https:\/\/*.lr-in-prod.com https:\/\/*.lr-ingest.com https:\/\/*.ingest-lr.com https:\/\/*.lr-intake.com https:\/\/*.intake-lr.com https:\/\/*.logr-ingest.com https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com places.googleapis.com https:\/\/www.google-analytics.com *.zonos.com *.cloudflareinsights.com *.pcapredict.com *.postcodeanywhere.co.uk *.bing.com *.clarity.ms *.bing.net *.hotjar.com *.lrkt-in.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com https:\/\/www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ https:\/\/widgets.binotel.com https:\/\/cdn.jsdelivr.net js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/widgets.binotel.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com *.fontawesome.com *.gstatic.com 'self' data: *.doubleclick.net https:\/\/fonts.bunny.net *.paypal.com *.paypalobjects.com *.typekit.net *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.punchout2go.com *.tradecentric.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com https:\/\/www.google.com\/recaptcha\/ *.youtube.com *.youtube-nocookie.com *.certcapture.com *.google.com *.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * js.mollie.com *.sandbox.paypal.com *.punchout2go.com *.tradecentric.com www.xtento.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.certcapture.com https:\/\/images.unsplash.com *.amazonaws.com *.logiscenter.com *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com cdn.doofinder.com 'self' data: *.google.com *.google.bg *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com magefan.com cm.magefan.com https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https:\/\/www.mollie.com *.sandbox.paypal.com *.barcodespim.com *.cloudfront.net *.barcodesinc.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src analytics.ahrefs.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.certcapture.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com ajax.googleapis.com static.userguiding.com *.livechatinc.com *.livechat-static.com us1-config.doofinder.com eu1-config.doofinder.com cdn.doofinder.com cmp.inmobi.com *.google.com *.google.bg *.googletagmanager.com *.doubleclick.net *.google-analytics.com *.gstatic.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com js.mollie.com *.sandbox.paypal.com *.paypalobjects.com *.cdn-apple.com *.punchout2go.com *.tradecentric.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.certcapture.com *.fontawesome.com *.livechatinc.com cdn.doofinder.com *.googleapis.com *.doubleclick.net *.gstatic.com *.googletagmanager.com https:\/\/fonts.bunny.net assets.braintreegateway.com *.punchout2go.com *.tradecentric.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src analytics.ahrefs.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.certcapture.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.userguiding.com *.livechatinc.com *.text.com cdn.doofinder.com wss:\/\/eu1-layer.doofinder.com eu1-api.doofinder.com eu1-config.doofinder.com wss:\/\/us1-layer.doofinder.com us1-api.doofinder.com us1-config.doofinder.com cmp.inmobi.com api.cmp.inmobi.com visit-server.inmobi-choice.io *.googlesyndication.com *.google-analytics.com *.google.com https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.sandbox.paypal.com 'self' 'unsafe-inline'; child-src *.certcapture.com *.livechatinc.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https:\/\/*.gstatic.com https:\/\/static.dhlecommerce.nl https:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https:\/\/pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.multisafepay.com https:\/\/pay.google.com *.cookiebot.com *.bing.com *.googletagmanager.com *.textielstad.nl https:\/\/qdzh.textielstad.nl 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com https:\/\/belco-prod.s3-eu-central-1.amazonaws.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.multisafepay.com *.cookiebot.com *.bing.com *.google.nl *.google.be *.google.de *.google.es *.google.fr *.textielstad.nl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com https:\/\/cdn.belco.io *.belco.io https:\/\/static.dhlecommerce.nl https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.multisafepay.com https:\/\/pay.google.com *.cookiebot.com *.bing.com *.ahrefs.com *.textielstad.nl https:\/\/consent.studio 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https:\/\/*.googleapis.com https:\/\/static.dhlecommerce.nl https:\/\/maps.googleapis.com https:\/\/fonts.googleapis.com https:\/\/static.klaviyo.com *.multisafepay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com wss:\/\/chat.belco.io https:\/\/cdn.belco.io *.belco.io https:\/\/api-gw.dhlparcel.nl https:\/\/static.dhlecommerce.nl https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.multisafepay.com *.cookiebot.com *.bing.com google.com *.ahrefs.com *.google.nl *.google.be *.google.de *.google.es *.google.fr *.textielstad.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com *.googleapis.com *.livechatinc.com *.acsbap.com *.acsbapp.com https:\/\/acsbapp.com\/apps\/app\/dist\/fonts\/ *.stripecdn.com *.link.com *.amazon.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com www.facebook.com www.googletagmanager.com www.google-analytics.com *.icims.eu www.youtube.com cookiepedia.co.uk www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.livechatinc.com *.trustpilot.com *.trustpilot.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.wiltshirefarmfoods.com https:\/\/seo.mageplaza.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com vars.hotjar.com www.facebook.com www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.livechatinc.com *.trustpilot.com *.trustpilot.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.wiltshirefarmfoods.com td.doubleclick.net pagead2.googlesyndication.com analytics.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com www.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.amplience.net fpdbs.paypal.com fpdbs.sandbox.paypal.com *.yotpo.com p.adsymptotic.com bat.bing.com www.facebook.com cdn-ukwest.onetrust.com *.livechatinc.com cookiesuksouth.blob.core.windows.net www.google.co.in www.google-analytics.com px.ads.linkedin.com cookiepedia.co.uk www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.wiltshirefarmfoods.com *.trustpilot.com *.trustpilot.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.postcodeanywhere.co.uk acsbap.com acsbapp.com *.acsbap.com *.acsbapp.com https:\/\/cdn.acsbapp.com\/apps\/app\/dist\/media\/ cdn.cookielaw.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.youtube.com *.vimeo.com secure.authorize.net test.authorize.net www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com *.cardinalcommerce.com geo.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.onetrust.com *.livechatinc.com static.hotjar.com www.gstatic.com *.trackedlink.net *.stripe.com *.trustpilot.com maps.googleapis.com *.pcapredict.com snap.licdn.com connect.facebook.net bat.bing.com secure.leadforensics.com js-agent.newrelic.com script.hotjar.com ict.infinity-tracking.net cookiepedia.co.uk www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.trustpilot.net *.bam.nr-data.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.wiltshirefarmfoods.com *.dwin1.com acsbap.com acsbapp.com *.acsbap.com *.acsbapp.com https:\/\/acsbapp.com\/apps\/app\/dist\/ https:\/\/acsbapp.com\/apps\/app\/assets\/js\/ td.doubleclick.net pagead2.googlesyndication.com *.conoret.com cdn.cookielaw.org rum.hlx.page *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.postcodeanywhere.co.uk cdn.cookielaw.org *.stripe.network *.stripecdn.com *.amazon.com *.fontawesome.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.ideal-postcodes.co.uk *.stripe.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com maps.googleapis.com *.onetrust.com *.livechatinc.com bam.nr-data.net in.hotjar.com ict.infinity-tracking.net stats.g.doubleclick.net bat.bing.com www.youtube.com cookiepedia.co.uk www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.trustpilot.com *.trustpilot.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.wiltshirefarmfoods.com acsbap.com acsbapp.com *.acsbap.com *.acsbapp.com *.wikipedia.org\/w\/api.php https:\/\/process.acsbapp.com\/apps\/app\/ https:\/\/cdn.acsbapp.com\/resources\/ https:\/\/cdn.acsbapp.com\/cache\/app\/ https:\/\/cdn.acsbapp.com\/config\/ https:\/\/acsbapp.com\/apps\/app\/assets\/js\/ td.doubleclick.net pagead2.googlesyndication.com analytics.google.com cdn.cookielaw.org klarna.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' *.zdassets.com *.zopim.com *.zendesk.com wss:\/\/*.zendesk.com wss:\/\/*.zopim.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' d1qmrxg9gbf226.cloudfront.net api-accent.bloomreach.co api.smooch.io applepay.cdn-apple.com *.googleadservices.com *.braintreegateway.com assets.braintreegateway.com\/web *.bazaarvoice.com *.doubleclick.net storage.googleapis.com\/workbox-cdn www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ cfjump.skechers.com.au cfjump.skechers.co.nz *.fullstory.com www.googletagmanager.com analytics.tiktok.com cdn.unidays.world *.truefitcorp.com www.paypalobjects.com\/api\/checkout.min.js *.klaviyo.com t.cfjump.com *.zdassets.com connect.facebook.net maps.googleapis.com dma-cdn.staging.truefitcorp.com\/fitrec\/dma\/js\/tracker.js js-agent.newrelic.com js.datadome.co ct.captcha-delivery.com *.adobedtm.com *.afterpay.com *.demdex.net *.forter.com dlthst9q2beh8.cloudfront.net d2nww8zpyj5pk0.cloudfront.net *.google-analytics.com *.paypal.com afterpay.com foursixty.com *.useinsider.com *.roymorgan.com s.pinimg.com\/ct lantern.roeyecdn.com\/lantern_global_cf42725.min.js *.adobemc.com js-sandbox.squarecdn.com api.myunidays.com player.vimeo.com ct.pinterest.com js.squarecdn.com *.stg.qantasloyalty.com\/appcache\/wid-redemptions-button\/master\/ *.stg.qantasloyalty.com\/ ; style-src 'self' 'unsafe-inline' display.ugc.bazaarvoice.com maxcdn.bootstrapcdn.com\/font-awesome *.typekit.net fonts.googleapis.com assets.braintreegateway.com *.adobetm.com foursixty.com *.adobemc.com static.klaviyo.com\/onsite\/js ; img-src data: 'self' api-accent.bloomreach.co *.zendesk.com dpm.demdex.net www.googleadservices.com\/ccm www.magentocommerce.com\/products\/media *.skechers.co.nz *.skechers.com.au cm.everesttech.net\/cm\/dd googleads.g.doubleclick.net ad.doubleclick.net www.google.com\/ccm www.paypalobjects.com www.google.com www.google.com.au www.google.co.nz www.google.com.vn maps.gstatic.com\/mapfiles scontent.cdninstagram.com *.afterpay.com *.accentgra.com www.googletagmanager.com www.facebook.com *.bazaarvoice.com t.paypal.com duuytoqss3gu4.cloudfront.net df45ay5pw60dy.cloudfront.net d3nocrch4qti4v.cloudfront.net *.google-analytics.com *.pinterest.com *.tiktok.com *.useinsider.com maps.googleapis.com\/maps developers.google.com *.zopim.io *.zdassets.com blob amcglobal.sc.omtrdc.net adservice.google.com lantern.roeye.com i.vimeocdn.com\/video ; object-src 'none' ; base-uri 'self' ; child-src 'self' blob: ; connect-src 'self' api-accent.bloomreach.co analytics.google.com\/g\/collect iq.afterpay.com\/us\/v1 iq.afterpay-beta.com\/us\/v1 *.my.sentry.io wss:\/\/api.smooch.io *.accentgra.com www.facebook.com\/tr google.com www.google.com collect-ap2.attraqt.io smetrics.skechers.co.nz *.fullstory.com *.klaviyo.com smetrics.skechers.com.au api-js.datadome.co *.adobedc.net *.afterpay.com *.bazaarvoice.com *.braintree-api.com *.braintreegateway.com *.demdex.net *.forter.com *.foursixty.com google.com\/ccm www.google.com\/ccm *.google-analytics.com *.googleapis.com *.nr-data.net *.paypal.com *.truefitcorp.com *.zdassets.com *.zendesk.com *.zopim.com accentgroupxpdev.112.2o7.net afterpay.com analytics.tiktok.com facebook.com *.roymorgan.com foursixty.com kleber.datatoolscloud.net.au sentry.io vimeo.com wss:\/\/widget-mediator.zopim.com d2o5idwacg3gyw.cloudfront.net dz8rit8v72mig.cloudfront.net d2lxqodqbpy7c2.cloudfront.net d6rak4b14t5gp.cloudfront.net d3k4bt74u9esq1.cloudfront.net wss:\/\/cdn0.forter.com api.myunidays.com ct.pinterest.com\/stats ct.pinterest.com\/static ct.pinterest.com\/v3 ct.pinterest.com\/user lantern.roeye.com *.useinsider.com www.googletagmanager.com\/td ad.doubleclick.net *.stg.qantasloyalty.com\/ ; font-src data: 'self' maxcdn.bootstrapcdn.com\/font-awesome fonts.gstatic.com *.truefitcorp.com *.useinsider.com static.klaviyo.com use.typekit.net ; frame-src 'self' api-accent.bloomreach.co www.googletagmanager.com geo.captcha-delivery.com *.formstack.com *.afterpay.com *.bazaarvoice.com *.demdex.net *.doubleclick.net *.facebook.com *.myunidays.com *.omniparcelreturns.com *.paypal.com *.paypalobjects.com *.truefitcorp.com *.useinsider.com *.vimeo.com *.youtu.be *.youtube.com afterpay.com assets.braintreegateway.com facebook.com foursixty.com google.com www.google.com vimeo.com *.pinterest.com *.qlstg.qantas.com\/ ; worker-src 'self' blob: *.accentgra.com *.skechers.co.nz *.skechers.com.au;","count":2},{"content-security-policy-report-only":" font-src x.klarnacdn.net static.lipscore.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: https:\/\/widgets.trustedshops.com *.cloudflare.com *.googleapis.com *.jsdelivr.net *.klarnacdn.net *.office.net *.typekit.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action *.facebook.com *.perfectview.nl *.sovendus.com *.visualwebsiteoptimizer.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors *.mediacliphub.com *.multisafepay.com https:\/\/pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ advisor.bluebarry.ai osm.klarnaservices.com e.topdoek.nl sst.topdoek.nl sst.goedkooptuindoek.nl *.prismic.io sst.kitchenyeah.de sst.kitchenyeah.nl sst.kitchenyeah.fr sst.fotocadeau.nl ct.pinterest.com googletagmanager.com td.doubleclick.net *.multisafepay.com https:\/\/pay.google.com *.ad4m.at *.awin1.com deliverimages.com *.facebook.com *.formcrafts.com *.fotocadeau.nl *.google.com *.googlesyndication.com *.googletagmanager.com *.klarna.com *.mediacliphub.com *.noboringsuitcases.com *.opendns.com *.pinterest.com *.sleak.chat *.sovendus-connect.com *.trustedshops.com *.visualwebsiteoptimizer.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/images.unsplash.com bat.bing.com *.cdn.prismic.io www.facebook.com www.google.nl *.appspot.com images.prismic.io storage.googleapis.com raw.githubusercontent.com *.taggrs.io *.prism.app-us1.com *.prismic.io static.lipscore.com blob: img.youtube.com *.multisafepay.com *.hsforms.net *.hsforms.com 'self' data: https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.etrusted.com *.awin1.com *.bing.com *.bing.net bucket-ip-website.s3.eu-central-1.amazonaws.com *.clarity.ms deliverimages.com *.deliverimages.com *.doubleclick.net *.facebook.com *.facebook.net *.fotocadeau.nl *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bi www.google.bj www.google.bs www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bo www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gm www.google.gr www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.mw www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.sr www.google.tg www.google.tn www.google.tt *.google.com google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hscollectedforms.net *.hubspot.com *.klarnacdn.net *.klarnaevt.com *.linkedin.com *.lipscore.com *.mediacliphub.com noboringsuitcases.com *.noboringsuitcases.com *.perfectview.nl *.pinterest.com prismic-io.s3.amazonaws.com *.roeye.com *.sleak.chat *.tiktok.com *.tiktokw.us *.trustedshops.com *.visualwebsiteoptimizer.com *.webflow.com *.wepowerconnections.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ advisor.bluebarry.ai cdn.bluebarry.ai js.klarna.com js.klarnaservices.com bat.bing.com ct.pinterest.com d5yoctgpv4cpx.cloudfront.net connect.facebook.net magento.fcdev metrics.fotoopaluminium.nl metrics.self s.pinimg.com *.appspot.com stapecdn.com static.cdn.prismic.io static.hotjar.com static.mediacliphub.com widgets.trustedshops.com www.clarity.ms *.taggrs.io *.prism.app-us1.com *.prismic.io https:\/\/widget-acc.paazl.com https:\/\/api-acc.paazl.com\/ static.lipscore.com *.multisafepay.com https:\/\/pay.google.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com https:\/\/browser.sentry-cdn.com *.awin1.com *.bing.com bluebarrycdn.blob.core.windows.net *.clarity.ms *.deployteq-cdp.net *.doubleclick.net *.dwin1.com *.facebook.com *.facebook.net *.formcrafts.com *.googleapis.com translate.google.com.hk *.googlesyndication.com *.googletagmanager.com *.hotjar.com *.hsadspixel.net *.hs-analytics.net *.hs-banner.com *.hscollectedforms.net *.hs-scripts.com *.hubspot.com *.jsdelivr.net *.klarna.com *.leadinfo.net *.licdn.com *.lipscore.com *.mediacliphub.com *.noboringsuitcases.com *.pinimg.com *.pinterest.com prismic.io *.roeyecdn.com *.sleak.chat *.sovendus.com *.tiktok.com *.trustedshops.com *.visualwebsiteoptimizer.com *.zdassets.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com x.klarnacdn.net integrations.etrusted.com https:\/\/widget-acc.paazl.com https:\/\/api-acc.paazl.com\/ static.lipscore.com maxcdn.bootstrapcdn.com *.multisafepay.com *.googleapis.com *.gstatic.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com *.cloudflare.com *.googletagmanager.com *.klarnacdn.net *.lipscore.com *.sleak.chat *.typekit.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src deliverimages.com *.fotocadeau.nl *.googleapis.com *.mediacliphub.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; media-src *.adobe.com deliverimages.com *.fotocadeau.nl *.googleapis.com *.gstatic.com noboringsuitcases.com *.noboringsuitcases.com *.prismic.io 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net data.bluebarry.ai advisor.bluebarry.ai js.klarnaservices.com js.klarna.com na.klarnaevt.com sst.goedkooptuindoek.nl *.clarity.ms *.appspot.com ct.pinterest.com dc.services.visualstudio.com js.monitor.azure.com region1.analytics.google.com *.sentry.io *.prism.app-us1.com *.prismic.io https:\/\/widget-acc.paazl.com https:\/\/api-acc.paazl.com\/ wapi.lipscore.com users.lipscore.com *.multisafepay.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site o307176.ingest.us.sentry.io *.algolia.io *.algolia.net *.algolianet.com *.azure.com *.bing.com *.bing.net deliverimages.com *.deployteq-cdp.net *.doubleclick.net *.facebook.com *.facebook.net *.fotoophout.nl *.googleadservices.com *.googleapis.com www.google.be www.google.de www.google.fr www.google.nl google.com *.google.com *.googlesyndication.com *.gstatic.com *.hotjar.com *.hotjar.io *.hscollectedforms.net *.hubapi.com *.klarnacdn.net *.klarna.com *.klarnaevt.com *.leadinfo.com *.leadinfo.net *.linkedin.com *.lipscore.com *.make.com *.mediacliphub.com *.noboringsuitcases.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com *.pinterest.com polyfilljs.org *.sleak.chat *.sovendus.com *.taggrs.io *.tiktok.com *.tiktokw.us *.visualwebsiteoptimizer.com *.wepowerconnections.com *.zdassets.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.mediacliphub.com *.appspot.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.leadinfo.com *.lipscore.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https:\/\/0857a1ae-eb26-4f26-b573-76e7e6a78da5.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; script-src 'self' 'unsafe-inline'; connect-src 'self' https:\/\/api.fabapp.ai https:\/\/*.r2.cloudflarestorage.com https:\/\/*.fabapp.app https:\/\/*.fabapp.ai; frame-src 'self' https:\/\/*.fabapp.app https:\/\/*.fabapp.ai; form-action 'self'","count":2},{"content-security-policy-report-only":" style-src-elem 'unsafe-inline' 'self' hanfgarten-at.ddev.site *.typekit.net *.googleapis.com *.etrusted.com *.mastercard.com *.unzer.com; script-src-elem 'unsafe-inline' 'self' hanfgarten-at.ddev.site *.typekit.net *.usercentrics.eu *.trustedshops.com *.googletagmanager.com *.etrusted.com *.klaviyo.com applepay.cdn-apple.com *.unzer.com *.adcell.com *.mastercard.com *.ratepay.com cdn.ablyft.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.fontawesome.com maxcdn.bootstrapcdn.com hanfgarten-at.ddev.site https:\/\/widgets.trustedshops.com https:\/\/static.unzer.com https:\/\/applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com hanfgarten-at.ddev.site *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com hanfgarten-at.ddev.site app.usercentrics.eu *.redintelligence.net pixel.bsmartdata.com ad.ad-srv.net ad4m.at *.ad-srv.net *.unzer.com *.adcell.com *.sovendus-connect.com landofcoder.com www.jsctool.com https:\/\/payment.unzer.com https:\/\/payment.heidelpay.com https:\/\/sbx-payment.heidelpay.com https:\/\/sbx-payment.unzer.com https:\/\/static-cc.test.unzer.com https:\/\/h.online-metrix.net https:\/\/google.com\/pay https:\/\/pay.google.com\/ https:\/\/test-heidelpay.hpcgw.net\/ https:\/\/sbx-api.heidelpay.com\/ https:\/\/sandbox.clicktopay.auth.visa.com https:\/\/clicktopay.visa.com https:\/\/sandbox.secure.checkout.visa.com https:\/\/secure.checkout.visa.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com www.xtento.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.googleapis.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ hanfgarten-at.ddev.site *.usercentrics.eu *.mastercard.com d.ratepay.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.etrusted.com https:\/\/static.unzer.com *.online-metrix.net https:\/\/www.gstatic.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ hanfgarten-at.ddev.site landofcoder.com d.ratepay.com www.jsctool.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com https:\/\/static.unzer.com https:\/\/applepay.cdn-apple.com https:\/\/pay.google.com https:\/\/code.jquery.com https:\/\/h.online-metrix.net https:\/\/h64.online-metrix.net https:\/\/static-v2.unzer.com\/v2\/ui-components\/ *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https:\/\/static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com hanfgarten-at.ddev.site d.ratepay.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com https:\/\/sandbox.src.mastercard.com https:\/\/static-v2.unzer.com\/v2\/ui-components\/ *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src hanfgarten-at.ddev.site 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ hanfgarten-at.ddev.site *.usercentrics.eu landofcoder.com d.ratepay.com www.jsctool.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site https:\/\/api.unzer.com https:\/\/api.heidelpay.com https:\/\/sbx-api.heidelpay.com https:\/\/sbx-api.unzer.com https:\/\/payment.unzer.com https:\/\/payment.heidelpay.com https:\/\/sbx-payment.heidelpay.com https:\/\/sbx-payment.unzer.com https:\/\/h.online-metrix.net https:\/\/h64.online-metrix.net https:\/\/google.com\/pay https:\/\/www.google.com\/pay https:\/\/pay.google.com https:\/\/test-heidelpay.hpcgw.net\/ https:\/\/sbx-api.heidelpay.com\/ https:\/\/static-cc.test.unzer.com https:\/\/static-v2.unzer.com\/v2\/ui-components\/ *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'unsafe-inline' 'self' data: 'self' 'unsafe-inline' 'unsafe-eval'; base-uri hanfgarten-at.ddev.site 'self' 'unsafe-inline'; report-uri https:\/\/e2e65e6e-22d1-4212-95e7-813af8751f8a.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" worker-src * blob:; font-src *.typekit.net *.gstatic.com fonts.gstatic.com use.typekit.net *.fontawesome.com *.zdassets.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.mb-app.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.hcaptcha.com hcaptcha.com cdn.jsdelivr.net *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.gstatic.com *.usercentrics.eu *.fontawesome.com connect.facebook.net *.paypalobjects.com *.googletagmanager.com *.cookiebot.com *.doubleclick.net *.stripe.com *.zendesk.com *.zdassets.com *.googleapis.com *.atlantic.fr *.azurewebsites.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com p.typekit.net validator.swagger.io groupe-mb.scene7.com *.cloudflare.com *.google.com *.google.co.in www.facebook.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.connect.facebook.net *.doubleclick.net *.google.fr * *.stripe.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.commerce-payment-services.com *.typekit.net google.com *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.hcaptcha.com hcaptcha.com maps.googleapis.com cdn.jsdelivr.net *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.gstatic.com *.usercentrics.eu *.fontawesome.com connect.facebook.net *.paypalobjects.com *.paypal.com *.googletagmanager.com *.cookiebot.com *.doubleclick.net *.stripe.com *.licdn.com *.bing.com *.zendesk.com *.zdassets.com *.clarity.ms *.sparkow.net t4.my-probance.one *.contentsquare.net *.googleapis.com bam.nr-data.net bam.eu01.nr-data.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.gstatic.com *.zoovu.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.adobe.io performance.typekit.net *.sentry.io *.hcaptcha.com hcaptcha.com cdn.jsdelivr.net *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.gstatic.com *.usercentrics.eu *.fontawesome.com connect.facebook.net *.paypalobjects.com *.googletagmanager.com *.youtube.com *.cookiebot.com *.doubleclick.net *.stripe.com *.clarity.ms *.scandit.com *.zendesk.com tereva.zendesk.com mabeo.zendesk.com tereva.zendesk.com\/frontendevents mabeo.zendesk.com\/frontendevents *.zdassets.com *.bing.com *.sparkow.net *.contentsquare.net bam.nr-data.net bam.eu01.nr-data.net *.googleapis.com *.linkedin.com px.ads.linkedin.com\/wa\/ *.zoovu.com *.cloudfront.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com https:\/\/fonts.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net https:\/\/googleads.g.doubleclick.net *.iubenda.com https:\/\/hits-i.iubenda.com https:\/\/cdn.iubenda.com https:\/\/paypal-eu-cdn.cloudiq.com https:\/\/paypal-eu-arh.cloudiq.com https:\/\/www.paypalobjects.com https:\/\/ww2.feefo.com *.feefo.com https:\/\/eu1-search.doofinder.com *.purechatcdn.com https:\/\/secure.gravatar.com https:\/\/r1.trackedweb.net *.doofinder.com *.purechat.com *.google-analytics.com *.googleadservices.com *.yotpo.com *.cloudflare.com *.twitter.com https:\/\/www.google.co.uk *.google.com *.google.co.in https:\/\/www.google.gr *.typekit.net *.twimg.com *.trustedshops.com *.bootstrapcdn.com *.sharethis.com fonts.salesfire.co.uk *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.googlesyndication.com https:\/\/eu1-search.doofinder.com *.purechatcdn.com https:\/\/secure.gravatar.com https:\/\/r1.trackedweb.net *.doofinder.com *.purechat.com *.google-analytics.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com js.stripe.com *.hotjar.com *.iubenda.com https:\/\/hits-i.iubenda.com https:\/\/cdn.iubenda.com https:\/\/ajax.googleapis.com https:\/\/paypal-eu-cdn.cloudiq.com https:\/\/paypal-eu-arh.cloudiq.com https:\/\/www.paypalobjects.com https:\/\/ww2.feefo.com *.feefo.com https:\/\/eu1-search.doofinder.com *.purechatcdn.com https:\/\/secure.gravatar.com https:\/\/r1.trackedweb.net *.doofinder.com *.purechat.com *.google-analytics.com *.twitter.com https:\/\/www.google.com https:\/\/www.google.co.uk https:\/\/www.google.co.in https:\/\/www.facebook.com https:\/\/www.google.gr *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com https:\/\/ajax.googleapis.com *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com https:\/\/firebasestorage.googleapis.com bat.bing.com *.google.co.uk *.googleadservices.com *.google-analytics.com *.magentocommerce.com *.widgets.magentocommerce.com https:\/\/www.paypalobjects.com *.postcodeanywhere.co.uk https:\/\/googleads.g.doubleclick.net *.iubenda.com https:\/\/hits-i.iubenda.com https:\/\/cdn.iubenda.com https:\/\/paypal-eu-cdn.cloudiq.com https:\/\/paypal-eu-arh.cloudiq.com https:\/\/ww2.feefo.com *.feefo.com https:\/\/eu1-search.doofinder.com *.purechatcdn.com https:\/\/secure.gravatar.com https:\/\/r1.trackedweb.net *.doofinder.com *.purechat.com *.yotpo.com *.cloudflare.com https:\/\/www.google.co.uk *.google.co.in https:\/\/www.facebook.com *.klarna.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https:\/\/stats.g.doubleclick.net https:\/\/d.adroll.com https:\/\/pixel.advertising.com https:\/\/pixel.rubiconproject.com https:\/\/simage2.pubmatic.com https:\/\/dsum-sec.casalemedia.com https:\/\/ads.yahoo.com https:\/\/eb2.3lift.com https:\/\/sync.outbrain.com https:\/\/trc.taboola.com https:\/\/x.bidswitch.net\/sync https:\/\/ib.adnxs.com https:\/\/idsync.rlcdn.com https:\/\/us-u.openx.net https:\/\/ups.analytics.yahoo.com https:\/\/segments.company-target.com https:\/\/www.google.gr *.typekit.net *.sharethis.com *.bing.com *.bing.net *.clarity.ms cdn.salesfire.co.uk www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https:\/\/ajax.googleapis.com *.gstatic.com https:\/\/cdn.jsdelivr.net\/npm\/@ryangjchandler\/spruce@2.x.x\/dist\/spruce.umd.js www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.google.com *.google.bg *.googletagmanager.com connect.facebook.net *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.avada.io js-agent.newrelic.com bam.nr-data.net googletagmanager.com googleadservices.com https:\/\/googleads.g.doubleclick.net *.iubenda.com https:\/\/hits-i.iubenda.com https:\/\/cdn.iubenda.com https:\/\/paypal-eu-cdn.cloudiq.com https:\/\/paypal-eu-arh.cloudiq.com *.paypalobjects.com https:\/\/ww2.feefo.com *.feefo.com https:\/\/eu1-search.doofinder.com *.purechatcdn.com https:\/\/secure.gravatar.com https:\/\/r1.trackedweb.net *.doofinder.com *.purechat.com *.googleadservices.com *.yotpo.com *.cloudflare.com *.twitter.com https:\/\/www.google.co.uk *.google.co.in *.facebook.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https:\/\/connect.facebook.net https:\/\/chimpstatic.com https:\/\/s.adroll.com https:\/\/d.adroll.com https:\/\/d.adroll.mgr.consensu.org *.bootstrapcdn.com *.authorize.net https:\/\/www.google.gr *.sharethis.com *.typekit.net *.onexpand.co.uk cdn.salesfire.co.uk live.smartmetrics.co.uk bat.bing.com *.clarity.ms *.osano.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com https:\/\/fonts.googleapis.com *.fontawesome.com https:\/\/fonts.bunny.net services.postcodeanywhere.co.uk *.typekit.net https:\/\/googleads.g.doubleclick.net *.iubenda.com https:\/\/hits-i.iubenda.com https:\/\/cdn.iubenda.com https:\/\/paypal-eu-cdn.cloudiq.com https:\/\/paypal-eu-arh.cloudiq.com https:\/\/www.paypalobjects.com https:\/\/ww2.feefo.com *.feefo.com https:\/\/eu1-search.doofinder.com *.purechatcdn.com https:\/\/secure.gravatar.com https:\/\/r1.trackedweb.net *.doofinder.com *.purechat.com *.googleadservices.com *.google-analytics.com *.yotpo.com *.cloudflare.com *.twitter.com https:\/\/www.google.co.uk *.google.com *.google.co.in *.twimg.com *.trustedshops.com *.usercentrics.eu *.youtube.com *.bootstrapcdn.com https:\/\/www.google.gr *.onexpand.co.uk *.salesfire.co.uk *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https:\/\/ajax.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net stats.g.doubleclick.net *.googlesyndication.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https:\/\/get.geojs.io *.avada.io https:\/\/googleads.g.doubleclick.net *.iubenda.com https:\/\/hits-i.iubenda.com https:\/\/cdn.iubenda.com https:\/\/paypal-eu-cdn.cloudiq.com https:\/\/paypal-eu-arh.cloudiq.com https:\/\/www.paypalobjects.com https:\/\/ww2.feefo.com *.feefo.com https:\/\/eu1-search.doofinder.com *.purechatcdn.com https:\/\/secure.gravatar.com https:\/\/r1.trackedweb.net *.doofinder.com *.purechat.com *.googleadservices.com *.yotpo.com *.cloudflare.com *.twitter.com *.twimg.com https:\/\/www.google.co.uk *.google.co.in https:\/\/www.google.gr *.typekit.net *.sharethis.com *.salesfire.co.uk live.smartmetrics.co.uk *.clarity.ms *.osano.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' dc.services.visualstudio.com ssl.google-analytics.com stats.g.doubleclick.net https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com partner.testseek.com https:\/\/api.stripe.com; font-src 'self' data: fonts.gstatic.com static.stockinthechannel.com; frame-src 'self' accounts.stockinthechannel.co.uk app.powerbi.com ad.doubleclick.net bid.g.doubleclick.net www.youtube.com www.google.com www.vimeo.com https:\/\/js.stripe.com https:\/\/hooks.stripe.com; frame-ancestors accounts.stockinthechannel.co.uk; img-src * data:; media-src 'self' images.stockinthechannel.co.uk media.stockinthechannel.com static.stockinthechannel.com; manifest-src images.stockinthechannel.co.uk; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' accounts.stockinthechannel.co.uk images.stockinthechannel.co.uk static.stockinthechannel.com www.googleadservices.com ssl.google-analytics.com googleads.g.doubleclick.net https:\/\/*.googletagmanager.com www.google.com www.gstatic.com www.youtube.com https:\/\/js.stripe.com; style-src 'self' 'unsafe-inline' static.stockinthechannel.com fonts.googleapis.com ajax.googleapis.com; report-uri https:\/\/stockchannel.report-uri.com\/r\/d\/csp\/reportOnly","count":2},{"content-security-policy-report-only":" script-src-elem *.cfjump.com *.popupsmart.com embedsocial.com *.preezie.com *.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network-stg.bazaarvoice.com network.bazaarvoice.com; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.squarecdn.com *.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network-stg.bazaarvoice.com network.bazaarvoice.com data: 'self' 'unsafe-inline' 'unsafe-eval'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com widgets.sandbox.afterpay.com *.cash.app display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afterpay.com\/ *.cash.app display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com t.zip.co static.zipmoney.com.au static.zip.co *.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com *.riskified.com *.bing.com *.legitscript.com data: 'self' 'unsafe-inline' 'unsafe-eval'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com assets.adobedtm.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page https:\/\/portal.sandbox.afterpay.com https:\/\/portal.afterpay.com https:\/\/static.afterpay.com *.squarecdn.com https:\/\/hbiq.net *.cash.app apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.googletagmanager.com https:\/\/www.googletagmanager.com tagmanager.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com static.zipmoney.com.au static.zip.co zip.co *.cfjump.com *.popupsmart.com embedsocial.com *.preezie.com *.bazaarvoice.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.magento-datasolutions.com *.magento-ds.com static.afterpay.com\/ *.squarecdn.com *.cash.app display.ugc.bazaarvoice.com unsafe-inline assets.braintreegateway.com embedsocial.com *.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network-stg.bazaarvoice.com network.bazaarvoice.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com *.squarecdn.com https:\/\/hbiq.net https:\/\/iq.afterpay-beta.com https:\/\/iq.afterpay.com *.cash.app api.lab.amplitude.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.google-analytics.com https:\/\/www.google-analytics.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.popupsmart.com *.bazaarvoice.com *.demdex.net *.riskified.com *.bing.com 'self' 'unsafe-inline' 'unsafe-eval'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: blob:; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self'; frame-src 'self'; frame-ancestors 'self' https:\/\/web.telegram.org https:\/\/*.telegram.org; base-uri 'self'; form-action 'self'; object-src 'none'","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https:","count":2},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' services.postcodeanywhere.co.uk api.addressy.com settings.luckyorange.net live.opayo.eu.elavon.com\/api\/v1\/ wss:\/\/in.visitors.live wss:\/\/visitors.live *.bing.com *.bing.net *.facebook.com pagead2.googlesyndication.com www.googleadservices.com ad.doubleclick.net *.google-analytics.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.co.uk px.ads.linkedin.com api.vimeo.com fresnel.vimeocdn.com ct.pinterest.com *.analytics.google.com; font-src 'self' www.westdean.ac.uk assets.westdean.ac.uk\/ data:; frame-ancestors 'self' www.westdean.ac.uk; frame-src 'self' discoveruni.gov.uk *.luckyorange.com widget.discoveruni.gov.uk live.opayo.eu.elavon.com\/api\/v1\/ my.matterport.com *.facebook.com *.googletagmanager.com download-video-ak.vimeocdn.com player.vimeo.com vimeo.com www.youtube.com ct.pinterest.com; img-src 'self' * data:; media-src d10lpsik1i8c69.cloudfront.net player.vimeo.com download-video-ak.vimeocdn.com\/v3-1\/playback\/ vod-adaptive-ak.vimeocdn.com skyfire.vimeocdn.com; script-src 'self' services.postcodeanywhere.co.uk static.cloudflareinsights.com www.westdean.ac.uk assets.westdean.ac.uk\/ d10lpsik1i8c69.cloudfront.net assets.opayo.cloud\/assets\/js\/opayo-1.2.40.js cdn.tickettailor.com *.bing.com *.facebook.net www.googleadservices.com www.google.com pagead2.googlesyndication.com googleads.g.doubleclick.net *.googletagmanager.com apis.google.com snap.licdn.com chimpstatic.com player.vimeo.com *.vimeocdn.com www.youtube.com ct.pinterest.com s.pinimg.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' services.postcodeanywhere.co.uk www.westdean.ac.uk assets.westdean.ac.uk\/ d10lpsik1i8c69.cloudfront.net 'unsafe-inline'; worker-src blob:; report-uri https:\/\/o74830.ingest.us.sentry.io\/api\/215515\/security\/?sentry_key=610a8846728c479cb10b52482e41c8cc; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" font-src *.pennie.gr *.googletagmanager.com *.adobe.com www.googleadservices.com www.google-analytics.com *.googleapis.com vimeo.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.contactpigeon.com *.newrelic.com *.nr-data.net fonts.googleapis.com fonts.gstatic.com *.hotjar.com *.zopim.com *.fontawesome.com 'self' data: *.skroutz.gr *.cloudflare.com *.twitter.com *.twimg.com *.usercentrics.eu *.bing.com *.zdassets.com *.google.com *.google.gr https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com *.contactpigeon.com *.pennie.gr *.google.gr *.skroutz.gr *.zopim.com *.moosend.com *.cloudflare.com *.piraeusbank.gr 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.skroutz.gr *.contactpigeon.com *.hotjar.com *.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/trustmark.gr *.tiktok.com *.contactpigeon.com *.pennie.gr *.googleapis.com *.gstatic.com *.trustedshops.com *.zopim.com cdn.jsdelivr.net *.skroutz.gr *.moosend.com *.cloudflare.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.io *.doubleclick.net *.facebook.com *.mastercard.com *.google.com *.google.gr *.googletagmanager.com https:\/\/images.unsplash.com https:\/\/firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ 'self' data: *.tiktok.com *.googletagmanager.com *.googleapis.com *.pennie.gr *.facebook.net *.facebook.com *.doubleclick.net *.google-analytics.com *.gstatic.com *.contactpigeon.com *.paypal.com *.google.com *.hotjar.com *.fontawesome.com *.feedbackcompany.com *.trustpilot.com cdn.jsdelivr.net *.googleoptimize.com *.skroutz.gr *.cloudflare.com *.google.gr https:\/\/trustmark.gr\/badge\/dist\/index.js https:\/\/static.adman.gr\/adman.js https:\/\/greca.adman.gr https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.avada.io *.shopify.com *.piraeusbank.gr 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googletagmanager.com www.googleadservices.com www.google-analytics.com *.googleapis.com vimeo.com *.pennie.gr *.facebook.net *.facebook.com *.doubleclick.net *.google-analytics.com *.gstatic.com *.contactpigeon.com *.newrelic.com *.nr-data.net *.fontawesome.com *.trustpilot.com cdn.jsdelivr.net *.skroutz.gr *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.bing.com *.hotjar.com https:\/\/fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' data: *.contactpigeon.com *.pennie.gr *.google.gr *.zopim.com *.skroutz.gr *.moosend.com *.cloudflare.com 'self' 'unsafe-inline'; manifest-src *.pennie.gr 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.gstatic.com *.mastercard.com *.google.com *.google.gr *.googletagmanager.com *.tiktok.com *.contactpigeon.com *.pennie.gr *.paypal.com https:\/\/stats.g.doubleclick.net https:\/\/googleads.g.doubleclick.net\/ *.zdassets.com *.hotjar.com *.hotjar.io *.zopim.com wss:\/\/*.zopim.com *.feedbackcompany.com *.skroutz.gr *.cloudflare.com api.zevioo.com https:\/\/pagead2.googlesyndication.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.oliocarli.it https:\/\/*.oliocarli.de https:\/\/*.oliocarli.at https:\/\/*.oliocarli.fr https:\/\/*.oliocarli.ch https:\/\/*.oliocarli.us https:\/\/*.fratellicarli.com https:\/\/carli.my.site.com https:\/\/*.carli.my.site.com https:\/\/*.salesforce.com https:\/\/google.com https:\/\/*.google.com https:\/\/google.it https:\/\/*.google.it https:\/\/google.de https:\/\/*.google.de https:\/\/google.ch https:\/\/*.google.ch https:\/\/google.co.uk https:\/\/*.google.co.uk https:\/\/google.com.ua https:\/\/*.google.com.ua https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.googletagmanager.com https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/*.google-analytics.com https:\/\/pay.google.com https:\/\/accounts.google.com https:\/\/paypal.com https:\/\/*.paypal.com https:\/\/*.paypalobjects.com https:\/\/shopforward.eu https:\/\/*.gestpay.net https:\/\/*.sella.it https:\/\/*.klarna.com https:\/\/*.adyen.com https:\/\/*.authorize.net https:\/\/*.visa.com https:\/\/*.ccdc02.com https:\/\/*.addthis.com https:\/\/*.addthisedge.com https:\/\/static.addtoany.com https:\/\/*.newrelic.com https:\/\/*.nr-data.net https:\/\/*.cookiebot.com https:\/\/*.clarity.ms https:\/\/*.luckyorange.com https:\/\/*.hotjar.com https:\/\/*.fullstory.com https:\/\/*.smartlook.com https:\/\/*.taboola.com https:\/\/*.zemanta.com https:\/\/*.rfihub.net https:\/\/twitter.com https:\/\/*.twitter.com https:\/\/*.ads-twitter.com https:\/\/*.facebook.net https:\/\/*.bing.com https:\/\/*.webgains.io https:\/\/*.typekit.net https:\/\/*.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/*.cloudfront.net https:\/\/*.salecycle.com https:\/\/*.omniconvert.com https:\/\/*.fanplayr.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.sc-static.net https:\/\/*.moatads.com https:\/\/*.lockerdomecdn.com https:\/\/*.dwin1.com https:\/\/*.roeye.com https:\/\/*.roeyecdn.com https:\/\/*.plyr.io https:\/\/*.trustpilot.com https:\/\/*.sandbox.my.site.com https:\/\/*.creativecdn.com https:\/\/*.r66net.com https:\/\/*.r66net.net https:\/\/malsup.github.io https:\/\/the.sciencebehindecommerce.com https:\/\/*.awin1.com https:\/\/*.adform.net https:\/\/player.wowza.com https:\/\/rum.hlx.page https:\/\/*.zenaps.com https:\/\/overbridgenet.com https:\/\/*.videostep.com https:\/\/*.acsbapp.com https:\/\/www.youtube.com; connect-src 'self' https:\/\/*.oliocarli.it https:\/\/*.oliocarli.de https:\/\/*.oliocarli.at https:\/\/*.oliocarli.fr https:\/\/*.oliocarli.ch https:\/\/*.oliocarli.us https:\/\/acsbapp.com https:\/\/*.acsbapp.com https:\/\/*.addthis.com https:\/\/*.googleapis.com https:\/\/*.nr-data.net https:\/\/*.demdex.net https:\/\/*.omtrdc.net https:\/\/*.cardinalcommerce.com https:\/\/paypal.com https:\/\/*.paypal.com https:\/\/*.paypalobjects.com https:\/\/amazon.com https:\/\/*.amazon.com https:\/\/amazon.it https:\/\/*.amazon.it https:\/\/amazon.fr https:\/\/*.amazon.fr https:\/\/amazon.es https:\/\/*.amazon.es https:\/\/amazon.de https:\/\/*.amazon.de https:\/\/*.amazonpay.com https:\/\/*.amazonservices.com https:\/\/*.amazonservices.it https:\/\/*.amazonservices.fr https:\/\/*.amazonservices.es https:\/\/*.amazonservices.de https:\/\/*.dotdigital-pages.com https:\/\/webchat.dotdigital.com https:\/\/*.braintreegateway.com https:\/\/*.braintree-api.com https:\/\/*.yotpo.com https:\/\/*.trackedlink.net https:\/\/*.trackedweb.net https:\/\/*.sella.it https:\/\/*.cookiebot.com https:\/\/*.clarity.ms https:\/\/*.luckyorange.com https:\/\/*.cloudfront.net https:\/\/*.sc-static.net https:\/\/*.salecycle.com wss:\/\/ws.salecycle.com https:\/\/*.fratellicarli.com https:\/\/*.omniconvert.com https:\/\/*.fanplayr.com https:\/\/*.doubleclick.net https:\/\/*.taboola.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/shopforward.eu https:\/\/*.a.run.app https:\/\/*.googlesyndication.com https:\/\/*.hotjar.com https:\/\/*.fullstory.com https:\/\/*.pinimg.com https:\/\/*.pinterest.com https:\/\/*.salesforce-scrt.com https:\/\/*.bing.com https:\/\/*.zemanta.com https:\/\/*.outbrain.com https:\/\/*.typekit.net https:\/\/*.authorize.net https:\/\/*.googletagmanager.com https:\/\/*.trustpilot.com https:\/\/*.sandbox.my.site.com https:\/\/*.googleadservices.com https:\/\/google.com https:\/\/*.google.com https:\/\/google.it https:\/\/*.google.it https:\/\/google.de https:\/\/*.google.de https:\/\/google.at https:\/\/*.google.at https:\/\/google.fr https:\/\/*.google.fr https:\/\/google.ch https:\/\/*.google.ch https:\/\/google.co.uk https:\/\/*.google.co.uk https:\/\/google.com.ua https:\/\/*.google-analytics.com https:\/\/*.salesforce.com https:\/\/*.jsdelivr.net https:\/\/*.roeye.com https:\/\/klarna.com https:\/\/*.klarna.com https:\/\/*.klarnaevt.com https:\/\/*.sentry.io https:\/\/*.adyen.com https:\/\/*.creativecdn.com https:\/\/*.conversionsapigateway.com https:\/\/facebook.com https:\/\/*.facebook.com https:\/\/*.r66net.com https:\/\/*.r66net.net https:\/\/*.videostep.com https:\/\/user-sync.fwmrm.net https:\/\/*.awinblackfriday.com https:\/\/*.wepowerconnections.com https:\/\/*.adform.net https:\/\/rum.hlx.page https:\/\/*.zenaps.com https:\/\/overbridgenet.com https:\/\/the.sciencebehindecommerce.com; frame-src 'self' https:\/\/*.oliocarli.it https:\/\/*.oliocarli.de https:\/\/*.oliocarli.at https:\/\/*.oliocarli.fr https:\/\/*.oliocarli.ch https:\/\/*.oliocarli.us https:\/\/static.addtoany.com https:\/\/*.addthis.com https:\/\/*.gestpay.net https:\/\/*.sella.it https:\/\/*.salecycle.com https:\/\/*.cookiebot.com https:\/\/*.doubleclick.net https:\/\/*.rfihub.com https:\/\/*.googleapis.com https:\/\/*.typekit.net https:\/\/*.trustpilot.com https:\/\/*.googletagmanager.com https:\/\/*.mainadv.com https:\/\/*.sandbox.my.site.com https:\/\/google.com https:\/\/*.google.com https:\/\/google.it https:\/\/*.google.it https:\/\/google.de https:\/\/*.google.de https:\/\/google.ch https:\/\/*.google.ch https:\/\/google.co.uk https:\/\/*.google.co.uk https:\/\/google.com.ua https:\/\/*.paypal.com https:\/\/carli.my.site.com https:\/\/*.carli.my.site.com https:\/\/klarna.com https:\/\/*.klarna.com https:\/\/platform.twitter.com https:\/\/facebook.com https:\/\/*.facebook.com https:\/\/*.youtube.com https:\/\/tsdtocl.com https:\/\/*.awin1.com https:\/\/*.rsa3dsauth.co.uk https:\/\/*.securesuite.co.uk https:\/\/e.issuu.com https:\/\/*.wlp-acs.com https:\/\/*.fatcoupon.com https:\/\/tatrck.com https:\/\/hipodi.com https:\/\/*.lcl.fr https:\/\/*.arcot.com https:\/\/*.nexigroup.com https:\/\/oponas.com https:\/\/mitlogen.com https:\/\/bcsgsrv.com https:\/\/go.storecategory.com https:\/\/*.adyen.com https:\/\/*.zenaps.com https:\/\/overbridgenet.com https:\/\/*.videostep.com; font-src 'self' data: https:\/\/*.oliocarli.it https:\/\/*.oliocarli.de https:\/\/*.oliocarli.at https:\/\/*.oliocarli.fr https:\/\/*.oliocarli.ch https:\/\/*.oliocarli.us https:\/\/*.acsbapp.com https:\/\/*.cloudflare.com https:\/\/*.gstatic.com https:\/\/*.typekit.net https:\/\/res-1.cdn.office.net https:\/\/*.klarnacdn.net; img-src 'self' data: blob: https:\/\/*.oliocarli.it https:\/\/*.oliocarli.de https:\/\/*.oliocarli.at https:\/\/*.oliocarli.fr https:\/\/*.oliocarli.ch https:\/\/*.oliocarli.us https:\/\/*.cookiebot.com https:\/\/*.clarity.ms https:\/\/*.luckyorange.com https:\/\/*.cloudfront.net https:\/\/*.sc-static.net https:\/\/*.salecycle.com https:\/\/*.fratellicarli.com https:\/\/*.omniconvert.com https:\/\/*.fanplayr.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.zemanta.com https:\/\/t.co https:\/\/twitter.com https:\/\/*.twitter.com https:\/\/google.it https:\/\/*.google.it https:\/\/google.com https:\/\/*.google.com https:\/\/google.rw https:\/\/*.google.rw https:\/\/google.de https:\/\/*.google.de https:\/\/google.at https:\/\/*.google.at https:\/\/google.fr https:\/\/*.google.fr https:\/\/google.ch https:\/\/*.google.ch https:\/\/google.co.il https:\/\/*.google.co.il https:\/\/*.bing.com https:\/\/*.adnxs.com https:\/\/*.doubleclick.net https:\/\/*.visa.com https:\/\/*.gstatic.com https:\/\/*.roeye.com https:\/\/*.googletagmanager.com https:\/\/*.googleapis.com https:\/\/*.adyen.com https:\/\/facebook.com https:\/\/*.facebook.com https:\/\/facebook.net https:\/\/*.facebook.net https:\/\/paypal.com https:\/\/*.paypal.com https:\/\/*.paypalobjects.com https:\/\/*.videostep.com https:\/\/*.pubmatic.com https:\/\/*.googlesyndication.com https:\/\/*.udmserve.net https:\/\/*.rubiconproject.com https:\/\/*.adform.net https:\/\/*.teads.tv https:\/\/*.3lift.com https:\/\/*.adscale.de https:\/\/*.taboola.com https:\/\/*.smartadserver.com https:\/\/*.casalemedia.com https:\/\/ks1.invibes.com https:\/\/ks1.b26net.com https:\/\/*.fwmrm.net https:\/\/*.outbrain.com https:\/\/*.33across.com https:\/\/*.yieldmo.com https:\/\/*.dmxleo.com https:\/\/*.nexx360.io https:\/\/*.awin1.com https:\/\/*.googleadservices.com https:\/\/*.1rx.io https:\/\/i.ytimg.com https:\/\/*.onetag-sys.com https:\/\/*.admixer.net https:\/\/*.omnitagjs.com https:\/\/*.lijit.com https:\/\/*.docomo.ne.jp https:\/\/*.openx.net https:\/\/*.e-planning.net https:\/\/*.seedtag.com https:\/\/*.media.net https:\/\/*.adtarget.com.tr https:\/\/*.mgid.com https:\/\/*.opera.com https:\/\/*.gumgum.com https:\/\/*.smaato.net https:\/\/*.rakuten.com https:\/\/*.connectad.io https:\/\/*.sonobi.com https:\/\/*.contextweb.com https:\/\/*.adtech.ink https:\/\/*.sharethrough.com https:\/\/*.ck-ie.com https:\/\/*.360yield.com https:\/\/*.inmobi.com https:\/\/ib.adnxs.com https:\/\/*.awinblackfriday.com https:\/\/*.loopme.me https:\/\/static-eu.payments-amazon.com https:\/\/user-sync.fwmrm.net https:\/\/cm.g.doubleclick.net https:\/\/bh.contextweb.com https:\/\/onetag-sys.com https:\/\/s.ad.smaato.net https:\/\/carli.my.site.com https:\/\/*.carli.my.site.com; style-src 'self' 'unsafe-inline' https:\/\/*.oliocarli.it https:\/\/*.oliocarli.de https:\/\/*.oliocarli.at https:\/\/*.oliocarli.fr https:\/\/*.oliocarli.ch https:\/\/*.oliocarli.us https:\/\/*.cloudflare.com https:\/\/carli.my.site.com https:\/\/*.carli.my.site.com https:\/\/*.googleapis.com https:\/\/*.typekit.net https:\/\/*.plyr.io https:\/\/*.sandbox.my.site.com https:\/\/*.klarnacdn.net; worker-src 'self' blob:; media-src 'self' data: https:\/\/*.oliocarli.it https:\/\/*.oliocarli.de https:\/\/*.oliocarli.at https:\/\/*.oliocarli.fr https:\/\/*.oliocarli.ch https:\/\/*.oliocarli.us https:\/\/*.adobe.com; frame-ancestors 'self' https:\/\/*.adyen.com https:\/\/*.google.com; report-uri magento-endpoint; report-to magento-endpoint","count":2},{"content-security-policy-report-only":" style-src https:\/\/*.ingest.sentry.io *.force.com https:\/\/account.tn.sportsbook.fanduel.com 'self' https:\/\/stats.g.doubleclick.net https:\/\/account.co.sportsbook.fanduel.com https:\/\/www.stardustcasino.com https:\/\/opengraph.io https:\/\/checkoutshopper-test.adyen.com\/ https:\/\/account.pa.sportsbook.fanduel.com https:\/\/account.pa.casino.fanduel.com https:\/\/fanduelgroup.my.salesforce-sites.com https:\/\/api.asapp.com https:\/\/account.wv.casino.fanduel.com https:\/\/assets.clever.com https:\/\/account.in.sportsbook.fanduel.com https:\/\/support.fanduel.com https:\/\/cdn.quantummetric.com https:\/\/fonts.googleapis.com\/css2 https:\/\/account.va.sportsbook.fanduel.com blob: https:\/\/account.wv.sportsbook.fanduel.com https:\/\/salesforce-backend.integrations.asana.plus https:\/\/echoback.ads.sportradar.com https:\/\/*.vf.force.com https:\/\/fonts.googleapis.com\/css https:\/\/www.casino.fanduel.com https:\/\/rl.quantummetric.com https:\/\/fanduel.ca https:\/\/account.mo.sportsbook.fanduel.com https:\/\/account.on.casino.fanduel.ca https:\/\/service.force.com\/embeddedservice\/ https:\/\/support.tvg.com https:\/\/account.mi.casino.fanduel.com 'unsafe-inline' https:\/\/account.ia.sportsbook.fanduel.com https:\/\/www.sportsbook.fanduel.com https:\/\/api.sandbox.asapp.com https:\/\/account.nj.stardustcasino.com https:\/\/api2.amplitude.com https:\/\/fanduelgroup.my.site.com https:\/\/checkoutshopper-live.adyen.com\/ https:\/\/www.fanduel.com https:\/\/account.il.sportsbook.fanduel.com poker.fanduel.com https:\/\/tr.snapchat.com https:\/\/account.nj.casino.fanduel.com https:\/\/account.nj.sportsbook.fanduel.com https:\/\/bat.bing.com https:\/\/*.sprinklr.com https:\/\/fanduelgroup.my.salesforce-scrt.com https:\/\/fanduelgroup.my.salesforce.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com *.salesforce.com https:\/\/account.pa.stardustcasino.com *.visualforce.com:* https:\/\/service.force.com https:\/\/account.mi.sportsbook.fanduel.com https:\/\/*.my.site.com; report-to sfdc-csp-ep; report-uri https:\/\/fanduelgroup.lightning.force.com\/_\/ContentDomainCSPNoAuth?tenantId=00D5Y000002UY4T&networkId=0DM5Y000000OMEh&type=communities","count":2},{"content-security-policy-report-only":" font-src *.googleapis.com *.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com *.google.com\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com cdn.klarna.com magefan.com cm.magefan.com https:\/\/firebasestorage.googleapis.com https:\/\/www.magezon.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com www.google.com www.gstatic.com *.avada.io *.google.com\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.fontawesome.com https:\/\/fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com https:\/\/get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com *.yotpo.com *.zopim.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com maxcdn.bootstrapcdn.com *.fontawesome.com fonts.googleapis.com https:\/\/fonts.gstatic.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.googlesyndication.com *.tiktok.com https:\/\/plumrocket.com 'self' 'unsafe-inline'; frame-ancestors localhost:* *.motive.co *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https:\/\/plumrocket.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com *.cloudfront.net *.klarna.com *.googleadservices.com *.google.com *.google.it *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.bootstrapcdn.com *.yotpo.com *.zopim.com *.doubleclick.net *.bing.com *.clarity.ms https:\/\/images.unsplash.com *.feedaty.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.google.bg *.facebook.com *.facebook.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com quickchart.io img.youtube.com *.motive.co *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflare.com *.cloudflareinsights.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bootstrapcdn.com *.yotpo.com *.zopim.com *.zdassets.com *.bing.com *.clarity.ms *.searchserverapi.com searchserverapi.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.feedaty.com widget.freshworks.com m2epro.freshdesk.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.googleapis.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.motive.co https:\/\/www.gstatic.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bootstrapcdn.com *.yotpo.com *.feedaty.com widget.freshworks.com m2epro.freshdesk.com assets.braintreegateway.com *.doubleclick.net *.facebook.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com maxcdn.bootstrapcdn.com fonts.gstatic.com https:\/\/fonts.googleapis.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.twitter.com *.twimg.com *.yotpo.com *.zopim.com wss:\/\/*.zopim.com *.zdassets.com *.doubleclick.net *.zendesk.com *.clarity.ms *.scalapay.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.feedaty.com widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.googleapis.com *.facebook.com *.facebook.net *.googlesyndication.com *.tiktok.com *.motive.co *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/www.example.com\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.cookiebot.com https:\/\/app03.wilken-crm.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/translate-cdn.eye-able.com https:\/\/log.staatsoper-hamburg.de; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.cookiebot.com https:\/\/i.vimeocdn.com; font-src 'self'; connect-src 'self' https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.cookiebot.com https:\/\/translate-cdn.eye-able.com https:\/\/translate.eye-able.com https:\/\/service.die-hamburgische-staatsoper.de https:\/\/log.staatsoper-hamburg.de; frame-src https:\/\/www.youtube-nocookie.com https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/*.cookiebot.com https:\/\/www.google.com; media-src 'self'; report-uri \/csp-report.php","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/ws.colissimo.fr *.cloudflare.com maxcdn.bootstrapcdn.com https:\/\/widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.e-transactions.fr https:\/\/plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com business.facebook.com *.hotjar.com *.eventbrite.com sibautomation.com https:\/\/www.youtube.com https:\/\/form.typeform.com *.youtube.com\/ *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com https:\/\/plumrocket.com *.weltpixel.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com *.trackedlink.net business.facebook.com *.trustedshops.com *.etrusted.com *.google.fr *.bing.com *.clarity.ms *.bing.net https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/ws.colissimo.fr https:\/\/*.tile.openstreetmap.fr https:\/\/*.onyourmap.com https:\/\/google.fr *.cloudflare.com *.ytimg.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net *.googletagmanager.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com business.facebook.com *.trustedshops.com *.etrusted.com *.hotjar.com *.eventbrite.com sibautomation.com *.bing.com *.clarity.ms *.jquery.com *.brevo.com *.cloudflare.com *.cloudflareinsights.com *.terreexotique.fr https:\/\/maps.googleapis.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/ws.colissimo.fr https:\/\/api.mapbox.com https:\/\/*.typeform.com *.fontawesome.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.doubleclick.net https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com *.trustedshops.com *.etrusted.com https:\/\/fonts.googleapis.com https:\/\/ws.colissimo.fr https:\/\/api.mapbox.com https:\/\/*.typeform.com *.cloudflare.com *.fontawesome.com *.googleapis.com *.googletagmanager.com maxcdn.bootstrapcdn.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com maps.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com business.facebook.com *.trustedshops.com *.etrusted.com in.hotjar.com *.hotjar.io *.brevo.com *.clarity.ms *.bing.net *.bing.com https:\/\/ws.colissimo.fr https:\/\/maps.googleapis.com https:\/\/nominatim.openstreetmap.org https:\/\/*.onyourmap.com https:\/\/*.mapbox.com *.cloudflare.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com https:\/\/integrations.etrusted.site payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/csp-reporting-service.com\/my-project\/endpoint; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" child-src blob:;default-src 'none';img-src 'self'   https:\/\/images.ctfassets.net\/t0p2cqcl8cn8\/   *.googleapis.com   *.gstatic.com   www.facebook.com   ad.doubleclick.net   www.googletagmanager.com   *.contentsquare.net   data:   blob:   ade.googlesyndication.com   adservice.google.com   www.googleadservices.com   https:\/\/bat.bing.com   https:\/\/googleads.g.doubleclick.net   https:\/\/www.google.com   https:\/\/www.google.fr   https:\/\/sdk.privacy-center.org  https:\/\/assets.funecap.org  *.kameleoon.io;font-src 'self' https:\/\/fonts.gstatic.com;connect-src 'self'   roc-eclerc.com   *.roc-eclerc.com     https:\/\/*.google-analytics.com   *.googleapis.com   *.gstatic.com   *.google.com   google.com   metrics.roc-eclerc.com   *.realytics.io   *.pa-cd.com   *.doubleclick.net   *.contentsquare.net   https:\/\/login.microsoftonline.com   https:\/\/graph.microsoft.com   https:\/\/www.facebook.com   https:\/\/pagead2.googlesyndication.com   https:\/\/affdjz.go2cloud.org\/   https:\/\/www.googleadservices.com\/   https:\/\/tpmtrk.com   https:\/\/graph.facebook.com\/   https:\/\/bat.bing.com   https:\/\/sdk.privacy-center.org  https:\/\/api.privacy-center.org  https:\/\/edi5on.com  *.kameleoon.io;script-src 'self'  'unsafe-inline'   *.googleapis.com   www.googletagmanager.com   *.contentsquare.net   app.contentsquare.com   https:\/\/tag.aticdn.net   https:\/\/connect.facebook.net   *.realytics.io   *.realytics.net   https:\/\/www.googleadservices.com   https:\/\/bat.bing.com   *.doubleclick.net   https:\/\/www.google.com   https:\/\/www.google.fr   https:\/\/sdk.privacy-center.org  https:\/\/api.privacy-center.org  https:\/\/tag.imagino.com  https:\/\/edi5on.com  'unsafe-eval'  *.kameleoon.io  ;style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com\/css;media-src 'self' https:\/\/videos.ctfassets.net\/t0p2cqcl8cn8\/ https:\/\/videos.ctfassets.net\/cx1gjqdeja5a\/;frame-src 'self'   https:\/\/www.youtube.com   https:\/\/youtube.com   *.doubleclick.net   https:\/\/www.facebook.com   https:\/\/tbl.tradedoubler.com\/;frame-ancestors roc-eclerc.com *.roc-eclerc.com https:\/\/app.contentful.com;report-uri https:\/\/9jnmnwzx.uriports.com\/reports;report-to csp-endpoint;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:\/\/cdn.mediaroket.xyz; media-src 'self' https:\/\/cdn.mediaroket.xyz; font-src 'self' data:; connect-src 'self' https:\/\/cdn.mediaroket.xyz; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'","count":2},{"content-security-policy-report-only":" font-src *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" img-src 'self' data: *.commercecloud.salesforce.com *.googleapis.com *.gstatic.com *.ctfassets.net *.autoshack.com *.autoshack.ca *.demandware.net nova.collect.igodigital.com prd-cdn-talkdesk.talkdesk.com www.facebook.com *.google-analytics.com *.googletagmanager.com *.analytics.google.com *.g.doubleclick.net *.google.com *.google.ca googleads.g.doubleclick.net www.google.com pagead2.googlesyndication.com www.googleadservices.com google.com google.ca *.equalweb.com *.usercentrics.eu www.paypal.com www.paypalobjects.com www.sandbox.paypal.com assets.narvar.com *.pcipalstaging.cloud *.pcipal.cloud *.signifyd.com rapidscansecure.com www.rapidscansecure.com;script-src 'self' 'unsafe-eval' localhost:* *.site.com *.cybersource.com www.cybersource.com storage.googleapis.com *.autoshack.ca https:\/\/api.rates.autoshack.com *.autoshack.com autoshack.ca autoshack.com *.collect.igodigital.com *.googleapis.com talkdeskchatsdk.talkdeskapp.com *.googletagmanager.com *.google-analytics.com clarity.ms www.clarity.ms www.googleadservices.com www.google.com www.googletagmanager.com pagead2.googlesyndication.com googleads.g.doubleclick.net connect.facebook.net 546006088.collect.igodigital.com *.equalweb.com *.usercentrics.eu script.crazyegg.com *.crazyegg.com crazyegg.com wwww.crazyegg.com runtime.commercecloud.com api.quotiient.com *.doubleclick.net spglobal.com www.paypal.com www.sandbox.paypal.com pay.google.com *.cdn-apple.com www.gstatic.com gstatic.com www.google.com google.com *.pcipalstaging.cloud *.pcipal.cloud cdn-scripts.signifyd.com *.signifyd.com rapidscansecure.com www.rapidscansecure.com 'unsafe-inline';connect-src 'self' localhost:* *.salesforce-scrt.com *.cybersource.com www.cybersource.com *.googleapis.com api.cquotient.com api.talkdeskappca.com *.autoshack.com *.autoshack.ca *.spglobal.com *.google-analytics.com *.googletagmanager.com *.analytics.google.com *.g.doubleclick.net *.google.com *.google.ca *.clarity.ms pagead2.googlesyndication.com www.googleadservices.com www.google.com google.com *.mobify-storefront.com *.collect.igodigital.com *.equalweb.com *.usercentrics.eu script.crazyegg.com *.crazyegg.com crazyegg.com wwww.crazyegg.com www.facebook.com api.paypal.com api.sandbox.paypal.com www.paypal.com www.sandbox.paypal.com *.pcipalstaging.cloud *.pcipal.cloud *.signifyd.com rapidscansecure.com www.rapidscansecure.com;media-src *.ctfassets.net *.autoshack.com *.autoshack.ca;frame-src *.site.com *.cybersource.com www.cybersource.com *.ctfassets.net youtube.com www.youtube.com vimeo.com www.vimeo.com talkdeskchatsdk.talkdeskapp.com td.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pay.google.com *.cdn-apple.com www.google.com google.com www.gstatic.com gstatic.com *.demandware.net demandware.net development-na01-autoshack.demandware.net staging-na01-autoshack.demandware.net production-na01-autoshack.demandware.net *.pcipalstaging.cloud *.pcipal.cloud rapidscansecure.com www.rapidscansecure.com;frame-ancestors localhost:* 'self' *.salesforce.com *.autoshack.com *.autoshack.ca autoshack.ca autoshack.com *.commercecloud.salesforce.com runtime.commercecloud.salesforce.com autoshack.com *.demandware.net demandware.net development-na01-autoshack.demandware.net staging-na01-autoshack.demandware.net production-na01-autoshack.demandware.net https:\/\/cacentral1.pcipalstaging.cloud\/ *.pcipalstaging.cloud *.pcipal.cloud;child-src www.facebook.com staticxx.facebook.com *.autoshack.ca *.autoshack.com autoshack.ca autoshack.com www.autoshack.ca www.autoshack.com *.demandware.net demandware.net development-na01-autoshack.demandware.net staging-na01-autoshack.demandware.net production-na01-autoshack.demandware.net www.paypal.com www.sandbox.paypal.com;style-src 'self' fonts.googleapis.com *.equalweb.com 'unsafe-inline';worker-src 'self' blob:;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" script-src 'self' https:\/\/www.googleapis.com https:\/\/maps.googleapis.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/cdn.userway.org 'sha256-uQ14xz9MfP77CFLAHa\/RqdOFRRUf44Ceu3ENXhf6V0w='","count":2},{"content-security-policy-report-only":" default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-src https: data: blob:; report-uri https:\/\/temporarycsp.azurewebsites.net\/api\/CreateReport","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.addtoany.com *.hotjar.com *.hotjar.io *.gettopple.com https:\/\/analytics.tiktok.com https:\/\/static.klaviyo.com https:\/\/wsv3cdn.audioeye.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com *.addtoany.com *.hotjar.com *.hotjar.io *.hsforms.com *.kaptcha.com https:\/\/bid.g.doubleclick.net *.gettopple.com https:\/\/analytics.tiktok.com *.weltpixel.com *.facebook.com business.facebook.com www.commercepartnerhub.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com *.hubspot.com *.hotjar.com *.hotjar.io wss:\/\/*.hotjar.com *.google.com blob: https:\/\/a5.behance.net https:\/\/www.googletagmanager.com *.hsforms.com *.gettopple.com https:\/\/analytics.tiktok.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.cdninstagram.com https:\/\/firebasestorage.googleapis.com business.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/redchamps.com *.hsforms.net *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com https:\/\/developer.adobe.com https:\/\/magento.com https:\/\/cdn.avmws.com\/ http:\/\/cdn.avmws.com\/ https:\/\/wsmcdn.audioeye.com\/aem.js *.gstatic.com https:\/\/ssl.avmws.com *.addtoany.com *.hotjar.com *.hotjar.io *.hsforms.com *.hsforms.net *.hs-scripts.com *.hsleadflows.net *.hs-analytics.net *.hs-banner.com *.paypal.com https:\/\/js.hsadspixel.net https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net https:\/\/cdnjs.cloudflare.com *.gettopple.com https:\/\/analytics.tiktok.com player.vimeo.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ widget.freshworks.com m2epro.freshdesk.com cdnjs.cloudflare.com *.avada.io *.shopify.com business.facebook.com twitter.com platform.twitter.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.googleapis.com amcglobal.sc.omtrdc.net *.gettopple.com https:\/\/analytics.tiktok.com https:\/\/static.klaviyo.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com https:\/\/developer.adobe.com https:\/\/cdn.avmws.com\/ http:\/\/cdn.avmws.com\/ *.hubspot.com hubspot-forms-static-embed.s3.amazonaws.com *.hotjar.com *.hotjar.io wss:\/\/*.hotjar.com *.hs-banner.com *.facebook.net https:\/\/api.hubapi.com *.doubleclick.net https:\/\/dpm.demdex.net *.hsforms.com *.gettopple.com https:\/\/analytics.tiktok.com https:\/\/analytics-ipv6.tiktokw.us\/ipv6\/enrich_ipv6  https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ widget.freshworks.com m2epro.freshdesk.com https:\/\/get.geojs.io *.avada.io business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https:\/\/seo.mageplaza.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/plumrocket.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https:\/\/plumrocket.com test.saferpay.com www.saferpay.com saferpay.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com test.saferpay.com www.saferpay.com saferpay.com https:\/\/cdn.eye-able.com https:\/\/trc.josefsteiner.at https:\/\/trc.josefsteiner.de https:\/\/elfsight.com https:\/\/phosphor.utils.elfsightcdn.com https:\/\/www.google.at https:\/\/www.google.de https:\/\/region1.analytics.google.com https:\/\/*.doubleclick.net https:\/\/public-prod-dspcookiematching.dmxleo.com https:\/\/www.facebook.com https:\/\/dis.criteo.com https:\/\/gum.criteo.com https:\/\/aa.agkn.com https:\/\/sync.1rx.io https:\/\/ad.yieldlab.net https:\/\/a.twiago.com https:\/\/criteo-partners.tremorhub.com https:\/\/eb2.3lift.com https:\/\/sync-t1.taboola.com https:\/\/simage2.pubmatic.com https:\/\/simage4.pubmatic.com https:\/\/criteo-sync.teads.tv https:\/\/rtb-csync.smartadserver.com https:\/\/sync.outbrain.com https:\/\/jadserve.postrelease.com https:\/\/ad.360yield.com https:\/\/x.bidswitch.net https:\/\/cs.media.net https:\/\/r.casalemedia.com https:\/\/id5-sync.com bat.bing.com https:\/\/eu.i.posthog.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/cdn.jsdelivr.net *.avada.io *.shopify.com player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com test.saferpay.com www.saferpay.com saferpay.com https:\/\/cdn.eye-able.com https:\/\/cdn.findologic.com https:\/\/static.criteo.net https:\/\/sslwidget.criteo.com https:\/\/universe-static.elfsightcdn.com https:\/\/elfsightcdn.com https:\/\/static.elfsight.com https:\/\/capi-automation.s3.us-east-2.amazonaws.com https:\/\/trc.josefsteiner.at https:\/\/trc.josefsteiner.de https:\/\/connect.facebook.net bat.bing.com https:\/\/eu.i.posthog.com https:\/\/eu-assets.i.posthog.com maps.googleapis.com https:\/\/www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https:\/\/fonts.bunny.net 'unsafe-inline' assets.braintreegateway.com https:\/\/cdn.eye-able.com https:\/\/cdn.findologic.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com test.saferpay.com www.saferpay.com saferpay.com https:\/\/service.findologic.com https:\/\/pagead2.googlesyndication.com https:\/\/static.elfsight.com https:\/\/service-reviews-ultimate.elfsight.com https:\/\/core.service.elfsight.com https:\/\/universe-static.elfsightcdn.com https:\/\/maplibre.utils.elfsightcdn.com https:\/\/tiles.stadiamaps.com https:\/\/trc.josefsteiner.at https:\/\/trc.josefsteiner.de https:\/\/www.facebook.com https:\/\/*.ecs.us-east-2.on.aws https:\/\/capi-automation.s3.us-east-2.amazonaws.com https:\/\/ad.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/www.google.at bat.bing.com https:\/\/eu.i.posthog.com https:\/\/eu-assets.i.posthog.com places.googleapis.com https:\/\/www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src *.typekit.net data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https:\/\/www.facebook.com https:\/\/www.googletagmanager.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com www.novaturas.lt dev-lt-novaturas.readymage.com * 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ www.google.com www.novaturas.lt  https:\/\/track.adform.net https:\/\/www.googletagmanager.com https:\/\/www.google.com *.doubleclick.net https:\/\/www.facebook.com *.pinterest.com https:\/\/master.d28zlv4dg2b2g7.amplifyapp.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/img.youtube.com 'self' https:\/\/localhost https:\/\/novaturas-gwe-1661146907.readymage.com https:\/\/novaturas-gwe-1661146907.readymage-media.com https:\/\/prod-lt-novaturas.readymage.com https:\/\/www.google.com https:\/\/hatscripts.github.io https:\/\/www.google-analytics.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ s7.addthis.com 'unsafe-inline' 'unsafe-eval' https:\/\/static.hotjar.com https:\/\/googleads.g.doubleclick.net https:\/\/connect.facebook.net https:\/\/www.google.com https:\/\/s2.adform.net  https:\/\/track.adform.net https:\/\/cdn.mxapis.com\/service-worker.js https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/svht.tradedoubler.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https:\/\/static.klaviyo.com 'unsafe-inline' 'unsafe-eval' *.typekit.net unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ ekr.zdassets.com\/ 'self' https:\/\/bam.eu01.nr-data.net https:\/\/staging.nov.indvp.com https:\/\/pim.novatours.eu https:\/\/development.nov.indvp.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com ws: api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' https:\/\/dev-lt-novaturas.readymage.com https:\/\/stage-lt-novaturas.readymage.com https:\/\/staging.nov.indvp.com https:\/\/pim.novatours.eu https:\/\/development.nov.indvp.com https:\/\/novaturas-gwe-1661146907.readymage-media.com https:\/\/use.typekit.net https:\/\/www.googletagmanager.com https:\/\/localhost 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: https:\/\/www.googletagmanager.com https:\/\/fonts.gstatic.com *.illow.io *.stackla.com *.klarnacdn.net searchserverapi.com static.klaviyo.com searchserverapi1.com *.fontawesome.com *.cloudfront.net *.reviews.io *.reviews.co.uk www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com widget.reviews.io widget.reviews.co.uk www.google.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net https:\/\/www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com account.fetchify.com *.google.com\/ widget.reviews.io widget.reviews.co.uk js.mollie.com *.reviews.io *.reviews.co.uk www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net *.paypal.com *.typekit.net *.gstatic.com https:\/\/images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.googleapis.com maps.gstatic.com *.googleapis.com imgsct.cookiebot.com https:\/\/www.magezon.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.simpli.fi *.google.com *.reviews.com *.adscience.com *.rackcdn.com *.magentocommerce.com *.pinimg.com *.snapchat.com *.bing.com *.trustpilot.com *.roeye.com *.linkedin.com searchserverapi.com www.google.co.in www.facebook.com stats.g.doubleclick.net c.clarity.ms searchserverapi1.com *.cookiebot.com *.usercentrics.eu https:\/\/www.mollie.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.twitter.com *.twimg.com www.google.ru www.searchanise.com *.searchserverapi.com *.searchserverapi1.com s3.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page https:\/\/maps.googleapis.com https:\/\/player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com https:\/\/www.googletagmanager.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ consent.cookiebot.com cc-cdn.com *.google.com\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ ga.lampshoponline.com searchanise-ef84.kxcdn.com *.kxcdn.com *.lampshoponline.co.uk *.lampshoponline.com *.harperandharlow.co.uk harperandharlow.co.uk m.lampshoponline.co.uk m.lampshoponline.com accounts.google.com *.replyco.com www.googlecommerce.com connect.facebook.net www.clarity.ms searchserverapi.com *.searchserverapi.com *.addtoany.com *.linkedin.com *.poper.ai *.illow.io *.howuku.com *.mediahawk.co.uk *.revealid.xyz *.mida.so bat.bing.com cdn.amplitude.com *.happierleads.com *.amplitude.com *.reviews.co.uk *.truconversion.com *.termly.io snap.licdn.com data.processwebsitedata.com fe.sitedataprocessing.com a.usbrowserspeed.com d-code.liadm.com searchserverapi1.com cdnjs.cloudflare.com static.klaviyo.com *.cloudflareinsights.com *.cookiebot.com *.cookiebot.eu *.clarity.ms *.dwin1.com js.mollie.com *.reviews.io s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi1.com *.searchanise.com api.amplitude.com *.twitter.com *.twimg.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https:\/\/www.googletagmanager.com tagmanager.google.com *.googleapis.com cc-cdn.com https:\/\/fonts.googleapis.com https:\/\/static.klaviyo.com *.reviews.co.uk *.searchanise.com *.illow.io *.poper.ai *.klaviyocom www.gstatic.com searchserverapi.com static-tracking.klaviyo.com searchserverapi1.com *.fontawesome.com *.cloudfront.net *.reviews.io www.searchanise.com *.searchserverapi.com *.searchserverapi1.com searchanise-ef84.kxcdn.com s3.amazonaws.com *.twitter.com ton.twimg.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.revealid.xyz *.illow.io *.poper.ai *.mediahawk.co.uk *.mida.so *.reviews.co.uk *.linkedin.com *.lampshoponline.co.uk *.lampshoponline.com *.replyco.com *.onetrust.com *.pinterest.com *.snapchat.com *.tiktok.com *.doubleclick.net *.googlesyndication.com *.clarity.ms bat.bing.com *.harperandharlow.co.uk harperandharlow.co.uk *.happierleads.com openfpcdn.io *.termly.io wss:\/\/io.truconversion.com idx.liadm.com rp.liadm.com *.amplitude.com rum.hlx.page *.klaviyo.com *.cloudfront.net *.reviews.io api.amplitude.com stats.g.doubleclick.net www.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https:\/\/www.googletagmanager.com *.googleapis.com *.babysmile24.com cdn.babysmile24.de cdn.babysmile24.at cdn.babysmile24.ch https:\/\/client.crisp.chat *.kameleoon.io data: *.fontawesome.com https:\/\/fonts.bunny.net https:\/\/static.unzer.com https:\/\/applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com https:\/\/payment.unzer.com https:\/\/payment.heidelpay.com https:\/\/sbx-payment.heidelpay.com https:\/\/sbx-payment.unzer.com https:\/\/static-cc.test.unzer.com https:\/\/h.online-metrix.net https:\/\/google.com\/pay https:\/\/pay.google.com\/ https:\/\/test-heidelpay.hpcgw.net\/ https:\/\/sbx-api.heidelpay.com\/ https:\/\/sandbox.clicktopay.auth.visa.com https:\/\/clicktopay.visa.com https:\/\/sandbox.secure.checkout.visa.com https:\/\/secure.checkout.visa.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.babygalerie24.de *.facebook.com *.googleapis.com *.google.de *.ovh.net www.google.at www.google.ch www.google.com.bd *.babysmile24.com cdn.babysmile24.de cdn.babysmile24.at cdn.babysmile24.ch cf-api.babysmile24.de *.google.com *.hub.baby *.googlesyndication.com www.google.si *.googleusercontent.com www.google.co.in www.google.kz www.google.ro *.ccm19.de https:\/\/client.crisp.chat *.clarity.ms https:\/\/image.crisp.chat *.kameleoon.io cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com magefan.com cm.magefan.com https:\/\/firebasestorage.googleapis.com https:\/\/static.unzer.com *.online-metrix.net https:\/\/www.gstatic.com bspic.hub.baby data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https:\/\/www.googletagmanager.com *.etermin.net *.ccm19.de *.facebook.net *.googleapis.com *.babysmile24.com cdn.babysmile24.de cdn.babysmile24.at cdn.babysmile24.ch *.googletagmanager.com *.clarity.ms https:\/\/client.crisp.chat *.kameleoon.io secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com *.avada.io https:\/\/static.unzer.com https:\/\/applepay.cdn-apple.com https:\/\/pay.google.com https:\/\/code.jquery.com https:\/\/h.online-metrix.net https:\/\/h64.online-metrix.net https:\/\/static-v2.unzer.com\/v2\/ui-components\/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/www.googletagmanager.com tagmanager.google.com *.googleapis.com cdn.babysmile24.de cdn.babysmile24.at cdn.babysmile24.ch *.ccm19.de *.gstatic.com *.etermin.net https:\/\/client.crisp.chat *.kameleoon.io d.ratepay.com d.payla.io dr.payla.io src.mastercard.com *.fontawesome.com https:\/\/fonts.bunny.net https:\/\/sandbox.src.mastercard.com https:\/\/static-v2.unzer.com\/v2\/ui-components\/ 'self' 'unsafe-inline'; object-src cdn.babysmile24.de cdn.babysmile24.at cdn.babysmile24.ch 'self' 'unsafe-inline'; media-src *.adobe.com *.hub.baby *.babysmile24.com cdn.babysmile24.de cdn.babysmile24.at cdn.babysmile24.ch *.ovh.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com *.ccm19.de *.google-analytics.com *.googleapis.com *.babysmile24.com cdn.babysmile24.de cdn.babysmile24.at cdn.babysmile24.ch cf-api.babysmile24.de *.doubleclick.net *.googlesyndication.com *.facebook.com wss:\/\/stream.relay.crisp.chat *.clarity.ms https:\/\/client.crisp.chat wss:\/\/client.relay.crisp.chat https:\/\/plugins.crisp.chat *.kameleoon.io payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com https:\/\/get.geojs.io *.avada.io https:\/\/api.unzer.com https:\/\/api.heidelpay.com https:\/\/sbx-api.heidelpay.com https:\/\/sbx-api.unzer.com https:\/\/payment.unzer.com https:\/\/payment.heidelpay.com https:\/\/sbx-payment.heidelpay.com https:\/\/sbx-payment.unzer.com https:\/\/h.online-metrix.net https:\/\/h64.online-metrix.net https:\/\/google.com\/pay https:\/\/www.google.com\/pay https:\/\/pay.google.com https:\/\/test-heidelpay.hpcgw.net\/ https:\/\/sbx-api.heidelpay.com\/ https:\/\/static-cc.test.unzer.com https:\/\/static-v2.unzer.com\/v2\/ui-components\/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.ccm19.de 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/bec24c5a-6980-491a-b199-6ac1940dc2e1.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":"             default-src               'self'               https:\/\/*.bg-verkehr.de               https:\/\/*.bg-kooperation.de;             base-uri               'self'               https:\/\/*.bg-verkehr.de               https:\/\/*.bg-kooperation.de;             object-src               https:\/\/*.bg-verkehr.de               https:\/\/*.bg-kooperation.de;             frame-ancestors               'self'               https:\/\/*.bg-verkehr.de               https:\/\/*.bg-kooperation.de;             form-action               'self'               https:\/\/*.bg-verkehr.de               https:\/\/*.bg-kooperation.de;             script-src               'self'               'unsafe-inline'               'unsafe-eval'               https:\/\/consent.cookiefirst.com               https:\/\/cs-assets.b-ite.com               https:\/\/f.vimeocdn.com               https:\/\/static.b-ite.com               https:\/\/www.google.com               https:\/\/www.gstatic.com               https:\/\/*.bg-verkehr.de               https:\/\/*.bg-kooperation.de;             script-src-elem               'self'               'unsafe-inline'               http:\/\/webstatistik.bg-kooperation.de               https:\/\/webstatistik.bg-kooperation.de               https:\/\/consent.cookiefirst.com               https:\/\/cs-assets.b-ite.com               https:\/\/f.vimeocdn.com               https:\/\/static.b-ite.com               https:\/\/www.google.com               https:\/\/www.gstatic.com               https:\/\/*.bg-verkehr.de               https:\/\/*.bg-kooperation.de;             style-src               'self'               'unsafe-inline'               https:\/\/consent.cookiefirst.com               https:\/\/cs-assets.b-ite.com               https:\/\/f.vimeocdn.com               https:\/\/www.gstatic.com               https:\/\/*.bg-verkehr.de               https:\/\/*.bg-kooperation.de;             img-src               'self'               data:               blob:               https:\/\/cs-assets.b-ite.com               https:\/\/i.vimeocdn.com               https:\/\/www.gstatic.com               https:\/\/*.bg-verkehr.de               https:\/\/*.bg-kooperation.de;             font-src               'self'               data:               https:\/\/*.bg-verkehr.de               https:\/\/*.bg-kooperation.de;             connect-src               'self'               https:\/\/arclight.vimeo.com               https:\/\/consent.cookiefirst.com               https:\/\/edge.cookiefirst.com               https:\/\/api.cookiefirst.com               https:\/\/jobs.b-ite.com               https:\/\/orion.bendingspoons.com               https:\/\/vimeo.com               https:\/\/www.google.com\/recaptcha\/               https:\/\/*.bg-verkehr.de               https:\/\/*.bg-kooperation.de;             frame-src               'self'               https:\/\/player.vimeo.com               https:\/\/www.google.com               https:\/\/*.bg-verkehr.de               https:\/\/*.bg-kooperation.de;             media-src               'self'               data:               https:\/\/*.bg-verkehr.de               https:\/\/*.bg-kooperation.de;             worker-src               'self'               blob:;             manifest-src               'self'               https:\/\/*.bg-verkehr.de               https:\/\/*.bg-kooperation.de;             report-uri               https:\/\/www.bg-verkehr.de\/csp-report            ","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.clarity.ms; style-src 'self' 'unsafe-inline' https:\/\/fonts.bunny.net; font-src 'self' https:\/\/fonts.bunny.net data:; img-src 'self' data: blob: https:; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/*.clarity.ms https:\/\/www.googletagmanager.com; frame-src 'self' https:\/\/www.googletagmanager.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudflare.com *.google.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr *.dhlparcel.nl *.klaviyo.com *.typekit.net *.bing.com *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.langshop.io www.google.com *.google.com *.doubleclick.net *.facebook.com data.henkterhorst.nl js.mollie.com *.google.nl *.google.at *.google.de *.google.be *.google.fr *.google.it www.googletagmanager.com *.trustpilot.com *.pinterest.com *.criteo.com *.criteo.net *.cookiebot.com https:\/\/squeezely.tech *.sendcloud.sc *.jsdelivr.net *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com retail.googleapis.com henkterhorst.nl *.henkterhorst.nl henkterhorst.de *.henkterhorst.de *.henkterhorst.dk brinks-media.com *.bidswitch.net *.adnxs.com *.smartadserver.com *.taboola.com *.1rx.io *.yieldmo.com *.omnitagjs.com *.casalemedia.com id5-sync.com *.360yield.com *.ivitrack.com *.media.net *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.sharethrough.com *.teads.tv *.tremorhub.com *.3lift.com *.yieldlab.net *.emxdgt.com *.adform.net *.twiago.com *.dmxleo.com *.unrulymedia.com *.eyeota.net *.agkn.com *.clarity.ms *.squeezely.tech *.spotlersearch.com *.sooqr.com https:\/\/www.magezon.com https:\/\/www.mollie.com *.mailcampaigns.nl\/ *.linkedin.com *.pinterest.com *.google.com.ua *.google.de *.google.nl *.google.at *.google.be *.google.fr *.google.it *.twitter.com *.yahoo.com *.webwinkelkeur.nl *.cookiebot.com *.criteo.com *.criteo.net *.bing.com *.cloudflare.com *.jmango360.com *.amazonaws.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.gstatic.com robincontentdesktop.blob.core.windows.net *.pagesense.io *.adnxs.com *.faslet.net blob: data.henkterhorst.nl spotlersearchanalytics.com *.spotlersearch.com *.spotlersearchanalytics.com *.avada.io js.mollie.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr *.paypal.com chimpstatic.com *.newrelic.com *.cloudflare.com *.criteo.net *.robinhq.com *.mailcampaigns.nl *.cloudflareinsights.com *.hotjar.com *.trustpilot.com *.dhlparcel.nl *.nr-data.net *.criteo.com *.cookiebot.com *.bing.com *.msecnd.net *.pinterest.com *.clarity.ms *.pinimg.com *.licdn.com *.sooqr.com https:\/\/squeezely.tech *.billygrace.com *.sendcloud.sc *.jsdelivr.net www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.spotlersearch.com *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudflare.com *.mailcampaigns.nl *.google.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr *.dhlparcel.nl *.typekit.net *.klaviyo.com *.bing.com *.sooqr.com https:\/\/unpkg.com *.bootstrapcdn.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com henkterhorst.nl *.henkterhorst.nl *.google.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.faslet.net *.henkterhorst.nl *.zoho.eu *.googlesyndication.com *.spotlersearch.com https:\/\/get.geojs.io *.avada.io *.nr-data.net *.newrelic.com *.mailcampaigns.nl *.visualstudio.com *.pinterest.com google.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr *.bing.com *.linkedin.com *.hotjar.com *.hotjar.io *.trustpilot.com *.doubleclick.net *.googletagmanager.com wss:\/\/ws.hotjar.com\/ *.criteo.com *.criteo.net *.cookiebot.com *.clarity.ms *.amazonaws.com https:\/\/squeezely.tech *.jsdelivr.net *.billypx.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/www.googletagmanager.com *.googleapis.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.gls.com *.szybkapaczka.pl *.gls-poland.com\/ *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' data: *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.facebook.net *.tawk.to 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.facebook.com *.facebook.net js.mollie.com *.szybkapaczka.pl *.gls-poland.com\/ secure.payu.com merch-prod.snd.payu.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.tawk.to *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com *.doofinder.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ magefan.com cm.magefan.com *.facebook.com *.facebook.net https:\/\/firebasestorage.googleapis.com https:\/\/www.mollie.com https:\/\/api.mapbox.com *.szybkapaczka.pl *.openstreetmap.org *.gls-poland.com\/ *.gls-poland.com.pl\/ static.payu.com 'self' data: *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com\/ *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src https:\/\/assets.adobedtm.com https:\/\/*.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https:\/\/*.vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/*.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com tagmanager.google.com https:\/\/www.googletagmanager.com *.doofinder.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.facebook.com *.facebook.net *.fontawesome.com *.googleapis.com https:\/\/*.gstatic.com *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com *.szybkapaczka.pl *.openstreetmap.org *.gls-poland.com\/ secure.payu.com secure.snd.payu.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.gstatic.com *.tawk.to cdn.jsdelivr.net *.googletagmanager.com https:\/\/static.cloudflareinsights.com https:\/\/script.hotjar.com https:\/\/www.google-analytics.com https:\/\/googleads.g.doubleclick.net https:\/\/*.newrelic.com https:\/\/*.nr-data.net https:\/\/www.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/www.paypalobjects.com https:\/\/*.vimeocdn.com https:\/\/cdn.jsdelivr.net https:\/\/*.tawk.to https:\/\/*.stripe.com https:\/\/*.stripe.network https:\/\/*.stripecdn.com https:\/\/*.klarna.com https:\/\/*.klarnacdn.net https:\/\/*.klarnaevt.com https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/*.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/www.googletagmanager.com tagmanager.google.com *.googleapis.com *.doofinder.com *.fontawesome.com https:\/\/static.klaviyo.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.szybkapaczka.pl *.gls-poland.com\/ *.stripe.network *.stripecdn.com *.gstatic.com *.tawk.to cdn.jsdelivr.net fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.szybkapaczka.pl *.gls-poland.com\/ *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com *.doofinder.com wss:\/\/*.doofinder.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.facebook.com *.facebook.net https:\/\/get.geojs.io *.avada.io *.szybkapaczka.pl *.openstreetmap.org *.gls-poland.com\/ secure.payu.com merch-prod.snd.payu.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.tawk.to wss:\/\/*.tawk.to *.googletagmanager.com https:\/\/static.cloudflareinsights.com https:\/\/script.hotjar.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/*.newrelic.com https:\/\/*.nr-data.net https:\/\/*.stripe.com https:\/\/connect.facebook.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' https: data: blob:; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: data: blob:; worker-src 'self' blob:; upgrade-insecure-requests; report-uri https:\/\/csp.alldesign.ninja\/csp-reports; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/connect.facebook.net https:\/\/www.google.com https:\/\/www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:\/\/www.grutto.com https:\/\/www.kaufnekuh.de https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/*.g.doubleclick.net; font-src 'self' data:; connect-src 'self' https:\/\/www.grutto.com https:\/\/www.kaufnekuh.de https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/stats.g.doubleclick.net https:\/\/gfecpao8yc.execute-api.eu-central-1.amazonaws.com; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net https:\/\/www.facebook.com https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/www.videoask.com; media-src 'self' https:\/\/www.grutto.com https:\/\/www.kaufnekuh.de; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/www.grutto.com https:\/\/www.kaufnekuh.de; frame-ancestors 'self'; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" font-src *.gstatic.com data: stats.g.doubleclick.net *.facebook.com *.fontawesome.com 'self' *.sovendus.com *.cloudflare.com *.twitter.com *.typekit.net *.googleapis.com *.bootstrapcdn.com https:\/\/int-ecommerce.nexi.it\/ecomm\/XPayBuild\/ https:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.bolt.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.bolt.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com *.google.com *.fls.doubleclick.net www.facebook.com *.awin1.com *.zenaps.com 'self' *.sovendus.com www.sovendus-benefits.com www.sovendus-campaign.com www.sovendus-connect.com www.sovendus-network.com *.twitter.com *.addthis.com https:\/\/int-ecommerce.nexi.it\/ https:\/\/hal9000.redintelligence.net\/ https:\/\/ad4m.at\/frame.html *.hotjar.com *.criteo.com int-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https:\/\/plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.awin1.com *.zenaps.com *.wepowerconnections.com 'self' *.sovendus.com *.bird.eu *.cloudflare.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com https:\/\/ecommerce.nexi.it\/ecomm\/payment\/img\/visa.svg https:\/\/ecommerce.nexi.it\/ecomm\/payment\/img\/mastercard.svg https:\/\/ecommerce.nexi.it\/ecomm\/payment\/img\/logoNexiLarge.png https:\/\/ecommerce.nexi.it\/ecomm\/payment\/img\/maestro.svg https:\/\/form.jotform.com\/ https:\/\/www.google.it\/ https:\/\/as.ad4m.at\/ad\/ https:\/\/r.adserver01.de\/rt\/ *.taboola.com\/ https:\/\/track.adform.net\/ https:\/\/ads.creative-serving.com\/ https:\/\/adservice.google.it\/ https:\/\/secure.adnxs.com\/ https:\/\/events.jotform.com\/jsform\/ *.favicon.ico https:\/\/cdn.jotfor.ms\/assets\/img\/logo\/logo-new@1x.png https:\/\/cdn.jotfor.ms\/favicon.ico https:\/\/tr.outbrain.com\/unifiedPixel https:\/\/criteo-partners.tremorhub.com\/ https:\/\/contextual.media.net\/ https:\/\/ad.360yield.com\/ https:\/\/jadserve.postrelease.com https:\/\/simage2.pubmatic.com\/ https:\/\/ib.adnxs.com\/ https:\/\/pixel.rubiconproject.com\/ https:\/\/rtb-csync.smartadserver.com\/ https:\/\/criteo-sync.teads.tv\/ https:\/\/eb2.3lift.com\/ https:\/\/visitor.omnitagjs.com\/ https:\/\/s.thebrighttag.com *.criteo.com\/ *.analytics.yahoo.com\/ https:\/\/beacon.krxd.net\/ https:\/\/x.bidswitch.net\/ https:\/\/e1.emxdgt.com\/ *.ads.yieldmo.com https:\/\/ad.yieldlab.net\/ https:\/\/match.sharethrough.com\/ https:\/\/sync.outbrain.com\/ https:\/\/exchange.mediavine.com\/ https:\/\/matching.ivitrack.com\/ https:\/\/id5-sync.com cdn.doofinder.com int-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com cdn.klarna.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com http:\/\/localhost:8082 https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.awin1.com www.dwin1.com *.zenaps.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com lantern.roeyecdn.com 'self' 'unsafe-inline' 'unsafe-eval' *.sovendus.com *.cloudflare.com *.twitter.com googletagmanager.com *.trustedshops.com *.fontawesome.com *.addthis.com s7.addthis.com m.addthis.com z.moatads.com *.addthisedge.com apis.google.com graph.facebook.com widgets.pinterest.com *.nr-data.net js-agent.newrelic.com cdn.scalapay.com int-ecommerce.nexi.it form.jotform.com ad4m.at *.taboola.com *.hotjar.com *.outbrain.com static.criteo.net static.hotjar.com cdn.jotfor.ms dynamic.criteo.com *.smct.io *.smct.co https:\/\/smct.co\/ *.iubenda.com hits-i.iubenda.com *.mainadv.com *.openapi.it *.cardinalcommerce.com cdn.doofinder.com ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com www.google.com www.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com https:\/\/www.dwin1.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.fontawesome.com 'self' 'unsafe-inline' 'unsafe-hashes' *.sovendus.com *.cloudflare.com *.twitter.com *.typekit.net *.bootstrapcdn.com https:\/\/form.jotform.com\/ *.jotfor.ms *.doofinder.com unsafe-inline assets.braintreegateway.com https:\/\/fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.bolt.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com https:\/\/www.wepowerconnections.com\/ https:\/\/the.sciencebehindecommerce.com 'self' *.sovendus.com www.sovendus-benefits.com www.sovendus-campaign.com www.sovendus-connect.com www.sovendus-network.com *.cloudflare.com *.twitter.com *.paypal.com *.nr-data.net https:\/\/int-ecommerce.nexi.it\/ *.hotjar.com https:\/\/stats.g.doubleclick.net\/j\/collect *.criteo.com https:\/\/trc-events.taboola.com\/1052370\/log\/3\/unip https:\/\/firehose.eu-west-1.amazonaws.com https:\/\/hits-i.iubenda.com\/write https:\/\/cognito-identity.eu-west-1.amazonaws.com\/ https:\/\/tr.outbrain.com\/ *.openapi.it *.cardinalcommerce.com *.doofinder.com wss:\/\/*.doofinder.com int-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com google.com maps.googleapis.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/integration-5ojmyuq-zgzvw2kr4mr5m.eu-5.magentosite.cloud\/italiano; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" default-src 'self';                    script-src 'report-sample' 'self' 'unsafe-inline' https:\/\/acsbapp.com\/ https:\/\/browser.sentry-cdn.com\/ https:\/\/cdn.cookielaw.org\/ https:\/\/cdn.jsdelivr.net\/ https:\/\/cdn.tailwindcss.com\/ https:\/\/code.jquery.com\/ https:\/\/fast.wistia.com\/ https:\/\/js.monitor.azure.com\/ https:\/\/kit.fontawesome.com\/ https:\/\/www.google.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/www.gstatic.com\/;                   style-src 'report-sample' 'self' 'unsafe-inline' https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/code.jquery.com https:\/\/fonts.googleapis.com;                    img-src *;                    font-src * data:;                    frame-src 'self' https:\/\/privacyportal.onetrust.com https:\/\/www.google.com;                    frame-ancestors 'self' *.globalmedicalresponse.corpweb *.globalmedicalresponse.com;                    connect-src 'self' https:\/\/*.litix.io https:\/\/cdn.acsbapp.com https:\/\/cdn.cookielaw.org https:\/\/centralus-2.in.applicationinsights.azure.com https:\/\/dc.services.visualstudio.com https:\/\/distillery.wistia.com https:\/\/embed-cloudfront.wistia.com https:\/\/fast.wistia.com https:\/\/fast.wistia.net https:\/\/geolocation.onetrust.com https:\/\/ka-p.fontawesome.com https:\/\/kit.fontawesome.com https:\/\/pipedream.wistia.com https:\/\/privacyportal.onetrust.com https:\/\/www.google-analytics.com;                   object-src 'none';                    base-uri 'self';                    manifest-src 'self';                    media-src 'self' blob:;                   worker-src 'none';                    report-uri https:\/\/68654b2b841f0014a4c0d0f7.endpoint.csper.io?v=1;","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' https:; connect-src 'self' https:; form-action 'self'; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/maps.googleapis.com https:\/\/maps.google.com https:\/\/googleads.g.doubleclick.net https:\/\/www.gstatic.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.eu https:\/\/consent.cookiebot.eu https:\/\/bat.bing.com https:\/\/js-eu1.hs-scripts.com https:\/\/js-eu1.hscollectedforms.net https:\/\/js-eu1.hs-banner.com https:\/\/js-eu1.hubspot.com https:\/\/js-eu1.hsadspixel.net https:\/\/js-eu1.hs-analytics.net https:\/\/js-eu1.usemessages.com https:\/\/extend.vimeocdn.com https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/bsqd.me; connect-src 'self' https:\/\/region1.google-analytics.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.google.com\/ccm https:\/\/maps.googleapis.com https:\/\/googleads.g.doubleclick.net https:\/\/bat.bing.com https:\/\/api-eu1.hubspot.com https:\/\/api-eu1.hubapi.com https:\/\/cta-eu1.hubspot.com https:\/\/track-eu1.hubspot.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.eu https:\/\/js-eu1.hs-analytics.net https:\/\/px.ads.linkedin.com https:\/\/bsqd.me wss:\/\/bsqd.me; img-src 'self' data: https:\/\/www.google.com https:\/\/www.google.nl https:\/\/maps.gstatic.com https:\/\/maps.google.com https:\/\/www.gstatic.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/bat.bing.com https:\/\/track-eu1.hubspot.com https:\/\/perf-eu1.hsforms.com https:\/\/img.sct.eu1.usercentrics.eu https:\/\/px.ads.linkedin.com https:\/\/www.googletagmanager.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com data:; frame-src 'self' https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/consentcdn.cookiebot.eu https:\/\/player.vimeo.com https:\/\/www.youtube.com https:\/\/connect.facebook.net;","count":2},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'self' https:\/\/payments.salesforce.com\/ https:\/\/stats.g.doubleclick.net https:\/\/d.la13-core1.sfdc-yfeipo.salesforceliveagent.com https:\/\/checkoutshopper-test.adyen.com\/ https:\/\/pal-test.adyen.com https:\/\/fanduelgroup.my.site.com\/ https:\/\/api2.amplitude.com https:\/\/tattle.api.osano.com https:\/\/fanduelgroup.my.site.com https:\/\/fanduelgroup.my.site.com\/ESWFDEnhancedChatDeplo1759234180461\/assets\/js\/bootstrap.min.js https:\/\/checkoutshopper-live.adyen.com\/ https:\/\/cmp.osano.com https:\/\/cmp.osano.com\/ https:\/\/cdn.content.aws-prod1-useast1.aws.sfdc.cl\/ https:\/\/cdn.amplitude.com https:\/\/d.la1-c1cs-ia6.salesforceliveagent.com\/ https:\/\/support.fanduel.com https:\/\/www.google.com https:\/\/pay.google.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/uip.canary.lwc.dev https:\/\/cdn.content.aws-dev2-uswest2.aws.sfdc.cl\/ https:\/\/d.la3-c2-ia5.salesforceliveagent.com\/ blob: https:\/\/support.fanduel.com\/survey\/ https:\/\/www.googletagmanager.com\/gtag\/js https:\/\/www.google.com\/recaptcha\/ https:\/\/js.stripe.com\/ https:\/\/d.la3-c1cs-ia4.salesforceliveagent.com https:\/\/fanduelgroup.my.salesforce-scrt.com import: https:\/\/www.google-analytics.com *.salesforce.com https:\/\/www.paypal.com\/sdk\/js https:\/\/cmp.osano.com\/6obJqSxoJRfE6CIZ\/b18002a1-b1e7-4dfa-9c4e-a987d56780a0\/osano.js https:\/\/cmp.osano.com\/6obJqSxoJRfE6CIZ\/b18002a1-b1e7-4dfa-9c4e-a987d56780a0\/osano.js.map https:\/\/c.la13-core1.sfdc-yfeipo.salesforceliveagent.com 'report-sample' https:\/\/service.force.com\/embeddedservice\/ 'unsafe-eval'; report-to sfdc-csp-ep; report-uri https:\/\/fanduelgroup.lightning.force.com\/_\/ContentDomainCSPNoAuth?tenantId=00D5Y000002UY4T&networkId=0DM5Y000000OMEh&type=communities","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/jaws-prod.cdn.pbs.org https:\/\/challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:\/\/image.pbs.org https:\/\/media.njpbs.org; font-src 'self'; frame-src https:\/\/player.pbs.org https:\/\/challenges.cloudflare.com; connect-src 'self' https:\/\/challenges.cloudflare.com https:\/\/report.njpbs.org; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com; connect-src 'self' https: wss: ws: blob: http:\/\/localhost; img-src 'self' data: blob: https:; media-src 'self' data: blob:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; worker-src 'self' blob:; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; frame-src 'self' https:; report-uri \/api\/csp-report; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.fontawesome.com *.cloudinary.com blob: static.klaviyo.com applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https:\/\/images.unsplash.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ magefan.com cm.magefan.com blob: www.google.com.ua maps.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https:\/\/maps.googleapis.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ conzent.net *.stapecdn.com stapecdn.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https:\/\/static.klaviyo.com *.fontawesome.com static-tracking.klaviyo.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri \/csp-report\/report\/index; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com maxcdn.bootstrapcdn.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com  'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.innoship.ro https:\/\/*.sameday.ro *.addthis.com  www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com *.tile.openstreetmap.org *.openstreetmap.org magefan.com cm.magefan.com *.disqus.com https:\/\/firebasestorage.googleapis.com https:\/\/cdn.tbibank.support www.xtento.com cdn.xtento.com https:\/\/oqtagonmedia-1224e.kxcdn.com https:\/\/www.google.ro\/ads\/ga-audiences https:\/\/region1.analytics.google.com\/ https:\/\/airsoftcluj-1224e.kxcdn.com\/ https:\/\/airsoftbucuresti-1224e.kxcdn.com https:\/\/oqtagon-1224e.kxcdn.com https:\/\/www.oqtagon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https:\/\/cdn.jsdelivr.net *.tiktok.com https:\/\/*.sameday.ro *.disqus.com *.addthis.com https:\/\/z.moatads.com https:\/\/v1.addthisedge.com *.avada.io *.shopify.com www.xtento.com cdn.xtento.com https:\/\/airsoftbucuresti-1224e.kxcdn.com https:\/\/oqtagon-1224e.kxcdn.com https:\/\/airsoftcluj-1224e.kxcdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.fontawesome.com https:\/\/*.sameday.ro maxcdn.bootstrapcdn.com https:\/\/cdn.jsdelivr.net https:\/\/fonts.bunny.net https:\/\/oqtagonmedia-1224e.kxcdn.com https:\/\/airsoftcluj-1224e.kxcdn.com\/ https:\/\/airsoftbucuresti-1224e.kxcdn.com https:\/\/oqtagon-1224e.kxcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com https:\/\/get.geojs.io *.avada.io  https:\/\/ro.tbibank.support https:\/\/region1.analytics.google.com\/g\/collect 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src https: data: blob: 'self' 'unsafe-inline' 'unsafe-eval'; img-src data: https:; font-src data: https:; report-uri https:\/\/kilian.report-uri.io\/r\/default\/csp\/reportOnlyi; connect-src https: data: blob: 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/client.crisp.chat https:\/\/storage.crisp.chat wss:\/\/client.relay.crisp.chat wss:\/\/stream.relay.crisp.chat","count":2},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval';","count":2},{"content-security-policy-report-only":" font-src https:\/\/cdnjs.cloudflare.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ bid.g.doubleclick.net *.addthis.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.googletagmanager.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https:\/\/images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.disqus.com https:\/\/www.mollie.com *.amazonaws.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.disqus.com *.addthis.com https:\/\/z.moatads.com https:\/\/v1.addthisedge.com https:\/\/cdn.jsdelivr.net js.mollie.com *.sendcloud.sc *.jsdelivr.net https:\/\/mikabot-staging.studio-mikado.be https:\/\/mikabot.studio-mikado.be *.googletagmanager.com tagmanager.google.com https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src downloads.mailchimp.com https:\/\/cdn.jsdelivr.net *.sendcloud.sc *.jsdelivr.net https:\/\/mikabot-staging.studio-mikado.be https:\/\/mikabot.studio-mikado.be https:\/\/cdnjs.cloudflare.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com https:\/\/mikabot-staging.studio-mikado.be https:\/\/mikabot.studio-mikado.be *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self';  frame-src 'self' wine-cult.firebaseapp.com *.youtube.com *.spotify.com *.vimeo.com *.doubleclick.net *.facebook.com *.trkn.us *.googletagmanager.com *.googlesyndication.com vercel.live vercel.com *.instagram.com form.jotform.com *.ctfassets.net *.audioeye.com *.pinterest.com *.stripe.com *.hsforms.com *.hsforms.net;  script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.adsrvr.org *.googlesyndication.com *.youtube.com *.spotify.com *.vimeo.com maps.googleapis.com form.jotform.com *.vercel.live *.audioeye.com *.tiktok.com *.adroll.com *.nextdoor.com *.stackadapt.com *.pinterest.com *.pinimg.com *.hs-scripts.com *.hscollectedforms.net *.hs-analytics.net *.hs-banner.com snap.licdn.com *.facebook.net *.pixeltracker.co *.stripe.com *.hsforms.net *.hubspotusercontent-na1.net *.hsappstatic.net *.hubspot.com;  child-src 'self' *.youtube.com *.google.com *.spotify.com vercel.live vercel.com;  style-src 'self' 'unsafe-inline' *.typekit.net *.googleapis.com *.googletagmanager.com *.stackadapt.com *.audioeye.com *.hsforms.net *.hubspotusercontent-na1.net;  img-src * blob: data:;  media-src 'self' *.cdninstagram.com;  object-src data: *.ctfassets.net;  connect-src *;  font-src 'self' data: *.typekit.net fonts.gstatic.com *.audioeye.com *.hsforms.net *.hubspotusercontent-na1.net;  frame-ancestors 'self' https:\/\/app.contentful.com;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; media-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.medewo.com *.rausch-packaging.com *.pack-verde.com 'self' data: 'unsafe-inline' data: *.paypal.com *.pay1.de *.cloudfront.net userlike-cdn-widgets.s3-eu-west-1.amazonaws.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com *.etrusted.com *.b-cdn.net *.optimonk.com https:\/\/widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.medewo.com *.rausch-packaging.com *.pack-verde.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com *.etrusted.com *.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.apptrian.com *.doofinder.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com *.medewo.com *.rausch-packaging.com *.pack-verde.com *.bing.com *.bing.net *.cookiefirst.com *.facebook.net *.googlesyndication.com *.google.de *.leadlab.click *.linkedin.com *.outbrain.com *.pingdom.net *.ratepay.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com 'self' data: blob: *.etrusted.com *.userlike.com *.doubleclick.net *.google.com *.googleapis.com dashboard.trustprofile.com *.facebook.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com www.apptrian.com *.doofinder.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.medewo.com *.rausch-packaging.com *.pack-verde.com *.bing.com *.cloudfront.net *.facebook.net *.google.de *.googlesyndication.com *.licdn.com *.outbrain.com *.pingdom.net *.leadlab.click *.cookiefirst.com *.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com *.yotpo.com *.matelso.de *.b-cdn.net *.clarity.ms *.getresponse.com *.gr-cdn.com *.googleapis.com *.optimonk.com *.trustedshops.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com cdnjs.cloudflare.com payment *.hsforms.net *.hsforms.com *.gstatic.com https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.doofinder.com downloads.mailchimp.com d.ratepay.com d.payla.io dr.payla.io *.medewo.com *.rausch-packaging.com *.pack-verde.com *.dnky.co *.dotdigital.com *.paypal.com *.ratepay.com *.pay1.de *.bing.com https:\/\/widgets.trustedshops.com *.pingdom.net *.leadlab.click *.cookiefirst.com *.youtube.com *.adobedtm.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com 'self' 'unsafe-inline' data: *.etrusted.com *.optimonk.com cdn.datatables.net https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com www.apptrian.com *.doofinder.com wss:\/\/*.doofinder.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.medewo.com *.rausch-packaging.com *.pack-verde.com *.facebook.com *.pay1.de *.bing.com *.googlesyndication.com *.omtrcd.net *.pingdom.net *.leadlab.click *.cookiefirst.com *.doubleclick.net *.userlike.com wss:\/\/*.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com *.outbrain.com *.matelso.de *.linkedin.com *.getresponse.com mpc-prod-17-s6uit34pua-wl.a.run.app *.googleapis.com *.optimonk.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site intent:\/\/payment t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/connect.facebook.net https:\/\/js.stripe.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/*.googleapis.com https:\/\/*.getbeamer.com https:\/\/*.zdassets.com https:\/\/*.adyen.com https:\/\/canny.io https:\/\/cdnjs.cloudflare.com https:\/\/staxjs.staxpayments.com https:\/\/script.tapfiliate.com https:\/\/cdn.tailwindcss.com https:\/\/embedsocial.com https:\/\/unpkg.com https:\/\/cdn.jsdelivr.net https:\/\/tag.getdrip.com https:\/\/use.fontawesome.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/use.fontawesome.com https:\/\/cdnjs.cloudflare.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/*.getbeamer.com https:\/\/*.adyen.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/use.fontawesome.com https:\/\/cdnjs.cloudflare.com https:\/\/maxcdn.bootstrapcdn.com; connect-src 'self' https:\/\/*.google-analytics.com https:\/\/connect.facebook.net https:\/\/*.ingest.sentry.io https:\/\/*.ingest.us.sentry.io https:\/\/*.googleapis.com https:\/\/*.getbeamer.com https:\/\/*.launchdarkly.com https:\/\/*.zdassets.com https:\/\/*.adyen.com https:\/\/api.canny.io https:\/\/grazecart.zendesk.com https:\/\/embedsocial.com; frame-src 'self' https:\/\/js.stripe.com https:\/\/www.google.com https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/www.loom.com https:\/\/www.facebook.com https:\/\/*.getbeamer.com https:\/\/*.adyen.com https:\/\/groups.google.com; media-src 'self' https: data:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'self'; script-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.pstatic.net https:\/\/wcs.pstatic.net https:\/\/wcs.naver.net; style-src 'self' https:; font-src 'self' data: https:; img-src 'self' data: https:; media-src 'self' data: blob: https:\/\/*.kollus.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/wcs.naver.com https:\/\/nam.veta.naver.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.googletagmanager.com; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" default-src 'self' https: http: data: blob: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" default-src 'none'; connect-src 'self' https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; manifest-src https: data:; media-src https: data:; frame-src 'self' https:\/\/youtube.com https:\/\/www.youtube.com https:\/\/mc.yandex.ru https:\/\/mc.yandex.md https:\/\/www.google.com https:\/\/smartcaptcha.yandexcloud.net; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.kxcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src bid.g.doubleclick.net https:\/\/www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com www.google.com *.braintreegateway.com *.paypal.com google.com *.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.google.com\/ *.authorize.net *.googleapis.com *.wesupply.xyz https:\/\/wesupplylabs.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com scontent.cdninstagram.com *.kxcdn.com amcglobal.sc.omtrdc.net *.twitter.com *.googleapis.com google.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ magefan.com cm.magefan.com *.disqus.com https:\/\/www.magezon.com https:\/\/redchamps.com maps.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ www.google.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com sce.toogoerp.net sce.toogo.io sce-test.toogoerp.net https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.disqus.com *.google.com\/ *.authorize.net *.cloudflare.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com google.com *.kxcdn.com *.gstatic.com assets.braintreegateway.com https:\/\/static.klaviyo.com *.fontawesome.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com https:\/\/www.paypal.com\/xoplatform\/logger\/api\/logger cdn.ampproject.org *.kxcdn.com dpm.demdex.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.authorize.net *.googleapis.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http:\/\/csp-reporting-service.com\/my-project\/endpoint; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https:\/\/*.gopersonal.ai 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com webpay3g.transbank.cl webpay3gint.transbank.cl 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https:\/\/*.gopersonal.ai *.mercadolibre.com api.cappasity.com event.getblue.io googleads.g.doubleclick.net api-static.mercadopago.com secure-fields.mercadopago.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https:\/\/*.gopersonal.ai *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com 'self' data: www.google.com.mx www.google.com.ar operaciones.jazminchebar.com.ar www.mailing.todoparachebar.com mg.mlstatic.com h.online-metrix.net ventasonline.payway.com.ar developers-ventasonline.payway.com.ar www.mailing.jazminchebar.com public-assets.goshops.ai jazminchebar.com.ar jazminchebar.com jazminchebar.cl jazminchebar.mx todoparachebar.com.ar todoparachebar.cl jazmincircular.com.ar data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page https:\/\/*.gopersonal.ai https:\/\/*.gstatic.com *.mlstatic.com *.mercadopago.com *.gstatic.com cdn.retailrocket.net d12zyq17vm1xwx.cloudfront.net event.getblue.io widget.getblue.io externalassets.icommarketing.com static.oct8ne.com connect.facebook.net services.fitprenda.com live.decidir.com maps.googleapis.com developers.decidir.com h.online-metrix.net h64.online-metrix.net ventasonline.payway.com.ar developers-ventasonline.payway.com.ar api.wcx.cloud www.clarity.ms f.wcentrix.com js-agent.newrelic.com scripts.clarity.ms scripts.icommkt.online 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/*.gopersonal.ai *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/*.gopersonal.ai https:\/\/*.goshops.ai https:\/\/*.googleapis.com https:\/\/*.gstatic.com *.mercadopago.com *.mercadolibre.com notifications-icommkt.com track-icommkt.com tracking.retailrocket.net cdn.retailrocket.net frontal-usa.oct8ne.com maps.googleapis.com googleads.g.doubleclick.net developers.decidir.com h.online-metrix.net ventasonline.payway.com.ar developers-ventasonline.payway.com.ar bam.nr-data.net d.clarity.ms jch-api.goshops.com ad.doubleclick.net api.icommkt.online\/subscribe 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' data: https:\/\/*.daily.taobao.net https:\/\/*.mmstat.com https:\/\/*.aliyun-inc.com https:\/\/*.alibaba-inc.com https:\/\/*.alicdn.com https:\/\/*.alibaba.com https:\/\/*.aliyuncs.com; report-uri \/report-csp","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https:\/\/fonts.gstatic.com data: *.klarnacdn.net *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de api.bazaarvoice.com stg.api.bazaarvoice.com https:\/\/seo.mageplaza.com *.authorize.net *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarna.com *.authorize.net static.addtoany.com *.wesupply.xyz https:\/\/wesupplylabs.com guarantee-cdn.com *.weltpixel.com www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.trackedlink.net *.klarna.com *.klarnaevt.com *.klarnacdn.net https:\/\/firebasestorage.googleapis.com guarantee-cdn.com www.xtento.com cdn.xtento.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.avada.io *.shopify.com *.authorize.net static.addtoany.com acsbapp.com apis.google.com *.cloudflare.com cloudflare.com static.cloudflareinsights.com guarantee-cdn.com www.xtento.com cdn.xtento.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com display.ugc.bazaarvoice.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net *.fontawesome.com https:\/\/fonts.bunny.net *.googleapis.com *.addtoany.com maxcdn.bootstrapcdn.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https:\/\/get.geojs.io *.avada.io http:\/\/dpm.demdex.net *.authorize.net cdn.acsbapp.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl\/verily","count":2},{"content-security-policy-report-only":" font-src *.kueskipay.com *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.kueskipay.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com multicobros.banorte.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com *.kueskipay.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com multicobros.banorte.com supercolchones.gestionplay.com.ar *.opencontrol.mx *.kaptcha.com *.openpay.pe eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com landofcoder.com *.wesupply.xyz https:\/\/wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.kueskipay.com *.google.com mageside.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar supercolchones.gestionplay.com.ar *.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.googleapis.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.kueskipay.com *.googletagmanager.com *.mxpnl.com *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com multicobros.banorte.com supercolchones.gestionplay.com.ar *.facebook.net cdn.connectif.cloud newrelic.com *.s3.amazonaws.com *.openpay.co *.openpay.pe *.google-analytics.com *.google.com\/recaptcha\/ *.gstatic.com\/recaptcha\/ eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com landofcoder.com *.cloudflare.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com https:\/\/static.klaviyo.com *.kueskipay.com *.googletagmanager.com *.mxpnl.com *.fontawesome.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com supercolchones.gestionplay.com.ar fonts.googleapis.com unsafe-inline *.paypal.com *.sandbox.paypal.com *.paypalobjects.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com supercolchones.gestionplay.com.ar 'self' 'unsafe-inline'; manifest-src *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.kueskipay.com *.doubleclick.net https:\/\/get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com multicobros.banorte.com supercolchones.gestionplay.com.ar *.openpay.mx *.openpay.co *.openpay.pe api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com landofcoder.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/tag.wimpole.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/widget.trustpilot.com https:\/\/www.bing.com https:\/\/clarity.ms https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com data:; img-src 'self' data: https:; media-src 'self' https:; connect-src 'self' https:\/\/tag.wimpole.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.google-analytics.com https:\/\/googleads.g.doubleclick.net https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/clarity.ms https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com; frame-src 'self' https:\/\/www.google.com https:\/\/maps.google.com https:\/\/trustpilot.com https:\/\/widget.trustpilot.com https:\/\/tag.wimpole.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.facebook.com https:\/\/consentcdn.cookiebot.com; object-src 'none'","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; report-uri \/csp-report;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.punchout2go.com 'self' data: https:\/\/*.olark.com https:\/\/fonts.gstatic.com data: *.fontawesome.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.punchout2go.com 'self' data: https:\/\/testsecureacceptance.cybersource.com https:\/\/secureacceptance.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors *.punchout2go.com 'self' data: https:\/\/spsco.alpine-integration-rffjevy-cdfc3vwc43inw.us-5.magentosite.cloud https:\/\/cw.alpine-integration-rffjevy-cdfc3vwc43inw.us-5.magentosite.cloud https:\/\/surefit.alpine-integration-rffjevy-cdfc3vwc43inw.us-5.magentosite.cloud https:\/\/hc.alpine-integration-rffjevy-cdfc3vwc43inw.us-5.magentosite.cloud https:\/\/stagingm2.spsco.com https:\/\/stagingm2.empowersupply.com https:\/\/stagingm2.surefitlab.com https:\/\/stagingm2.spshangerstore.com https:\/\/productionm2.spsco.com https:\/\/productionm2.empowersupply.com https:\/\/productionm2.surefitlab.com https:\/\/productionm2.spshangerstore.com https:\/\/www.spsco.com\/ https:\/\/www.empowersupply.com https:\/\/www.surefitlab.com https:\/\/www.spshangerstore.com https:\/\/www.youtube.com https:\/\/www.google.com\/maps https:\/\/www.google.com\/ https:\/\/insight.adsrvr.org\/ https:\/\/analytics.google.com https:\/\/vimeo.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.online-metrix.net *.punchout2go.com https:\/\/static.olark.com https:\/\/testsecureacceptance.cybersource.com https:\/\/secureacceptance.cybersource.com https:\/\/*.spsco.com https:\/\/*.punchout2go.com testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com https:\/\/songbird.cardinalcommerce.com https:\/\/centinelapi.cardinalcommerce.com https:\/\/*.cardinalcommerce.com https:\/\/*.centinelapi.cardinalcommerce.com https:\/\/insight.adsrvr.org\/ https:\/\/analytics.google.com https:\/\/vimeo.com https:\/\/www.googletagmanager.com\/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.punchout2go.com https:\/\/log.olark.com https:\/\/www.google.com https:\/\/stats.g.doubleclick.net https:\/\/*.hellobar.com https:\/\/*.magentocommerce.com https:\/\/*.paypal.com https:\/\/*.vimeocdn.com https:\/\/*.ytimg.com https:\/\/*.linkedin.com https:\/\/*.facebook.com https:\/\/*.hsforms.com https:\/\/*.clarity.ms https:\/\/*.hubspot.com https:\/\/*.bing.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com www.gstatic.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https:\/\/vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page *.online-metrix.net *.punchout2go.com https:\/\/h.online-metrix.net http:\/\/*.olark.com https:\/\/cdnjs.cloudflare.com https:\/\/*.hellobar.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com https:\/\/www.googleadservices.com https:\/\/www.google-analytics.com https:\/\/*.hsforms.net https:\/\/*.hsforms.com https:\/\/js-agent.newrelic.com https:\/\/bam.nr-data.net https:\/\/*.cybersource.com https:\/\/connect.punchout2go.com https:\/\/js.hs-scripts.com https:\/\/*.facebook.net https:\/\/*.facebook.com https:\/\/*.paypal.com https:\/\/*.paypalobjects.com https:\/\/*.braintreegateway.com https:\/\/*.licdn.com https:\/\/*.cardinalcommerce.com https:\/\/*.ccdc02.com https:\/\/*.authorize.net https:\/\/*.signifyd.com https:\/\/*.hs-banner.com https:\/\/*.hs-analytics.com https:\/\/*.hs-analytics.net https:\/\/*.hscollectedforms.com https:\/\/*.hscollectedforms.net https:\/\/www.vimeo.com https:\/\/*.clarity.ms testflex.cybersource.com flex.cybersource.com player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https:\/\/cdn1.ebizcharge.net https:\/\/songbird.cardinalcommerce.com https:\/\/centinelapi.cardinalcommerce.com https:\/\/insight.adsrvr.org\/ https:\/\/dpm.demdex.net https:\/\/amcglobal.sc.omtrdc.net https:\/\/geostag.cardinalcommerce.com https:\/\/geo.cardinalcommerce.com https:\/\/centinelapistag.cardinalcommerce.com https:\/\/analytics.google.com https:\/\/form.jotform.com\/ https:\/\/cdn.jotfor.ms\/ https:\/\/customfaborders.jotform.com\/ https:\/\/surestepdev.wpenginepowered.com\/ https:\/\/surestep.net\/ http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.punchout2go.com https:\/\/static.olark.com https:\/\/fonts.googleapis.com https:\/\/connect.punchout2go.com *.fontawesome.com assets.braintreegateway.com https:\/\/surestepdev.wpenginepowered.com\/ https:\/\/use.typekit.net\/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https:\/\/static.olark.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net https:\/\/vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com *.magento-datasolutions.com *.magento-ds.com *.punchout2go.com https:\/\/*.olark.com https:\/\/forms.hsforms.com https:\/\/testsecureacceptance.cybersource.com https:\/\/secureacceptance.cybersource.com https:\/\/bam.nr-data.net https:\/\/www.google-analyitics.com https:\/\/stats.g.doubleclick.net https:\/\/*.hubspot.com https:\/\/pro.ip-api.com https:\/\/*.cardinalcommerce.com https:\/\/*.google.com https:\/\/*.clarity.ms https:\/\/*.hscollectedforms.net https:\/\/*.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com 3dsapi.ebizcharge.net kg668dbov0.execute-api.us-east-1.amazonaws.com ebizcharge3ds-staging1.azurewebsites.net *.ebizcharge.net https:\/\/songbird.cardinalcommerce.com https:\/\/centinelapi.cardinalcommerce.com https:\/\/cdnjs.cloudflare.com https:\/\/insight.adsrvr.org\/ https:\/\/dpm.demdex.net https:\/\/amcglobal.sc.omtrdc.net https:\/\/geostag.cardinalcommerce.com https:\/\/geo.cardinalcommerce.com https:\/\/centinelapistag.cardinalcommerce.com https:\/\/analytics.google.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri https:\/\/*.clarity.ms https:\/\/*.google-analytics.com 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' https:\/\/pagead2.googlesyndication.com https:\/\/tpc.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/fundingchoicesmessages.google.com https:\/\/*.adtrafficquality.google 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.jsdelivr.net https:\/\/webr.r-wasm.org https:\/\/repo.r-wasm.org https:\/\/cdn.plot.ly https:\/\/analytics.datanovia.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: https:; connect-src 'self' https:\/\/pagead2.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/*.g.doubleclick.net https:\/\/www.google.com https:\/\/fundingchoicesmessages.google.com https:\/\/*.adtrafficquality.google https:\/\/csi.gstatic.com https:\/\/cdn.jsdelivr.net https:\/\/webr.r-wasm.org https:\/\/repo.r-wasm.org https:\/\/docs.r-wasm.org https:\/\/analytics.datanovia.com; worker-src 'self' blob:; frame-src 'self' https:\/\/googleads.g.doubleclick.net https:\/\/tpc.googlesyndication.com https:\/\/www.google.com https:\/\/pagead2.googlesyndication.com https:\/\/fundingchoicesmessages.google.com https:\/\/*.adtrafficquality.google","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.tailwindcss.com https:\/\/www.googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/js.stripe.com https:\/\/accounts.google.com https:\/\/cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https:\/\/cdn.tailwindcss.com https:\/\/fonts.googleapis.com https:\/\/cdn.jsdelivr.net; img-src 'self' data: https: blob:; font-src 'self' https:\/\/fonts.gstatic.com https:\/\/cdn.jsdelivr.net; connect-src 'self' https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/api.stripe.com https:\/\/accounts.google.com https:\/\/api.deepseek.com; frame-src https:\/\/js.stripe.com https:\/\/accounts.google.com https:\/\/www.youtube.com https:\/\/iframe.mediadelivery.net https:\/\/www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/accounts.google.com;","count":2},{"content-security-policy-report-only":" style-src 'self' admin.littleboxoffice.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com\/tr\/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com\/ajax\/libs\/flag-icon-css\/3.1.0\/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com\/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net\/kp\/lib\/v1\/api.js *.affirm.com\/js\/v2\/affirm.js *.payments-amazon.com\/checkout.js *.oney.io\/build\/loader.min.js *.afterpay.com\/afterpay.js *.mastercard.com d.ratepay.com\/*\/di.js d3rpjm0wf8u2co.cloudfront.net\/static\/rkfl.js d35p4vvdul393k.cloudfront.net\/sdk_library\/us\/stg\/ops\/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net\/sdk_library\/us\/prd\/ops\/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com\/checkout.min.js yookassa.ru\/checkout-widget\/v1\/checkout-widget.js applepay.cdn-apple.com\/jsapi\/v1.1.0\/apple-pay-sdk.js cdn10.ebuckler.com\/ebuckler.widget.js stats.ebuckler.com\/js\/ebuckler.widget.js *.masterpass.com\/lightbox\/Switch\/integration\/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com\/cardinalcruise\/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss:\/\/*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk\/ads www.google.hu\/ads www.google.rs\/ads www.google.ru\/ads www.google.mx\/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com 'unsafe-inline';frame-src 'self' admin.littleboxoffice.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com\/tr\/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com\/ajax\/libs\/flag-icon-css\/3.1.0\/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com\/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net\/kp\/lib\/v1\/api.js *.affirm.com\/js\/v2\/affirm.js *.payments-amazon.com\/checkout.js *.oney.io\/build\/loader.min.js *.afterpay.com\/afterpay.js *.mastercard.com d.ratepay.com\/*\/di.js d3rpjm0wf8u2co.cloudfront.net\/static\/rkfl.js d35p4vvdul393k.cloudfront.net\/sdk_library\/us\/stg\/ops\/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net\/sdk_library\/us\/prd\/ops\/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com\/checkout.min.js yookassa.ru\/checkout-widget\/v1\/checkout-widget.js applepay.cdn-apple.com\/jsapi\/v1.1.0\/apple-pay-sdk.js cdn10.ebuckler.com\/ebuckler.widget.js stats.ebuckler.com\/js\/ebuckler.widget.js *.masterpass.com\/lightbox\/Switch\/integration\/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com\/cardinalcruise\/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss:\/\/*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk\/ads www.google.hu\/ads www.google.rs\/ads www.google.ru\/ads www.google.mx\/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' admin.littleboxoffice.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com\/tr\/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com\/ajax\/libs\/flag-icon-css\/3.1.0\/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com\/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net\/kp\/lib\/v1\/api.js *.affirm.com\/js\/v2\/affirm.js *.payments-amazon.com\/checkout.js *.oney.io\/build\/loader.min.js *.afterpay.com\/afterpay.js *.mastercard.com d.ratepay.com\/*\/di.js d3rpjm0wf8u2co.cloudfront.net\/static\/rkfl.js d35p4vvdul393k.cloudfront.net\/sdk_library\/us\/stg\/ops\/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net\/sdk_library\/us\/prd\/ops\/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com\/checkout.min.js yookassa.ru\/checkout-widget\/v1\/checkout-widget.js applepay.cdn-apple.com\/jsapi\/v1.1.0\/apple-pay-sdk.js cdn10.ebuckler.com\/ebuckler.widget.js stats.ebuckler.com\/js\/ebuckler.widget.js *.masterpass.com\/lightbox\/Switch\/integration\/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com\/cardinalcruise\/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss:\/\/*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk\/ads www.google.hu\/ads www.google.rs\/ads www.google.ru\/ads www.google.mx\/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' admin.littleboxoffice.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com\/tr\/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com\/ajax\/libs\/flag-icon-css\/3.1.0\/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com\/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net\/kp\/lib\/v1\/api.js *.affirm.com\/js\/v2\/affirm.js *.payments-amazon.com\/checkout.js *.oney.io\/build\/loader.min.js *.afterpay.com\/afterpay.js *.mastercard.com d.ratepay.com\/*\/di.js d3rpjm0wf8u2co.cloudfront.net\/static\/rkfl.js d35p4vvdul393k.cloudfront.net\/sdk_library\/us\/stg\/ops\/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net\/sdk_library\/us\/prd\/ops\/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com\/checkout.min.js yookassa.ru\/checkout-widget\/v1\/checkout-widget.js applepay.cdn-apple.com\/jsapi\/v1.1.0\/apple-pay-sdk.js cdn10.ebuckler.com\/ebuckler.widget.js stats.ebuckler.com\/js\/ebuckler.widget.js *.masterpass.com\/lightbox\/Switch\/integration\/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com\/cardinalcruise\/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss:\/\/*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk\/ads www.google.hu\/ads www.google.rs\/ads www.google.ru\/ads www.google.mx\/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;worker-src 'self' blob: admin.littleboxoffice.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com\/tr\/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com\/ajax\/libs\/flag-icon-css\/3.1.0\/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com\/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net\/kp\/lib\/v1\/api.js *.affirm.com\/js\/v2\/affirm.js *.payments-amazon.com\/checkout.js *.oney.io\/build\/loader.min.js *.afterpay.com\/afterpay.js *.mastercard.com d.ratepay.com\/*\/di.js d3rpjm0wf8u2co.cloudfront.net\/static\/rkfl.js d35p4vvdul393k.cloudfront.net\/sdk_library\/us\/stg\/ops\/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net\/sdk_library\/us\/prd\/ops\/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com\/checkout.min.js yookassa.ru\/checkout-widget\/v1\/checkout-widget.js applepay.cdn-apple.com\/jsapi\/v1.1.0\/apple-pay-sdk.js cdn10.ebuckler.com\/ebuckler.widget.js stats.ebuckler.com\/js\/ebuckler.widget.js *.masterpass.com\/lightbox\/Switch\/integration\/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com\/cardinalcruise\/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss:\/\/*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk\/ads www.google.hu\/ads www.google.rs\/ads www.google.ru\/ads www.google.mx\/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;connect-src 'self' admin.littleboxoffice.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com\/tr\/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com\/ajax\/libs\/flag-icon-css\/3.1.0\/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com\/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net\/kp\/lib\/v1\/api.js *.affirm.com\/js\/v2\/affirm.js *.payments-amazon.com\/checkout.js *.oney.io\/build\/loader.min.js *.afterpay.com\/afterpay.js *.mastercard.com d.ratepay.com\/*\/di.js d3rpjm0wf8u2co.cloudfront.net\/static\/rkfl.js d35p4vvdul393k.cloudfront.net\/sdk_library\/us\/stg\/ops\/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net\/sdk_library\/us\/prd\/ops\/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com\/checkout.min.js yookassa.ru\/checkout-widget\/v1\/checkout-widget.js applepay.cdn-apple.com\/jsapi\/v1.1.0\/apple-pay-sdk.js cdn10.ebuckler.com\/ebuckler.widget.js stats.ebuckler.com\/js\/ebuckler.widget.js *.masterpass.com\/lightbox\/Switch\/integration\/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com\/cardinalcruise\/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss:\/\/*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk\/ads www.google.hu\/ads www.google.rs\/ads www.google.ru\/ads www.google.mx\/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;object-src 'self' admin.littleboxoffice.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com\/tr\/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com\/ajax\/libs\/flag-icon-css\/3.1.0\/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com\/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net\/kp\/lib\/v1\/api.js *.affirm.com\/js\/v2\/affirm.js *.payments-amazon.com\/checkout.js *.oney.io\/build\/loader.min.js *.afterpay.com\/afterpay.js *.mastercard.com d.ratepay.com\/*\/di.js d3rpjm0wf8u2co.cloudfront.net\/static\/rkfl.js d35p4vvdul393k.cloudfront.net\/sdk_library\/us\/stg\/ops\/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net\/sdk_library\/us\/prd\/ops\/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com\/checkout.min.js yookassa.ru\/checkout-widget\/v1\/checkout-widget.js applepay.cdn-apple.com\/jsapi\/v1.1.0\/apple-pay-sdk.js cdn10.ebuckler.com\/ebuckler.widget.js stats.ebuckler.com\/js\/ebuckler.widget.js *.masterpass.com\/lightbox\/Switch\/integration\/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com\/cardinalcruise\/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss:\/\/*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk\/ads www.google.hu\/ads www.google.rs\/ads www.google.ru\/ads www.google.mx\/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;manifest-src 'self' admin.littleboxoffice.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com\/tr\/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com\/ajax\/libs\/flag-icon-css\/3.1.0\/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com\/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net\/kp\/lib\/v1\/api.js *.affirm.com\/js\/v2\/affirm.js *.payments-amazon.com\/checkout.js *.oney.io\/build\/loader.min.js *.afterpay.com\/afterpay.js *.mastercard.com d.ratepay.com\/*\/di.js d3rpjm0wf8u2co.cloudfront.net\/static\/rkfl.js d35p4vvdul393k.cloudfront.net\/sdk_library\/us\/stg\/ops\/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net\/sdk_library\/us\/prd\/ops\/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com\/checkout.min.js yookassa.ru\/checkout-widget\/v1\/checkout-widget.js applepay.cdn-apple.com\/jsapi\/v1.1.0\/apple-pay-sdk.js cdn10.ebuckler.com\/ebuckler.widget.js stats.ebuckler.com\/js\/ebuckler.widget.js *.masterpass.com\/lightbox\/Switch\/integration\/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com\/cardinalcruise\/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss:\/\/*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk\/ads www.google.hu\/ads www.google.rs\/ads www.google.ru\/ads www.google.mx\/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;default-src * data: blob: 'unsafe-eval' 'unsafe-inline';report-uri https:\/\/nuwebgroup.report-uri.com\/r\/d\/csp\/reportOnly;","count":2},{"content-security-policy-report-only":" font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com *.cloudflare.com *.cloudfront.net *.bootstrapcdn.com *.werksraeder24.de 'self' 'unsafe-inline'; form-action www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.apptrian.com facebook.com connect.facebook.net *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.werksraeder24.de *.werksraeder24.com *.originelevelgen24.nl 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.sandbox.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com connect.facebook.net https:\/\/www.googletagmanager.com\/ secure.novalnet.de customers.barzahlen.de customers-sandbox.barzahlen.de *.weltpixel.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.facebook.com optimize.google.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com *.ftcdn.net *.behance.net fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.apptrian.com facebook.com connect.facebook.net https:\/\/images.unsplash.com http:\/\/www.googleadservices.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google.com\/ magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com *.paypal.com tile.openstreetmap.org a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.trustedshops.com *.cloudflare.com *.cloudfront.net *.facebook.com *.google.de *.werksraeder24.de *.bing.com *.clarity.ms *.doubleclick.net *.billiger.de *.ytimage.com *.googleoptimize.com *.google-analytics.com *.googletagmanager.com optimize.google.com *.paypalobjects.com 'self' 'unsafe-inline'; script-src www.googleadservices.com googleads.g.doubleclick.net analytics.google.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com s.ytimg.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.googleapis.com *.gstatic.com https:\/\/cdn.jsdelivr.net\/npm\/@ryangjchandler\/spruce@2.x.x\/dist\/spruce.umd.js www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com widget.freshworks.com m2epro.freshdesk.com https:\/\/player.vimeo.com cdn.novalnet.de cdn.barzahlen.de js.braintreegateway.com assets.braintreegateway.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com unpkg.com *.cloudflare.com *.cloudfront.net *.fontawesome.com *.userlike.com *.amazonaws.com *.trustedshops.com *.facebook.net *.facebook.com *.werksraeder24.de *.bing.com *.clarity.ms *.googleoptimize.com optimize.google.com *.googleanalytics.com *.google-analytics.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com unsafe-inline assets.braintreegateway.com unpkg.com *.cloudflare.com *.cloudfront.net *.bootstrapcdn.com *.trustedshops.com *.werksraeder24.de *.googleoptimize.com optimize.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com maps.gstatic.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com facebook.com connect.facebook.net widget.freshworks.com m2epro.freshdesk.com https:\/\/player.vimeo.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com nominatim.openstreetmap.org *.cloudflare.com *.cloudfront.net *.facebook.com *.amazonaws.com *.werksraeder24.de *.googlesyndication.com *.doubleclick.net *.bing.com *.clarity.ms *.trustedshops.com *.etrusted.com *.trustbadge.com *.google-analytics.com *.googleoptimize.com *.googletagmanager.com 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src *.gstatic.com data: https:\/\/cdnjs.cloudflare.com https:\/\/use.typekit.net data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com www.google.com secure-gateway.hipay-tpp.com *.hipay.com https:\/\/www.googletagmanager.com\/ js.mollie.com *.pilotpen.fr 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com *.gstatic.com *.googleapis.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ magefan.com cm.magefan.com https:\/\/www.mollie.com https:\/\/www.google.fr https:\/\/api.mapbox.com *.tile.openstreetmap.org https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/mcstaging.pilotpen-pro.eu\/pim-pilot-dev\/ https:\/\/pilotpen-pro.eu\/pim-pilot-prod\/ https:\/\/i3.ytimg.com\/vi\/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/rum.hlx.page *.googleapis.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ secure-gateway.hipay-tpp.com *.hipay.com mpsnare.iesnare.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ js.mollie.com https:\/\/widgets.rr.skeepers.io\/ https:\/\/api-product-reviews.rr.skeepers.io\/ https:\/\/cl-ppr.rr.skeepers.io\/ https:\/\/cdnjs.cloudflare.com https:\/\/maps.googleapis.com https:\/\/widgets.rr.skeepers.io\/generated\/ *.pilotpen.fr 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.hipay.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/use.typekit.net https:\/\/p.typekit.net *.pilotpen.fr 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: mpsnare.iesnare.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.hipay.com wss:\/\/mpsnare.iesnare.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ https:\/\/widgets.rr.skeepers.io\/ https:\/\/api-product-reviews.rr.skeepers.io\/ https:\/\/cl-ppr.rr.skeepers.io\/ https:\/\/nominatim.openstreetmap.org *.pilotpen.fr 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" base-uri 'none'; frame-ancestors 'self'; img-src data: 'self' https:\/\/www.google-analytics.com https:\/\/cdn.rgfstaffing.be https:\/\/i.ytimg.com https:\/\/maps.googleapis.com https:\/\/vumbnail.com https:\/\/maps.gstatic.com https:\/\/img.youtube.com https:\/\/www.google.be https:\/\/cdn.startpeople.be; object-src 'none'; script-src 'unsafe-eval' 'unsafe-inline' 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/use.fontawesome.coms https:\/\/code.jquery.com https:\/\/cdn.jsdelivr.net https:\/\/consentcdn.cookiebot.com https:\/\/*.google-analytics.com https:\/\/cdn.startpeople.be https:\/\/kit.fontawesome.com https:\/\/maps.googleapis.com https:\/\/js.monitor.azure.com https:\/\/www.googletagmanager.com https:\/\/consent.cookiebot.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdn.jsdelivr.net; report-to csp-endpoint; report-uri https:\/\/csp-dxp.rgfstaffing.be\/csp","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.lynka24.local  www.googletagmanager.com *.demdex.net *.google-analytics.com 'self' 'unsafe-inline'; img-src data: *.adobedtm.com *.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleusercontent.com www.apptrian.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' blob: self *.abbc.pl *.lynka.eu https:\/\/ssl.dotpay.pl *.braintreegateway.com *.demdex.net *.behance.pl *.ftcdn.eu *.vimeocdn.net *.aptrinsic.com storage.googleapis.com https:\/\/secure.adnxs.com https:\/\/pixel-geo.prfct.co https:\/\/www.google.pl lynka.eu img.youtube.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com apis.google.com www.apptrian.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com https:\/\/pixel-geo.prfct.co https:\/\/tag.perfectaudience.com https:\/\/koi-3scsh62opg.marketingautomation.services https:\/\/js-agent.newrelic.com https:\/\/www.youtube.com *.usercentrics.eu 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net *.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com *.doubleclick.net *.googlesyndication.com https:\/\/www.merchant-center-analytics.goog https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.lynka24.local *.abbc.pl *.lynka.eu *.demdex.net https:\/\/ssl.dotpay.pl https:\/\/stats.g.doubleclick.net https:\/\/www.google.pl *.usercentrics.eu 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https:\/\/media.flixcar.com\/ *.fontawesome.com use.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com *.googlesyndication.com *.tiktok.com https:\/\/form.payway.com.hr https:\/\/formtest.payway.com.hr https:\/\/ipgtest.monri.com\/ https:\/\/ipg.monri.com\/ https:\/\/formtest.wspay.biz\/ https:\/\/form.wspay.biz\/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.googletagmanager.com https:\/\/ipgtest.monri.com\/ https:\/\/ipg.monri.com\/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com rt.flix360.com https:\/\/media.flixfacts.com\/ https:\/\/media.flixcar.com\/ *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https:\/\/cdn.jsdelivr.net *.tiktok.com https:\/\/media.flixfacts.com\/ https:\/\/media.flixcar.com\/ https:\/\/ipgtest.monri.com\/ https:\/\/ipg.monri.com\/ *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https:\/\/media.flixfacts.com\/ https:\/\/media.flixcar.com\/ *.fontawesome.com use.typekit.net p.typekit.net https:\/\/ipgtest.monri.com\/ https:\/\/ipg.monri.com\/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/bdd58c77-9f9d-4fa2-9dac-b18e4360bf84.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" https:\/\/www.calyxsoftware.com;static.hsappstatic.net, *.hubspotusercontent-*.net, *.hubspot.net, *.hs-scripts.com","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors https:\/\/api.clerk.io https:\/\/cdn.clerk.io *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com *.youtube-nocookie.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/cdn.clerk.io magefan.com cm.magefan.com *.disqus.com https:\/\/img.youtube.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/api.clerk.io https:\/\/cdn.clerk.io *.disqus.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https:\/\/api.clerk.io https:\/\/cdn.clerk.io *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com places.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https:\/\/pay.google.com 'self'; frame-src https:\/\/www.google.com\/recaptcha\/ *.multisafepay.com https:\/\/pay.google.com js.mollie.com 'self' 'unsafe-inline'; img-src data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypalobjects.com *.multisafepay.com https:\/\/www.mollie.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypalobjects.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.multisafepay.com https:\/\/pay.google.com js.mollie.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.multisafepay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.paypalobjects.com *.multisafepay.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/monitor.bigbridgedev.nl\/csp; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" font-src *.googleapis.com *.gstatic.com data: maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cenpos.net *.cenpos.com *.google.com *.gstatic.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.google.com *.cenpos.net *.cenpos.com *.google.com *.gstatic.com *.cardinalcommerce.com *.google.com\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.facebook.com *.cenpos.net *.cenpos.com https:\/\/www.magezon.com *.hubspot.com *.hsforms.com *.linkedin.com *.adsymptotic.com *.otcindustrial.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.hsforms.net 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/rum.hlx.page *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ ws.zoominfo.com secure.venture-365-inspired.com js.hubspot.com cdn.callrail.com js.usemessages.com *.cenpos.com *.cenpos.net *.google.com *.cardinalcommerce.com *.termly.io *.fullstory.com *.licdn.com *.doubleclick.net *.listenlayer.com *.hs-scripts.com *.hscollectedforms.net *.hs-analytics.net *.hsadspixel.net *.hs-banner.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com ws.zoominfo.com idx.liadm.com px.ads.linkedin.com forms.hscollectedforms.net static.listenlayer.com pagead2.googlesyndication.com googleads.g.doubleclick.net js.hs-banner.com *.fullstory.com *.termly.io *.linkedin.oribi.io *.analytics.google.com *.hubspot.com *.hubapi.com *.google-analytics.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/pagead2.googlesyndication.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/accounts.google.com https:\/\/appleid.cdn-apple.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/*.googleapis.com https:\/\/accounts.google.com; frame-src 'self' https:\/\/googleads.g.doubleclick.net https:\/\/*.google.com https:\/\/accounts.google.com https:\/\/appleid.apple.com; media-src 'self' blob:; worker-src 'self' blob:; manifest-src 'self'; report-uri \/csp-report.php","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.googleadservices.com www.googleadservices.com googleads.g.doubleclick.net www.google.com www.gstatic.com *.googlesyndication.com script.crazyegg.com *.ortto.app *.ap3api.com cdn3l.ink *.ksrndkehqnwntyxlhgto.com t.sprintlaw.com.au t.sprintlaw.co.uk connect.facebook.net *.clarity.ms *.bing.com bat.bing.com challenges.cloudflare.com *.sentry-cdn.com browser.sentry-cdn.com *.clickcease.com www.clickcease.com monitor.clickcease.com sprintlaw-visitor-intel.vercel.app; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.googleadservices.com www.googleadservices.com googleads.g.doubleclick.net *.doubleclick.net www.google.com www.gstatic.com *.ortto.app *.ap3api.com *.clarity.ms *.bing.com bat.bing.com connect.facebook.net *.facebook.com *.ksrndkehqnwntyxlhgto.com *.crazyegg.com *.sprintlaw.com.au *.sprintlaw.co.uk *.sprintlaw.co.nz t.sprintlaw.co.uk t.sprintlaw.com.au challenges.cloudflare.com *.sentry.io *.ingest.us.sentry.io *.clickcease.com www.clickcease.com monitor.clickcease.com sprintlaw-visitor-intel.vercel.app; frame-src 'self' *.googletagmanager.com *.youtube.com *.youtu.be calendly.com *.calendly.com challenges.cloudflare.com t.sprintlaw.co.uk t.sprintlaw.com.au www.google.com; media-src 'self' https:","count":2},{"content-security-policy-report-only":" font-src *.fontawesome.com *.gstatic.com 'self' data: fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ js.mollie.com *.sendcloud.sc *.jsdelivr.net *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io imgsct.cookiebot.com cdn.doofinder.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/www.mollie.com *.amazonaws.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ consent.cookiebot.com cdn.doofinder.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ js.mollie.com *.sendcloud.sc *.jsdelivr.net *.google.com *.gstatic.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.doofinder.com https:\/\/static.klaviyo.com *.fontawesome.com *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com *.trustpilot.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.doofinder.com wss:\/\/*.doofinder.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/b25b1a97-b6d7-4c87-8caa-dc0dffc12d8e.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.bootstrapcdn.com *.googleapis.com data: *.formstack.com hscoilusa.com *.hscoilusa.com stackpathcdn.com *.stackpathcdn.com geniustoolsusa.com *.geniustoolsusa.com duratiredirect.com *.duratiredirect.com otrprodirect.com *.otrprodirect.com modinjapan.com *.modinjapan.com cdn-btsg.com *.cdn-btsg.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https:\/\/punchoutcommerce.com\/ https:\/\/cat-test.coupahost.com\/ https:\/\/nextgen.coupahost.com\/ 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.affirm.com *.affirm.ca *.certcapture.com *.formstack.com *.paypalobjects.com paypalobjects.com *.payfabric.com *.kaptcha.com kaptcha.com *.geniustoolsusa.com *.modinjapan.com affirm.com hscoilusa.com *.hscoilusa.com stackpathcdn.com *.stackpathcdn.com geniustoolsusa.com duratiredirect.com *.duratiredirect.com otrprodirect.com *.otrprodirect.com modinjapan.com cdn-btsg.com *.cdn-btsg.com trustpilot.com *.trustpilot.com signifyd.com *.signifyd.com facebook.com *.facebook.com https:\/\/www.googletagmanager.com\/ https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.affirm.com *.affirm.ca *.certcapture.com *.cloudflare.com *.google.com *.elfsightcdn.com *.facebook.com facebook.com *.geniustoolsusa.com gstatic.com *.googleapis.com googleapis.com paypal.com affirm.com hscoilusa.com *.hscoilusa.com stackpathcdn.com *.stackpathcdn.com geniustoolsusa.com duratiredirect.com *.duratiredirect.com otrprodirect.com *.otrprodirect.com modinjapan.com *.modinjapan.com cdn-btsg.com *.cdn-btsg.com userway.org *.userway.org cloudfront.org *.cloudfront.org https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ magefan.com cm.magefan.com *.disqus.com https:\/\/img.youtube.com maps.gstatic.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net data: 'self' 'unsafe-inline'; script-src adobedtm.org *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.affirm.com *.affirm.ca *.certcapture.com *.cloudflare.com *.twitter.com *.fontawesome.com unpkg.com *.trustpilot.com *.elfsight.com *.gstatic.com gstatic.com *.googleapis.com googleapis.com *.facebook.net facebook.net *.payfabric.com *.jsdelivr.net *.formstack.com ipinfo.io affirm.com stackpathcdn.com *.stackpathcdn.com geniustoolsusa.com *.geniustoolsusa.com duratiredirect.com *.duratiredirect.com otrprodirect.com *.otrprodirect.com modinjapan.com *.modinjapan.com hscoilusa.com *.hscoilusa.com cdn-btsg.com *.cdn-btsg.com userway.org *.userway.org *.adobedtm.org cloudflareinsights.com *.cloudflareinsights.com widget.freshworks.com m2epro.freshdesk.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ *.disqus.com maps.googleapis.com https:\/\/cdn-scripts.signifyd.com https:\/\/cdn-scripts.signifyd.com\/api\/script-tag.js https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com unpkg.com *.googleapis.com data: *.jsdelivr.net *.formstack.com hscoilusa.com *.hscoilusa.com stackpathcdn.com *.stackpathcdn.com geniustoolsusa.com *.geniustoolsusa.com duratiredirect.com *.duratiredirect.com otrprodirect.com *.otrprodirect.com modinjapan.com *.modinjapan.com cdn-btsg.com *.cdn-btsg.com userway.org *.userway.org widget.freshworks.com m2epro.freshdesk.com https:\/\/static.klaviyo.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.affirm.com *.affirm.ca *.certcapture.com *.cloudflare.com *.elfsight.com *.doubleclick.net *.payfabric.com googleapis.com *.googleapis.com affirm.com hscoilusa.com *.hscoilusa.com stackpathcdn.com *.stackpathcdn.com geniustoolsusa.com *.geniustoolsusa.com duratiredirect.com *.duratiredirect.com otrprodirect.com *.otrprodirect.com modinjapan.com *.modinjapan.com cdn-btsg.com *.cdn-btsg.com userway.org *.userway.org widget.freshworks.com m2epro.freshdesk.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ maps.googleapis.com places.googleapis.com https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com cash-f.squarecdn.com fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: maxcdn.bootstrapcdn.com *.cloudflare.com *.cdnfonts.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https:\/\/www.youtube.com\/ *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/ * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com https:\/\/www.googletagmanager.com\/ https:\/\/googleads.g.doubleclick.net https:\/\/bid.g.doubleclick.net https:\/\/td.doubleclick.net\/ https:\/\/www.google.com.ua\/ https:\/\/www.google.bg\/ https:\/\/ct.pinterest.com\/ https:\/\/*.jam.dev 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/d1pna5l3xsntoj.cloudfront.net https:\/\/helloretailcdn.com https:\/\/banners.helloretailcdn.com * maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/images.unsplash.com imgsct.cookiebot.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ magefan.com cm.magefan.com *.disqus.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.cookiebot.com *.bing.com https:\/\/www.google.com.ua\/ https:\/\/www.google.bg\/ https:\/\/www.google.dk\/ *.clarity.ms https:\/\/googleads.g.doubleclick.net *.googleadservices.com https:\/\/bid.g.doubleclick.net *.klarnacdn.net *.pinterest.com\/ *.cloudinary.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/app.usercentrics.eu\/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/core.helloretail.com https:\/\/d1pna5l3xsntoj.cloudfront.net https:\/\/helloretailcdn.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ consent.cookiebot.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ *.disqus.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/cdn.jsdelivr.net *.pinterest.com *.cookiebot.com *.cookieinformation.com *.heylink.com *.hotjar.com gtm.adt313.net *.bing.com https:\/\/static.cloudflareinsights.com\/ bam.eu01.nr-data.net https:\/\/www.google.com https:\/\/googleads.g.doubleclick.net https:\/\/www.google.com.ua\/ https:\/\/www.google.bg\/ *.clarity.ms *.klarnacdn.net https:\/\/s.pinimg.com https:\/\/apis.google.com\/ https:\/\/cdn.matomo.cloud\/ https:\/\/widgets.trustedshops.com\/ *.usercentrics.eu\/ *.userlink.ai https:\/\/*.jam.dev 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https:\/\/d1pna5l3xsntoj.cloudfront.net https:\/\/helloretailcdn.com *.cash.app fonts.googleapis.com maxcdn.bootstrapcdn.com https:\/\/static.klaviyo.com https:\/\/cdn.jsdelivr.net *.cloudflare.com *.googleapis.com *.cdnfonts.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/core.helloretail.com https:\/\/helloretailcdn.com * maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ places.googleapis.com *.cookiebot.com bam.eu01.nr-data.net *.clarity.ms eu.playground.klarnaevt.com *.adt611.com *.pinterest.com\/ https:\/\/www.google.com https:\/\/googleads.g.doubleclick.net https:\/\/bat.bing.com\/ *.analytics.google.com\/ https:\/\/api.usercentrics.eu\/ https:\/\/pagead2.googlesyndication.com\/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net cash-f.squarecdn.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com *.cloudflare.com *.klarnacdn.net s3.amazonaws.com *.slant.co data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net * *.googleapis.com *.gstatic.com magefan.com cm.magefan.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https:\/\/rum.hlx.page *.googleapis.com *.gstatic.com player.vimeo.com *.cloudflare.com d1ekgxxzy7ounl.cloudfront.net d26u8mjnuxived.cloudfront.net *.facebook.net *.googletagmanager.com *.improove.io *.klarna.com rum.hlx.page 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.cash.app maxcdn.bootstrapcdn.com *.googletagmanager.com *.klarnacdn.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com * *.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/e77ecc29-42f6-4ccb-b6de-661ba8ba453e.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: fonts.googleapis.com *.stape.io *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.magerocket.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.magerocket.com *.gocuotas.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.magerocket.com *.gocuotas.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io https:\/\/firebasestorage.googleapis.com https:\/\/www.magezon.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com flagpedia.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.magerocket.com *.gocuotas.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.doubleclick.net *.stape.io *.avada.io *.shopify.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maps.googleapis.com www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com https:\/\/fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com *.gstatic.com www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.magerocket.com *.gocuotas.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com https:\/\/www.merchant-center-analytics.goog *.stape.io https:\/\/get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.gstatic.com maps.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/def9d71d-669f-4322-8f25-4ef099a2d33a.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" font-src cdn.rawgit.com cdn.jsdelivr.net fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.facebook.com *.sagepay.com 'self' 'unsafe-inline'; frame-ancestors https:\/\/api.clerk.io https:\/\/cdn.clerk.io 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.facebook.com *.sagepay.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https:\/\/cdn.clerk.io hmg-attachments.s3-eu-west-1.amazonaws.com maps.gstatic.com maps.googleapis.com ssl.google-analytics.com www.facebook.com cookie-cdn.cookiepro.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com https:\/\/rum.hlx.page https:\/\/api.clerk.io https:\/\/cdn.clerk.io api-js.mixpanel.com bam.nr-data.net maps.googleapis.com ssl.google-analytics.com cdn.pubble.io cookie-cdn.cookiepro.com connect.facebook.net *.elavon.com *.sagepay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https:\/\/api.clerk.io https:\/\/cdn.clerk.io cdn.pubble.io cdn.rawgit.com cdn.jsdelivr.net fonts.googleapis.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com maps.googleapis.com *.google-analytics.com stats.g.doubleclick.net www.pubble.io cookie-cdn.cookiepro.com cookiepro.blob.core.windows.net *.elavon.com *.sagepay.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" script-src, object-src, base-uri, frame-src","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.50-ml.media https:\/\/fonts.gstatic.com https:\/\/static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.awin1.com *.zenaps.com *.fls.doubleclick.net www.mainadv.com *.doubleclick.net *.2trk.info www.instagram.com calendly.com *.50-ml.it *.50-ml.eu *.50-ml.fr *.50-ml.de *.50-ml.es *.50-ml.com *.50-ml.co.uk *.lcmark.net *.maisonmataha.it *.weltpixel.com https:\/\/www.tiktok.com https:\/\/www.instagram.com *.trustpilot.com *.iubenda.com *.sendcloud.sc *.jsdelivr.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.roeye.com *.50-ml.com *.50-ml.media *.google.com *.google.fr *.google.it *.google.es *.google.de *.google.eu *.google.co.uk *.google.al *.google.ad *.google.at *.google.ba *.google.be *.google.bg *.google.by *.google.ch *.google.com.cy *.google.cz *.google.dk *.google.ee *.google.fi *.google.gr *.google.hr *.google.hu *.google.ie *.google.is *.google.li *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mk *.google.com.mt *.google.nl *.google.no *.google.pl *.google.pt *.google.ro *.google.rs *.google.se *.google.si *.google.sk *.google.sm *.google.com.tr *.google.com.ua *.googletagmanager.com bat.bing.com maps.gstatic.com maps.googleapis.com *.cloudinary.com *.googlesyndication.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.iubenda.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.amazonaws.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.google-analytics.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com www.googletagmanager.com https:\/\/rum.hlx.page https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com lantern.roeyecdn.com *.preciso.net *.50-ml.eu *.50-ml.it *.50-ml.fr *.50-ml.de *.50-ml.es *.50-ml.com *.50-ml.co.uk www.clarity.ms bat.bing.com www.instagram.com *.googleapis.com maps.gstatic.com assets.calendly.com *.zipchat.ai *.maisonmataha.it static.cloudflareinsights.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.trustpilot.com *.iubenda.com *.50-ml.media *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.gstatic.com *.sendcloud.sc *.jsdelivr.net https:\/\/servicepoints.sendcloud.sc https:\/\/embed.sendcloud.sc *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com static.zdassets.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com assets.calendly.com *.50-ml.media *.iubenda.com https:\/\/static.klaviyo.com *.trustpilot.com https:\/\/fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.sendcloud.sc *.jsdelivr.net *.stripe.network *.stripecdn.com *.amazon.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.50-ml.media 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com capig.stape.tech *.50-ml.com *.clarity.ms maps.googleapis.com maps.gstatic.com pay.google.com *.zipchat.ai *.googlesyndication.com www.googleadservices.com *.50-ml.it *.50-ml.eu *.50-ml.fr *.50-ml.de *.50-ml.es *.50-ml.co.uk *.maisonmataha.it cloudflareinsights.com rum.hlx.page *.trustpilot.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.iubenda.com *.50-ml.media *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 50-ml.zendesk.com ekr.zdassets.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com https:\/\/www.tiktok.com https:\/\/www.instagram.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/platform.twitter.com https:\/\/www.instagram.com https:\/\/www.tiktok.com https:\/\/connect.facebook.net https:\/\/pagead2.googlesyndication.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/news.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; frame-src https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/platform.twitter.com https:\/\/www.instagram.com https:\/\/www.tiktok.com https:\/\/www.facebook.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/news.google.com; media-src 'self' blob: https:\/\/cdn1.tvlin.net https:\/\/telesoldiario-videosmultimedia-fwfwcj-0d87d4-158-69-223-228.sslip.io; connect-src 'self' https: https:\/\/telesolweb-proxy.sapiamedios.com wss:\/\/telesolweb-proxy.sapiamedios.com https:\/\/cdn1.tvlin.net https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests","count":2},{"content-security-policy-report-only":" default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; connect-src 'self' https:; frame-src https:; report-uri https:\/\/o4510997758017536.ingest.de.sentry.io\/api\/4511144086995024\/security\/?sentry_key=84db9cae1961af6c1be4e6a1bc966032&sentry_environment=production","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.klarnacdn.net *.cloudflare.com *.trustedshops.com *.googleapis.com *.klaviyo.com cdn1.stamped.io stamped.io *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com *.facebook.com *.nosto.com *.nos.to *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.adyen.com *.doubleclick.net *.facebook.com *.klarna.com *.nosto.com *.nos.to *.freshchat.com *.twitter.com *.pinterest.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'self' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.adyen.com *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.klarna.com *.klarnaevt.com *.nosto.com *.nos.to *.rubiconproject.com\/ *.sharethrough.com\/ *.teads.tv\/ *.tremorhub.com\/ *.3lift.com\/ *.yieldlab.net\/ *.ads.yieldmo.com\/ *.emxdgt.com\/ *.adform.net\/ *.demdex.net\/ *.criteo.net *.adnxs.com\/ *.cloudfront.net\/ *.stamped.io *.freshchat.com\/ *.cloudflare.com *.ytimg.com *.bing.com\/ *.clarity.ms\/ *.google.al\/ *.google.am\/ *.google.at\/ *.google.az\/ *.google.ba\/ *.google.be\/ *.google.bg\/ *.google.by\/ *.google.ch\/ *.google.cz\/ *.google.de\/ *.google.dk\/ *.google.ee\/ *.google.es\/ *.google.fi\/ *.google.fr\/ *.google.ge\/ *.google.gr\/ *.google.hr\/ *.google.hu\/ *.google.ie\/ *.google.is\/ *.google.it\/ *.google.kz\/ *.google.li\/ *.google.lt\/ *.google.lu\/ *.google.lv\/ *.google.md\/ *.google.me\/ *.google.mk\/ *.google.mt\/ *.google.nl\/ *.google.no\/ *.google.pl\/ *.google.pt\/ *.google.ro\/ *.google.rs\/ *.google.ru\/ *.google.se\/ *.google.si\/ *.google.sk\/ *.google.sm\/ *.google.tr\/ *.google.ua\/ *.google.uk\/ *.google.com.ua\/ *.google.com.tr\/ *.google.com.gr\/ *.google.com.pt\/ *.google.com.pl\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ cdn1.stamped.io stamped.io https:\/\/www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.klarna.com\/ *.nosto.com *.nos.to *.cloudfront.net\/ *.cookiebot.com\/ *.kuvio.io\/ *.reamaze.com\/ *.shopalike.fi\/ *.chatbotize.com\/ qanuk-stage.vercel.app *.tradedoubler.com *.criteo.com *.cookiefirst.com *.omappapi.com *.googleoptimize.com *.klaviyo.com reviewsonmywebsite.com 'self' data: *.fontawesome.com *.videoly.co\/ *.freshchat.com cdnjs.cloudflare.com\/ *.googleapis.com\/ *.noibu.com\/ *.pinimg.com\/ *.bing.com\/ *.tiktok.com\/ *.pinterest.com\/ *.intercom.io\/ *.intercomcdn.com\/ *.clarity.ms\/ *.klarnaservices.com\/ *.livechatinc.com\/ *.hotjar.com\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ player.vimeo.com cdn1.stamped.io stamped.io js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.nosto.com *.nos.to *.cookiefirst.com *.klarnacdn.net *.omappapi.com reviewsonmywebsite.com *.typekit.net *.freshchat.com\/ *.cloudflare.com\/ *.klaviyo.com\/ https:\/\/static.klaviyo.com cdn1.stamped.io stamped.io *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src cdn1.stamped.io stamped.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adyen.com *.algolia.net *.algolia.com\/ *.algolianet.com *.insights.algolia.io insights.algolia.io *.google-analytics.com *.facebook.com *.facebook.net *.google.com\/ *.klarnaevt.com *.nosto.com *.nos.to *.criteo.com *.hobbybox.fi\/ *.g.doubleclick.net\/ *.reamaze.com\/ *.cookiebot.com\/ *.kelkoogroup.net\/ *.chatbotize.com *.klarnaservices.com *.doubleclick.net *.qanuk.app *.cookiefirst.com *.omappapi.com *.googlesyndication.com reviewsonmywebsite.com *.cloudflare.com *.pinterest.com *.tiktok.com\/ *.clarity.ms\/ *.noibu.com\/ wss:\/\/input.noibu.com\/ wss:\/\/nexus-websocket-a.intercom.io\/ *.intercom.io\/ *.bing.com\/ *.algolia.io\/ *.klarna.com\/ wss:\/\/ws.reamaze.com\/ *.reamaze.io\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ cdn1.stamped.io stamped.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src self data: *.nosto.com\/ *.klaviyo.com\/ *.stamped.io\/ https:\/\/stamped.io\/ *.gstatic.com\/ *.cloudfront.net\/ *.cloudflare.com\/ *.klarnaservices.com\/ *.klarna.com\/ *.klarnaevt.com\/ *.klarnacdn.net\/ *.reamaze.io\/ *.reamaze.com\/ wss:\/\/ws.reamaze.com\/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" object-src  'none'; connect-src 'self' *.nextdoorstudios.com *.asgmax.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.nextdoorstudios.com *.asgmax.com join.gammasecure.com; script-src 'self' *.nextdoorstudios.com *.asgmax.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.nextdoorstudios.com *.asgmax.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https:\/\/csp-report.browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod;","count":2},{"content-security-policy-report-only":" default-src 'self' https:\/\/cdn.wolterskluwer.io\/ https:\/\/www.googletagmanager.com\/ https:\/\/analytics.sleeknote.com\/ https:\/\/dc.services.visualstudio.com\/v2\/track https:\/\/www.google-analytics.com\/ https:\/\/region1.google-analytics.com\/ https:\/\/vimeo.com\/ https:\/\/pagead2.googlesyndication.com\/ https:\/\/cmtt.nl\/ https:\/\/ep1.adtrafficquality.google\/ https:\/\/securepubads.g.doubleclick.net\/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/cdn.userdatatrust.com\/ https:\/\/securepubads.g.doubleclick.net\/ https:\/\/pagead2.googlesyndication.com\/ https:\/\/ep2.adtrafficquality.google\/ https:\/\/www.googletagmanager.com\/ https:\/\/eu2.cdn.thunderhead.com\/one\/rt\/js\/one-tag.js?siteKey=ONE-JHGTRIWT14-2067 http:\/\/sleeknotecustomerscripts.sleeknote.com\/23807.js http:\/\/img.en25.com\/i\/elqCfg.min.js https:\/\/az416426.vo.msecnd.net\/scripts\/a\/ai.0.js http:\/\/sleeknotestaticcontent.sleeknote.com\/ https:\/\/googleads.g.doubleclick.net\/pagead\/viewthroughconversion\/1069938057\/ https:\/\/www.google-analytics.com\/analytics.js https:\/\/www.googletagservices.com\/ https:\/\/connect.facebook.net\/ http:\/\/cdn.feedbackify.com\/ http:\/\/dev.visualwebsiteoptimizer.com\/ https:\/\/certify-js.alexametrics.com\/ http:\/\/ajax.googleapis.com\/; style-src 'self' 'unsafe-inline' https:\/\/cdn.wolterskluwer.io\/; img-src 'self' https:\/\/cdn.wolterskluwer.io\/wk-logos\/1.0.x\/ https:\/\/s1364398973.t.eloqua.com\/visitor\/v200\/svrGP data: https:\/\/www.google.com\/ https:\/\/www.google.it\/ https:\/\/www.google-analytics.com\/ https:\/\/i.vimeocdn.com\/ https:\/\/www.taxvisions.nl\/ https:\/\/acc.taxvisions.nl\/ https:\/\/ep1.adtrafficquality.google\/ https:\/\/ep2.adtrafficquality.google\/ https:\/\/tpc.googlesyndication.com\/ https:\/\/pagead2.googlesyndication.com\/ https:\/\/www.googletagmanager.com\/ http:\/\/cdn.feedbackify.com\/ https:\/\/dev.visualwebsiteoptimizer.com\/; font-src 'self' https:\/\/cdn.wolterskluwer.io\/; frame-src 'self' https:\/\/player.vimeo.com\/ *.safeframe.googlesyndication.com\/ https:\/\/ep2.adtrafficquality.google\/; frame-ancestors 'self';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cdn.jsdelivr.net cdn.almapay.com cash-f.squarecdn.com github.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.avis-verifies.com *.skeepers.io https:\/\/cdnjs.cloudflare.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors *.skeepers.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.getalma.eu *.almapay.com\/ *.stripe.com\/ *.checkout.com\/ *.adyen.com\/ * critizr.com asset.easydmp.net creativecdn.com *.doubleclick.net *.wlp-acs.com *.hotjar.com\/ *.adyen.com js.mollie.com *.avis-verifies.com *.skeepers.io *.adyenpayments.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https:\/\/images.unsplash.com cdn.matomo.cloud *.matomo.cloud *.openstreetmap.org axeptio.imgix.net www.facebook.com google.fr *.google.fr *.bing.com *.adnxs.com *.adyen.com cl.avis-verifies.com *.metaffiliation.com *.leroidumatelas.fr *.googletagmanager.com https:\/\/firebasestorage.googleapis.com https:\/\/www.mollie.com *.hsforms.net *.hsforms.com 'self' data: *.adyenpayments.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn.jsdelivr.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/widgets.rr.skeepers.io\/ https:\/\/api-product-reviews.cxr.skeepers.io\/ https:\/\/cl-ppr.rr.skeepers.io\/ https:\/\/cl-pbr.cxr.skeepers.io\/ *.avis-verifies.com static.critizr.com *.googletagmanager.com cdn.matomo.cloud *.matomo.cloud *.axept.io *.bing.com asset.easydmp.net analytics.tiktok.com trk.lgw.io connect.facebook.net *.hotjar.com *.lm-tracking.com *.metaffiliation.com *.leroidumatelas.fr *.avada.io *.shopify.com js.mollie.com *.skeepers.io https:\/\/cdnjs.cloudflare.com *.hsforms.net *.hsforms.com *.gstatic.com *.de-matrassenkoning.be *.leroidumatelas.be *.msecnd.net *.adyenpayments.com unpkg.com *.perfmaker.net *.zdassets.com 'unsafe-eval' 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net *.cash.app static.critizr.com *.adyen.com *.metaffiliation.com *.leroidumatelas.fr *.googletagmanager.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.avis-verifies.com *.skeepers.io https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com *.googleapis.com *.gstatic.com *.adyenpayments.com *.perfmaker.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.getalma.eu *.almapay.com *.openstreetmap.org * https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/widgets.rr.skeepers.io\/ https:\/\/api-product-reviews.cxr.skeepers.io\/ https:\/\/cl-ppr.rr.skeepers.io\/ https:\/\/cl-pbr.cxr.skeepers.io\/ cdn.matomo.cloud *.matomo.cloud *.axept.io analytics.tiktok.com *.google.fr *.doubleclick.net *.metaffiliation.com *.leroidumatelas.fr *.googletagmanager.com https:\/\/get.geojs.io *.avada.io *.avis-verifies.com awsapis3.netreviews.eu *.skeepers.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.de-matrassenkoning.be *.leroidumatelas.be *.msecnd.net *.adyenpayments.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https: http:; media-src 'self' blob: https: http:; font-src 'self' data: https:; connect-src 'self' https: wss: ws:; frame-src 'self' https:; frame-ancestors 'self' https:\/\/mappl.tv https:\/\/*.mappl.tv https:\/\/mapple.uk https:\/\/*.mapple.uk https:\/\/mapple.vip https:\/\/*.mapple.vip https:\/\/mapple.mov https:\/\/*.mapple.mov https:\/\/mapple.cc https:\/\/*.mapple.cc https:\/\/mappletv.uk https:\/\/*.mappletv.uk; object-src 'none'; base-uri 'self'; form-action 'self'","count":2},{"content-security-policy-report-only":" script-src https:\/\/cdn.insight.sitefinity.com https:\/\/dec.azureedge.net https:\/\/dpt.asatalent.nl https:\/\/dpt.easyway.nl https:\/\/dpt.medi-interim.nl https:\/\/dpt.rgfstaffing.nl https:\/\/dpt.secretaryplus.nl https:\/\/dpt.startpeople.nl https:\/\/dpt.technicum-engineering.nl https:\/\/dpt.technicum.nl https:\/\/dpt.unique.nl https:\/\/dpt.usgfinance.nl https:\/\/dpt.usglegal.nl https:\/\/dpt.usgmarcom.nl https:\/\/dpt.usgrestart.nl https:\/\/player.vimeo.com\/api\/player.js https:\/\/www.youtube.com https:\/\/www.youtube.com\/iframe_api https:\/\/maps.googleapis.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/s.ytimg.com https:\/\/consent.cookiefirst.com https:\/\/snap.licdn.com https:\/\/cdn.jsdelivr.net https:\/\/www.clarity.ms https:\/\/*.clarity.ms https:\/\/connect.facebook.net https:\/\/analytics.tiktok.com https:\/\/static.ads-twitter.com https:\/\/*.onrecruit.net 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline' 'self'; style-src https:\/\/cdn.insight.sitefinity.com https:\/\/dec.azureedge.net https:\/\/consent.cookiefirst.com https:\/\/fonts.googleapis.com *.googleapis.com 'self' 'unsafe-inline'; img-src https:\/\/cdn.insight.sitefinity.com https:\/\/dec.azureedge.net https:\/\/*.linkedin.com https:\/\/*.frontify.com https:\/\/*.cloudinary.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.asatalent.nl https:\/\/*.easyway.nl https:\/\/*.medi-interim.nl https:\/\/*.rgfstaffing.nl https:\/\/*.secretaryplus.nl https:\/\/*.startpeople.nl https:\/\/*.technicum-engineering.nl https:\/\/*.technicum.nl https:\/\/*.unique.nl https:\/\/*.usgfinance.nl https:\/\/*.usglegal.nl https:\/\/*.usgmarcom.nl https:\/\/*.usgrestart.nl https:\/\/unpkg.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.google.nl https:\/\/googleads.g.doubleclick.net https:\/\/www.facebook.com https:\/\/px.ads.linkedin.com https:\/\/analytics.tiktok.com https:\/\/*.onrecruit.net https:\/\/c.bing.com https:\/\/b.bing.com https:\/\/rgfstaffing.nl 'self' data: blob:; connect-src https:\/\/*.localhost https:\/\/*.insight.sitefinity.com https:\/\/*.dec.sitefinity.com https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/*.applicationinsights.azure.com https:\/\/*.clarity.ms https:\/\/consent.cookiefirst.com https:\/\/api.cookiefirst.com https:\/\/edge.cookiefirst.com https:\/\/px.ads.linkedin.com https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/*.googleapis.com https:\/\/*.google-analytics.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/*.doubleclick.net https:\/\/www.googleadservices.com https:\/\/*.bing.com https:\/\/connect.facebook.net https:\/\/analytics.tiktok.com https:\/\/*.onrecruit.net https:\/\/ws-geocoding-app-tst.azurewebsites.net https:\/\/ws-geocoding-app-acc.azurewebsites.net https:\/\/ws-geocoding-app-prd.azurewebsites.net https:\/\/rgf-ws-app-cms-tst.azurewebsites.net https:\/\/*.asatalent.nl https:\/\/*.easyway.nl https:\/\/*.medi-interim.nl https:\/\/*.rgfstaffing.nl https:\/\/*.secretaryplus.nl https:\/\/*.startpeople.nl https:\/\/*.technicum-engineering.nl https:\/\/*.technicum.nl https:\/\/*.unique.nl https:\/\/*.usgfinance.nl https:\/\/*.usglegal.nl https:\/\/*.usgmarcom.nl https:\/\/*.usgrestart.nl 'self' data: blob:; font-src https:\/\/rgf-assetmanager.azurewebsites.net https:\/\/netdna.bootstrapcdn.com https:\/\/fonts.gstatic.com https:\/\/consent.cookiefirst.com 'self' data:; default-src 'self'; worker-src blob:; child-src blob:; frame-src https:\/\/dpt.asatalent.nl https:\/\/dpt.easyway.nl https:\/\/dpt.medi-interim.nl https:\/\/dpt.rgfstaffing.nl https:\/\/dpt.secretaryplus.nl https:\/\/dpt.startpeople.nl https:\/\/dpt.technicum-engineering.nl https:\/\/dpt.technicum.nl https:\/\/dpt.unique.nl https:\/\/dpt.usgfinance.nl https:\/\/dpt.usglegal.nl https:\/\/dpt.usgmarcom.nl https:\/\/dpt.usgrestart.nl 'self' https:\/\/youtube.com https:\/\/*.youtube.com https:\/\/*.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/www.tiktok.com https:\/\/*.frcapi.com https:\/\/www.googletagmanager.com https:\/\/www.facebook.com https:\/\/td.doubleclick.net;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/jlxsgk.com https:\/\/newrotatormarch23.bid https:\/\/news.2xclick.ru https:\/\/yandex.ru https:\/\/mrdrop.ru https:\/\/statika.mpsuadv.ru https:\/\/mc.yandex.ru https:\/\/mc.yandex.com https:\/\/mc.webvisor.org; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' data: https:\/\/fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:\/\/mc.yandex.ru https:\/\/mc.yandex.com https:\/\/mc.webvisor.org wss:\/\/mc.yandex.ru; frame-src 'self' blob: https:\/\/*.mpsuadv.ru; object-src 'none';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com www.fontawesome.com www.googleapis.com www.gstatic.com *.zdassets.com https:\/\/static.micuentaweb.pe\/static\/ *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https:\/\/secure.micuentaweb.pe\/vads-payment\/ https:\/\/api.micuentaweb.pe\/api-payment\/ https:\/\/static.micuentaweb.pe\/static\/ https:\/\/seo.mageplaza.com *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com www.addthis.com www.doubleclick.com www.doubleclick.net www.google.com *.weltpixel.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe https:\/\/secure.micuentaweb.pe\/vads-payment\/ https:\/\/static.micuentaweb.pe\/static\/ *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.trackedlink.net *.uber.com *.ubereats.com www.facebook.com www.facebook.net *.metricool.com www.google.com.ar *.zdassets.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe https:\/\/secure.micuentaweb.pe\/static\/latest\/images\/type-carte\/ https:\/\/static.micuentaweb.pe\/static\/ https:\/\/secure.micuentaweb.pe\/vads-payment\/ *.gstatic.com *.facebook.com *.reddit.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-datasolutions.com *.magento-ds.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com www.aptrinsic.com *.metricool.com *.clarity.ms www.facebook.com api.yotpo.com www.facebook.net js-agent.newrelic.com recostream.com *.zdassets.com www.varsovienne.cl unpkg.com *.zendesk.com www.google.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe https:\/\/api.micuentaweb.pe\/api-payment\/ https:\/\/static.micuentaweb.pe\/static\/ https:\/\/www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.magento-datasolutions.com *.magento-ds.com webchat.dotdigital.com webchat.staging.dotdigital.com www.googleapis.com www.mailchimp.com *.zdassets.com https:\/\/static.micuentaweb.pe\/static\/ *.fontawesome.com tagmanager.google.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net www.zdassets.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.zendesk.com *.zdassets.com www.clarity.ms k.clarity.ms api.yotpo.com analytics.google.com www.google-analytics.com www.google.com www.facebook.com www.facebook.net connect.facebook.net www.googleapis.com unpkg.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe https:\/\/secure.micuentaweb.pe\/vads-payment\/ https:\/\/api.micuentaweb.pe\/api-payment\/ *.facebook.net *.redditstatic.com *.reddit.com *.doubleclick.net *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net www.aptrinsic.com www.newrelic.com www.demdex.net commerce.adobedc.net www.varsovienne.cl bam.nr-data.net www.google.com https:\/\/secure.micuentaweb.pe\/vads-payment\/ https:\/\/api.micuentaweb.pe\/api-payment\/ https:\/\/static.micuentaweb.pe\/static\/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" frame-ancestors 'self'; report-to csp-report-only; report-uri https:\/\/cspreports.realpage.com\/api\/reports\/save\/report-only;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.google.com\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net *.paypal.com *.typekit.net *.gstatic.com https:\/\/images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https:\/\/www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/redchamps.com *.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page https:\/\/maps.googleapis.com https:\/\/player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.google.com\/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.clarity.ms rum.hlx.page https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" \tdefault-src blob: https:;\timg-src data: https:;\tscript-src 'unsafe-inline' 'unsafe-eval' blob: https:;\tstyle-src 'unsafe-inline' https:;\tfont-src data: https:;\tframe-src https:;\tmedia-src data: https:;\tobject-src 'none';\tconnect-src https:;\tframe-ancestors 'self';","count":2},{"content-security-policy-report-only":" report-uri \/algemeen\/report_CSP_error.php; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com widget.thuiswinkel-cdn.org data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com consent.cookiebot.com *.freshchat.com consentcdn.cookiebot.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com imgsct.cookiebot.com *.google.com.ua *.google.com.nl api.taggrs.io widget.thuiswinkel-cdn.org px.ads.linkedin.com bat.bing.com sst.officecentre.nl https:\/\/www.mollie.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com consent.cookiebot.com static.zdassets.com wss:\/\/widget-mediator.zopim.com consentcdn.cookiebot.com widget.thuiswinkel.org widget.thuiswinkel-cdn.org eu.fw-cdn.com *.freshchat.com bat.bing.com sst.officecentre.nl js.mollie.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.typekit.net *.freshchat.com static-tracking.klaviyo.com widget.thuiswinkel-cdn.org https:\/\/static.klaviyo.com assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com ekr.zdassets.com wss:\/\/widget-mediator.zopim.com consentcdn.cookiebot.com widget.trustpilot.com widget.thuiswinkel.org widget.thuiswinkel-cdn.org app-euc.freshmarketer.com widgetcontent.thuiswinkel-cdn.org sst.officecentre.nl px.ads.linkedin.com bat.bing.com ws:\/\/127.0.0.1:35729\/livereload https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/snap.licdn.com https:\/\/connect.facebook.net https:\/\/cmp.osano.com https:\/\/challenges.cloudflare.com https:\/\/play.vidyard.com https:\/\/public.flourish.studio https:\/\/js.qualified.com https:\/\/vercel.live; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; media-src 'self' blob: https:\/\/*.public.blob.vercel-storage.com; connect-src 'self' https:\/\/cmp.osano.com https:\/\/*.api.osano.com https:\/\/challenges.cloudflare.com https:\/\/*.challenges.cloudflare.com https:\/\/*.public.blob.vercel-storage.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/px.ads.linkedin.com https:\/\/*.qualified.com wss:\/\/*.qualified.com https:\/\/vercel.live; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/play.vidyard.com https:\/\/flo.uri.sh https:\/\/challenges.cloudflare.com https:\/\/open.spotify.com https:\/\/podcasts.apple.com https:\/\/*.qualified.com https:\/\/vercel.live; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; worker-src 'self' blob:; report-uri \/api\/csp-report; report-to csp-endpoint","count":2},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' http:\/\/hello.myfonts.net\/ https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/maps.googleapis.com https:\/\/polyfill-fastly.io https:\/\/unpkg.com https:\/\/www.google.com maps.google.com https:\/\/o4509677997326336.ingest.us.sentry.io\/api\/embed\/error-page\/; script-src-attr 'self'; script-src-elem 'self' https:\/\/themes.googleusercontent.com\/ https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/maps.googleapis.com https:\/\/polyfill-fastly.io https:\/\/unpkg.com https:\/\/www.google.com maps.google.com https:\/\/o4509677997326336.ingest.us.sentry.io\/api\/embed\/error-page\/; style-src 'self' https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' http:\/\/hello.myfonts.net\/ http:\/\/fonts.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com 'unsafe-inline'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" script-src-elem https:\/\/*.freeprivacypolicy.com https:\/\/*.youtube.com https:\/\/*.youtube-nocookie.com https:\/\/cdn.jsdelivr.net https:\/\/code.jquery.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com *.googleapis.com data: https:\/\/*.gstatic.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * www.google.com *.certcapture.com https:\/\/*.doubleclick.net https:\/\/*.google.com https:\/\/*.hotjar.com https:\/\/*.braintreegateway.com https:\/\/*.paypal.com https:\/\/*.trustpilot.com https:\/\/*.youtube.com https:\/\/*.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.twitter.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: * *.googleapis.com *.certcapture.com https:\/\/*.doubleclick.net https:\/\/*.google.com https:\/\/*.google.co.uk *.cloudfront.net https:\/\/*.paypal.com https:\/\/i.ytimg.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https:\/\/rum.hlx.page *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.certcapture.com https:\/\/*.pcapredict.com\/js\/sensor.js https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/*.hotjar.com https:\/\/*.doubleclick.net https:\/\/secure.leadforensics.com https:\/\/*.googleapis.com player.vimeo.com https:\/\/*.cloudfront.net https:\/\/*.google-analytics.com https:\/\/*.paypal.com https:\/\/*.trustpilot.com https:\/\/*.youtube.com https:\/\/*.youtube-nocookie.com https:\/\/cdn.jsdelivr.net https:\/\/code.jquery.com https:\/\/cdn.c1.amplience.net https:\/\/*.freeprivacypolicy.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.certcapture.com https:\/\/*.googleapis.com *.typekit.net https:\/\/*.cloudfront.net assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https:\/\/*.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.googleapis.com *.certcapture.com https:\/\/*.hotjar.com https:\/\/*.adobedc.net https:\/\/*.nr-data.net https:\/\/*.freshdesk.com wss:\/\/*.hotjar.com https:\/\/*.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudflare.com *.twitter.com *.twimg.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src cdn.jsdelivr.net fonts.gstatic.com cdn.almapay.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.googleapis.com *.fontawesome.com *.bootstrapcdn.com *.webwinkelkeur.nl *.jsdelivr.net maxcdn.bootstrapcdn.com *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to *.vivapayments.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.getalma.eu *.almapay.com\/ *.stripe.com\/ *.checkout.com\/ *.adyen.com\/ *.twitter.com *.google.com *.addthis.com *.kiyoh.com *.webwinkelkeur.nl *.360virtueelrondkijken.nl *.google.com\/ www.facebook.com platform.twitter.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.tawk.to 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/www.magezon.com *.cloudflare.com *.cdninstagram.com *.google.com *.google.nl *.gstatic.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.paypal.com *.twitter.com www.facebook.com https:\/\/via.placeholder.com *.linkedin.com *.openstreetmap.fr *.designer-images.net *.imgix.net magefan.com cm.magefan.com *.disqus.com pinterest.com assets.pinterest.com syndication.twitter.com https:\/\/www.mollie.com maps.gstatic.com maps.google.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com blob: *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com\/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ cdn.jsdelivr.net *.cloudflare.com *.twitter.com *.google-analytics.com *.googletagmanager.com *.google.com\/ https:\/\/googLeads.g.doubleclick.net *.gstatic.com *.trustedshops.com *.fontawesome.com *.addthis.com s7.addthis.com m.addthis.com z.moatads.com *.addthisedge.com apis.google.com *.googleapis.com graph.facebook.com widgets.pinterest.com connect.facebook.net *.zopim.com *.zdassets.com *.Licdn.com *.hotjar.com *.webwinkelkeur.nl cdn.stat-track.com *.stat-track.com *.disqus.com twitter.com platform.twitter.com static.addtoany.com js.mollie.com maps.google.com polyfill.io *.moosend.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com www.gstatic.com *.tawk.to *.vivapayments.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.jsdelivr.net fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.typekit.net *.fontawesome.com *.bootstrapcdn.com unpkg.com *.moosend.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com www.gstatic.com *.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.getalma.eu *.almapay.com *.cloudflare.com *.twitter.com *.paypal.com *.pay.nl *.kiyoh.com https:\/\/www.facebook.com\/tr\/ *.google.com *.googletagmanager.com *.googleapis.com *.google-analytics.com https:\/\/stats.g.doubleclick.net *.zendesk.com https:\/\/zendesk-eu.my.sentry.io *.zdassets.com wss:\/\/widget-mediator.zopim.com *.linkedin.com https:\/\/t.stat-track.com https:\/\/forms.m-pages.com *.hotjar.com wss:\/\/ws.hotjar.com *.hotjar.io stats.addtoany.com maps.googleapis.com *.stat-track.com *.m-pages.com *.m-operations.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com places.googleapis.com www.googleapis.com *.tawk.to wss:\/\/*.tawk.to 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googletagmanager.com *.google.com *.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src *.easypack24.net *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com *.wesupply.xyz https:\/\/wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.google.pl *.easypack24.net *.inpost.pl https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.safemage.com *.hsforms.net *.hsforms.com 'self' data: maps.gstatic.com https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com *.gstatic.com *.cdninstagram.com *.fbcdn.net maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.cloudflare.com *.cloudflareinsights.com *.hotjar.com *.easypack24.net *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/cdnjs.cloudflare.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com maps.googleapis.com https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com ajax.googleapis.com https:\/\/www.googletagmanager.com tagmanager.google.com *.instagram.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cloudflare.com *.easypack24.net *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com https:\/\/cdnjs.cloudflare.com *.googleapis.com *.gstatic.com https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com fonts.googleapis.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googlesyndication.com *.hotjar.io *.easypack24.net https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https:\/\/secure.tpay.com https:\/\/secure.sandbox.tpay.com https:\/\/tpay.com https:\/\/www.google-analytics.com *.instagram.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src  'self' data: *.pinimg.com *.postaffiliatepro.com partneri.affilmax.cz *.doubleclick.net *.facebook.net *.google-analytics.com *.biano.cz *.dognet.sk *.googlesyndication.com *.imedia.cz *.googletagmanager.com *.googleadservices.com ;font-src  'self' data: fonts.gstatic.com *.zbozi.cz *.biano.cz *.biano.sk *.biano.hu ;connect-src  'self' google.com *.google.com *.google.hu *.google.ae *.google.co.uk *.google.cz *.google.sk *.google.de *.google.at *.google.fr *.google.it *.google.sk *.google.pl *.google.nl *.google.ie *.google.com.ua *.googleapis.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.zbozi.cz *.exchangeratesapi.io *.pingdom.net *.biano.cz *.biano.sk *.biano.hu *.bianopixel.com *.dognet.sk *.foxentry.cz *.seznam.cz *.facebook.com *.pinterest.com *.doubleclick.net https:\/\/*.clarity.ms partner-events.favi.cz partner-events.favi.sk partner-events.favi.hu t.targito.signal-nabytek.cz t.targito.sg-nabytek.cz t.targito.signal-nabytok.sk t.targito.sg-nabytok.sk t.targito.butor-signal.hu t.targito.sg-butor.hu *.clickcease.com *.targito.com *.googlesyndication.com https:\/\/saas.bianoapi.com bat.bing.com bat.bing.net live.luigisbox.com api.luigisbox.com  https:\/\/*.api.rvndev.com https:\/\/*.raventic.ai *.pinimg.com https:\/\/*.api.raventic.ai https:\/\/*.api.raventic.dev https:\/\/api.raventic.dev https:\/\/eshops-uet-tags.ams3.cdn.digitaloceanspaces.com apps.sg-nabytek.cz apps.sg-nabytok.sk apps.sg-butor.hu *.srovname.cz *.heureka.cz *.heureka.sk *.heureka.group ;script-src  'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google.cz *.seznam.cz *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.imedia.cz *.facebook.net *.doubleclick.net *.rival.cz *.fg.cz *.3dliving.cz *.imedia.cz *.zbozi.cz *.exchangeratesapi.io *.facebook.com *.pingdom.net *.biano.cz *.biano.sk *.biano.hu *.bianopixel.com *.dognet.sk *.foxentry.cz *.googlesyndication.com *.pinimg.com *.pinterest.com partneri.affilmax.cz *.postaffiliatepro.com *.heureka.cz *.heureka.sk *.heureka.group im9.cz cz.img9.cz *.glami.cz *.licdn.com *.linkedin.com tracking.srovname.cz https:\/\/*.clarity.ms partner-events.favicdn.net cdn.targito.signal-nabytek.cz cdn.targito.sg-nabytek.cz cdn.targito.signal-nabytok.sk cdn.targito.sg-nabytok.sk cdn.targito.butor-signal.hu cdn.targito.sg-butor.hu *.clickcease.com cdn.targito.com https:\/\/saas.bianoapi.com bat.bing.com bat.bing.net scripts.luigisbox.com cdn.luigisbox.com https:\/\/sdk.cdn.rvndev.com https:\/\/sdk.rvndn.com apps.sg-nabytek.cz apps.sg-nabytok.sk apps.sg-butor.hu *.srovname.cz ;form-action  'self' *.facebook.com *.facebook.net *.pinterest.com ;frame-src  'self' *.youtube.com *.iplatba.cz *.facebook.com *.imedia.cz *.zbozi.cz *.essox.cz *.foxentry.cz *.doubleclick.net *.googletagmanager.com *.google.com *.heureka.cz *.heureka.sk *.heureka.group *.pinterest.com *.googlesyndication.com login.szn.cz ;worker-src  'self' *.youtube.com *.iplatba.cz *.facebook.com *.imedia.cz *.zbozi.cz *.essox.cz *.foxentry.cz *.doubleclick.net *.googletagmanager.com *.google.com *.heureka.cz *.heureka.sk *.heureka.group *.pinterest.com *.googlesyndication.com login.szn.cz ;frame-ancestors  'self' ;img-src  'self' data: blob: *.gstatic.com *.googleapis.com *.googlecode.com *.googletagmanager.com *.google-analytics.com *.seznam.cz *.doubleclick.net *.google.com *.google.hu *.google.ae *.google.co.uk *.google.cz *.google.sk *.google.de *.google.at *.google.fr *.google.it *.google.sk *.google.pl *.google.nl *.google.ie *.google.com.ua *.imedia.cz *.facebook.com *.facebook.net *.fg.cz *.3dliving.cz *.signal-nabytek.cz *.sg-nabytek.cz *.signal-nabytok.sk *.sg-nabytok.sk *.rival.cz *.vykupto.cz *.signal.pl *.zbozi.cz *.exchangeratesapi.io *.dognet.sk *.foxentry.cz *.pinimg.com *.pinterest.com *.biano.cz *.biano.sk *.biano.hu *.heureka.cz *.heureka.sk *.heureka.group im9.cz *.glami.cz *.googleadservices.com https:\/\/*.clarity.ms bat.bing.com bat.bing.net *.favionline.com *.bing.com cdn.targito.com https:\/\/i.cdn.rvndev.com https:\/\/i.rvndn.com *.srovname.cz ;style-src  'self' 'unsafe-inline' fonts.googleapis.com *.seznam.cz *.google.com *.gstatic.com *.googletagmanager.com *.fg.cz *.3dliving.cz *.signal-nabytek.cz *.sg-nabytek.cz *.signal-nabytok.sk *.sg-nabytok.sk *.sg-butor.hu *.zbozi.cz *.exchangeratesapi.io *.foxentry.cz cdn.targito.com https:\/\/saas.bianoapi.com cdn.luigisbox.com https:\/\/sdk.cdn.rvndev.com https:\/\/sdk.rvndn.com ;object-src  'self' ; report-uri \/frontendreport\/report\/","count":2},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' 'unsafe-eval' fonts.googleapis translate.google.com translate.googleapis.com translate-pa.googleapis.com *.gstatic.com siteimproveanalytics.com *.siteimprove.com svc.webspellchecker.net js-agent.newrelic.com bam.nr-data.net assets.pinterest.com cdn.jsdelivr.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/rebilly.github.io https:\/\/unpkg.com https:\/\/www.google.com maps.googleapis.com platform.instagram.com platform.twitter.com; script-src-attr 'self'; script-src-elem 'self' fonts.googleapis translate.google.com translate.googleapis.com translate-pa.googleapis.com *.gstatic.com siteimproveanalytics.com *.siteimprove.com svc.webspellchecker.net js-agent.newrelic.com bam.nr-data.net assets.pinterest.com cdn.jsdelivr.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/rebilly.github.io https:\/\/unpkg.com https:\/\/www.google.com maps.googleapis.com platform.instagram.com platform.twitter.com; style-src 'self' fonts.googleapis translate.google.com translate.googleapis.com translate-pa.googleapis.com *.gstatic.com siteimproveanalytics.com *.siteimprove.com svc.webspellchecker.net js-agent.newrelic.com bam.nr-data.net cdn.jsdelivr.net fonts.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com; style-src-attr 'self'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/fonts.gstatic.com cdn.icomoon.io *.cdn-apple.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.klarnacdn.net 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.trustpilot.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ services.postcodeanywhere.co.uk media.directwatertanks.co.uk img.localhost img.kingfisherdirect.co.uk img.directwatertanks.co.uk img.gritbins.net img.bin-shop.co.uk *.google.co.uk c.bing.com bat.bing.com c.clarity.ms *.hubspot.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.posthog.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ api.addressy.com cdn.mouseflow.com cdn.salesfire.co.uk www.google.co.uk bat.bing.com www.clarity.ms *.hs-scripts.com *.hs-analytics.net *.usemessages.com *.hsleadflows.net *.hscollectedforms.net *.hs-banner.com *.hsadspixel.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.cardinaltrusted.com *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.hsforms.net *.hsforms.com *.gstatic.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https:\/\/static.klaviyo.com api.addressy.com assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.typekit.net *.googleapis.com *.gstatic.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.posthog.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ api.addressy.com live.smartmetrics.co.uk hit.salesfire.co.uk region1.analytics.google.com *.doubleclick.net *.hubspot.com *.hubapi.com *.hscollectedforms.net p.clarity.ms bat.bing.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.smartmetrics.co.uk t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src *.googleapis.com *.gstatic.com data: https:\/\/www.googletagmanager.com *.fontawesome.com applepay.cdn-apple.com use.fontawesome.com aqadecor.it aqadecor.com aqadecor.de aqadecor.fr fonts.gstatic.com embed.tawk.to *.klaviyo.com *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com api.payplug.com secure.payplug.com www.googletagmanager.com badge.eshoppingadvisor.com www.facebook.com static.klaviyo.com *.tawk.to *.clarity.ms 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.googleapis.com magefan.com cm.magefan.com aqadecor.it aqadecor.com aqadecor.de aqadecor.fr www.facebook.com tawk.link cdn.eshoppingadvisor.com *.tawk.to cdn.jsdelivr.net s3.amazonaws.com\/ *.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com tagmanager.google.com https:\/\/www.googletagmanager.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.avada.io api.payplug.com applepay.cdn-apple.com https:\/\/cdn.payplug.com\/js\/integrated-payment\/ aqadecor.it aqadecor.com aqadecor.de aqadecor.fr use.fontawesome.com static.klaviyo.com embed.tawk.to badge.eshoppingadvisor.com static-tracking.klaviyo.com connect.facebook.net cdn.eshoppingadvisor.com business.eshoppingadvisor.com *.tawk.to cdn.jsdelivr.net clarity.ms *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com https:\/\/www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com use.fontawesome.com aqadecor.it aqadecor.com aqadecor.de aqadecor.fr embed.tawk.to cdn.eshoppingadvisor.com cdnjs.cloudflare.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/get.geojs.io *.avada.io fast.a.klaviyo.com static-forms.klaviyo.com aqadecor.it aqadecor.com aqadecor.de aqadecor.fr embed.tawk.to pagead2.googlesyndication.com region1.google-analytics.com *.tawk.to wss:\/\/*.tawk.to *.clarity.ms x.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src aqadecor.it aqadecor.com aqadecor.de aqadecor.fr pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src https:; connect-src https: wss:; font-src https: data:; frame-src https:; img-src https: data:; media-src https:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'unsafe-inline' https:; report-uri https:\/\/www.internet-allstars.de\/csp-violation-ezmd9dpdxv7nb0ecejb9\/","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/cdn.jsdelivr.net https:\/\/unpkg.com https:\/\/cdn.userway.org https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com; style-src 'self' 'unsafe-inline' https:\/\/cdn.jsdelivr.net https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/cdn.userway.org; img-src 'self' data: https:\/\/imgsct.cookiebot.com\/ https:\/\/cdn.userway.org\/; font-src 'self' data: https:\/\/use.typekit.net https:\/\/p.typekit.net; frame-src 'self' blob: https:\/\/www.youtube.com https:\/\/consentcdn.cookiebot.com https:\/\/cdn.userway.org; connect-src 'self' https:\/\/api.userway.org https:\/\/consentcdn.cookiebot.com; worker-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'; require-trusted-types-for 'script';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com 'self' data: maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https:\/\/pinterest.com https:\/\/www.pinterest.com appleid.apple.com *.authorize.net *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com connect.facebook.net *.facebook.com *.disqus.com disqus.com *.addthis.com *.twitter.com *.authorize.net www.youtube.com accounts.google.com *.iubenda.com cdn-quick-ar.threedy.ai quick-ar.threedy.ai td.doubleclick.net www.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io connect.facebook.net *.facebook.com *.fbcdn.net *.disqus.com *.disquscdn.com *.addthisedge.com *.twitter.com *.hsforms.net *.hsforms.com 'self' data: cdn.ywxi.net seal.networksolutions.com ssl.gstatic.com syndication.twitter.com *.stats.paypal.com *.cloudmaestro.com *.twimg.com maps.gstatic.com maps.googleapis.com seal-santabarbara.bbb.org *.google.com csi.gstatic.com fonts.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ connect.facebook.net *.disqus.com *.disquscdn.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.net *.twitter.com *.authorize.net *.hsforms.net *.hsforms.com *.gstatic.com diffuser-cdn.app-us1.com\/ prism.app-us1.com trackcmp.net seal-santabarbara.bbb.org platform.twitter.com apis.google.com seal.networksolutions.com www.google.com www.gstatic.com *.iubenda.com *.paypal.com *.twimg.com maps.googleapis.com https:\/\/js-agent.newrelic.com https:\/\/bam.nr-data.net https:\/\/bam-cell.nr-data.net cdn-quick-ar.threedy.ai acsbapp.com cdn.iubenda.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.disquscdn.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com *.twitter.com *.twimg.com www.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.googleadservices.com www.google-analytics.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com connect.facebook.net *.facebook.com *.disqus.com disqus.com *.disquscdn.com *.authorize.net t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.iubenda.com maps.googleapis.com https:\/\/js-agent.newrelic.com https:\/\/bam.nr-data.net https:\/\/bam-cell.nr-data.net quick-ar.threedy.ai *.acsbapp.com *.doubleclick.net stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/ab6dd833-5ccc-470b-a6cb-3bca3080bb2f.sansec.watch\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/firebasestorage.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com https:\/\/accounts.google.com\/ *.googletagmanager.com *.google-analytics.com https:\/\/www.google.com\/ https:\/\/www.google.com.br\/ https:\/\/www.mercadopago.com.br\/ *.clarity.ms https:\/\/analytics.google.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/www.youtube.com\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ ecommerce.live.gobots.com.br qa-plugin-stg.gobots.com.br qa.gobots.com.br https:\/\/analytics.tiktok.com\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com https:\/\/www.youtube.com\/iframe_api https:\/\/accounts.google.com\/ https:\/\/www.google.com\/ https:\/\/www.google.com.br\/ https:\/\/www.mercadopago.com.br\/ https:\/\/mcprod.bfcasa.com.br\/ https:\/\/*.newrelic.com\/ https:\/\/stape.bfcasa.com.br\/ *.clarity.ms *.google-analytics.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https:\/\/fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com qa.gobots.com.br https:\/\/viacep.com.br https:\/\/www.viacep.com.br https:\/\/analytics.tiktok.com\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/stape.bfcasa.com.br\/ *.clarity.ms https:\/\/bam.nr-data.net *.googletagmanager.com *.google-analytics.com https:\/\/analytics.google.com *.analytics.google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/maps.google.com https:\/\/maps.googleapis.com https:\/\/static.addtoany.com https:\/\/use.fontawesome.com https:\/\/www.google.com; script-src-attr 'self'; style-src 'self' cdnjs.cloudflare.com https:\/\/fonts.googleapis.com; style-src-attr 'self'; frame-ancestors 'self'","count":2},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' *.kerebro.com *.google-analytics.com *.google.com *.facebook.com *.livechatinc.com store.gsscloud.com opencompany.azurewebsites.net in.hotjar.com kerebro.com stats.g.doubleclick.net vc.hotjar.io www.gsscloud.com ka-p.fontawesome.com b.clarity.ms https:\/\/r.adgeek.net; font-src 'self' data: fonts.gstatic.com www.gsscloud.com uwillx.com cdn.livechatinc.com; frame-src 'self' *.doubleclick.net secure.livechatinc.com www.facebook.com vars.hotjar.com www.youtube.com tpc.googlesyndication.com www.googletagmanager.com cdn.videgree.com bizform.vitalyun.com; img-src 'self' data:  *.gsscloud.com *.google-analytics.com *.n0.cdn.getcloudapp.com *.g.doubleclick.net *.gstatic.com cdn.files-text.com www.facebook.com i.ytimg.com www.google.com www.google.com.tw gssweb.gss.com.tw www.gss.com.tw cl.ly connect.facebook.net uwillx.com www.googletagmanager.com widgets.magentocommerce.com s3.amazonaws.com lh3.googleusercontent.com lh4.ggpht.com member.kerebro.com www.googleadservices.com jolly-beach-08300eb00.6.azurestaticapps.net r.adgeek.net; media-src cdn.livechatinc.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.livechatinc.com *.hotjar.com *.google-analytics.com *.google.com connect.facebook.net googleads.g.doubleclick.net kerebro.com store.gsscloud.com www.googleadservices.com www.googletagmanager.com www.youtube.com www.linkedin.com  uwillx.com tpc.googlesyndication.com unpkg.com kit.fontawesome.com cdnjs.cloudflare.com www.clarity.ms; script-src-elem 'self' 'unsafe-inline' data: store.gsscloud.com cdnjs.cloudflare.com cdn.jsdelivr.net cdn.livechatinc.com api.livechatinc.com unpkg.com www.clarity.ms kit.fontawesome.com www.googletagmanager.com kerebro.com www.youtube.com www.google-analytics.com ssl.google-analytics.com connect.facebook.net googleads.g.doubleclick.net https:\/\/r.adgeek.net; style-src 'self' 'unsafe-eval' 'unsafe-inline' fonts.googleapis.com store.gsscloud.com uwillx.com kerebro.com kerebro.com unpkg.com cdnjs.cloudflare.com; style-src-elem 'self' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com unpkg.com; report-uri https:\/\/gsscloud.report-uri.com\/r\/d\/csp\/wizard","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/bat.bing.com https:\/\/cdn.cookielaw.org https:\/\/collector-45478.tvsquared.com https:\/\/js.zuora.com https:\/\/www.googletagmanager.com https:\/\/www.datadoghq-browser-agent.com https:\/\/js.stripe.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/cdn.eu.heap-api.com https:\/\/*.heapanalytics.com https:\/\/t.contentsquare.net https:\/\/app.contentsquare.net https:\/\/app.contentsquare.com https:\/\/analytics.tiktok.com https:\/\/*.tiktok.com https:\/\/connect.facebook.net https:\/\/www.googleadservices.com https:\/\/widget.trustpilot.com; style-src 'report-sample' 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: https:\/\/images.ctfassets.net https:\/\/bat.bing.net https:\/\/js.zuora.com https:\/\/collector-45478.tvsquared.com https:\/\/cdn.cookielaw.org https:\/\/www.googletagmanager.com https:\/\/c.eu.heap-api.com https:\/\/*.contentsquare.net https:\/\/www.facebook.com https:\/\/googleads.g.doubleclick.net https:\/\/*.trustpilot.com https:\/\/*.adnxs.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/*.auryc.com; connect-src 'self' https:\/\/cloudflare-dns.com https:\/\/api.statsig.com https:\/\/statsig.com https:\/\/featuregates.org https:\/\/statsigapi.net https:\/\/statsigcdn.com https:\/\/featureassets.org https:\/\/assetsconfigcdn.org https:\/\/prodregistryv2.org https:\/\/beyondwickedmapping.org https:\/\/checkout.uat.pethealthclub.com https:\/\/checkout.pethealthclub.com https:\/\/cognito-identity.eu-west-1.amazonaws.com https:\/\/cognito-idp.eu-west-1.amazonaws.com https:\/\/o491651.ingest.us.sentry.io https:\/\/preview.contentful.com https:\/\/contentful.com https:\/\/cdn.contentful.com https:\/\/browser-intake-datadoghq.eu https:\/\/browser-intake-datadoghq.com https:\/\/browser-intake-ap1-datadoghq.com https:\/\/browser-intake-ap2-datadoghq.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/bat.bing.net https:\/\/cdn.cookielaw.org https:\/\/geolocation.onetrust.com https:\/\/privacyportal-de.onetrust.com https:\/\/*.zuora.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/recaptcha.google.com https:\/\/analytics.tiktok.com https:\/\/www.facebook.com https:\/\/googleads.g.doubleclick.net https:\/\/td.doubleclick.net https:\/\/*.trustpilot.com https:\/\/*.adnxs.com https:\/\/c.eu.heap-api.com https:\/\/heapanalytics.com https:\/\/eu.heapanalytics.com https:\/\/*.auryc.com https:\/\/*.contentsquare.net; frame-src 'self' https:\/\/*.zuora.com https:\/\/js.stripe.com https:\/\/www.google.com https:\/\/recaptcha.google.com https:\/\/widget.trustpilot.com; object-src 'none'; base-uri 'self'; manifest-src 'self'; media-src 'self'; worker-src blob:; frame-ancestors 'none'","count":2},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' *.msecnd.net connect.facebook.net tags.tiqcdn.com cdn.cookielaw.org eploytealium.com munchkin.marketo.net cdn.livechatinc.com api.livechatinc.com cdn.optimizely.com googletagmanager.com *.arrivia-cdn.com googleads.g.doubleclick.net deploytealium.com maps.googleapis.com *.clarity.ms scripts.clarity.ms *.personyze.com counter.personyze.com counter2.personyze.com count.personyze.com *.tealiumiq.com *.blob.core.windows.net cdn.quantummetric.com www.googletagmanager.com www.googletagmanager.com:443 cdn.jsdelivr.net cdn.jsdelivr.net:443 ajax.googleapis.com cdnjs.cloudflare.com unpkg.com kit.fontawesome.com pagead2.googlesyndication.com static.elfsight.com static.elfsight.com:443 universe-static.elfsightcdn.com universe-static.elfsightcdn.com:443 snippet.maze.co lpcdn.lpsnmedia.net apis.google.com cdn.segment.com bat.bing.com bat.bing.com:443 https:\/\/d2361c0djb4k63.cloudfront.net; frame-src 'self' https: blob: *.clarity.ms *.personyze.com *.tealiumiq.com *.blob.core.windows.net pagead2.googlesyndication.com static.elfsight.com static.elfsight.com:443 universe-static.elfsightcdn.com universe-static.elfsightcdn.com:443; connect-src 'self' 'unsafe-inline' 'unsafe-eval' wss: https: data: blob: *.clarity.ms *.personyze.com counter.personyze.com counter2.personyze.com count.personyze.com *.tealiumiq.com *.blob.core.windows.net https:\/\/visitor-service-us-east-1.tealiumiq.com visitor-service.tealiumiq.com googleads.g.doubleclick.net www.clarity.ms bat.bing.com bat.bing.com:443 nebula-cdn.kampyle.com api.livechatinc.com connect.facebook.net ajax.googleapis.com cdnjs.cloudflare.com cdn.quantummetric.com www.googletagmanager.com www.googletagmanager.com:443 cdn.jsdelivr.net cdn.jsdelivr.net:443 static.elfsight.com static.elfsight.com:443 universe-static.elfsightcdn.com universe-static.elfsightcdn.com:443 lpcdn.lpsnmedia.net apis.google.com cdn.segment.com https:\/\/events.prod.steller.co; img-src 'self' https: data: blob: https:\/\/d14jf0tks233zb.cloudfront.net; media-src 'self' https: data: blob: https:\/\/d14jf0tks233zb.cloudfront.net; frame-ancestors 'self' *.7across.travel *.7acrosstravel *.accorplusdiscovery.com *.addthis.com *.airportparking.net.au *.avctravel.com.au *.azurewebsites.net *.bzzworld.com *.bzzworldtravel.com *.clubmedaustralia.com.au *.crownclubmarketplace.com *.cruise.ovscruise.com *.cruise.wotif.com *.cruisemegastore.com.au *.cruisepilot.com.au *.dae-travel.com *.discover365.co.nz *.discover365.co.uk *.discover365.com.au *.doubleclick.net *.driveaway.com.au *.facebook.com *.favc.com *.hightide.com.au *.IAMLVC.com *.ice-cdn.com *.icecruises.com.au *.iceenterprise.com *.icevacations.com.au *.kampyle.com *.kivac.com.mx *.latitude21resorts.com *.latitudeguestservices.com *.latitudevacationclub.com *.lifestylebywyndhamlite.com *.liveaquaresidenceclub.com *.livechatinc.com *.looking4.com *.mustdotravels.com *.my241cruise.com.au *.my241rewards.com.au *.myfuturecruisecredit.com *.optimizely.com *.ourvacationcentre.com *.ourvacationcentre.com.au *.ourvacationcentre.net *.ovctour.com *.ovscruise.com *.ovsresort.com *.qvitravelsavings.com *.rci.my241cruise.com.au *.rci.travel *.re-set.mx *.re-set.travel *.saveonresorts.com *.tawk.to *.theclub365.com.au *.tourmegastore.com.au *.travelii.mx *.travelmegastore.com.au *.travelperksplus.com *.travelsavingspassport.com *.tripauthority.com *.tripsavr.com *.tripsavr2.com *.ultiqa.com.au *.ultiqaexplore.com.au *.ultiquaexplore.com.au *.windows.net *.world2go.mx *.wotif.com *.synchronycredit.com *.synchrony.com *.youtube.com 7across.travel accorplusdiscovery.com agentportalui-wa-dev-usw.azurewebsites.net agentportalui-wa-qa-usw.azurewebsites.net assets.cruisemail.com.au avctravel.com.au bid.g.doubleclick.net cruise.flybuystravel.com.au cruise.ovscruise.com cruise.wotif.com cruisemegastore.com.au cruisepilot.com.au dae-travel.com discover365.co.nz discover365.co.uk discover365.com.au elcidsales.latitudeguestservices.com hightide.com.au icecruises.com.au iceenterprise.com icevacations.com.au latitudevacationclub.com lifestylebywyndhamlite.com mustdotravels.com my241cruise.com.au my241rewards.com.au myfuturecruisecredit.com ourvacationcentre.com ourvacationcentre.com.au ourvacationcentre.net ovctour.com ovscruise.com rci.my241cruise.com.au rci.travel tawk.to theclub365.com.au tour.icruiserewards.com tour.thevidalifestyle.com tourmegastore.com.au tours.icruise.com tours.tourmegastore.com.au travelmegastore.com.au travelperksplus.com ukproducthub.azureedge.net ukproducthub.blob.core.windows.net ultiqa.com.au ultiqaexplore.com.au ultiquaexplore.com.au windows.net wotif.com localhost:8080 qa-id.synchronycredit.com uat-id.synchronycredit.com id.synchrony.com *.clarity.ms *.personyze.com pagead2.googlesyndication.com; block-all-mixed-content; report-uri https:\/\/temporarycsp.azurewebsites.net\/api\/CreateReport; report-to csp-endpoint;","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.webwinkelkeur.nl https:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com consentcdn.cookiebot.eu td.doubleclick.net www.youtube-nocookie.com https:\/\/*.dpdconnect.nl *.twitter.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io widgets.automizely.com widgets.automizely.io https:\/\/images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.pay.nl *.calendly.com *.hsforms.net *.hsforms.com www.google.com www.google.nl www.facebook.com bat.bing.com px.ads.linkedin.com img.sct.eu1.usercentrics.eu *.cloudflare.com *.klarna.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.webwinkelkeur.nl ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https:\/\/maps.gstatic.com https:\/\/maps.googleapis.com www.googletagmanager.com blob: https:\/\/www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com ajax.googleapis.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io https:\/\/maps.googleapis.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.gstatic.com https:\/\/cdn.jsdelivr.net\/npm\/@ryangjchandler\/spruce@2.x.x\/dist\/spruce.umd.js www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com chimpstatic.com api.dpdconnect.nl www.googletagmanager.com consent.cookiebot.eu snap.licdn.com connect.facebook.net bat.bing.com googleads.g.doubleclick.net consentcdn.cookiebot.eu www.google.com www.gstatic.com https:\/\/*.dpdconnect.nl *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.webwinkelkeur.nl downloads.mailchimp.com *.list-manage.com https:\/\/maps.googleapis.com\/maps\/api\/ https:\/\/places.googleapis.com\/ https:\/\/examplecdn.com https:\/\/maps.googleapis.com\/maps-api-v3\/ https:\/\/places.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com www.youtube-nocookie.com www.gstatic.com *.fontawesome.com *.cloudflare.com *.google.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.webwinkelkeur.nl downloads.mailchimp.com https:\/\/fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.automizely.com api.automizely.io https:\/\/maps.googleapis.com https:\/\/player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com region1.analytics.google.com px.ads.linkedin.com consentcdn.cookiebot.eu www.youtube-nocookie.com play.google.com jnn-pa.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.webwinkelkeur.nl https:\/\/places.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pay.nl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com googleads.g.doubleclick.net pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http:\/\/localhost\/paynl\/csp\/report; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/cdn.cookie-script.com https:\/\/www.eek.ee https:\/\/vjs.zencdn.net https:\/\/cdnjs.cloudflare.com https:\/\/www.googletagmanager.com https:\/\/cdn.datatables.net https:\/\/t.contentsquare.net https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https:\/\/www.eek.ee https:\/\/vjs.zencdn.net https:\/\/cdn.datatables.net; img-src 'self' data: https:\/\/www.google-analytics.com https:\/\/www.facebook.com https:\/\/google.com https:\/\/www.google.ee; connect-src 'self' https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/www.facebook.com https:\/\/t.contentsquare.net; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net;","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https:\/\/fonts.gstatic.com *.fontawesome.com data: https:\/\/widgets.trustedshops.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com https:\/\/www.google.com https:\/\/orbitvu.co https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.googletagmanager.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.sofort.com\/de\/su\/320x120.png maps.gstatic.com https:\/\/gstatic.com *.ggpht *.googleapis.com https:\/\/www.google.com https:\/\/www.google.de https:\/\/www.sanivita.de https:\/\/sanivita.de http:\/\/russka.de https:\/\/black.bird.eu https:\/\/notification.amasty.com https:\/\/app.usercentrics.eu https:\/\/widgets.trustedshops.com https:\/\/www.googletagmanager.com https:\/\/ts-logo-hubspot.s3.eu-central-1.amazonaws.com\/logo\/TrustedShops.png https:\/\/legal-images.trustedshops.com\/TrustedShops.png https:\/\/i.ytimg.com https:\/\/uct.service.usercentrics.eu https:\/\/pci.usd.de cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com https:\/\/widgets-qa.trustedshops.com *.etrusted.com magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/widget.usersnap.com https:\/\/cdn.usersnap.com https:\/\/resources.usersnap.com https:\/\/maps.googleapis.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/app.usercentrics.eu https:\/\/privacy-proxy.usercentrics.eu secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/fonts.googleapis.com *.fontawesome.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu https:\/\/maps.googleapis.com https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com *.googlesyndication.com https:\/\/stats.g.doubleclick.net *.usercentrics.eu *.trustedshops.com *.etrusted.com https:\/\/widget.usersnap.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com https:\/\/integrations.etrusted.site api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: *.oney.io *.staging.oney.io https:\/\/fonts.gstatic.com https:\/\/cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.hipay-tpp.com *.hipay.com *.googleapis.com *.weltpixel.com https:\/\/thinglink.com\/ https:\/\/app.usercentrics.eu\/ www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https:\/\/images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.hipay.com *.oney.io *.staging.oney.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/www.google.fr https:\/\/api.mapbox.com *.tile.openstreetmap.org https:\/\/widgets.trustedshops.com\/ https:\/\/integrations.etrusted.com\/ https:\/\/app.usercentrics.eu\/ *.facebook.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page https:\/\/maps.googleapis.com https:\/\/player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.oney.io *.staging.oney.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/cdnjs.cloudflare.com https:\/\/cdn-4.convertexperiments.com\/ https:\/\/widgets.trustedshops.com\/ https:\/\/integrations.etrusted.com\/ https:\/\/cdn.thinglink.me\/ https:\/\/app.usercentrics.eu\/ https:\/\/www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com assets.braintreegateway.com *.hipay.com *.googleapis.com https:\/\/static.klaviyo.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/integrations.etrusted.com\/ tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com data: mpsnare.iesnare.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.hipay-tpp.com *.hipay.com wss:\/\/mpsnare.iesnare.com *.oney.io *.staging.oney.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/nominatim.openstreetmap.org https:\/\/cdn-4.convertexperiments.com\/ https:\/\/integrations.etrusted.com\/ https:\/\/app.usercentrics.eu\/ https:\/\/api.usercentrics.eu\/ analytics.google.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src https: data: wss: 'unsafe-inline' 'unsafe-eval'; form-action https:; report-uri https:\/\/ggj3qf05xeualpl0weo7xdrg.httpschecker.net\/report","count":2},{"content-security-policy-report-only":" font-src *.fontawesome.com *.gstatic.com 'self' data: fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * magento-cloudflare.jetrails.com *.trustpilot.com *.wesupply.xyz https:\/\/wesupplylabs.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.ytimg.com 'self' data: *.gstatic.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com maps.googleapis.com *.amazonaws.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.avada.io *.google.com *.gstatic.com *.trustpilot.com *.cloudflare.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com maps.googleapis.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https:\/\/get.geojs.io *.avada.io t.elasticsuite.io *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' * data: img.3speakcontent.online emb.d.tube www.youtube.com staticxx.facebook.com player.vimeo.com https:\/\/cdnjs.cloudflare.com; img-src https: * data:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com; script-src 'self' 'self' 'unsafe-inline' 'unsafe-eval' data: https: www.google-analytics.com connect.facebook.net https:\/\/cdnjs.cloudflare.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com; connect-src 'self' wss:\/\/ws.beechat.hive-engine.com https:\/\/beechat.hive-engine.com https:\/\/history.hive-engine.com https:\/\/history.steem-engine.net https:\/\/api.hive-engine.com https:\/\/api.steem-engine.net https:\/\/scot-api.hive-engine.com https:\/\/scot-api.steem-engine.net https:\/\/steemitimages.com https:\/\/images.hive.blog securepubads.g.doubleclick.net https:\/\/api.steemit.com https:\/\/api.hive.blog api.blocktrades.us https:\/\/hivesigner.com https:\/\/pagead2.googlesyndication.com http:\/\/adservice.google.com https:\/\/www.google-analytics.com https:\/\/api.openhive.network https:\/\/ha.herpc.dtools.dev https:\/\/ha.smt-api.dtools.dev https:\/\/marketplace.tribaldex.com https:\/\/cdn.plyr.io https:\/\/api.coingecko.com https:\/\/hetestnet.dtools.dev https:\/\/smtscot.cryptoempirebot.com https:\/\/api.marketplace.tribaldex.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com localhost:8080 https:\/\/onboard-api.tribaldex.com https:\/\/api.hive.blog https:\/\/api.deathwing.me https:\/\/rpc.ausbit.dev https:\/\/api.ha.deathwing.me; frame-src https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com; form-action 'self'; frame-ancestors 'none'; object-src 'none'; report-uri \/api\/v1\/csp-violation","count":2},{"content-security-policy-report-only":" default-src * blob: data: 'unsafe-inline' 'unsafe-eval'; script-src * blob: data: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data: blob:; media-src * data: blob:; font-src * data: blob:; connect-src *; frame-src *; object-src *","count":2},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self'; media-src 'self' https: blob:; frame-ancestors 'self'; frame-src 'self' https:; base-uri 'self'; form-action 'self'; object-src 'none'","count":2},{"content-security-policy-report-only":" font-src cash-f.squarecdn.com https:\/\/*.gstatic.com *.googleapis.com *.gstatic.com data: *.bootstrapcdn.com *.cloudflare.com *.klarnacdn.net *.trustedshops.com *.twimg.com *.twitter.com *.typekit.net 'self' *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.adyen.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.facebook.com *.twitter.com 'self' 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ * *.adyen.com www.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com account.fetchify.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.facebook.com *.pinterest.com *.trustpilot.com *.twitter.com *.snapwidget.com 'self' www.googletagmanager.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src *.adobedtm.com *.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io * https:\/\/*.gstatic.com *.adyen.com *.gstatic.com *.googleapis.com *.awin1.com *.zenaps.com *.wepowerconnections.com maps.gstatic.com *.calcurates.com *.trackedlink.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.bing.com *.clarity.ms *.cloudflare.com craftyclicks.co.uk *.demdex.net *.facebook.com fetchify.com *.goldboutique.com *.google-analytics.com *.google.co.uk *.google.com *.googleadservices.com *.googletagmanager.com *.klarna.com *.lightemporium.com *.magentocommerce.com *.pinterest.com *.elfsightcdn.com *.qpj.de *.qpj.fr *.qpjewellers.com *.rubyandoscar.com *.scarletocean.com *.twimg.com *.twitter.com *.usercentrics.eu *.wisepops.com *.ytimg.com *.roeye.com *.roeyecdn.com *.bailandstone.com *.roxoa.com 'self' https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeocdn.com www.vimeo.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com lantern.roeyecdn.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.bing.com *.clickcease.com *.cloudflare.com cc-cdn.com *.facebook.net *.fontawesome.com *.getdrip.com *.google-analytics.com *.pcapredict.com *.pinimg.com *.pinterest.com *.plerdy.com *.taboola.com *.termly.io *.tiktok.com *.trustedshops.com *.trustpilot.com *.twimg.com *.twitter.com *.usercentrics.eu *.wisepops.net *.wisepops.com https:\/\/wisepops.net https:\/\/wisepops.com *.zdassets.com *.klarnaservices.com *.klarna.com *.clarity.ms https:\/\/snapwidget.com *.elfsight.com *.elfsightcdn.com *.roeyecdn.com *.qpjewellers.com\/connector\/ajax\/emailcapture *.rubyandoscar.com\/connector\/ajax\/emailcapture *.goldboutique.com\/connector\/ajax\/emailcapture *.bailandstone.com\/connector\/ajax\/emailcapture https:\/\/*.googletagmanager.com *.dotdigital.com 'self' *.googletagmanager.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app https:\/\/fonts.googleapis.com\/ fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com cc-cdn.com assets.braintreegateway.com *.bootstrapcdn.com *.cloudflare.com *.fontawesome.com *.googleapis.com *.gstatic.com *.klarnacdn.net *.trustedshops.com *.twimg.com *.twitter.com *.typekit.net *.usercentrics.eu  *.zdassets.com 'self' *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * *.adyen.com *.googleapis.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk *.slack.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.analytics.google.com *.bootstrapcdn.com *.bing.com *.clarity.ms *.cloudflare.com *.doubleclick.net *.facebook.com *.google-analytics.com https:\/\/google.com\/pay *.googleadservices.com *.klarna.com *.klarnaservices.com *.klarnaevt.com *.paypalobjects.com *.pcapredict.com *.pinterest.com *.plerdy.com *.sandbox.paypal.com *.termly.io *.tiktok.com *.trustpilot.com https:\/\/invitejs.trustpilot.com *.twimg.com *.twitter.com *.vimeocdn.com *.wisepops.net *.wisepops.com https:\/\/wisepops.net https:\/\/wisepops.com  *.zdassets.com *.zendesk.com *.zopim.com wss:\/\/widget-mediator.zopim.com *.sentry.io *.elfsight.com 'self' https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com *.googletagmanager.com *.stripe.com klarna.com *.klarnacdn.net *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/csp.threatview.app\/report; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" font-src *.klarnacdn.net *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com services.paytrail.com v1.api.paymenthighway.io maksu.pivo.fi kultaraha.op.fi epmt.nordea.fi verkkopankki.danskebank.fi verkkomaksu.poppankki.fi auth.aktia.fi verkkomaksu.saastopankki.fi verkkomaksu.omasp.fi online.s-pankki.fi online.alandsbanken.fi pay.paytrail.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.googletagmanager.com\/ www.google.com www.facebook.com js.playground.klarna.com *.klarna.com policy.app.cookieinformation.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ www.facebook.com www.google.fi pagead2.googlesyndication.com cdn2.hubspot.net static.paytrail.com resources.paytrail.com x.klarnacdn.net www.resursbank.fi ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https:\/\/*.cdninstagram.com https:\/\/*.fbcdn.net https:\/\/scontent-fra3-1.cdninstagram.com https:\/\/*.scontent.cdninstagram.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.shipit.ax *.upcloudobjects.com 'self' data: www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ graph.instagram.com static.zdassets.com widget-mediator.zopim.com connect.facebook.net x.klarnacdn.net chimpstatic.com downloads.mailchimp.com *.list-manage.com https:\/\/*.cdninstagram.com *.klarna.com *.klarnacdn.net *.klarnaservices.com policy.app.cookieinformation.com *.google.com *.gstatic.com www.xtento.com cdn.xtento.com https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.klarnacdn.net *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ static.zdassets.com https:\/\/*.cdninstagram.com https:\/\/*.fbcdn.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ ekr.zdassets.com hevari.zendesk.com wss:\/\/widget-mediator.zopim.com zendesk-eu.my.sentry.io www.facebook.com region1.analytics.google.com www.google.fi pagead2.googlesyndication.com eu.playground.klarnaevt.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com policy.app.cookieinformation.com consent.app.cookieinformation.com t.elasticsuite.io *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; connect-src 'self' wss: https:; style-src 'self' 'unsafe-inline' data: https:; frame-src 'self' https:\/\/batmaid.prismic.io https:\/\/*.trustpilot.com https:\/\/vars.hotjar.com https:\/\/*.google.com https:\/\/www.facebook.com https:\/\/*.doubleclick.net https:\/\/tpc.googlesyndication.com https:\/\/www.youtube.com https:\/\/pay.datatrans.com https:\/\/3dsec.cardcenter.ch https:\/\/acs1.viseca.ch https:\/\/acs.touch.tech https:\/\/www.instagram.com https:\/\/www.googletagmanager.com https:\/\/consentcdn.cookiebot.com data:; frame-ancestors 'self'; form-action 'self' https:\/\/pay.datatrans.com https:\/\/www.facebook.com; object-src 'none'; upgrade-insecure-requests; report-uri \/en\/api\/v1\/csp-violation-report","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com *.fontawesome.com *.gstatic.com widget.trustpilot.com t4.my-probance.one *.aplazame.com *.zendesk.com *.adobedtm.com *.adobe.com *.authorize.net *.braintreegateway.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cetelem.es *.livechatinc.com gum.criteo.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com player.vimeo.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com https:\/\/www.google.com\/recaptcha\/ *.avis-verifies.com\/ widget.trustpilot.com t4.my-probance.one *.aplazame.com *.zendesk.com *.adobedtm.com *.adobe.com *.authorize.net *.braintreegateway.com *.googletagmanager.com *.google.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.livechatinc.com gum.criteo.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com validator.swagger.io *.cetelem.es cdn.doofinder.com *.google.com *.youtube.com\/ widget.trustpilot.com t4.my-probance.one *.aplazame.com *.zendesk.com *.adobedtm.com *.adobe.com *.authorize.net *.braintreegateway.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.livechatinc.com gum.criteo.com imgsct.cookiebot.com *.gstatic.com *.facebook.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com\/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.cetelem.es cdn.doofinder.com *.googletagmanager.com *.cdn.cookielaw.org\/ widget.trustpilot.com t4.my-probance.one *.aplazame.com *.zendesk.com *.adobedtm.com *.adobe.com *.authorize.net *.braintreegateway.com apis.google.com *.google.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.livechatinc.com gum.criteo.com *.tradedoubler.com consent.cookiebot.com https:\/\/widgets.rr.skeepers.io\/ https:\/\/api-product-reviews.cxr.skeepers.io\/ https:\/\/cl-ppr.rr.skeepers.io\/ https:\/\/cl-pbr.cxr.skeepers.io\/ https:\/\/www.googletagmanager.com tagmanager.google.com analytics.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.cetelem.es *.doofinder.com *.fontawesome.com *.googleapis.com widget.trustpilot.com t4.my-probance.one *.aplazame.com *.zendesk.com *.adobedtm.com *.adobe.com *.authorize.net *.braintreegateway.com *.livechatinc.com gum.criteo.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.cetelem.es *.doofinder.com wss:\/\/*.doofinder.com *.googletagmanager.com *.cdn.cookielaw.org\/ *.youtube.com\/ widget.trustpilot.com t4.my-probance.one *.aplazame.com *.zendesk.com *.adobedtm.com *.adobe.com *.authorize.net *.braintreegateway.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.livechatinc.com gum.criteo.com https:\/\/widgets.rr.skeepers.io\/ https:\/\/api-product-reviews.cxr.skeepers.io\/ https:\/\/cl-ppr.rr.skeepers.io\/ https:\/\/cl-pbr.cxr.skeepers.io\/ *.google-analytics.com analytics.google.com *.facebook.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com https:\/\/secure.plexo.com.uy\/ https:\/\/napz.com.uy\/ https:\/\/www.leblanc.com.uy\/ https:\/\/leblanc.com.uy\/ https:\/\/www.elemporiodelhogar.com.uy\/ https:\/\/elemporiodelhogar.com.uy\/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net * *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/maps.gstatic.com https:\/\/maps.googleapis.com https:\/\/lh3.googleusercontent.com https:\/\/*.gstatic.com https:\/\/googleads.g.doubleclick.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page * *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/maps.googleapis.com https:\/\/www.gstatic.com openfpcdn.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/maps.googleapis.com ipinfo.io api.ipify.org api.bigdatacloud.net trackings.nemu.com.br ad.doubleclick.net openfpcdn.ioopenfpcdn.io *.nemu.com.br 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.reachout.global pos-kowzef.reachout.global 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/static.addtoany.com\/ *.doubleclick.net\/ *.addthis.com *.doubleclick.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.adobedtm.com *.afip.gob.ar *.cloudfront.net https:\/\/player.vimeo.com *.clarity.ms *.google.com.co *.bing.com *.kosiuko.com *.facebook.com *.metricool.com *.google.com.ar *.google.com maps.googleapis.com maps.gstatic.com *.googleusercontent.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/rum.hlx.page https:\/\/maps.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.addtoany.com *.cloudfront.net *.doubleclick.net *.vimeo.com https:\/\/f.vimeocdn.com https:\/\/player.vimeo.com *.clarity.ms *.tiktok.com *.aptrinsic.com *.facebook.net *.facebook.com *.googleapis.com *.googletagmanager.com track-icommkt.com *.icommarketing.com maps.googleapis.com maps.gstatic.com *.reachout.global *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.doubleclick.net *.vimeo.com https:\/\/vimeo.com *.vimeocdn.com https:\/\/f.vimeocdn.com *.clarity.ms *.google.com *.tiktok.com *.facebook.net *.facebook.com *.googletagmanager.com track-icommkt.com *.notifications-icommkt.com https:\/\/notifications-icommkt.com maps.googleapis.com pos-kowzef.reachout.global *.reachout.global *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.aptrinsic.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https:\/\/www.googletagmanager.com https:\/\/*.clarity.ms https:\/\/clarity.ms https:\/\/c.clarity.ms https:\/\/*.bing.com https:\/\/bing.com https:\/\/widget.trustpilot.com https:\/\/script.crazyegg.com https:\/\/code.jquery.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/ws.walmeric.com https:\/\/t.womtp.com https:\/\/www.iberiacards.com https:\/\/www.iberia.com https:\/\/*.doubleclick.net https:\/\/*.google.com https:\/\/*.google.es https:\/\/*.analytics.google.com https:\/\/*.google-analytics.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/*.amazon-adsystem.com https:\/\/ara.paa-reporting-advertising.amazon https:\/\/*.ads.linkedin.com https:\/\/px.ads.linkedin.com https:\/\/*.licdn.com https:\/\/pagead2.googlesyndication.com https:\/\/analytics.tiktok.com https:\/\/*.adform.net https:\/\/*.bidswitch.net https:\/\/*.casalemedia.com https:\/\/*.pro-market.net https:\/\/*.adsrvr.org https:\/\/*.openx.net https:\/\/*.eyeota.net https:\/\/*.acuityplatform.com https:\/\/tag.oniad.com https:\/\/*.cootlogix.com https:\/\/*.constellation-technology.com https:\/\/*.tapad.com https:\/\/*.tiktokw.us; frame-src 'self' https:\/\/widget.trustpilot.com https:\/\/www.iberiacards.com https:\/\/consentcdn.cookiebot.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'","count":2},{"content-security-policy-report-only":" default-src 'self' https: d2g3ke5a7j3wqi.cloudfront.net; font-src 'self' https: data:; img-src 'self' https: data: d2g3ke5a7j3wqi.cloudfront.net; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' d2g3ke5a7j3wqi.cloudfront.net; style-src 'self' https: 'unsafe-inline' d2g3ke5a7j3wqi.cloudfront.net; frame-src 'self' https: http: data:; connect-src 'self' https: wss: www.lottopanalo.com; report-uri \/csp_reports","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com data: *.fontawesome.com *.gstatic.com 'self' data: surveys-static.survicate.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ cdn.dnky.co amc.demdex.net www.google.com www.facebook.com youtube.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io maps.gstatic.com maps.googleapis.com accounts.google.com www.facebook.com 'self' data: www.google.com.co js.intercomcdn.com intercomassets.com *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-datasolutions.com https:\/\/rum.hlx.page cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net player.vimeo.com https:\/\/www.google.com *.gstatic.com https:\/\/maps.googleapis.com *.snrbox.com static.hotjar.com *.clarity.ms surveys-static.survicate.com script.hotjar.com widget.intercom.io js.intercomcdn.com api-iam.intercom.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdn.dnky.co *.fontawesome.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.cookielaw.org *.snrcdn.net https:\/\/surveys-static.survicate.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.magento-datasolutions.com *.magento-ds.com maps.googleapis.com api.comapi.com bam.nr-data.net *.synerise.com *.cookielaw.org *.snrbox.com t.clarity.ms stats.g.doubleclick.net api-iam.intercom.io wss:\/\/nexus-websocket-a.intercom.io wss:\/\/ws.hotjar.com https:\/\/content.hotjar.io *.googletagmanager.com *.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com data:; img-src 'self' data: https:\/\/cordobesitas.tv https:\/\/www.cordobesitas.tv https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/analytics.google.com https:\/\/www.googletagmanager.com; form-action 'self'","count":2},{"content-security-policy-report-only":" worker-src https:\/\/cdn.connectif.cloud; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/cdn.cs.1worldsync.com https:\/\/script.hotjar.com https:\/\/fonts.cdnfonts.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.xtento.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * td.doubleclick.net www.google.com https:\/\/www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com www.xtento.com cdn.xtento.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com mcstaging.digitalixcomercio.com mcprod.digitalixcomercio.com rt.flix360.com media.flixcar.com www.google.com.co https:\/\/mcprod.digitalixcomercio.com https:\/\/cdn.cs.1worldsync.com https:\/\/photos-us.bazaarvoice.com https:\/\/www.facebook.com https:\/\/px.ads.linkedin.com https:\/\/www.linkedin.com\/px\/ https:\/\/ad.doubleclick.net https:\/\/px4.ads.linkedin.com https:\/\/bat.bing.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com www.xtento.com cdn.xtento.com https:\/\/cdn.connectif.cloud js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/www.googletagmanager.com tagmanager.google.com unpkg.com *.cardinalcommerce.com www.google.com www.gstatic.com cdn.cs.1worldsync.com media.flixfacts.com ws.cs.1worldsync.com media.flixcar.com static.queue-it.net assets.queue-it.net static.hotjar.com script.hotjar.com static.zdassets.com js-agent.newrelic.com https:\/\/static.zdassets.com https:\/\/static.hotjar.com https:\/\/static.queue-it.net https:\/\/prod.flixgvid.flix360.io  https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/analytics.tiktok.com https:\/\/pixels.lemonpi.io https:\/\/pagead2.googlesyndication.com https:\/\/stapecdn.com https:\/\/ix.aqmaster.com https:\/\/scripts.clarity.ms\/0.8.59\/clarity.js https:\/\/scripts.clarity.ms\/0.8.60-beta\/clarity.js https:\/\/rum.hlx.page\/.rum\/@adobe\/helix-rum-js@%5E2\/dist\/rum-standalone.js https:\/\/www.googletagmanager.com\/gtm.js https:\/\/bat.bing.com\/p\/action\/343245328.js https:\/\/bat.bing.com\/p\/action\/343245325.js https:\/\/bat.bing.com\/p\/action\/343245326.js https:\/\/bat.bing.com\/p\/action\/343245327.js https:\/\/bat.bing.com https:\/\/static.tiktok.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com display.ugc.bazaarvoice.com assets.braintreegateway.com tagmanager.google.com https:\/\/cdn.cs.1worldsync.com https:\/\/fonts.cdnfonts.com\/css\/satoshi https:\/\/www.googletagmanager.com\/debug\/badge.css 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com https:\/\/cdn.cs.1worldsync.com https:\/\/mcprod.shop.epson.com.co\/media 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.doubleclick.net media.flixcar.com ekr.zdassets.com *.zendesk.com bam.nr-data.net googleads.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/ekr.zdassets.com wss:\/\/widget-mediator.zopim.com https:\/\/am1-api.connectif.cloud https:\/\/surveystats.hotjar.io https:\/\/content.hotjar.io wss:\/\/ws.hotjar.com https:\/\/vc.hotjar.io https:\/\/analytics.tiktok.com https:\/\/px.ads.linkedin.com https:\/\/www.facebook.com https:\/\/ix.aqmaster.com https:\/\/cdn.connectif.cloud https:\/\/f.clarity.ms\/collect https:\/\/n.clarity.ms\/collect https:\/\/bat.bing.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com https: blob: 'self' 'unsafe-inline'; default-src googleads.g.doubleclick.net stats.g.doubleclick.net commerce.adobedc.net widget-mediator.zopim.com https:\/\/pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com cdn.nznature.co.nz fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com https:\/\/plumrocket.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ www.google.com https:\/\/plumrocket.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.bing.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ maps.gstatic.com cdn.nznature.co.nz www.facebook.com www.google.com www.google.co.nz google-analytics.com privymktg.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.bing.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com cdn.nznature.co.nz connect.facebook.net www.gstatic.com www.google.com widget.privy.com downloads.mailchimp.com chimpstatic.com mc.us16.list-manage.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https:\/\/static.klaviyo.com cdn.nznature.co.nz fonts.googleapis.com assets.privy.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com cdn.nznature.co.nz stats.g.doubleclick.net api.privy.com www.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https:\/\/www.googletagmanager.com *.googleapis.com *.fontawesome.com *.cloudflare.com *.bootstrapcdn.com *.twitter.com https:\/\/fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https:\/\/lapp.leanpay.hr https:\/\/app.leanpay.hr https:\/\/stage-app.leanpay.si https:\/\/app.leanpay.si https:\/\/stage-app.leanpay.ro https:\/\/vendor.leanpay.ro https:\/\/stage-checkout.leanpay.si https:\/\/stage-checkout.leanpay.ro https:\/\/checkout.leanpay.ro https:\/\/app.leanpay.ro *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.addthis.com *.trustpilot.com *.twitter.com *.vimeo.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com *.google-analytics.com *.twitter.com *.contentsquare.net *.clarity.ms *.bing.com *.google.si https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https:\/\/www.googletagmanager.com *.addthis.com *.googleapis.com *.cloudflare.com *.fontawesome.com *.google-analytics.com googletagmanager.com *.googletagmanager.com graph.facebook.com connect.facebook.net *.facebook.com *.gstatic.com *.moatads.com *.trustpilot.com widgets.pinterest.com *.contentsquare.com *.contentsquare.net *.clarity.ms *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com *.cloudflare.com *.gstatic.com *.twitter.com https:\/\/fonts.bunny.net assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com *.cloudflare.com *.twitter.com *.contentsquare.net *.clarity.ms *.viralsweep.com *.smartsuppchat.com *.smartsuppcdn.com *.smartsupp.com wss:\/\/websocket-visitors.smartsupp.com\/ *.doubleclick.net https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com *.fontawesome.com https:\/\/fonts.bunny.net *.klarnacdn.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.cardinalcommerce.com *.adyen.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.google.com *.braintreegateway.com *.paypal.com google.com * mirakl.m2e.cloud js.mollie.com *.adyen.com *.klarna.com *.google.de *.doubleclick.net *.googlesyndication.com *.googletagservices.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com * https:\/\/images.unsplash.com magefan.com cm.magefan.com https:\/\/firebasestorage.googleapis.com cdn.magmodules.eu https:\/\/www.mollie.com www.google-analytics.com analytics.google.com *.adyen.com *.klarna.com *.klarnaevt.com *.klarnacdn.net www.google.de *.googletagmanager.com *.doubleclick.net *.google.com *.googlesyndication.com *.googletagservices.com *.googleadservices.com www.artplants.de bat.bing.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com widget.freshworks.com m2epro.freshdesk.com https:\/\/maps.googleapis.com *.avada.io *.shopify.com js.mollie.com *.gstatic.com *.klarna.com *.klarnacdn.net *.klarnaservices.com https:\/\/www.google-analytics.com https:\/\/stats.artplants.de https:\/\/cdn.inna-glas.* https:\/\/cdn.cookie-script.com https:\/\/bat.bing.com www.google.de *.googletagmanager.com *.doubleclick.net *.googlesyndication.com *.googletagservices.com *.googleadservices.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https:\/\/fonts.bunny.net *.klarnacdn.net *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * widget.freshworks.com m2epro.freshdesk.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/get.geojs.io *.avada.io analytics.google.com *.adyen.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com *.doubleclick.net *.googlesyndication.com *.googletagservices.com stats.artplants.de bat.bing.com https:\/\/cdn.inna-glas.* 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":2},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com data: *.shopperapproved.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.trustedshops.com *.bootstrapcdn.com wss:\/\/vts.zohopublic.in *.zohocdn.com *.google-analytics.com https:\/\/k8wflbhm6p-2.algolianet.com *.certcapture.com *.livehelpnow.net app.livehelpnow.net https:\/\/applepay.cdn-apple.com *.linkedin.com *.pay.google.com googletagmanager.com www.googletagmanager.com *.googletagmanager.com www.google-analytics.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.rigidhitch.com *.blueoxtowbars.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.shopperapproved.com *.twitter.com *.facebook.com *.google-analytics.com wss:\/\/vts.zohopublic.in https:\/\/k8wflbhm6p-2.algolianet.com *.certcapture.com app.livehelpnow.net *.linkedin.com *.pay.google.com *.adobe.com googletagmanager.com www.googletagmanager.com *.googletagmanager.com www.google-analytics.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com https:\/\/www.shopperapproved.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com *.shopperapproved.com 'self' https:\/\/js.stripe.com *.twitter.com https:\/\/www.google.com https:\/\/www.google.co.in https:\/\/www.facebook.com *.google-analytics.com wss:\/\/vts.zohopublic.in https:\/\/k8wflbhm6p-2.algolianet.com https:\/\/maps.google.com\/ https:\/\/transaction.hostedpayments.com\/ https:\/\/certtransaction.hostedpayments.com\/ *.livehelpnow.net app.livehelpnow.net https:\/\/form.jotform.com\/ https:\/\/submit.jotform.com\/ *.linkedin.com *.pay.google.com https:\/\/www.paypal.com *.googletagmanager.com www.googletagmanager.com www.google-analytics.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.doubleclick.net *.facebook.com *.rigidhitch.com *.blueoxtowbars.com *.paypalobjects.com *.hostedpayments.com *.purechatcdn.com *.weltpixel.com *.wesupply.xyz https:\/\/wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com s3-us-west-1.amazonaws.com *.shopperapproved.com\/ *.adobedtm.com *.cloudflare.com *.googleadservices.com *.google-analytics.com *.google.com *.google.co.in https:\/\/www.facebook.com *.klarna.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https:\/\/stats.g.doubleclick.net https:\/\/d.adroll.com https:\/\/pixel.advertising.com https:\/\/pixel.rubiconproject.com https:\/\/simage2.pubmatic.com https:\/\/dsum-sec.casalemedia.com https:\/\/ads.yahoo.com https:\/\/eb2.3lift.com https:\/\/sync.outbrain.com https:\/\/trc.taboola.com https:\/\/x.bidswitch.net\/sync https:\/\/ib.adnxs.com https:\/\/idsync.rlcdn.com https:\/\/us-u.openx.net https:\/\/ups.analytics.yahoo.com https:\/\/segments.company-target.com https:\/\/sync.tidaltv.com *.zohopublic.in *.zoho.in *.zohocdn.com wss:\/\/vts.zohopublic.in https:\/\/k8wflbhm6p-2.algolianet.com *.amazonaws.com *.livehelpnow.net app.livehelpnow.net https:\/\/vct-vendor.github.io https:\/\/s3.envato.com https:\/\/alothemes.com\/ cdn-cookieyes.com *.linkedin.com *.pay.google.com *.googletagmanager.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https:\/\/www.shopperapproved.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.disqus.com https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.answerbase.com rigidhitch.dckap.co *.rigidhitch.com *.blueoxtowbars.com *.godaddy.com *.bing.com *.facebook.net *.facebook.com *.clarity.ms *.purechat.com *.purechatcdn.com *.wp.com *.gravatar.com https:\/\/www.googletagmanager.com *.hsforms.net *.hsforms.com *.reddit.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com www.shopperapproved.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com chimpstatic.com https:\/\/bat.bing-int.com https:\/\/leadtracker.smartsites.com *.omniconvert.com *.cookieyes.com cdn-cookieyes.com snap.licdn.com *.linkedin.com *.bing.net https:\/\/mpc2-prod-1-is5qnl632q-uc.a.run.app 'report-sample' 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *.adobedtm.com *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com *.cardinalcommerce.com songbirdstag.cardinalcommerce.com *.pay.google.com *.google-analytics.com *.googletagmanager.com apis.google.com *.googleadservices.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha https:\/\/www.google.com\/recaptcha *.google.com\/ https:\/\/maps.googleapis.com\/maps\/api\/js *.instagram.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https:\/\/www.paypal.com https:\/\/www.paypalobjects.com *.paypalobjects.com c.paypal.com *.paypal.com sandbox.paypal.com *.sandbox.paypal.com https:\/\/js.stripe.com\/v3\/ *.stripe.com *.link.com *.livehelpnow.net app.livehelpnow.net *.polyfill.io *.crazyegg.com https:\/\/www.googletagmanager.com https:\/\/googleads.g.doubleclick.net *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https:\/\/www.shopperapproved.com https:\/\/direct.shopperapproved.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.disqus.com pay.google.com *.purechat.com *.purechatcdn.com *.answerbase.com *.hostedpayments.com *.bing.com *.clarity.ms *.googleadservices.com\/ *.blueoxtowbars.com https:\/\/www.google-analytics.com *.hsforms.net *.hsforms.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com unpkg.com https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.shopperapproved.com 'report-sample' 'self' 'unsafe-inline' https:\/\/maxcdn.bootstrapcdn.com *.bootstrapcdn.com *.cloudflare.com *.fontawesome.com *.googleapis.com *.gstatic.com *.linkedin.com *.pay.google.com googletagmanager.com www.googletagmanager.com *.googletagmanager.com *.google-analytics.com www.google-analytics.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com downloads.mailchimp.com https:\/\/static.klaviyo.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.answerbase.com *.rigidhitch.com *.blueoxtowbars.com *.gravatar.com *.wp.com tagmanager.google.com 'self' 'unsafe-inline'; object-src connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'self' 'unsafe-inline'; manifest-src 'self' *.google.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com sessions.bugsnag.com *.shopperapproved.com 'self' *.cloudflare.com 'self' https:\/\/maps.googleapis.com *.twitter.com *.twimg.com *.google.co.in *.facebook.com *.zohopublic.in *.zoho.in *.google-analytics.com wss:\/\/vts.zohopublic.in https:\/\/k8wflbhm6p-2.algolianet.com https:\/\/google.com\/pay *.livehelpnow.net wss:\/\/app.livehelpnow.net https:\/\/alothemes.com *.crazyegg.com *.cookieyes.com cdn-cookieyes.com *.omniconvert.com https:\/\/bat.bing-int.com snap.licdn.com *.linkedin.com *.bing.net https:\/\/mpc2-prod-1-is5qnl632q-uc.a.run.app https:\/\/mpc-prod-18-s6uit34pua-uc.a.run.app *.pay.google.com https:\/\/demo-1.conversionsapigateway.com googletagmanager.com *.googletagmanager.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.answerbase.com *.smarty.com *.rigidhitch.com *.blueoxtowbars.com *.clarity.ms *.purechat.com *.purechatcdn.com *.bing.com *.doubleclick.net *.smartsites.com *.facebook.net *.online-metrix.net https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.redditstatic.com *.reddit.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' *.googleapis.com ap.thepayapays.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'self' 'unsafe-inline'; report-uri https:\/\/rigidhitch.com\/; report-to report-endpoint;","count":2},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-ntt6fuIj887WFIpGbK2EsQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-aM0u_8JF67kASSruZ3_0fQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" font-src 'self' www.mozilla.org; img-src 'self' blog.mozilla.org data: images.ctfassets.net www.google-analytics.com www.googletagmanager.com www.mozilla.org; default-src 'self' *.mozilla.org; style-src 'self' 'unsafe-inline' cdn.transcend.io transcend-cdn.com www.mozilla.org; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google-analytics.com *.googletagmanager.com cdn.transcend.io google-analytics.com googletagmanager.com js.stripe.com s.ytimg.com tagmanager.google.com transcend-cdn.com www.mozilla.org www.youtube.com; frame-ancestors 'none'; form-action 'self' https:\/\/abdri3ttkb.execute-api.us-east-2.amazonaws.com https:\/\/accounts.firefox.com\/ https:\/\/basket.mozilla.org; connect-src 'self' *.analytics.google.com *.google-analytics.com *.googletagmanager.com analytics.google.com cdn.transcend.io google-analytics.com googletagmanager.com gtm.mozilla.org https:\/\/abdri3ttkb.execute-api.us-east-2.amazonaws.com https:\/\/accounts.firefox.com\/ https:\/\/basket.mozilla.org o1069899.ingest.sentry.io o1069899.sentry.io region1.google-analytics.com telemetry.transcend.io telemetry.us.transcend.io transcend-cdn.com www.mozilla.org\/submit\/bedrock\/; media-src 'self' assets.mozilla.net videos.cdn.mozilla.net www.mozilla.org; upgrade-insecure-requests; frame-src 'self' accounts.firefox.com gtm.mozilla.org js.stripe.com www.google-analytics.com www.googletagmanager.com www.youtube.com; object-src 'none'; base-uri 'none'","count":1},{"content-security-policy-report-only":" style-src https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com 'unsafe-inline';report-uri \/1\/batch\/2\/OE\/mid=ATVPDKIKX0DER:sid=133-2717197-9160009:rid=4R3PVSPRWBYMBK3G9R2T:sn=www.primevideo.com;script-src https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com 'unsafe-inline' 'unsafe-eval';default-src https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl\/www_google","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/cacerts","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' hubapi.com *.hubapi.com hubspot.com *.hubspot.com app.hubspot.com hubspotusercontent-na1.net *.hubspotusercontent-na1.net hsappstatic.net *.hsappstatic.net hs-banner.com *.hs-banner.com hsforms.com *.hsforms.com forms.hsforms.com *googletagmanager.com\u00a0 https:\/\/munchkin.marketo.net https:\/\/snap.licdn.com *linkedin.com; 'unsafe-inline' https:\/\/trusted-cdn.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' forms.hscollectedforms.net *.hscollectedforms.net hubspot.com *.hubspot.com hubapi.com *.hubapi.com hsforms.com *.hsforms.com hsforms.net *.hsforms.net hsappstatic.net *.hsappstatic.net googletagmanager.com *.googletagmanager.com google-analytics.com *.google-analytics.com cdn.cookielaw.org *.cookielaw.org www.google.com analytics.google.com  px.ads.linkedin.com *.linkedin.com; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" script-src 'nonce-fjGZR53KhVp6GNRD4XT0YQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https:\/\/csp.withgoogle.com\/csp\/static-on-bigtable; base-uri 'none'","count":1},{"content-security-policy-report-only":" default-src 'self' https:; base-uri 'self'; object-src 'none'; script-src 'self' https: 'report-sample'; style-src 'self' https: 'report-sample'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; report-uri \/csp-reporting; report-to csp-reporting","count":1},{"content-security-policy-report-only":" script-src 'report-sample' 'nonce-mS3-gOUM5oLW-YLBNN7rBw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';worker-src 'self';report-uri \/us\/_\/BgcMiscSites\/cspreport","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-N-XxyZpufvodAoUab7Ak2Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-SowZ0mSmS7EeabPWfpiYLw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src 'nonce-KOy\/GnuBkx1zbiJfxkpW5w==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri \/_\/csp-report","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-r9QTs-ue7DXn_04Lr_TKHg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" style-src https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com 'unsafe-inline';script-src https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com 'unsafe-inline' 'unsafe-eval';default-src https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com;report-uri \/1\/batch\/2\/OE\/mid=ATVPDKIKX0DER:sid=146-1908037-0788805:rid=5B7R8E2AB18B53G0SHBB:sn=www.primevideo.com","count":1},{"content-security-policy-report-only":" script-src 'nonce-aMKzyZG1WPo41DVVkF8W2Q' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https:\/\/csp.withgoogle.com\/csp\/static-on-bigtable; base-uri 'none'","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-qtk0zXRsp1qHCLrrpH8yug' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; font-src 'self'; img-src 'self' data:; form-action 'self'; frame-ancestors 'self'; object-src 'none'; script-src 'self'; connect-src 'self'; base-uri 'self'; style-src 'self'","count":1},{"content-security-policy-report-only":" script-src 'nonce-60vePMvPoBF\/8yBBiMZ8XQ==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https:\/\/events.mercadolibre.com\/csp\/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=3392f795-835c-434a-b792-5c6c0fe9e9f1; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https:\/\/http2.mlstatic.com\/ https:\/\/mlstaticquic-a.akamaihd.net\/; frame-ancestors 'self' https:\/\/*.mercadolibre.cl:* https:\/\/*.mercadolibre.com:* https:\/\/*.mercadolibre.com.ve:* https:\/\/*.mercadolibre.com.ar:* https:\/\/*.mercadolivre.com.br:* https:\/\/*.mercadolibre.com.co:* https:\/\/*.mercadolibre.com.ec:* https:\/\/*.mercadolibre.com.mx:* https:\/\/*.mercadolibre.com.pe:* https:\/\/*.mercadolibre.com.uy:* https:\/\/*.mercadopago.cl:* https:\/\/*.mercadopago.com.ar:* https:\/\/*.mercadopago.com.br:* https:\/\/*.mercadopago.com.co:* https:\/\/*.mercadopago.com.mx:* https:\/\/*.mercadopago.com.pe:* https:\/\/*.mercadopago.com.uy:* https:\/\/*.mercadopago.com.ve:* https:\/\/*.mercadopago.com:* https:\/\/*.adminml.com:* https:\/\/*.mercadolibre.co.cr:* https:\/\/*.mercadolibre.com.pa:* https:\/\/*.mercadolibre.com.do:* https:\/\/*.mercadolibre.com.bo:* https:\/\/*.mercadolibre.com.py:* https:\/\/*.mercadolibre.com.gt:* https:\/\/*.mercadolibre.com.hn:* https:\/\/*.mercadolibre.com.ni:* https:\/\/*.mercadolibre.com.sv:* https:\/\/*.mercadopago.com.ec:* https:\/\/*.portalinmobiliario.com:* https:\/\/*.mercadolivre.com:*","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-ldzbg1wkC8GrIFwVAU1_Eg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" base-uri 'none'; connect-src 'self' https:\/\/accounts.google.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/api.canva.com https:\/\/api.pexels.com https:\/\/*.braze.com https:\/\/browser-intake-datadoghq.com https:\/\/cat.pexels.com https:\/\/content.pexels.com https:\/\/*.google-analytics.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/images.pexels.com https:\/\/*.ingest.sentry.io https:\/\/maps.googleapis.com https:\/\/*.onetrust.com https:\/\/pexels.s3.amazonaws.com https:\/\/static.pexels.com https:\/\/stats.g.doubleclick.net https:\/\/videos.pexels.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.googletagmanager.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/static.pexels.com https:\/\/use.fontawesome.com; form-action 'self' https:\/\/www.facebook.com; frame-ancestors 'self'; frame-src 'self' https:\/\/accounts.google.com https:\/\/challenges.cloudflare.com https:\/\/www.facebook.com https:\/\/www.youtube.com; img-src 'self' data: blob: https:\/\/connect.facebook.net https:\/\/content.pexels.com https:\/\/i.ytimg.com https:\/\/images.pexels.com https:\/\/maps.gstatic.com https:\/\/media.istockphoto.com https:\/\/*.onetrust.com https:\/\/static.pexels.com https:\/\/www.facebook.com https:\/\/www.googletagmanager.com https:\/\/www.gravatar.com; media-src 'self' blob: https:\/\/content.pexels.com https:\/\/static.pexels.com https:\/\/videos.pexels.com; object-src 'none'; style-src 'self' 'unsafe-inline' https:\/\/accounts.google.com https:\/\/fonts.googleapis.com https:\/\/static.pexels.com https:\/\/use.fontawesome.com https:\/\/www.gstatic.com; report-uri https:\/\/csp.canva.com\/_cspreport?app=pexels&ro=true&policyHash=b35d0fd0","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-TiL1kbsUK3myBZem11Y6Aw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-0RsIpLdn3Wh4G_LHzD1lQQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-TaPRcwFVR-DkjhaRzeUcwA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src 'nonce-35U31cDno0+jUFqvZ1vrrw==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https:\/\/events.mercadolibre.com\/csp\/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=f324dad4-c846-406a-8723-0bd4cbb99adb; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https:\/\/http2.mlstatic.com\/ https:\/\/mlstaticquic-a.akamaihd.net\/; frame-ancestors 'self' https:\/\/*.mercadolibre.cl:* https:\/\/*.mercadolibre.com:* https:\/\/*.mercadolibre.com.ve:* https:\/\/*.mercadolibre.com.ar:* https:\/\/*.mercadolivre.com.br:* https:\/\/*.mercadolibre.com.co:* https:\/\/*.mercadolibre.com.ec:* https:\/\/*.mercadolibre.com.mx:* https:\/\/*.mercadolibre.com.pe:* https:\/\/*.mercadolibre.com.uy:* https:\/\/*.mercadopago.cl:* https:\/\/*.mercadopago.com.ar:* https:\/\/*.mercadopago.com.br:* https:\/\/*.mercadopago.com.co:* https:\/\/*.mercadopago.com.mx:* https:\/\/*.mercadopago.com.pe:* https:\/\/*.mercadopago.com.uy:* https:\/\/*.mercadopago.com.ve:* https:\/\/*.mercadopago.com:* https:\/\/*.adminml.com:* https:\/\/*.mercadolibre.co.cr:* https:\/\/*.mercadolibre.com.pa:* https:\/\/*.mercadolibre.com.do:* https:\/\/*.mercadolibre.com.bo:* https:\/\/*.mercadolibre.com.py:* https:\/\/*.mercadolibre.com.gt:* https:\/\/*.mercadolibre.com.hn:* https:\/\/*.mercadolibre.com.ni:* https:\/\/*.mercadolibre.com.sv:* https:\/\/*.mercadopago.com.ec:* https:\/\/*.portalinmobiliario.com:* https:\/\/*.mercadolivre.com:*","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl\/safety_google","count":1},{"content-security-policy-report-only":" object-src *.leboncoin.fr *.leboncoin.io *.leboncoin.ci; frame-ancestors *.leboncoin.fr *.leboncoin.io *.leboncoin.ci; report-uri https:\/\/api.leboncoin.fr\/api\/csp-report\/v1\/report\/;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-Sk46jpVUUOlit9eJqKq1xA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src   'self'   'unsafe-inline'   'unsafe-eval'   'report-sample'   https:\/\/*.savagebeast.com   https:\/\/pandora.com   https:\/\/*.pandora.com   https:\/\/staging.cdn-net.com   https:\/\/cdn.cookielaw.org   https:\/\/assets.adobedtm.com   https:\/\/*.adsafeprotected.com   https:\/\/ep2.adtrafficquality.google   https:\/\/fundingchoicesmessages.google.com   https:\/\/*.googlesyndication.com   https:\/\/*.google-analytics.com   https:\/\/www.googletagmanager.com   https:\/\/www.googletagservices.com   https:\/\/imasdk.googleapis.com   https:\/\/storage.googleapis.com   https:\/\/*.doubleclick.net   https:\/\/*.doubleverify.com   https:\/\/pagead2.googlesyndication.com   https:\/\/s0.2mdn.net   https:\/\/cdn.branch.io   https:\/\/app.link   https:\/\/client.px-cloud.net   https:\/\/connect.facebook.net   https:\/\/sb.scorecardresearch.com   https:\/\/secure-us.imrworldwide.com   https:\/\/z.moatads.com   https:\/\/lex.33across.com   https:\/\/s.adroll.com   https:\/\/d.adroll.com   https:\/\/*.adswizz.com   https:\/\/ads.revjet.com   https:\/\/pix.revjet.com   https:\/\/seal.verisign.com   https:\/\/code.jquery.com   https:\/\/snap.licdn.com; report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub16b313e1658347a16504b662a893cd7e&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aproduction; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-O6PuWG9XcecuxpJGdCoi3Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; font-src localhost:3000 localhost:8080 *.www.ucla.edu www.ucla.edu cdn.jsdelivr.net; frame-src 'self' cse.google.com www.youtube.com www.google.com *.adtrafficquality.google; img-src 'self' *.amazonaws.com  www.google.com cdn.jsdelivr.net clients1.google.com www.googleapis.com *.gstatic.com pbs.twimg.com *.hypemarks.com *.tintup.com www.google-analytics.com stats.g.doubleclick.net cdn.webcomponents.ucla.edu images.sidearmdev.com *.tiktokcdn-us.com *.fbcdn.net t.co analytics.twitter.com *.linkedin.com *.cdninstagram.com www.facebook.com www.googletagmanager.com *.uclabruins.com syndicatedsearch.goog *.adtrafficquality.google data: *.cassiecloud.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com *.googletagmanager.com www.youtube.com cse.google.com cdn.jsdelivr.net *.ytimg.com cdnjs.cloudflare.com www.google-analytics.com *.amazonaws.com cdn.webcomponents.ucla.edu snap.licdn.com connect.facebook.net analytics.tiktok.com static.ads-twitter.com *.adtrafficquality.google *.gstatic.com *.ucla.edu *.syrenis.io *.cassiecloud.com cscript-cdn-use.localhost cscript-cdn-use-uat.localhost data:; style-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net cdn.webcomponents.ucla.edu cdnjs.cloudflare.com www.google.com *.cassiecloud.com; connect-src 'self' weather.atmos.ucla.edu www.google-analytics.com px.ads.linkedin.com analytics.tiktok.com stats.g.doubleclick.net *.adtrafficquality.google *.cassiecloud.com *.syrenis.io *.google.com; report-uri \/csp-hotline.php","count":1},{"content-security-policy-report-only":" base-uri 'self'; default-src 'self' *.atlassian.com *.intercomcdn.com *.orangelogic.com *.6sc.co *.6sense.com; script-src 'self' *.gstatic.com *.cookielaw.org *.public.atl-paas.net *.prod.atl-paas.net *.googletagmanager.com *.marketo.net *.atlassian.com utt.impactcdn.com *.google.com *.doubleclick.com *.googleadservices.com *.livechatinc.com *.bing.com *.quora.com *.yimg.jp *.clicktale.net *.linkedin.com *.twitter.com *.licdn.com *.demandbase.com *.doubleclick.net *.facebook.net *.redditstatic.com *.clearbitscripts.com *.clarity.ms *.vimeo.com *.google-analytics.com facebook.com *.facebook.com impactcdn.com *.impactcdn.com clearbitjs.com *.clearbitjs.com yahoo.co.jp *.yahoo.co.jp *.recaptcha.net www.recaptcha.net *.googlerecaptcha.cn *.ads-twitter.com *.intercom.io *.intercomcdn.com *.jsdelivr.net *.6sc.co *.6sense.com *.techtarget.com *.capterra.com otBannerSdk.js 'unsafe-eval' 'unsafe-inline'; style-src 'self' *.public.atl-paas.net *.prod.atl-paas.net fonts.googleapis.com *.googletagmanager.com *.cookielaw.org 'unsafe-inline'; img-src 'self' blob: data: atlassian.com *.atlassian.com *.cookielaw.org *.gravatar.com *.wp.com fd-assets.prod.atl-paas.net pixel.pointmediatracker.com *.frontend.public.atl-paas.net *.prod.public.atl-paas.net cnv.event.prod.bidr.io *.doubleclick.net *.clicktale.net *.bing.com rlcdn.com reddit.com quora.com *.rlcdn.com *.reddit.com *.quora.com *.ctfassets.net  *.linkedin.com *.google.com *.google.com.au *.company-target.com *.facebook.com *.google-analytics.com *.twitter.com t.co *.intercomcdn.com *.intercomassets.com *.orangelogic.com *.googletagmanager.com img.logo.dev *.atlassian.net; font-src 'self' *.ctfassets.net *.intercomcdn.com *.gstatic.com *.atl-paas.net; frame-ancestors 'none'; form-action 'self'; report-uri https:\/\/web-security-reports.services.atlassian.com\/csp-report\/trello-bifrost; report-to csp-default-endpoint; connect-src 'self' ws: wss: atlassian.com *.atlassian.com www.atlassian.com *.cookielaw.org *.onetrust.com *.public.atl-paas.net *.prod.atl-paas.net *.mktoresp.com *.ingest.sentry.io *.workato.com atlassian.sjv.io statsigapi.net *.statsigapi.net *.contentful.com atlassian.net *.clicktale.net *.contentsquare.net *.bing.com google-analytics.com company-target.com linkedin.com *.google-analytics.com *.company-target.com *.linkedin.com *.doubleclick.net *.reddit.com *.redditstatic.com *.google.com *.demandbase.com *.clarity.ms *.clearbit.com *.intercom.io *.algolianet.com *.algolia.net *.algolia.io *.recaptcha.net www.recaptcha.net *.googlerecaptcha.cn https:\/\/unpkg.com\/@rive-app\/ *.facebook.com *.orangelogic.com *.adnxs.com *.6sc.co *.6sense.com apis.auxia.io *.atlassian.net \/gateway\/api\/ais\/available-products \/gateway\/api\/cookie-integrator\/api\/onetrust\/jwt; media-src 'self' *.ctfassets.net *.atlassian.com *.orangelogic.com; worker-src 'self' blob:; frame-src 'self' *.youtube.com *.google.com *.doubleclick.net *.recaptcha.net www.recaptcha.net *.googlerecaptcha.cn *.atl-paas.net *.company-target.com *.googletagmanager.com *.atlassian.net; sandbox allow-same-origin allow-scripts allow-forms allow-popups allow-modals","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' facebook.net *.facebook.net fullstory.com *.fullstory.com gmlinteractive.com *.gmlinteractive.com googletagmanager.com *.googletagmanager.com kameleoon.eu *.kameleoon.eu optimove.net *.optimove.net sportradar.com *.sportradar.com sportradarserving.com *.sportradarserving.com app.delivery cloudflare.com *.cloudflare.com lgrckt-in.com *.lgrckt-in.com tostarsbuilding.com *.tostarsbuilding.com *.bing.com *.taboola.com *.geocomply.com *.kameleoon.io *.creativecdn.com *.ads-twitter.com *.google-analytics.com *.kaizengaming.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co adform.net *.adform.net *.app.delivery *.betano.com *.betano.pe *.betgenius.com *.cloudflareinsights.com *.cookielaw.org d32tdr35c4icxo.cloudfront.net *.betano.co *.logr-in.com; worker-src 'self' blob:; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=ZQqOUUyPLQwp.EqHFa0wj2ijdzNkxy0ngoG1USXAWcI-1788492923.365544-1.0.1.1-Jjq1ANrNn1yTrpeVfkKrVD5tesiLupFApP7E9VEgkejtehAcfjRqJxlO9xJOvFOkTGdAbDgEG3dnlHbs4G0KBCr8lwGcAbYlqB07CcrF1g8kHHF3XpjxGGE1CTdQ0yBiibwvsEy.05wDi_D0tmPaKl3.dAXFOfgU9KdGaqZl9OLgBhUWhnF3cKcLRzKtU03T; report-to cf-tvobmyxaqwmgewph","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' adform.net *.adform.net *.bing.com *.taboola.com *.fullstory.com *.geocomply.com *.kameleoon.eu *.ads-twitter.com *.google-analytics.com *.kaizengaming.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.sportradarserving.com *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co *.app.delivery *.betano.co *.betgenius.com *.cloudflare.com *.cloudflareinsights.com *.cookielaw.org *.creativecdn.com *.facebook.net *.gmlinteractive.com *.googletagmanager.com *.kameleoon.io *.lgrckt-in.com *.optimove.net *.sportradar.com *.tostarsbuilding.com *.betano.de *.datadome.co d32tdr35c4icxo.cloudfront.net logr-in.com *.logr-in.com; worker-src 'self' blob:; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=Vp4Z757tWfAjAYxzCuQxgM0XhmGl_7YWSg.xWOvwVP0-1788493083.5054398-1.0.1.1-5ME0AWnSbQzk.SwBPqFHzbfZktSWdW.X3wXwMlZagTQg.GBmimqRLSaS1._s6Wg3mPHOrwC92Bpq5JSdJK20kzNovhI8ss9R_bhPIk75lVuO9mpAhyKCEeCpWqmOJ2S5aWv0egomJ.moOH0zpuQWFiriMl17U0flS35vbbBcxUoBoOHxqR65xeKpXz4VB6zswXrrXVcmxZrqXo7eXsF9Og; report-to cf-ceionmyspfhawjft","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-MAJOSS8sP1sByqkKZMkyxQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-5Oc5yGEmZVa3N87PmwtI9g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-HW8DhTNQAKxqHJCTOmczVQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce--AsyAeZZ-FQbFxzZ5zkhUg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-4D7mBp-etFOOHz7tEKXD8A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src 'report-sample' 'nonce-rQhbSOV3T0h4-mIlHJS6tw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';worker-src 'self';report-uri \/us\/_\/BgcMiscSites\/cspreport","count":1},{"content-security-policy-report-only":" child-src 'self' https:\/\/*.qualified.com; default-src 'self'; frame-src 'self' https:\/\/9628652.fls.doubleclick.net https:\/\/td.doubleclick.net https:\/\/js.driftt.com https:\/\/*.qualified.com https:\/\/a8447815042.cdn-pci.optimizely.com https:\/\/ct.pinterest.com https:\/\/tealium-f.squarecdn.com; worker-src 'self' blob:; connect-src 'self' https:\/\/assets.ctfassets.net https:\/\/api.broadway.squareup.com https:\/\/campaign-hub-production-f.squarecdn.com https:\/\/api.squareup.com\/v1\/cdp\/batch https:\/\/api.squarestagingexternal.com\/v1\/cdp\/batch https:\/\/api.squarestagingexternal.com https:\/\/api.squareup.com https:\/\/api.squareupstaging.com *.contentsquare.net https:\/\/capi.squareup.com https:\/\/browser-intake-datadoghq.com https:\/\/*.browser-intake-datadoghq.com https:\/\/stats.g.doubleclick.net https:\/\/facebook.com https:\/\/www.facebook.com https:\/\/googleads.g.doubleclick.net http:\/\/www.google-analytics.com https:\/\/www.google-analytics.com https:\/\/google.com https:\/\/www.google.com https:\/\/us-central1-sq-sgtm-prod.cloudfunctions.net https:\/\/www.googletagmanager.com http:\/\/images.ctfassets.net https:\/\/images.ctfassets.net http:\/\/424-iab-218.mktoresp.com https:\/\/424-iab-218.mktoresp.com https:\/\/xms2-marketo.beta.stage.sqprod.co https:\/\/424-iab-218.mktoutil.com https:\/\/cdn.cookielaw.org https:\/\/geolocation.onetrust.com https:\/\/privacyportal.onetrust.com https:\/\/logx.optimizely.com https:\/\/ct.pinterest.com https:\/\/conversions-config.reddit.com https:\/\/pixel-config.reddit.com https:\/\/www.redditstatic.com *.ingest.us.sentry.io *.6sc.co https:\/\/api.sprig.com https:\/\/squareupstaging.com https:\/\/visitor-scoring-new.marketlinc.com https:\/\/api.chilipiper.com https:\/\/squareinc-sandbox.chilipiper.com https:\/\/squareinc.chilipiper.com https:\/\/www.workwithsquare.com wss:\/\/*.qualified.com https:\/\/*.qualified.com https:\/\/pw-renderer-production-c.squarecdn.com localhost:*; font-src 'self' https:\/\/cash-f.squarecdn.com https:\/\/square-fonts-production-f.squarecdn.com; img-src 'self' data: blob: https:\/\/ib.adnxs.com https:\/\/assets.ctfassets.net https:\/\/cdn.blisspointmedia.com https:\/\/campaign-hub-production-f.squarecdn.com *.contentsquare.net https:\/\/ad.doubleclick.net https:\/\/facebook.com https:\/\/www.facebook.com https:\/\/google.com https:\/\/www.google.com https:\/\/adservice.google.com https:\/\/googleads.g.doubleclick.net http:\/\/www.google-analytics.com https:\/\/www.google-analytics.com https:\/\/*.g.doubleclick.net https:\/\/www.googletagmanager.com http:\/\/images.ctfassets.net https:\/\/images.ctfassets.net https:\/\/px.ads.linkedin.com https:\/\/cdn.cookielaw.org https:\/\/pixel.pointmediatracker.com https:\/\/alb.reddit.com *.6sc.co https:\/\/api.squareup.com https:\/\/api.squareupstaging.com https:\/\/insight.adsrvr.org https:\/\/match.adsrvr.org https:\/\/*.qualified.com https:\/\/pw-renderer-production-c.squarecdn.com; manifest-src 'self' https:\/\/pw-renderer-production-c.squarecdn.com; media-src 'self' mediastream: https:\/\/assets.ctfassets.net https:\/\/js.driftt.com http:\/\/videos.ctfassets.net https:\/\/videos.ctfassets.net https:\/\/*.qualified.com; script-src 'self' *.contentsquare.net https:\/\/www.datadoghq-browser-agent.com https:\/\/js.driftt.com https:\/\/*.qualified.com https:\/\/connect.facebook.net https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net http:\/\/www.google-analytics.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/campaign-hub-production-f.squarecdn.com https:\/\/lift-ai-js.marketlinc.com https:\/\/martech-development-c.squarecdn.com https:\/\/martech-production-c.squarecdn.com https:\/\/martech-staging-c.squarecdn.com http:\/\/munchkin.marketo.net https:\/\/munchkin.marketo.net https:\/\/cdn.cookielaw.org https:\/\/a8447815042.cdn-pci.optimizely.com https:\/\/s.pinimg.com https:\/\/ct.pinterest.com https:\/\/pw-renderer-production-c.squarecdn.com https:\/\/pw-renderer-staging-c.squarecdn.com https:\/\/pwt-production-c.squarecdn.com https:\/\/pwt-staging-c.squarecdn.com https:\/\/sales-bridge-production-c.squarecdn.com https:\/\/sales-bridge-staging-c.squarecdn.com https:\/\/squareinc-sandbox.chilipiper.com https:\/\/squareinc.chilipiper.com https:\/\/www.workwithsquare.com https:\/\/www.redditstatic.com *.6sc.co https:\/\/cdn.sprig.com https:\/\/xms-production-f.squarecdn.com https:\/\/www.youtube.com https:\/\/pw-renderer-production-c.squarecdn.com 'nonce-RV9wwvsRp3vpvH1LDn1hHw=='; style-src 'self' https:\/\/square-fonts-production-f.squarecdn.com https:\/\/sales-bridge-production-c.squarecdn.com https:\/\/sales-bridge-staging-c.squarecdn.com 'unsafe-inline' https:\/\/*.qualified.com https:\/\/pw-renderer-production-c.squarecdn.com; frame-ancestors 'self' https:\/\/app.contentful.com; report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pubd9af00759e65a48ba7ee3ff1dfa4260b&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to browser-intake-datadoghq","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-s5jBG8ERCWzhAlAUvhgqrw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' *.zijieimg.com *.helo-app.com *.toutiaopage.com *.zjurl.cn *.pstatp.com *.bytecdn.cn *.isnssdk.com *.byteoversea.com *.365yg.com *.ks-cdn.com *.ipstatp.com *.amemv.com *.ibytedtos.com *.ixigua.com *.ixiguavideo.com *.hypstarcdn.com *.tiktokcdn.com *.topbuzzcdn.com *.lemocamcdn.com *.musical.ly *.muscdn.com *.ulikecam.mobi *.faceu.mobi *.wukongwenda.com *.wukongwenda.cn *.toutiao13.com *.toutiaoribao.cn *.ribaoapi.com *.dongchediapp.com *.huoshanzhibo.com *.huoshanxiaoshipin.cn *.huoshanxiaoshipin.net *.huoshanvideo.cn *.huoshanvideo.net *.ieshuodong.cn *.ieshuodong.net *.byteoversea.com *.topbuzz.com *.hypstar.com *.tiktokv.com *.byted.org *.bytedance.net *.bytedance.com *.bytedance.cn *.toutiaocloud.com *.snssdk.com *.toutiao.com *.neihanshequ.com *.wukong.com *.huoshan.com *.douyin.com *.everphoto.cn *.jinritemai.com *.tuchong.com *.stock.tuchong.com *.luckycalendar.cn *.bcy.net *.feishu.cn *.dcdapp.com *.oceanengine.com *.chengzijianzhan.com *.byteimg.com *.google-analytics.com","count":1},{"content-security-policy-report-only":" frame-ancestors 'self' https:\/\/ss.datasconsole.com; worker-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/*.coinmarketcap.com https:\/\/cdn.adx.ws https:\/\/www.gstatic.com https:\/\/scripts.cleverwebserver.com https:\/\/ui.cleverwebserver.com https:\/\/cdn.cookielaw.org https:\/\/cdn4.buysellads.net https:\/\/btloader.com https:\/\/script.4dex.io https:\/\/www.google.com https:\/\/*.googlesyndication.com https:\/\/securepubads.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/ep2.adtrafficquality.google https:\/\/www.youtube.com https:\/\/s3.tradingview.com https:\/\/organizer.bizzabo.com https:\/\/telegram.org https:\/\/staticrecap.cgicgi.io https:\/\/3f0fb9bcf568.edge.sdk.awswaf.com https:\/\/unpkg.com\/vconsole\/dist\/vconsole.min.js https:\/\/browser.sentry-cdn.com https:\/\/ajax.googleapis.com\/ajax\/libs\/jquery\/ https:\/\/www.recaptcha.net\/recaptcha\/ https:\/\/checkout.stripe.com https:\/\/static.doubleclick.net; report-uri https:\/\/o230231.ingest.us.sentry.io\/api\/1773863\/security\/?sentry_key=f6a79779d88945e5bf5c2b7e74ee1ed8","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/*.posthog.com https:\/\/www.youtube.com https:\/\/fast.wistia.com https:\/\/import-cdn.default.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: https:\/\/*.posthog.com https:\/\/res.cloudinary.com https:\/\/www.gravatar.com https:\/\/raw.githubusercontent.com https:\/\/obuldanrptloktxcffvn.supabase.co https:\/\/cdn.shopify.com https:\/\/i.ytimg.com https:\/\/embed-ssl.wistia.com https:\/\/fast.wistia.com https:\/\/cdn.jsdelivr.net https:\/\/user-images.githubusercontent.com https:\/\/brandbadge.clearbit.com; font-src 'self' data: https:\/\/d27nj4tzr3d5tm.cloudfront.net https:\/\/res.cloudinary.com https:\/\/fonts.gstatic.com https:\/\/r2cdn.perplexity.ai https:\/\/fast.wistia.com https:\/\/use.typekit.net; connect-src 'self' https:\/\/*.posthog.com https:\/\/api.github.com https:\/\/lottie.host https:\/\/better-animal-d658c56969.strapiapp.com https:\/\/forms.default.com https:\/\/nucleus.default.com https:\/\/import-cdn.default.com https:\/\/posthog.myshopify.com https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/api.io.inkeep.com https:\/\/fast.wistia.net https:\/\/fast.wistia.com https:\/\/embed-cloudfront.wistia.com https:\/\/api.inkeep.com; media-src 'self' https:\/\/d1hovhsvet4m1p.cloudfront.net https:\/\/res.cloudinary.com blob:; frame-src 'self' https:\/\/www.youtube-nocookie.com https:\/\/hogwars.vercel.app https:\/\/hedgehog-mode-playground.vercel.app; worker-src 'self' blob:; child-src 'self' blob:; object-src 'none'; frame-ancestors 'none'; report-uri https:\/\/us.i.posthog.com\/report\/?token=sTMFPsFhdP1Ssg&sample_rate=0.1&v=1; report-to posthog","count":1},{"content-security-policy-report-only":" default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http:\/\/*.files.wordpress.com wss:\/\/variety.com; report-uri https:\/\/pmcuri.report-uri.com\/r\/d\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" script-src 'self' https: https:\/\/www.google-analytics.com https:\/\/cdn.amplitude.com 'unsafe-eval' 'unsafe-inline' data: 'nonce-cUWkceSawUPEP0ecz0\/neQ=='; worker-src blob: data:; report-uri https:\/\/us.sentry.io\/api\/4506690010480640\/security\/?sentry_key=aab2498373841041d6b48d721aefbdc1&sentry_environment=production&sentry_release=c5ed8ef9c92bd14e4768858ef05c9904c7457398","count":1},{"content-security-policy-report-only":" default-src 'self'; img-src data: blob: *; script-src-elem 'self' 'strict-dynamic' assets.ubuntu.com www.google-analytics.com www.googletagmanager.com www.youtube.com asciinema.org player.vimeo.com script.crazyegg.com www.googleadservices.com js.zi-scripts.com *.g.doubleclick.net www.google.com www.gstatic.com www.brighttalk.com snap.licdn.com connect.facebook.net maps.googleapis.com www.redditstatic.com munchkin.marketo.net *.googlesyndication.com cdn.jsdelivr.net https:\/\/esm.sh https:\/\/cdn.jsdelivr.net buttons.github.io cdn.livechatinc.com api.livechatinc.com secure.livechatinc.com www.tfaforms.com 'nonce-NkoGnOUkTmZJ9jmVGWlkSw'; font-src 'self' assets.ubuntu.com fonts.google.com cdn.livechatinc.com secure.livechatinc.com; script-src 'self' blob: 'wasm-unsafe-eval' 'nonce-NkoGnOUkTmZJ9jmVGWlkSw'; connect-src 'self' ubuntu.com analytics.google.com www.googletagmanager.com o4510662863749120.ingest.de.sentry.io www.google-analytics.com *.crazyegg.com *.g.doubleclick.net ad.doubleclick.net *.clarity.ms bat.bing.com bat.bing.net www.googleadservices.com js.zi-scripts.com *.google-analytics.com px.ads.linkedin.com ws.zoominfo.com youtube.com google.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cat www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws fonts.google.com maps.googleapis.com pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com https:\/\/esm.sh https:\/\/lottie.host https:\/\/cdn.jsdelivr.net *.analytics.google.com www.facebook.com *.googlesyndication.com *.mktoresp.com assets.ubuntu.com api.github.com raw.githubusercontent.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com web.facebook.com www.tfaforms.com unpkg.com; frame-src 'self' assets.ubuntu.com *.doubleclick.net *.crazyegg.com www.youtube.com\/ asciinema.org player.vimeo.com www.googletagmanager.com www.google.com www.brighttalk.com cdn.livechatinc.com secure.livechatinc.com cdn.livechat-static.com; style-src 'self' cdn.jsdelivr.net www.tfaforms.com 'unsafe-inline'; media-src 'self' res.cloudinary.com assets.ubuntu.com; child-src 'self' blob: youtube.com google.com fonts.google.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com; form-action 'self' https:\/\/pages.ubuntu.com https:\/\/ubuntu.com https:\/\/www.tfaforms.com; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; report-uri \/csp-report;","count":1},{"content-security-policy-report-only":" default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http:\/\/*.files.wordpress.com wss:\/\/www.rollingstone.com; report-uri https:\/\/pmcuri.report-uri.com\/r\/d\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" script-src 'nonce-42uv\/jJZ\/FtBxLu1CGX7fw==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri \/_\/csp-report","count":1},{"content-security-policy-report-only":" img-src https:; manifest-src 'self' https:\/\/*.cdn.office.net\/yammer\/ https:\/\/res-gcch.onecdn.usgovcloud-static.microsoft\/; media-src 'self' https:\/\/*.cdn.office.net\/yammer-teams-app\/ https:\/\/*.engage.cloud.microsoft\/ https:\/\/*.sharepoint.com https:\/\/engage.usgovcloud.microsoft\/; report-to csp-ro-endpoint; report-uri https:\/\/cspv2.core.microsoft\/report\/0df87ed1-bd2c-431b-83e4-90e35955625d\/VivaEngage-Web-PROD; script-src 'nonce-7yLH0eI5Xd3wxCDSz5opSF0RTL9woInECfAeCm5miAQ=' 'report-sample' 'self' 'strict-dynamic' blob: https:\/\/*.cdn.office.net.rproxy.goskope.com\/ https:\/\/*.cdn.office.net\/ https:\/\/*.engage.cloud.microsoft\/ https:\/\/*.res.office365.com\/ https:\/\/amcdn.msauth.net\/ https:\/\/amcdn.msftauth.net\/ https:\/\/engage.cloud.microsoft\/ https:\/\/engage.usgovcloud.microsoft\/ https:\/\/js.monitor.azure.com\/ https:\/\/res-1.public.onecdn.static.microsoft\/ https:\/\/res-2.public.onecdn.static.microsoft\/ https:\/\/res-4.public.onecdn.static.microsoft\/ https:\/\/res-gcch.onecdn.usgovcloud-static.microsoft\/ https:\/\/res.public.onecdn.static.microsoft\/ https:\/\/web.yammer.com\/ https:\/\/www.yammer.com\/; worker-src 'self'","count":1},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/www.news.com.au\/csp-reports","count":1},{"content-security-policy-report-only":" report-to slardar-endpoint; upgrade-insecure-requests ; frame-ancestors 'self' *.toutiao.com *.douyin.com *.bytedance.com *.bytedance.net tcs.jiyunhudong.com aup.jijixiangshangabc.com chrome-extension:\/\/dbjibobgilijgolhjdcbdebjhejelffo chrome-extension:\/\/molcibnmfbjmmfbefjfcafdeabfniobi chrome-extension:\/\/capohkkfagimodmlpnahjoijgooocdjhd chrome-extension:\/\/mijalhmcgaaaggjfhkliffkanfhimhch chrome-extension:\/\/obkcimipmjdkghadnfcjojepocldeggd chrome-extension:\/\/epjhdbhhoeemcbbbgkimcfndcbjapdaa safari-web-extension: *.doubao.com *.larkoffice.com *.feishu.cn *.larksuite.com *.feishu-pre.net *.feishu-pre.cn *.larksuite-pre.com *.larksuite.us *.larksuite-pre.us *.larkenterprise.com *.larkenterprise-pre.com; script-src 'nonce-c0a73d69bca77adea9e63bccbc65b0f0-argus' blob: data: 'self' 'unsafe-eval' 'report-sample' 'strict-dynamic'  'unsafe-inline' https:; base-uri 'self'; object-src 'self'; frame-src 'self' *.toutiao.com *.douyin.com *.bytedance.com *.bytedance.net tcs.jiyunhudong.com aup.jijixiangshangabc.com *.doubao.com;report-uri https:\/\/mon.zijieapi.com\/monitor_browser\/collect\/batch\/security\/?bid=flow_web;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-KmbOp1GWPGnyFpgOWXhnUw=='; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; report-uri \/csp_reports","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-iDh4pYXJ2FEwDbb6T8RYug' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'nonce-G4B32NjQv1Ty2OHf\/rs71g==' 'strict-dynamic' 'self' 'wasm-unsafe-eval' https:\/\/a-cdn.anthropic.com https:\/\/assets.claude.ai https:\/\/www.googletagmanager.com https:\/\/js.hsforms.net https:\/\/embed.typeform.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:\/\/cdn.sanity.io https:\/\/assets.claude.com https:\/\/assets-staging.claude.com https:\/\/i.ytimg.com https:\/\/forms.hsforms.com https:\/\/forms-na1.hsforms.com; font-src 'self' https:\/\/fonts.gstatic.com; media-src 'self' https:\/\/cdn.sanity.io https:\/\/assets.claude.com https:\/\/assets-staging.claude.com https:\/\/assets.claude.ai; frame-src https:\/\/www.youtube-nocookie.com https:\/\/form.typeform.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com https:\/\/a.claude.com; connect-src 'self' https:\/\/a-api.anthropic.com https:\/\/a-cdn.anthropic.com https:\/\/api.anthropic.com https:\/\/cdn.sanity.io https:\/\/assets.claude.com https:\/\/assets-staging.claude.com https:\/\/*.api.sanity.io https:\/\/*.apicdn.sanity.io wss:\/\/*.api.sanity.io https:\/\/links.iterable.com https:\/\/claude.ai\/api\/billing\/subscription_pricing https:\/\/forms.hsforms.com https:\/\/forms-na1.hsforms.com https:\/\/www.googletagmanager.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:\/\/*.hsforms.com https:\/\/links.iterable.com; report-uri \/api\/csp-report; report-to csp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-1xOgbSqWSkBaJplnY8DS2w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src 'unsafe-eval' 'wasm-unsafe-eval' 'report-sample' 'strict-dynamic' 'nonce-Qe_pKC_IvTSGkUZl4bxBH' *.bytescm.com *.bytednsdoc.com *.ibytedapm.com *.snssdk.com *.yhgfb-cn-static.com *.bytetos.com *.byte-gslb.com *.bytegoofy.com *.bytecdn.cn *.toutiaostatic.com;style-src 'self' 'unsafe-inline' *.toutiaoimg.com *.bdxiguaimg.com *.bytescm.com *.bytegoofy.com *.douyinstatic.com *.toutiao.com *.toutiaostatic.com *.bytedance.net cdn.bootcss.com;connect-src 'self' wss: ws: data: blob: http:\/\/localhost:* toutiao.govwza.cn *.bytedance.net *.bytedance.com *.snssdk.com *.toutiaostatic.com *.bytescm.com *.toutiao.com *.bytetcc.com *.zijieapi.com *.yhgfb-cn-static.com *.toutiaovod.com *.bytednsdoc.com *.ibytedapm.com *.bytedanceapi.com *.google-analytics.com *.douyinstatic.com *.douyinvod.com *.bytegoofy.com *.bytetos.com *.toutiaoimg.com *.huoshanstatic.com *.idouyinvod.com:* *.volcsiriusbd.com:* *.volcsirius.com:*  *.tt.x.bsgslb.cn:* *.dy.zzcdnx.com:*  *.qc.bsccdn.net:* *.smtcdns.com:* *.ugslb.com:* *.livehwc3.cn:* *.smtcdns.net:* *.bytefcdnrd.com:* *.ksyungslb.com:* *.ksyungslb2.com:* *.ourdvsss.com:* *.tbcache.com:* *.jomodns.com:* *.douyincdn.com:* *.ixigua.com:* *.bdxigualive.com:* *.pstatp.com:* *.douyinliving.com:* *.picovr.com:* *.huoshanlive.com:* *.ihuoshanlive.com:* *.volccdn.com:* *.bestv.com.cn:* *.bytefcdn.com:* *.qnqcdn.net:*  *.jomoxc.com *.jomoxd.com *.a.bdycdn.cn *.hiecheimaetu.com:* *.ppio.cloud:* *.weilayun.com:* *.saxysec.com:* *.saxyit.com:* *.saxydc.com:* *.sjxysec.com:* *.sjxydc.com:* *.vegslb.com:* *.bytegecko.com;upgrade-insecure-requests;frame-ancestors 'self' *.bytedance.net *.snssdk.com shiqu.cn *.shiqu.cn zhan.vivo.com wukong.vivo.com.cn *.feishuapp.cn *.toutiao.com *.bytescm.com *.jiyunhudong.com *.bytedance.com *.feishu.cn;report-uri https:\/\/mon.zijieapi.com\/log\/sentry\/v2\/api\/slardar\/main\/?ev_type=csp&bid=toutiao_web_pc;report-to main-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.stripe.com https:\/\/*.paddle.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/maps.gstatic.com https:\/\/maps.googleapis.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/; style-src 'self' 'unsafe-inline' https:\/\/*.paddle.com https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com; img-src 'self' data: https:\/\/ipapi.co https:\/\/maps.gstatic.com https:\/\/maps.googleapis.com https:\/\/*.stripe.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com; frame-src 'self' https:\/\/www.google.com https:\/\/*.stripe.com https:\/\/*.paddle.com https:\/\/www.google.com\/recaptcha\/ https:\/\/recaptcha.google.com\/recaptcha\/ https:\/\/challenges.cloudflare.com\/; connect-src 'self' https:\/\/ipapi.co\/ https:\/\/*.paddle.com https:\/\/*.stripe.com https:\/\/maps.googleapis.com https:\/\/www.google.com\/recaptcha\/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';","count":1},{"content-security-policy-report-only":" child-src 'self' https:\/\/*.qualified.com; default-src 'self'; frame-src 'self' https:\/\/9628652.fls.doubleclick.net https:\/\/td.doubleclick.net https:\/\/js.driftt.com https:\/\/*.qualified.com https:\/\/a8447815042.cdn-pci.optimizely.com https:\/\/ct.pinterest.com https:\/\/tealium-f.squarecdn.com; worker-src 'self' blob:; connect-src 'self' https:\/\/assets.ctfassets.net https:\/\/api.broadway.squareup.com https:\/\/campaign-hub-production-f.squarecdn.com https:\/\/api.squareup.com\/v1\/cdp\/batch https:\/\/api.squarestagingexternal.com\/v1\/cdp\/batch https:\/\/api.squarestagingexternal.com https:\/\/api.squareup.com https:\/\/api.squareupstaging.com *.contentsquare.net https:\/\/capi.squareup.com https:\/\/browser-intake-datadoghq.com https:\/\/*.browser-intake-datadoghq.com https:\/\/stats.g.doubleclick.net https:\/\/facebook.com https:\/\/www.facebook.com https:\/\/googleads.g.doubleclick.net http:\/\/www.google-analytics.com https:\/\/www.google-analytics.com https:\/\/google.com https:\/\/www.google.com https:\/\/us-central1-sq-sgtm-prod.cloudfunctions.net https:\/\/www.googletagmanager.com http:\/\/images.ctfassets.net https:\/\/images.ctfassets.net http:\/\/424-iab-218.mktoresp.com https:\/\/424-iab-218.mktoresp.com https:\/\/xms2-marketo.beta.stage.sqprod.co https:\/\/424-iab-218.mktoutil.com https:\/\/cdn.cookielaw.org https:\/\/geolocation.onetrust.com https:\/\/privacyportal.onetrust.com https:\/\/logx.optimizely.com https:\/\/ct.pinterest.com https:\/\/conversions-config.reddit.com https:\/\/pixel-config.reddit.com https:\/\/www.redditstatic.com *.ingest.us.sentry.io *.6sc.co https:\/\/api.sprig.com https:\/\/squareupstaging.com https:\/\/visitor-scoring-new.marketlinc.com https:\/\/api.chilipiper.com https:\/\/squareinc-sandbox.chilipiper.com https:\/\/squareinc.chilipiper.com https:\/\/www.workwithsquare.com wss:\/\/*.qualified.com https:\/\/*.qualified.com https:\/\/pw-renderer-production-c.squarecdn.com localhost:*; font-src 'self' https:\/\/cash-f.squarecdn.com https:\/\/square-fonts-production-f.squarecdn.com; img-src 'self' data: blob: https:\/\/ib.adnxs.com https:\/\/assets.ctfassets.net https:\/\/cdn.blisspointmedia.com https:\/\/campaign-hub-production-f.squarecdn.com *.contentsquare.net https:\/\/ad.doubleclick.net https:\/\/facebook.com https:\/\/www.facebook.com https:\/\/google.com https:\/\/www.google.com https:\/\/adservice.google.com https:\/\/googleads.g.doubleclick.net http:\/\/www.google-analytics.com https:\/\/www.google-analytics.com https:\/\/*.g.doubleclick.net https:\/\/www.googletagmanager.com http:\/\/images.ctfassets.net https:\/\/images.ctfassets.net https:\/\/px.ads.linkedin.com https:\/\/cdn.cookielaw.org https:\/\/pixel.pointmediatracker.com https:\/\/alb.reddit.com *.6sc.co https:\/\/api.squareup.com https:\/\/api.squareupstaging.com https:\/\/insight.adsrvr.org https:\/\/match.adsrvr.org https:\/\/*.qualified.com https:\/\/pw-renderer-production-c.squarecdn.com; manifest-src 'self' https:\/\/pw-renderer-production-c.squarecdn.com; media-src 'self' mediastream: https:\/\/assets.ctfassets.net https:\/\/js.driftt.com http:\/\/videos.ctfassets.net https:\/\/videos.ctfassets.net https:\/\/*.qualified.com; script-src 'self' *.contentsquare.net https:\/\/www.datadoghq-browser-agent.com https:\/\/js.driftt.com https:\/\/*.qualified.com https:\/\/connect.facebook.net https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net http:\/\/www.google-analytics.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/campaign-hub-production-f.squarecdn.com https:\/\/lift-ai-js.marketlinc.com https:\/\/martech-development-c.squarecdn.com https:\/\/martech-production-c.squarecdn.com https:\/\/martech-staging-c.squarecdn.com http:\/\/munchkin.marketo.net https:\/\/munchkin.marketo.net https:\/\/cdn.cookielaw.org https:\/\/a8447815042.cdn-pci.optimizely.com https:\/\/s.pinimg.com https:\/\/ct.pinterest.com https:\/\/pw-renderer-production-c.squarecdn.com https:\/\/pw-renderer-staging-c.squarecdn.com https:\/\/pwt-production-c.squarecdn.com https:\/\/pwt-staging-c.squarecdn.com https:\/\/sales-bridge-production-c.squarecdn.com https:\/\/sales-bridge-staging-c.squarecdn.com https:\/\/squareinc-sandbox.chilipiper.com https:\/\/squareinc.chilipiper.com https:\/\/www.workwithsquare.com https:\/\/www.redditstatic.com *.6sc.co https:\/\/cdn.sprig.com https:\/\/xms-production-f.squarecdn.com https:\/\/www.youtube.com https:\/\/pw-renderer-production-c.squarecdn.com 'nonce-NkHQNBV7zsX+KtKKoZ+YfA=='; style-src 'self' https:\/\/square-fonts-production-f.squarecdn.com https:\/\/sales-bridge-production-c.squarecdn.com https:\/\/sales-bridge-staging-c.squarecdn.com 'unsafe-inline' https:\/\/*.qualified.com https:\/\/pw-renderer-production-c.squarecdn.com; frame-ancestors 'self' https:\/\/app.contentful.com; report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pubd9af00759e65a48ba7ee3ff1dfa4260b&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to browser-intake-datadoghq","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/cdn.ampproject.org https:\/\/snap.licdn.com https:\/\/www.youtube.com *.youtube.com *.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/consent.bumble.com *.typeform.com *.doubleclick.net *.taboola.com; script-src 'self' 'unsafe-inline' 'report-sample' 'nonce-qytENnK6NWW430Z2RGqJOA==' https:\/\/cdn.ampproject.org https:\/\/snap.licdn.com https:\/\/www.youtube.com *.youtube.com *.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/consent.bumble.com *.typeform.com *.doubleclick.net *.taboola.com; style-src 'self' 'unsafe-inline' *.typeform.com; connect-src 'self' https:\/\/cdn.ampproject.org https:\/\/consent.bumble.com https:\/\/www.googletagmanager.com *.google-analytics.com *.analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/www.google.com\/pagead *.googlesyndication.com *.typeform.com *.typeformcdn.com; child-src 'self'; font-src 'self' data:; manifest-src 'self'; base-uri 'self'; frame-src 'self' https:\/\/cdn.ampproject.org https:\/\/snap.licdn.com https:\/\/www.youtube.com *.youtube.com *.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/consent.bumble.com *.typeform.com *.doubleclick.net *.taboola.com; img-src * data: blob: www.googletagmanager.com; media-src * data: blob:; report-uri \/jss\/csp_report.phtml?token=bumble_team_site&env=production;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'nonce-Sw8pT6rxaNUgsLSqU9O8sw==' 'strict-dynamic' 'self' 'wasm-unsafe-eval' https:\/\/a-cdn.anthropic.com https:\/\/assets.claude.ai https:\/\/www.googletagmanager.com https:\/\/js.hsforms.net https:\/\/embed.typeform.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:\/\/cdn.sanity.io https:\/\/assets.claude.com https:\/\/assets-staging.claude.com https:\/\/i.ytimg.com https:\/\/forms.hsforms.com https:\/\/forms-na1.hsforms.com; font-src 'self' https:\/\/fonts.gstatic.com; media-src 'self' https:\/\/cdn.sanity.io https:\/\/assets.claude.com https:\/\/assets-staging.claude.com https:\/\/assets.claude.ai; frame-src https:\/\/www.youtube-nocookie.com https:\/\/form.typeform.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com https:\/\/a.claude.com; connect-src 'self' https:\/\/a-api.anthropic.com https:\/\/a-cdn.anthropic.com https:\/\/api.anthropic.com https:\/\/cdn.sanity.io https:\/\/assets.claude.com https:\/\/assets-staging.claude.com https:\/\/*.api.sanity.io https:\/\/*.apicdn.sanity.io wss:\/\/*.api.sanity.io https:\/\/links.iterable.com https:\/\/claude.ai\/api\/billing\/subscription_pricing https:\/\/forms.hsforms.com https:\/\/forms-na1.hsforms.com https:\/\/www.googletagmanager.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:\/\/*.hsforms.com https:\/\/links.iterable.com; report-uri \/api\/csp-report; report-to csp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-6aVs7G8JzYgfbWlDayJ-fw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src 'nonce-7d03d5cfd6fa485b998075d02c773f93' 'strict-dynamic' 'wasm-unsafe-eval' 'unsafe-eval' *.bdxiguastatic.com *.bytescm.com *.bytetos.com *.toutiao.com *.ibytedapm.com bdxiguastatic.com *.bytegoofy.com;img-src blob: data: *.douyinstatic.com *.toutiaoimg.com *.bdxiguastatic.com *.bdxiguaimg.com *.bytexservice.com *.bytednsdoc.com *.douyinpic.com *.byteeffecttos.com *.byteacctimg.com *.byteimg.com *.bytecdn.cn http: *.ixigua.com *.itoutiaoimg.com *.toutiaostatic.com s.360.cn *.bytescm.com *.byted.org pos.baidu.com www.gstatic.com jonypractic.net wx.qlogo.cn;report-to slardar-endpoint;style-src blob: 'self' pwm-image.trendmicro.com www.gstatic.com cdn.jsdelivr.net plugin.newmorehot.com *.bytedance.net lib.baomitu.com *.bdxiguastatic.com 'unsafe-inline';manifest-src *.bytednsdoc.com;frame-src wo.laiwoshop.com pwm-image.trendmicro.com a.safen100.com c.safen110.com m.youtube.com code.woqrcode.com api.xiaoduis.com *.ixigua.com cdn.hunong.xyz cha.chaweather.com cx.chacizus.com v2.maoyinews.xyz *.summer5188.com tj.shshinfo.com www.mgtv.com vip.zhanyangsh.cn;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-EQfUDt5iukulboMvk6Lnrw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-JVIL0Klnz2INKSjiRyv9Zg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-vL4_2j1m1lg-VmBNXeUaKw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-bkhjVDPmwnTErLwri_D4uQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-JrxrCYUmrK3hI0aey5Lr6g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-YmQ3aRt46zdNCG2FjJhzRg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/pref.docusign.com https:\/\/apps.docusign.com https:\/\/events.docusign.com https:\/\/momentum.docusign.com https:\/\/dsucustomers.docusign.com https:\/\/account.docusign.com https:\/\/account-d.docusign.com https:\/\/ecom.docusign.com https:\/\/support.docusign.com https:\/\/developers.docusign.com https:\/\/community.docusign.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/p.mdb.tools https:\/\/identity.mdb.tools https:\/\/sierra.chat:443 https:\/\/sierra.chat https:\/\/*.cloudfront.net https:\/\/cdn.jsdelivr.net https:\/\/cdn.prod.website-files.com https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com https:\/\/cdn4.mxpnl.com https:\/\/s.yimg.com https:\/\/tags.srv.stackadapt.com:443 https:\/\/cdn.yellowmessenger.com https:\/\/docusign-api.arkoselabs.com https:\/\/trk.techtarget.com https:\/\/cdn.optimizely.com https:\/\/www.googletagmanager.com https:\/\/players.brightcove.net https:\/\/cdn3.optimizely.com https:\/\/cdn.cookielaw.org https:\/\/vjs.zencdn.net https:\/\/cdn.sift.com https:\/\/tags.srv.stackadapt.com https:\/\/js.driftt.com https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/bat.bing.com https:\/\/tag.demandbase.com https:\/\/www.knotch-cdn.com https:\/\/js.adsrvr.org https:\/\/rs.fullstory.com https:\/\/edge.fullstory.com https:\/\/googleads.g.doubleclick.net https:\/\/protect.docusign.net https:\/\/protect-d.docusign.net https:\/\/app.gatedcontent.com https:\/\/img.en25.com https:\/\/track.docusign.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/browser.sentry-cdn.com https:\/\/app.guideflow.com https:\/\/zn0oqzbba3l7g5ph4-docusign.siteintercept.qualtrics.com https:\/\/siteintercept.qualtrics.com https:\/\/80e3c780877f.cdn4.forter.com https:\/\/sadmin.brightcove.com https:\/\/platform.twitter.com https:\/\/bam.nr-data.net https:\/\/static.ads-twitter.com https:\/\/www.redditstatic.com https:\/\/chat.docusign.net https:\/\/sdk.inbenta.io https:\/\/apps.usw2.pure.cloud https:\/\/api-cdn.usw2.pure.cloud https:\/\/cdn.taboola.com https:\/\/trc.taboola.com https:\/\/www.influ2.com https:\/\/t.influ2.com\/ https:\/\/hermes.docusign.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/sierra.chat:443 https:\/\/sierra.chat https:\/\/*.cloudfront.net https:\/\/cdn.jsdelivr.net https:\/\/cdn.prod.website-files.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn4.mxpnl.com https:\/\/s.yimg.com https:\/\/tags.srv.stackadapt.com:443 https:\/\/cdn.yellowmessenger.com https:\/\/docusign-api.arkoselabs.com https:\/\/trk.techtarget.com https:\/\/cdn.optimizely.com https:\/\/www.googletagmanager.com https:\/\/players.brightcove.net https:\/\/cdn3.optimizely.com https:\/\/cdn.cookielaw.org https:\/\/vjs.zencdn.net https:\/\/cdn.sift.com https:\/\/tags.srv.stackadapt.com https:\/\/tags.srv.stackadapt.com:443\/events.js https:\/\/tags.srv.stackadapt.com\/events.js https:\/\/js.driftt.com https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/bat.bing.com https:\/\/tag.demandbase.com https:\/\/www.knotch-cdn.com https:\/\/js.adsrvr.org https:\/\/rs.fullstory.com https:\/\/edge.fullstory.com https:\/\/googleads.g.doubleclick.net https:\/\/protect.docusign.net https:\/\/protect-d.docusign.net https:\/\/app.gatedcontent.com https:\/\/img.en25.com https:\/\/track.docusign.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/browser.sentry-cdn.com https:\/\/app.guideflow.com https:\/\/zn0oqzbba3l7g5ph4-docusign.siteintercept.qualtrics.com https:\/\/siteintercept.qualtrics.com https:\/\/80e3c780877f.cdn4.forter.com https:\/\/sadmin.brightcove.com https:\/\/platform.twitter.com https:\/\/bam.nr-data.net https:\/\/static.ads-twitter.com https:\/\/www.redditstatic.com https:\/\/chat.docusign.net https:\/\/sdk.inbenta.io https:\/\/apps.usw2.pure.cloud https:\/\/api-cdn.usw2.pure.cloud https:\/\/cdn.taboola.com https:\/\/trc.taboola.com https:\/\/www.influ2.com https:\/\/t.influ2.com\/ https:\/\/hermes.docusign.com https:\/\/identity.mdb.tools https:\/\/p.mdb.tools https:\/\/connect.facebook.net\/en_US\/fbevents.js https:\/\/cdn.yellowmessenger.com\/plugin\/widget-v2\/latest\/dist\/main.min.js https:\/\/cdn.taboola.com\/libtrc\/unip\/1790969\/tfa.js https:\/\/cdn.sift.com\/s.js https:\/\/bat.bing.com\/bat.js https:\/\/www.influ2.com\/tracker; style-src 'self' 'unsafe-inline' https:\/\/sierra.chat:443 https:\/\/sierra.chat https:\/\/cdn.prod.website-files.com https:\/\/cdn.yellowmessenger.com https:\/\/tags.srv.stackadapt.com https:\/\/app.gatedcontent.com https:\/\/www.gstatic.com https:\/\/app.guideflow.com https:\/\/sdk.inbenta.io; img-src 'self' data: blob: https:\/\/assets-global.website-files.com https:\/\/*.cloudfront.net https:\/\/sp.analytics.yahoo.com https:\/\/ecom.docusign.com https:\/\/cdn.prod.website-files.com https:\/\/connect.facebook.net https:\/\/r4-ym-uploads.s3-us-west-2.amazonaws.com https:\/\/r4.app.yellow.ai https:\/\/cdn.yellowmessenger.com https:\/\/www.google.com.ar https:\/\/www.google.co.kr https:\/\/www.google.co.nz https:\/\/www.google.com.hk https:\/\/www.google.com.pe https:\/\/translate.google.com https:\/\/www.google.co.id https:\/\/www.google.co.cr https:\/\/www.google.com.my https:\/\/www.google.cl https:\/\/www.googleadservices.com https:\/\/www.google.de https:\/\/www.google.it https:\/\/www.google.co.jp https:\/\/www.google.co.za https:\/\/www.google.es https:\/\/www.google.com.sg https:\/\/www.google.com.co https:\/\/www.google.co.uk https:\/\/www.google.co.in https:\/\/www.google.nl https:\/\/www.google.com.ph https:\/\/www.google.com.au https:\/\/www.google.ca https:\/\/www.google.com.br https:\/\/www.google.com https:\/\/www.google.com.mx https:\/\/www.google.fr https:\/\/secure.adnxs.com https:\/\/attr.ml-api.io https:\/\/attr-td.ml-api.io https:\/\/images.ctfassets.net https:\/\/cdn.bfldr.com https:\/\/metrics.brightcove.com https:\/\/cf-images.us-east-1.prod.boltdns.net https:\/\/hexagon-analytics.com https:\/\/s.ml-attr.com https:\/\/cdn.cookielaw.org https:\/\/id.rlcdn.com https:\/\/px.ads.linkedin.com https:\/\/frontdoor.knotch.it https:\/\/dsum-sec.casalemedia.com https:\/\/partners.tremorhub.com https:\/\/pixel.rubiconproject.com https:\/\/www.facebook.com https:\/\/segments.company-target.com https:\/\/www.linkedin.com https:\/\/px4.ads.linkedin.com https:\/\/bat.bing.com https:\/\/track.docusign.com https:\/\/www.gstatic.com https:\/\/storage.googleapis.com https:\/\/imagedelivery.net https:\/\/app.gatedcontent.com https:\/\/images.esign.docusign.com https:\/\/www.googletagmanager.com https:\/\/t.co https:\/\/analytics.twitter.com https:\/\/analytics.google.com https:\/\/alb.reddit.com https:\/\/googleads.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/img-taboola.com https:\/\/trc.taboola.com https:\/\/t.influ2.com https:\/\/i.liadm.com https:\/\/match.adsrvr.org https:\/\/r4.app.yellow.ai; font-src 'self' data: https:\/\/sierra.chat:443 https:\/\/sierra.chat https:\/\/cdn.prod.website-files.com https:\/\/images.simplycodes.com https:\/\/stylesheets.pixiebrix.com https:\/\/cdn.jsdelivr.net https:\/\/cdn.yellowmessenger.com https:\/\/fonts.gstatic.com https:\/\/docucdn-a.akamaihd.net https:\/\/cdn.inbenta.io https:\/\/use.typekit.net https:\/\/api-cdn.usw2.pure.cloud https:\/\/api-cdn.usw2.pure.cloud; connect-src 'self' https:\/\/api.iterable.com https:\/\/api.sitelytics.tech https:\/\/p.mdb.tools https:\/\/sierra.chat:443 https:\/\/sierra.chat https:\/\/api-js.mixpanel.com https:\/\/api.mixpanel.com https:\/\/cdn.prod.website-files.com https:\/\/s.yimg.com https:\/\/cdn4.forter.com https:\/\/a9b3895076a445bdaf9a9aada0ab7287-80e3c780877f.cdn.forter.com https:\/\/31ff10b411e04c66a144663da6b34da5-80e3c780877f.cdn.forter.com https:\/\/3dcb810e88774d429c6dba71bbee8c34-80e3c780877f.cdn.forter.com https:\/\/tag.demandbase.com https:\/\/cdn.yellowmessenger.com https:\/\/autocomplete.demandbase.com https:\/\/segments.company-target.com https:\/\/ibc-flow.techtarget.com https:\/\/ingesteer.services-prod.nsvcs.net https:\/\/www.googletagmanager.com https:\/\/www.google.com.co https:\/\/www.google.com.mx https:\/\/www.google.co.uk https:\/\/www.google.es https:\/\/www.google.com.br https:\/\/www.google.com.sg https:\/\/www.google.com.in https:\/\/www.google.com.ph https:\/\/www.google.ca https:\/\/www.google.com.au https:\/\/rum.optimizely.com wss:\/\/r4.cloud.yellow.ai https:\/\/cdn8.forter.com https:\/\/12e748c623734740a09ab181abb7a3a1-80e3c780877f.cdn.forter.com https:\/\/cdn3.forter.com https:\/\/r4.cloud.yellow.ai https:\/\/siteperformancetest.net https:\/\/wtp.siteperformancetest.net https:\/\/privacyportal.onetrust.com https:\/\/region1.analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/telemetry-s.docusign.net https:\/\/telemetry.dev.docusign.net https:\/\/www.facebook.com https:\/\/www.google-analytics.com https:\/\/manifest.prod.boltdns.net https:\/\/frontdoor.knotch.it https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/ingest.insights.ninetailed.co https:\/\/cdn.jsdelivr.net https:\/\/unpkg.com https:\/\/assets.ctfassets.net https:\/\/edge.api.brightcove.com https:\/\/house-fastly-signed-us-east-1-prod.brightcovecdn.com https:\/\/cdn.cookielaw.org https:\/\/telemetry.docusign.net https:\/\/geolocation.onetrust.com https:\/\/www.google.com https:\/\/experience.ninetailed.co https:\/\/edge.fullstory.com https:\/\/tags.srv.stackadapt.com https:\/\/api.company-target.com https:\/\/configs.knotch.com https:\/\/px.ads.linkedin.com https:\/\/rs.fullstory.com https:\/\/tag-logger.demandbase.com https:\/\/carddealer.knotch.com https:\/\/analytics.google.com https:\/\/insight.adsrvr.org https:\/\/logx.optimizely.com https:\/\/app.gatedcontent.com https:\/\/guideflow-api-eu-5cv4uu2lra-ew.a.run.app https:\/\/protect.docusign.net https:\/\/protect-d.docusign.net https:\/\/s566810826.t.eloqua.com https:\/\/insights.gatedcontent.com https:\/\/siteintercept.qualtrics.com https:\/\/cdn0.forter.com https:\/\/a.docusign.com https:\/\/datacollector.docusign.com https:\/\/datacollector-demo.docusign.com https:\/\/docusign-api.arkoselabs.com https:\/\/account.docusign.com https:\/\/account-d.docusign.com https:\/\/geo.docusign.com https:\/\/syndication.twitter.com https:\/\/pixel-config.reddit.com https:\/\/www.redditstatic.com https:\/\/www.googleadservices.com https:\/\/api.inbenta.io https:\/\/api-gcu1.inbenta.io https:\/\/apps.usw2.pure.cloud https:\/\/api-cdn.usw2.pure.cloud https:\/\/psb.taboola.com https:\/\/pips.taboola.com https:\/\/cds.taboola.com https:\/\/trc-events.taboola.com https:\/\/t.influ2.com https:\/\/www.influ2.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/players.brightcove.net https:\/\/js.driftt.com https:\/\/www.googletagmanager.com https:\/\/s.company-target.com https:\/\/insight.adsrvr.org https:\/\/match.adsrvr.org https:\/\/pixel.rubiconproject.com https:\/\/cm.g.doubleclick.net https:\/\/ib.adnxs.com https:\/\/td.doubleclick.net https:\/\/www.google.com https:\/\/app.guideflow.com https:\/\/platform.twitter.com https:\/\/chat.docusign.net https:\/\/a275532918.cdn.optimizely.com https:\/\/app.netlify.com https:\/\/apps.usw2.pure.cloud https:\/\/api-cdn.usw2.pure.cloud https:\/\/hermes.docusign.com https:\/\/tsdtocl.com https:\/\/docusign-api.arkoselabs.com; media-src 'self' blob: https:\/\/manifest.prod.boltdns.net https:\/\/house-fastly-signed-us-east-1-prod.brightcovecdn.com https:\/\/videos.ctfassets.net https:\/\/house-fastly-signed-us-east-1-prod.brightcovecdn.com https:\/\/house-fastly-signed-us-east-1-prod.brightcovecdn.com:443 https:\/\/manifest.prod.boltdns.net; worker-src 'self' blob:; base-uri 'self'; form-action 'self' https:\/\/trial.docusign.com https:\/\/ecomservices.docusign.com https:\/\/na.account.docusign.com https:\/\/app.gatedcontent.com https:\/\/datacollector.docusign.com https:\/\/datacollector-demo.docusign.com https:\/\/docusign-api.arkoselabs.com https:\/\/account.docusign.com https:\/\/account-d.docusign.com https:\/\/protect.docusign.net https:\/\/protect-d.docusign.net https:\/\/track.docusign.com; object-src 'self' https:\/\/players.brightcove.net; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-VMY-AuD7dLtYoiLVZO1Myw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src * 'unsafe-eval' 'unsafe-inline' blob: data:;frame-src 'self' sinaweibo: weibo.com *.weibo.com weibo.cn *.weibo.cn sina.com.cn *.sina.com.cn sina.cn *.sina.cn *.sinaimg.cn sinanews: sinanewslite: intent: se5bed38c567feb2a: sb5750862870e1cc2: sdc77698a60e45368: sb2623a3919ed77d3: s3d4cfbed31875e1c: sc876cbd9ae34e814: sdf08f19582289581: sc640c3792845ba3e: se8525a4dbfaa192b: sb5261983836bde16: sinablog: sinanewapmwebview: sinanewsdirect: sinafinance:; script-src 'self' 'unsafe-inline' 'unsafe-eval' weibo.com *.weibo.com weibo.cn *.weibo.cn sina.com.cn *.sina.com.cn sina.cn *.sina.cn *.sinaimg.cn *.qchannel03.cn *.qihucdn.com *.qhres.com *.sinajs.cn *.leju.com *.qq.com qzonestyle.gtimg.cn; report-uri https:\/\/logger.sina.cn\/report;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-ails8w1hy_VZfsFZ9Du8DQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-EWV2VAJMQ0lP728v3ZQodw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-jnb1VIvlBypK89IEse7m5A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-4LxPs1iDTDn-I4obGbRB6Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src 'self'; object-src 'none'; base-uri 'self'; script-src-attr 'none'","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-rbNm2oOplY_jZ6PsdJZa5Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-HfxktRwGR_HVGa84UNDCSg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-CfPWa8in1w6j3hSdln5ZSw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-alAd0P4lMt2Keddsjc9NHg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' hubspot.mintlify.dev app.hubspot.com cdn-3.convertexperiments.com cdnjs.cloudflare.com connect.facebook.net cta-service-cms2.hubspot.com js.hsforms.net js.hs-analytics.net js.hs-banner.com js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com platform.twitter.com play.vidyard.com run.pstmn.io script.crazyegg.com script.hotjar.com static.hotjar.com static.hsappstatic.net use.typekit.net www.googletagmanager.com www.google-analytics.com www.hubspot.com api.s10h.io 'strict-dynamic' 'nonce-5WvYXHsEi9oFsk8RVyBEUA=='; report-uri https:\/\/send.hsbrowserreports.com\/csp\/report","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-uUSiXq8xEYdsrzpF6__ZXQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; font-src 'self' fonts.gstatic.com *.atlassian.com data:; worker-src blob:; media-src 'self' api.media.atlassian.com *.atlassian.com; img-src data: blob: 'self' *.badgen.net *.youtube.com atlassian.wpengine.netdna-cdn.com global.discourse-cdn.com img.shields.io *.atlassian.net *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat www.gstatic.com *.wp.com cdn.cookielaw.org *.clicktale.net *.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/px.ads.linkedin.com images.ctfassets.net *.public.atl-paas.net trello.com trello-backgrounds.s3.amazonaws.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.google.co.in *.google.com *.atlassian.com *.gravatar.com; frame-src 'self' *.atlassian.com *.atlassian.net *.atl-paas.net *.googletagmanager.com player.vimeo.com trello.com www.youtube.com www.figma.com; connect-src 'self' *.googletagmanager.com *.algolianet.com *.algolia.net *.clicktale.net *.launchdarkly.com *.trello.com *.doubleclick.net *.qualtrics.com *.onetrust.com *.sentry.io cdn.segment.com api.segment.io www.google-analytics.com https:\/\/px.ads.linkedin.com cdn.cookielaw.org *.atlassian.com *.atlassian.net *.algolia.io *.google.com *.staging.atl-paas.net *.jira-dev.com; report-uri https:\/\/web-security-reports.services.atlassian.com\/csp-report\/dac; object-src 'none'; style-src 'self' *.trellocdn.com *.atlassian.com 'unsafe-inline'; script-src 'nonce-VqG94tD407tnmpAnRpNTHK8KR8TDx9VLTNqpp8QVOss=' 'self' 'sha256-Nt9ereHaxV04RZ20OLtdR3uuFr1X0\/Pbt5KbGls\/wXg=' 'sha256-tOj+\/hncGB+HoNjG4vZ22kFWnTZFaTLrsJFU8r20y1w=' https:\/\/www.googleadservices.com https:\/\/player.vimeo.com\/api\/player.js *.segment.com *.clicktale.net mscgen.js.org *.qualtrics.com *.trellocdn.com *.atlassian.com *.atlassian.net www.googletagmanager.com www.google-analytics.com https:\/\/snap.licdn.com https:\/\/cdn.cookielaw.org https:\/\/cdn.jsdelivr.net\/npm\/search-insights@2.2.1 https:\/\/run.pstmn.io\/button.js *.atl-paas.net https:\/\/srm.bf.contentsquare.net\/exist *.jira-dev.com","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-dJ2PO8vTojHDY-hq2Bw3dA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-jDm2x-5ovPhyhnexTIs-Vw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-EOML8M8kZ3J3NZrhyWY8Tw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-JTn4IlK6shy08KrSk22E-Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-YZqeOgiI3mpqPMhtp-PYSQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-TzWqmBlyinWJLC9E7MOoUQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-DhNMeGjBYffwzHxihS7hlA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-0XtmZVOtIps9bQnSmk6ePA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-MxZ5s2_MbQwgbQbmYobnBw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-Egr_bTTmlfHlBP8zK8O6ww' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-ClMi351SIPDoq2gxYAPUxg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-wUvVbnkBelUo6dMMVHH9qw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-agPdJtG4qYY6SP7ZgEAwaQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl\/chrome","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-IPtVlQ_iagXSRgyYJLdxtA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-eZco8qTXUAf-65gYEw-Eeg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-6-nLeO-O2bt97tuwujLAtw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' blob:  https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; frame-src 'self' https:\/\/*.noxiaohao.com https:\/\/telegram.org https:\/\/*.bitget.com https:\/\/accounts.google.com https:\/\/oauth.telegram.org https:\/\/sgtm.btsgtm.com ; script-src 'self' 'nonce-2QZNb6LkuWl2pOsuHR\/kzQ==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6\/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh\/v3RIRuG3kMikr5iha+7P\/0TN\/GNA=' https:\/\/*.noxiaohao.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com https:\/\/accounts.google.com https:\/\/www.googletagmanager.com https:\/\/fonts.googleapis.com https:\/\/play.google.com https:\/\/analytics.google.com https:\/\/fonts.gstatic.com https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/*.geetest.com https:\/\/*.geevisit.com https:\/\/sgtm.btsgtm.com; connect-src 'self' wss: https:\/\/stats.g.doubleclick.net https:\/\/analytics.google.com https:\/\/www.google.com wss:\/\/stream.bitget.cloud https:\/\/*.noxiaohao.com wss:\/\/*.noxiaohao.com wss:\/\/*.bitget.com https:\/\/www.turingfraud.net https:\/\/play.google.com https:\/\/accounts.google.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/sgtm.btsgtm.com ; worker-src 'self' blob:; img-src 'self' data: blob: https:\/\/www.googletagmanager.com https:\/\/img.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/img.bitgetimg.com https:\/\/img.gurenla.com https:\/\/*.bgbstatic.com https:\/\/lh3.googleusercontent.com https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/static-web.jjdsn.vip https:\/\/cdn.bitkeep.vip https:\/\/www.google.co.jp https:\/\/bin.wangsustatic.com https:\/\/sgtm.btsgtm.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/accounts.google.com https:\/\/fonts.googleapis.com https:\/\/static.bgbstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; font-src 'self' data: https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/fonts.gstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri \/v1\/buried\/log\/cspSecurity \/v1\/monitor\/csp?appId=d4b6df7d;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-dS11pipzU36z7i02PhjgvQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.stripe.com *.braintreegateway.com *.googleadservices.com *.googletagservices.com *.googleapis.com cdnjs.cloudflare.com unpkg.com cdn.datatables.net connect.facebook.net *.google.com *.recaptcha.net recaptcha.net *.marinetraffic.com *.googletagmanager.com *.wootric.com *.segment.com *.hotjar.com *.licdn.com *.inmobi.com *.profitwell.com *.kpler.com *.intercom.io *.intercomcdn.com *.doubleclick.net *.hs-scripts.com *.hsadspixel.net *.hubspot.com *.hs-banner.com *.hs-analytics.net static.cloudflareinsights.com cdn.dreamdata.cloud *.gstatic.com; style-src 'self' 'unsafe-inline' *.googleapis.com unpkg.com netdna.bootstrapcdn.com cdn.datatables.net *.kpler.com *.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' data: *.intercomcdn.com; worker-src 'self' blob:; connect-src 'self' https: wss:\/\/*.marinetraffic.com wss:\/\/*.intercom.io wss:\/\/*.hotjar.com; font-src 'self' data: *.marinetraffic.com *.gstatic.com netdna.bootstrapcdn.com *.intercomcdn.com; frame-src 'self' *.google.com *.googletagmanager.com *.stripe.com *.hotjar.com *.intercom.io *.facebook.com recaptcha.net; object-src 'none'; base-uri 'self'; form-action 'self' *.facebook.com; report-uri \/csp-report;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-mCRcrqvqXF8b9XF7w3O3GA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-7jD-uiuyT2eemD9X3KRH5Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-DVrz1-i43SPayxiN3CyGrA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-mIfZ1HNl_6Da2-8OjVAsXA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-84uSmfi9jW_SwOzVD2-kOQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-zYaeMgENDE4kT-mYQ5H8dA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-8GfyajoMKfEHH9dpRGUYlQ==' https:\/\/plausible.io; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:; frame-src https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com; connect-src 'self' https:\/\/plausible.io; worker-src 'self' blob:; form-action 'self'; frame-ancestors 'self'; base-uri 'self'; object-src 'none'","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-Y1h___H4cnUc12Quq6u46w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-MFZX34geclARBR0_fU18XQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-4UKWOZhZTQEnnhnbU5LE_g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-I9scl_AmUiGTyK2mDZrCvw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-e8b3yF3lOSlrWgRQrY_W2g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-5ixGyGU79p70sGzQ7acsvA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-VZivIbjE9G3bVAmuFhqnBQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-MgHD6oS5_jb-q9Q39_fLYA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src https:\/\/www.oreilly.com\/4CPoXI\/9AD\/W-F\/cycO2zlv\/p2L9h4OE9X9X\/eER2UB8pAw\/aXwHG0Ek\/fTIZ https:\/\/www.oreilly.com\/4CPoXI\/9AD\/W-F\/cycO2zlv\/p2L9h4OE9X9X\/eER2UB8pAw\/aXwHG0Ek\/fTIZ  https:\/\/www.oreilly.com\/4CPoXI\/9AD\/W-F\/cycO2zlv\/EOL9h4hfztDzth5Va3\/Ij1uUB8pAw\/I0FfLHhz\/aw8C  https:\/\/www.oreilly.com  * 'unsafe-inline' 'unsafe-eval' data: blob: android-webview-video-poster: moz-extension: ms-browser-extension: chrome-extension: ios-log:; report-uri https:\/\/csp-report.browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pubb898c25826db9d251f99fdcece943792&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service:wordpress-prod-cluster;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-oUHd_2-jSxRyhn45Hrmmmw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-yOfDLd3KFv0FrUZV-dO_bg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.doubleclick.net https:\/\/*.googleadservices.com https:\/\/www.youtube.com https:\/\/www.googletagmanager.com https:\/\/*.hubspot.com https:\/\/*.hubapi.com https:\/\/*.hs-analytics.net https:\/\/*.hscollectedforms.net https:\/\/*.hsadspixel.net https:\/\/*.hs-banner.com https:\/\/*.hs-scripts.com https:\/\/*.hsforms.com https:\/\/*.hsappstatic.net https:\/\/js.hscta.net https:\/\/*.usemessages.com https:\/\/*.hubspot.net https:\/\/*.zdassets.com https:\/\/*.zendesk.com wss:\/\/*.zendesk.com https:\/\/*.cloudinary.com https:\/\/*.amazonaws.com https:\/\/*.appdome.com; worker-src 'self' blob:; frame-src https:\/\/*.youtube.com https:\/\/www.googletagmanager.com https:\/\/*.google.com https:\/\/*.doubleclick.net; img-src 'self' data: https:","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-PrwQk0HRY4tOPTynoEDRJQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-uoYFwKR6RnZdNkRQzUYcnQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src 'nonce-a5plyRdnlzdZMhh0Kp0g2w==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https:\/\/events.mercadolibre.com\/csp\/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=2074cd3e-61b9-42dd-a19c-1e8be64a0d3b; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https:\/\/http2.mlstatic.com\/ https:\/\/mlstaticquic-a.akamaihd.net\/; frame-ancestors 'self' https:\/\/*.mercadolibre.cl:* https:\/\/*.mercadolibre.com:* https:\/\/*.mercadolibre.com.ve:* https:\/\/*.mercadolibre.com.ar:* https:\/\/*.mercadolivre.com.br:* https:\/\/*.mercadolibre.com.co:* https:\/\/*.mercadolibre.com.ec:* https:\/\/*.mercadolibre.com.mx:* https:\/\/*.mercadolibre.com.pe:* https:\/\/*.mercadolibre.com.uy:* https:\/\/*.mercadopago.cl:* https:\/\/*.mercadopago.com.ar:* https:\/\/*.mercadopago.com.br:* https:\/\/*.mercadopago.com.co:* https:\/\/*.mercadopago.com.mx:* https:\/\/*.mercadopago.com.pe:* https:\/\/*.mercadopago.com.uy:* https:\/\/*.mercadopago.com.ve:* https:\/\/*.mercadopago.com:* https:\/\/*.adminml.com:* https:\/\/*.mercadolibre.co.cr:* https:\/\/*.mercadolibre.com.pa:* https:\/\/*.mercadolibre.com.do:* https:\/\/*.mercadolibre.com.bo:* https:\/\/*.mercadolibre.com.py:* https:\/\/*.mercadolibre.com.gt:* https:\/\/*.mercadolibre.com.hn:* https:\/\/*.mercadolibre.com.ni:* https:\/\/*.mercadolibre.com.sv:* https:\/\/*.mercadopago.com.ec:* https:\/\/*.portalinmobiliario.com:* https:\/\/*.mercadolivre.com:*","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-KbtpVcyI8EdmL_IJH53krQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' *.epfl.ch; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.epfl.ch https:\/\/*.cast.switch.ch https:\/\/ajax.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/connect.facebook.net https:\/\/platform.twitter.com https:\/\/player.vimeo.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/www.instagram.com https:\/\/www.youtube.com; object-src 'none'; connect-src 'self' *.epfl.ch https:\/\/*.cast.switch.ch https:\/\/*.cloudfront.net https:\/\/*.google-analytics.com https:\/\/api.cdnjs.com https:\/\/stats.g.doubleclick.net https:\/\/www.google-analytics.com; frame-src 'self' *.epfl.ch https:\/\/api.cast.switch.ch https:\/\/datawrapper.dwcdn.net https:\/\/platform.twitter.com https:\/\/player.vimeo.com https:\/\/www.instagram.com https:\/\/www.youtube.com; style-src-elem 'self' 'unsafe-inline' *.epfl.ch https:\/\/fonts.googleapis.com; font-src 'self' data: *.epfl.ch https:\/\/fonts.gstatic.com; media-src 'self' data: *.epfl.ch https:\/\/*.cloudfront.net; img-src * data: https:\/\/s.w.org https:\/\/syndication.twitter.com https:\/\/www.google-analytics.com; worker-src 'none' blob:; report-uri https:\/\/report-uri.epfl.ch\/csp-report;","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-eval' 'unsafe-inline' *.byted-static.com *.bytedapm.com *.bytegoofy.com *.bytescm.com *.feishu-boe.cn *.feishu.cn *.feishucdn.com *.framer.com *.hubspot.com *.ibytedapm.com *.ibytedtos.com *.larksuite-boe.com *.larksuite.com *.larksuitecdn.com *.ocic-static.com *.snssdk.com *.yahoo.co.jp https:\/\/framer.com https:\/\/accounts.google.com https:\/\/app.factors.ai https:\/\/bat.bing.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/framerusercontent.com https:\/\/googleads.g.doubleclick.net https:\/\/googletagmanager.com https:\/\/hm.baidu.com https:\/\/js-na1.hs-scripts.com https:\/\/js.hs-analytics.net https:\/\/js.hs-banner.com https:\/\/js.intercomcdn.com https:\/\/s.yimg.jp https:\/\/scout-cdn.salesloft.com https:\/\/sf16-website-login.neutral.ttwstatic.com https:\/\/snap.licdn.com https:\/\/static.ads-twitter.com https:\/\/widget.intercom.io https:\/\/www.google-analytics.com https:\/\/www.googleoptimize.com https:\/\/www.googletagmanager.com https:\/\/zz.bdstatic.com; worker-src 'self' blob:; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-fecU0Jbpv8ImD-SkKx8aog' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-iyT6CG4lH-O6xQs6j7xf9Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-txR6fbvjJNieLqSGTxWY0w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src 'report-sample' 'nonce-UUBAy3cKN2n2NEOKaa0t1w' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';worker-src 'self';report-uri \/us\/_\/ThinkWithGoogle\/cspreport","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-nQuQoTz4P0kBg_sxpp59qg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src 'nonce-TnqAu8grRSWhYwMjYJjGog==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri \/_\/csp-report","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-u3xv3RmPvw23lxJTZn7Dyw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-ZBVzHALyuZ3HAQohAUhSmQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-HDVaZbGD97SRHGwBT1yaEQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-6i6FmdW-qNQCvYok4XXwCw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-fCxHaF6QWn2gsciJjUS1Gz6t13sVcaNwTqOoa2pTPCs'; style-src 'self' 'nonce-fCxHaF6QWn2gsciJjUS1Gz6t13sVcaNwTqOoa2pTPCs'; img-src 'self' data:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; report-uri \/+cspreport\/log","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-NONKztRpD8lbVJg0a3mCAg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src 'nonce-bFOBdZmnADEFPR0bFVULYw==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https:\/\/events.mercadolibre.com\/csp\/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=3f1cb8b0-734a-409c-9918-b1811978e637; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https:\/\/http2.mlstatic.com\/ https:\/\/mlstaticquic-a.akamaihd.net\/; frame-ancestors 'self' https:\/\/*.mercadolibre.cl:* https:\/\/*.mercadolibre.com:* https:\/\/*.mercadolibre.com.ve:* https:\/\/*.mercadolibre.com.ar:* https:\/\/*.mercadolivre.com.br:* https:\/\/*.mercadolibre.com.co:* https:\/\/*.mercadolibre.com.ec:* https:\/\/*.mercadolibre.com.mx:* https:\/\/*.mercadolibre.com.pe:* https:\/\/*.mercadolibre.com.uy:* https:\/\/*.mercadopago.cl:* https:\/\/*.mercadopago.com.ar:* https:\/\/*.mercadopago.com.br:* https:\/\/*.mercadopago.com.co:* https:\/\/*.mercadopago.com.mx:* https:\/\/*.mercadopago.com.pe:* https:\/\/*.mercadopago.com.uy:* https:\/\/*.mercadopago.com.ve:* https:\/\/*.mercadopago.com:* https:\/\/*.adminml.com:* https:\/\/*.mercadolibre.co.cr:* https:\/\/*.mercadolibre.com.pa:* https:\/\/*.mercadolibre.com.do:* https:\/\/*.mercadolibre.com.bo:* https:\/\/*.mercadolibre.com.py:* https:\/\/*.mercadolibre.com.gt:* https:\/\/*.mercadolibre.com.hn:* https:\/\/*.mercadolibre.com.ni:* https:\/\/*.mercadolibre.com.sv:* https:\/\/*.mercadopago.com.ec:* https:\/\/*.portalinmobiliario.com:* https:\/\/*.mercadolivre.com:*","count":1},{"content-security-policy-report-only":" img-src 'self' data: blob: https:\/\/assets.cfr.org https:\/\/static.cfr.org https:\/\/*.go-vip.net https:\/\/*.lndo.site http:\/\/*.lndo.site https:\/\/*.dwcdn.net https:\/\/i.ytimg.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.doubleclick.net https:\/\/p1.parsely.com https:\/\/secure.gravatar.com https:\/\/vallenato-media.cfr.org https:\/\/cfr-vallenato-media.s3.amazonaws.com https:\/\/cfr-vallenato-media.s3.us-east-1.amazonaws.com; report-uri \/api\/csp-report","count":1},{"content-security-policy-report-only":" form-action 'self'; img-src 'self' data:; default-src 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self'; style-src 'self'; font-src 'self'; base-uri 'self'; connect-src 'self'","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-UegXXg6HuKx2Yywq4cSh2Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' *.airasia.com *.airasia.cn *.tiktok.com; worker-src 'self' blob: *.airasia.com *.airasia.cn *.apiairasia.com cdnjs.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.airasia.com *.airasia.cn www.recaptcha.net code.jquery.com *.apaylater.com *.instagram.com *.hcaptcha.com *.clevertap-prod.com *.wizrocket.com *.ada.support *.appsflyer.com *.apiairasia.com *.google-analytics.com *.googleapis.com *.googletagservices.com *.googletagmanager.com *.clarity.ms *.recaptcha.net *.clevertap.com *.gstatic.com *.gstatic.cn *.g.doubleclick.net *.adtrafficquality.google *.googlesyndication.com *.cloudflareinsights.com cdnjs.cloudflare.com *.facebook.com analytics.tiktok.com ads.tiktok.com *.bing.com cdn.moengage.com accounts.google.com fundingchoicesmessages.google.com *.appsflyersdk.com *.yimg.com *.facebook.net *.cloudfront.net *.cloudflare.com s.yimg.jp; style-src 'self' 'unsafe-inline' *.airasia.com *.airasia.cn *.apiairasia.com *.bootstrapcdn.com *.google.com *.googleapis.com www.gstatic.com cdn.jsdelivr.net; img-src 'self' data: blob: https:; font-src 'self' data: *.airasia.com *.airasia.cn *.bootstrapcdn.com *.fontawesome.com *.cloudflare.com unpkg.com fonts.gstatic.com static.shopback.com cdn.jsdelivr.net *.appsflyer.com; connect-src 'self' *.airasia.com *.airasia.cn *.apiairasia.com wss:\/\/*.apiairasia.com *.conviva.com *.kiwi.com *.mgbedbank.com *.hcaptcha.com v2.chatbot-hs.apiairasia.com chatbot-agent.airasia.com *.g.doubleclick.net flight-status-otp-890891734793.asia-southeast1.run.app *.travelapi.com *.appsflyersdk.com *.ada.support us-central1-airasiawebanalytics.cloudfunctions.net *.googletagservices.com *.appgw.conviva.com *.google.com *.google.com.au *.google.com.sg *.google.com.ph *.google.co.th *.google.com.bn *.google.com.tw *.google.co.id *.google.co.in *.google.com.my *.moengage.com airasia.gw-dv.vip airasia.gw-dv.xyz *.regulaforensics.com *.doubleclick.net wss:\/\/ws.hotjar.com www.google.com *.cloudflareinsights.com *.googletagmanager.com ep1.adtrafficquality.google *.google-analytics.com *.clarity.ms *.facebook.com *.tiktokw.us *.tiktok.com airasia.cdn-gw-dv.vip airasia.gw-dv.io airasia.ck123.io *.bing.com *.yimg.com *.recaptcha.net *.facebook.net *.googleadservices.com *.googlesyndication.com *.gstatic.com *.adtrafficquality.google *.googleapis.com *.google.com; frame-src 'self' *.airasia.com *.airasia.cn airasia.onelink.me *.youtube.com *.hcaptcha.com *.googlesyndication.com *.doubleclick.net *.google.com *.googleadservices.com *.recaptcha.net ls.cdn-gw-dv.vip ep2.adtrafficquality.google *.facebook.com challenges.cloudflare.com *.ada.support; frame-ancestors 'self' *.airasia.com *.airasia.cn; base-uri 'self'; form-action 'self' *.facebook.com; report-uri https:\/\/flights.airasia.com\/fp\/web\/report-uri;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-paEEAMtzhfcdlF2lLie67w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-rUMRI6sN4wfyWy7ut2WBKw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-KFzOnc8QhbPbAHSmwkadxg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-wmNWZh4vTcY0bTsFqT-WSg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-bTVGrzRFWTfNXT9WcRtWwg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-s3QUggibFKAhAX5C5lttsw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-t5xrukRS-YO0cAT8ykwm9Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-7uK1xY-Mn2x-RagHC2i7kA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-P9LrN-WubWoV2sp4Pn2YNQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' blob: *.taboola.com *.geocomply.com *.ads-twitter.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co d32tdr35c4icxo.cloudfront.net *.adform.net *.app.delivery *.bet.br *.betano.com *.betgenius.com *.bing.com *.cloudflare.com *.cloudflareinsights.com *.cookielaw.org *.creativecdn.com *.facebook.net *.fullstory.com *.gmlinteractive.com *.google-analytics.com *.googletagmanager.com *.kaizengaming.com *.kameleoon.eu *.kameleoon.io *.lgrckt-in.com *.optimove.net *.sportradar.com *.sportradarserving.com *.tostarsbuilding.com *.googleapis.com *.opera.com *.gambling-malta.com *.logr-in.com; worker-src 'self' blob:; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=dr1L_f_caEnokZ.4vZrNOHLPM7Ou9MoBACqFfhGQboc-1788495289.5646884-1.0.1.1-ipIZcT09cN.GB4eP3LhHpzT6m18oaUYNKtDNpQZRlYHDP0N.v8UKWLhNqrESN4kbzwnCAqsf.Tx3zgAq9jbP7.qEls7is8OZX2adQXunKRUTem2fNgPa3jgpAQbV0cc4J9UPZwwOZ.RL72AldFJFusMGQKKGlrmx1l1B0_uvXuYCmaCbYb1BbP9nO69.bvPS; report-to cf-pvjfiwmfnrbqgniv","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-uKMC7O5yfb-OuMXy-C72xQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-DMyO66IiS9SAHw4pI8c0Zg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; worker-src 'self' blob:; script-src 'unsafe-inline' 'unsafe-eval' 'self' static.prdg.io\/  ucontent.prdg.io *.mogl.com swagbucks.7eer.net\/js\/799\/1700\/irv2.js *.abtasty.com *.adsafeprotected.com *.amplitude.com appleid.cdn-apple.com js.appboycdn.com cdn.auryc.com js.authorize.net completr-v2.appspot.com sugg.search.yahoo.net\/sg\/ bat.bing.com www.clarity.ms tags.clickagy.com t.contentsquare.net app.contentsquare.com cdn.cookielaw.org swagbucks.disqus.com\/embed.js swagbucks-qa.disqus.com\/embed.js googleads.g.doubleclick.net *.doubleverify.com www.dwin1.com pf.entertainow.com load.exelator.com connect.facebook.net gwiqcdn.globalwebindex.net accounts.google.com\/gsi\/client apis.google.com\/js\/ translate.google.com www.google.com\/jsapi www.google.com\/pagead\/ www.google.com\/recaptcha\/ *.google-analytics.com www.googleadservices.com maps.googleapis.com storage.googleapis.com\/pollfish_production\/ tpc.googlesyndication.com www.googletagmanager.com www.googletagservices.com www.gstatic.com\/recaptcha\/ *.equalweb.com cdn.us.heap-api.com cdn.heapanalytics.com heapanalytics.com cdn.hellosign.com hideout.tv script.hotjar.com static.hotjar.com mpsnare.iesnare.com d.impactradius-event.com cso2.imperium.com secure-gl.imrworldwide.com secure.insightexpressai.com surveys.insightexpressai.com media-cdn.ipredictive.com app.lifesight.io\/personica.js global.localizecdn.com api.maruusurv-serving.com img.macromill.com privacyportal-cdn.onetrust.com on-device.com www.paypalobjects.com aalert.peanutlabs.com pix.pub api.prsrvy.com rules.quantcount.com secure.quantserve.com idsync.reson8.com publishers.revenueuniverse.com wsdk.rokt.com cn.rtclx.com *.scorecardresearch.com classic.slingo.com js.stripe.com jsd.supersonicads.com js.swagbucks.com cdn.taboola.com analytics.tiktok.com transcend-cdn.com widget.trustpilot.com platform.twitter.com web-sdk.urbanairship.com *.voicefive.com *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com useruploads.vwo.io cdn.wootric.com static.zdassets.com assets.zendesk.com www.p.zjptg.com\/tag\/ cdnjs.cloudflare.com\/ajax\/libs\/crypto-js\/ cdnjs.cloudflare.com\/ajax\/libs\/intl-tel-input\/ cdnjs.cloudflare.com\/ajax\/libs\/inputmask\/4.0.8\/inputmask\/inputmask.min.js cdnjs.cloudflare.com\/polyfill\/ d33wwcok8lortz.cloudfront.net\/js\/799\/ d3op16id4dloxg.cloudfront.net\/CSOWrapperAjax3.js d3op16id4dloxg.cloudfront.net\/RelevantID4.js *.verisoul.ai *.zendesk.com; script-src-elem 'unsafe-inline' 'unsafe-eval' 'self' static.prdg.io\/  ucontent.prdg.io *.mogl.com swagbucks.7eer.net\/js\/799\/1700\/irv2.js *.abtasty.com *.adsafeprotected.com *.amplitude.com appleid.cdn-apple.com js.appboycdn.com cdn.auryc.com js.authorize.net completr-v2.appspot.com sugg.search.yahoo.net\/sg\/ bat.bing.com www.clarity.ms tags.clickagy.com t.contentsquare.net app.contentsquare.com cdn.cookielaw.org swagbucks.disqus.com\/embed.js swagbucks-qa.disqus.com\/embed.js googleads.g.doubleclick.net *.doubleverify.com www.dwin1.com pf.entertainow.com load.exelator.com connect.facebook.net gwiqcdn.globalwebindex.net accounts.google.com\/gsi\/client apis.google.com\/js\/ translate.google.com www.google.com\/jsapi www.google.com\/pagead\/ www.google.com\/recaptcha\/ *.google-analytics.com www.googleadservices.com maps.googleapis.com storage.googleapis.com\/pollfish_production\/ tpc.googlesyndication.com www.googletagmanager.com www.googletagservices.com www.gstatic.com\/recaptcha\/ *.equalweb.com cdn.us.heap-api.com cdn.heapanalytics.com heapanalytics.com cdn.hellosign.com hideout.tv script.hotjar.com static.hotjar.com mpsnare.iesnare.com d.impactradius-event.com cso2.imperium.com secure-gl.imrworldwide.com secure.insightexpressai.com surveys.insightexpressai.com media-cdn.ipredictive.com app.lifesight.io\/personica.js global.localizecdn.com api.maruusurv-serving.com img.macromill.com privacyportal-cdn.onetrust.com on-device.com www.paypalobjects.com aalert.peanutlabs.com pix.pub api.prsrvy.com rules.quantcount.com secure.quantserve.com idsync.reson8.com publishers.revenueuniverse.com wsdk.rokt.com cn.rtclx.com *.scorecardresearch.com classic.slingo.com js.stripe.com jsd.supersonicads.com js.swagbucks.com cdn.taboola.com analytics.tiktok.com transcend-cdn.com widget.trustpilot.com platform.twitter.com web-sdk.urbanairship.com *.voicefive.com *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com useruploads.vwo.io cdn.wootric.com static.zdassets.com assets.zendesk.com www.p.zjptg.com\/tag\/ cdnjs.cloudflare.com\/ajax\/libs\/crypto-js\/ cdnjs.cloudflare.com\/ajax\/libs\/intl-tel-input\/ cdnjs.cloudflare.com\/ajax\/libs\/inputmask\/4.0.8\/inputmask\/inputmask.min.js cdnjs.cloudflare.com\/polyfill\/ d33wwcok8lortz.cloudfront.net\/js\/799\/ d3op16id4dloxg.cloudfront.net\/CSOWrapperAjax3.js d3op16id4dloxg.cloudfront.net\/RelevantID4.js *.verisoul.ai *.zendesk.com; report-uri https:\/\/csp.prodege.workers.dev\/report","count":1},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval' blob: data: https:\/\/www.googleadservices.com\/pagead\/conversion\/ https:\/\/www.googletagmanager.com\/gtag\/js https:\/\/www.googletagmanager.com\/gtag\/destination https:\/\/www.googletagmanager.com\/gtm.js https:\/\/www.google.com\/js\/bg\/ https:\/\/www.gstatic.com\/external_hosted\/highlightjs\/highlight.pack.js https:\/\/www.gstatic.com\/monaco_editor\/ https:\/\/fonts.gstatic.com\/s\/e\/notoemoji\/search\/wrapper.js https:\/\/www.youtube.com\/iframe_api https:\/\/translate.google.com\/translate_a\/element.js https:\/\/www-onepick-opensocial.googleusercontent.com\/gadgets\/js\/rpc.js https:\/\/www.google.com\/tools\/feedback\/chat_load.js https:\/\/www.google.com\/tools\/feedback\/help_api.js https:\/\/www.google.com\/tools\/feedback\/load.js https:\/\/www.google.com\/tools\/feedback\/open.js https:\/\/www.google.com\/tools\/feedback\/open_to_help_guide_lazy.js https:\/\/www.gstatic.com\/feedback\/js\/ https:\/\/www.gstatic.com\/feedback\/js\/help\/prod\/service\/lazy.min.js https:\/\/www.gstatic.com\/inproduct_help\/api\/main.min.js https:\/\/www.gstatic.com\/inproduct_help\/chatsupport\/chatsupport_button_v2.js https:\/\/www.gstatic.com\/inproduct_help\/service\/lazy.min.js https:\/\/www.gstatic.com\/uservoice\/feedback\/client\/web\/live\/ https:\/\/www.gstatic.com\/uservoice\/surveys\/resources\/prod\/js\/survey\/ https:\/\/www.gstatic.com\/_\/mss\/boq-one-google\/_\/ https:\/\/www.gstatic.com\/og\/_\/js\/ https:\/\/apis.google.com\/js\/api.js https:\/\/apis.google.com\/js\/client.js https:\/\/maps.googleapis.com\/maps\/api\/js https:\/\/gemini.gstatic.com\/_\/mss\/boq-bard-web\/_\/js\/k=boq-bard-web.BardChatUi.en_US.INTy0H6S-PQ.2018.O\/ https:\/\/apis.google.com\/_\/scs\/abc-static\/_\/js\/ https:\/\/maps.googleapis.com\/maps-api-v3\/api\/js\/ https:\/\/maps.googleapis.com\/maps\/vt https:\/\/maps.googleapis.com\/maps\/api\/js\/ https:\/\/maps.googleapis.com\/maps\/api\/place\/js\/ https:\/\/www.youtube.com\/s\/player\/ https:\/\/translate.googleapis.com\/_\/translate_http\/_\/js\/;report-uri \/_\/BardChatUi\/cspreport\/fine-allowlist","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-QJSY1fkwWb689JT8N4LVnQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-6S_x38hOXuuwjqZkBDzJTg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'unsafe-eval' 'unsafe-inline' 'self' http: https: data: wss: blob: chrome-extension ; report-uri \/cgi-bin\/csp-reports.cgi","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-i0gD4JF9x2z2GxrNIezrkg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-2NIMc4C-TuBEmWnkkBC0pQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" base-uri 'self'; connect-src 'self' whoop.com *.whoop.com browser-intake-datadoghq.com *.browser-intake-datadoghq.com challenges.cloudflare.com datadoghq.com *.datadoghq.com sentry.io *.sentry.io segment.com *.segment.com cdn.cookielaw.org geolocation.onetrust.com *.segment.io amplitude.com *.amplitude.com api2.amplitude.com whoop-inc.myshopify.com api.okendo.io analytics.tiktok.com whoop-us.attn.tv events.attentivemobile.com tr6.snapchat.com tr.snapchat.com ws.zoominfo.com *.google-analytics.com analytics.google.com *.analytics.google.com smarty.com *.smarty.com google.com server-side-tagging-3jzkn4xgxa-uc.a.run.app ct.pinterest.com s.pinimg.com ad.doubleclick.net googleads.g.doubleclick.net pixels.spotify.com *.veritonicmetrics.com pixel-config.reddit.com whoop.attn.tv rum-collector-2.pingdom.net www.googleadservices.com *.amazon-adsystem.com *.tiktokw.us whoop.sjv.io ara.paa-reporting-advertising.amazon t.co analytics.twitter.com privacyportal.onetrust.com stats.g.doubleclick.net primary-realtime.intercom-messenger.com https:\/\/*.googletagmanager.com *.facebook.com *.facebook.net *.fbcdn.net *.google.com pagead2.googlesyndication.com *.g.doubleclick.net utt.impactcdn.com d.impactradius-event.com alb.reddit.com *.adroll.com gw.conversionsapigateway.com *.seondnsresolve.com images.ctfassets.net maps.googleapis.com mapsresources-pa.googleapis.com px.ads.linkedin.com embed.myadvocado.com mpc-prod-21-1053047382554.us-central1.run.app d.impct.site *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat; default-src 'self' whoop.com *.whoop.com; font-src 'self' typekit.net *.typekit.net fonts.gstatic.com data: fonts.intercomcdn.com cdn-static.okendo.io; form-action 'self' *.facebook.com *.facebook.net; frame-src 'self' challenges.cloudflare.com *.googletagmanager.com ct.pinterest.com tr.snapchat.com *.fls.doubleclick.net server-side-tagging-3jzkn4xgxa-uc.a.run.app *.facebook.com *.facebook.net embed.myadvocado.com; frame-ancestors 'none'; img-src 'self' data: blob: images.ctfassets.net images.us-east-2.aws.commercetools.com cdn.shopify.com cdn.cookielaw.org s.pinimg.com googleads.g.doubleclick.net ad.ipredictive.com ad.doubleclick.net www.google.com t.co analytics.twitter.com p.typekit.net downloads.ctfassets.net *.facebook.com *.facebook.net *.fbcdn.net *.adroll.com d.adroll.com tagmanager.google.com *.googletagmanager.com *.google-analytics.com server-side-tagging-3jzkn4xgxa-uc.a.run.app alb.reddit.com tr.snapchat.com analytics.google.com *.analytics.google.com downloads.intercomcdn.com analytics.tiktok.com *.tiktokw.us www.googleadservices.com s3-us-west-2.amazonaws.com s3.amazonaws.com js.intercomcdn.com d21y75miwcfqoq.cloudfront.net pixel.pointmediatracker.com *.google.com *.bidswitch.net *.tapad.com *.casalemedia.com *.rlcdn.com *.rubiconproject.com us-u.openx.net sync.outbrain.com *.pubmatic.com *.3lift.com ib.adxns.com ib.adnxs.com *.sundaysky.com wam.solution.weborama.fr tag.crsspxl.com snap.licdn.com *.taboola.com *.yahoo.com static.intercomassets.com cdn.blisspointmedia.com ml314.com ps.eyeota.net *.reson8.com segments.company-target.com dpm.demdex.net i.liadm.com pagead2.googlesyndication.com ade.googlesyndication.com *.amazon-adsystem.com maps.gstatic.com www.ojrq.net *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat; media-src 'self' videos.ctfassets.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' whoop.com *.whoop.com analytics.tiktok.com *.tiktokw.us c.amazon-adsystem.com cdn-static.okendo.io cdn.amplitude.com cdn.attn.tv cdn.cookielaw.org cdn.dfsdk.com cdn.pdst.fm cdn.segment.com cdn.veritonic.com challenges.cloudflare.com *.facebook.com *.facebook.net *.fbcdn.net capi-automation.s3.us-east-2.amazonaws.com ct.pinterest.com *.adroll.com d.impactradius-event.com d3hw6dc1ow8pp2.cloudfront.net datadoghq-browser-agent.com *.datadoghq-browser-agent.com dx.mountain.com googleads.g.doubleclick.net gs.mountain.com px.mountain.com rum-static.pingdom.net s.pinimg.com sc-static.net static.ads-twitter.com tr.snapchat.com utt.impactcdn.com widget.intercom.io ws.zoominfo.com www.redditstatic.com tagmanager.google.com *.googletagmanager.com googleoptimize.com www.googleoptimize.com *.google-analytics.com www.googleadservices.com www.google.com pagead2.googlesyndication.com snap.licdn.com maps.googleapis.com embed.myadvocado.com collector-31136.tvsquared.com; style-src 'self' 'unsafe-inline' d3hw6dc1ow8pp2.cloudfront.net cdn-static.okendo.io tagmanager.google.com *.googletagmanager.com typekit.net *.typekit.net fonts.googleapis.com; worker-src 'self' blob:; upgrade-insecure-requests; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=Y9qQtY7N72IAJuzdR6Xs1vrnqbWti7lWzzhIxj1vSQk-1788499088.72344-1.0.1.1-GaWX8WM4oQiYPJ14T7i8n2QkNwC37a9KDLwsR_L8NaoMRpPYSryP3firf6K8YSOcWSkJmHqAUM6DLMk6Fa5lzgYPGpXFUws9s7ooFeolzYLLrZI.J8PfCVzMq.pHXahWdGuDZFWP0OuhhUhoWvhusL7ZyZHRN8MllLxQJEeHMMtKIzbQ_BfAmh35eMwabJGD; report-to cf-aqxlmdskksrelnzf","count":1},{"content-security-policy-report-only":" default-src 'self' data: https: blob:; img-src 'self' data: https: http: blob:; script-src 'self' 'nonce-A648FD4B9B2180C4FE2F764F3574B5FB6182352D837B0E1D96E96A063C81698F' *.enable-now.cloud.sap *.salesforceliveagent.com *.siteintercept.qualtrics.com *.walkme.com *.liveperson.net *.ssl.ak.dynamic.tiles.virtualearth.net *.concursolutions.com *.sapdas-staging.cloud.sap *.sapdas.cloud.sap code.jquery.com consent.trustarc.com dev.virtualearth.net storage.glancecdn.net www.glancecdn.net www.google-analytics.com assets.adobedtm.com bam.nr-data.net maps.googleapis.com www.google-analytics.com www.googletagmanager.com siteintercept.qualtrics.com ajax.googleapis.com static.contextall.com *.bing.com www.vfmii.com blob:; style-src 'self' 'unsafe-inline' https: blob:; connect-src wss:\/\/*.glance.net 'self' https:; report-uri https:\/\/concursolutions.report-uri.com\/r\/t\/csp\/reportOnly; report-to report-only","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-44eOEM-742vUm9BzI510KA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl\/about_appsheet_com","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-B0jI7l0Ak-aasrRzFXOfzg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-haiaXDt9puTcCH92JCGCEQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" style-src 'self' https:\/\/s3.amazonaws.com\/media.nngroup.com\/ https:\/\/media.nngroup.com; img-src 'self' https:\/\/s3.amazonaws.com\/media.nngroup.com\/ https:\/\/media.nngroup.com; connect-src 'self'; font-src 'self' https:\/\/s3.amazonaws.com\/media.nngroup.com\/ https:\/\/media.nngroup.com; default-src 'self'; script-src 'self' https:\/\/s3.amazonaws.com\/media.nngroup.com\/ https:\/\/media.nngroup.com","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' 'report-sample' addtocalendar.com cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cdn.knightlab.com https:\/\/code.jquery.com https:\/\/science-catalog.fws.gov https:\/\/touchpoints.app.cloud.gov https:\/\/unpkg.com https:\/\/www.google.com maps.google.com unpkg.com; style-src 'self' 'report-sample' addtocalendar.com cdnjs.cloudflare.com fonts.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/cdn.knightlab.com https:\/\/fonts.googleapis.com https:\/\/science-catalog.fws.gov https:\/\/unpkg.com unpkg.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-HQMm575tomRy5cU5GGemRA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-pSyr2vFor9cxnSVUKhm1fg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-g704doTy7Poi-FZZCqBPOQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-I9OnzMsk14btwNkYmzjYMA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-e3Rs0PKONXcc31kI1v8IEQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src https: wss: data: blob: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self'; report-uri \/_\/csp-reports","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-DAYXObttOx7Nrf-MpScnmA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' 'nonce-\/Pv4n3vUh7JKYQfSrsc0Pat\/uF593hpWpMdEfDTXQdM=' 'strict-dynamic' https:; script-src 'nonce-\/Pv4n3vUh7JKYQfSrsc0Pat\/uF593hpWpMdEfDTXQdM='  'sha512-gU7kztaQEl7SHJyraPfZLQCNnrKdaQi5ndOyt4L4UPL\/FHDd\/uB9Je6KDARIqwnNNE27hnqoWLBq+Kpe4iHfeQ==' 'sha512-DXYctkkhmMYJ4vYp4Dm6jprD4ZareZ7ud\/d9mGCKif\/Dt3FnN95SjogHvwKvxXHoMAAkZX6EO6ePwpDIR1Y8jw==' 'sha512-mz4SrGyk+dtPY9MNYOMkD81gp8ajViZ4S0VDuM\/Zqg40cg9xgIBYSiL5fN79Htbz4f2+uR9lrDO6mgcjM+NAXA==' 'sha512-pnt8OPBTOklRd4\/iSW7msOiCVO4uvffF17Egr3c7AaN0h3qFnSu7L6UmdZJUCednMhhruTLRq7X9WbyAWNBegw=='  'strict-dynamic' https:; font-src 'self' https:\/\/res-1.cdn.office.net\/files\/fabric-cdn-prod_20221201.001\/assets\/fonts\/ https:\/\/res-1.cdn.office.net\/files\/fabric-cdn-prod_20221201.001\/assets\/icons\/ 'nonce-\/Pv4n3vUh7JKYQfSrsc0Pat\/uF593hpWpMdEfDTXQdM='; base-uri 'none'; form-action 'self' 'nonce-\/Pv4n3vUh7JKYQfSrsc0Pat\/uF593hpWpMdEfDTXQdM='; style-src 'self' 'nonce-\/Pv4n3vUh7JKYQfSrsc0Pat\/uF593hpWpMdEfDTXQdM='; report-uri ; object-src 'none'; frame-ancestors 'none';","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-Y0XXX9aiePfRXgazBKxMQw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/*.hsforms.net https:\/\/*.hsforms.com https:\/\/*.hs-scripts.com https:\/\/*.hscollectedforms.net https:\/\/*.hsleadflows.net https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/policy.app.cookieinformation.com https:\/\/api.fraud0.com https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:\/\/*.hsforms.net https:\/\/*.hsforms.com https:\/\/www.gstatic.com; font-src 'self' data:; connect-src 'self' wss: https:\/\/*.hsforms.com https:\/\/*.hscollectedforms.net https:\/\/*.hubapi.com https:\/\/www.google.com https:\/\/ad.doubleclick.net; frame-src 'self' blob: https:\/\/*.hsforms.net https:\/\/*.hsforms.com https:\/\/www.google.com https:\/\/recaptcha.google.com; worker-src 'self' blob:; media-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:\/\/*.hsforms.net https:\/\/*.hsforms.com; child-src 'self' blob: https:\/\/*.hsforms.com; report-uri https:\/\/piwik.pro\/wp-json\/pp-security\/v1\/csp-report; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" script-src 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline' 'nonce-bAnFvLws\/THIPnNUfdyvzA=='; style-src 'self' 'unsafe-inline' assets.moneyforward.com fonts.googleapis.com cdn.jsdelivr.net use.fontawesome.com morisawafonts.net; img-src 'self' https: data:; font-src 'self' data: assets.moneyforward.com fonts.gstatic.com use.fontawesome.com morisawafonts.net; connect-src 'self' https:; frame-src https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub976cc71e81a38b66439dcf1385f0f4ab&dd-evp-origin=content-security-policy&ddsource=csp-report","count":1},{"content-security-policy-report-only":" frame-ancestors 'self' https:\/\/www.rferl.org\/embed https:\/\/www.rferl.org\/embed\/player https:\/\/www.rferl.org\/embed\/player\/0 https:\/\/www.rferl.org\/embed\/player\/1 https:\/\/www.rferl.org\/ext https:\/\/www.rferl.org\/widget; report-uri https:\/\/csp.pangeadigital.io\/cspreport","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-o2audRVR3toTv17TYsAI3g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-D6wSHEkRFOgXfCJpyJhFOw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-JVyd2BFQqn9kD-lzbdzD0Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" connect-src *.bundesregierung.de analytics.bundesregierung.de https:\/\/hls-hd.myrasec.de *.stage.bio ; style-src *.bundesregierung.de 'unsafe-inline' ; script-src *.bundesregierung.de ; script-src-elem *.bundesregierung.de 'nonce-MmIEVOv36+sECZKVkdXVOwV0WwKAH2fcZT46ais7LIavYFqHcF3tgPlwZvl5sA9nA3JuJe+39YLNstJ0Vxjg8VmASPuKrl8yi+CD\/0mnXpiqnYw3LxtDq9jWm5Pj3E+LJPXq+f4DwfF64LLRTndUZgw1Jgo3GK09XbAM9SwP5AE=' *.stage.bio ; frame-src *.bundesregierung.de streaming.sendewerk.berlin ; media-src *.bundesregierung.de http:\/\/video.bundesregierung.de https:\/\/zdf-hls-18.akamaized.net *.stage.bio ; frame-ancestors *.bundesregierung.de ; img-src *.bundesregierung.de *.bundeskanzler.de https:\/\/*.tile.openstreetmap.de data: *.stage.bio ; default-src *.bundesregierung.de ; font-src *.bundesregierung.de ; report-uri https:\/\/www.bundesregierung.de\/service\/csp-report ;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-7nSzH6orlBxCiSMUsPcN0Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-egy-fbxbX3eMbIkasIslSQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-evGGtpkpjwhFpM_OapSQCA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.fantia.jp; script-src 'unsafe-inline' 'self' https:\/\/*.fantia.jp *.genieesspv.jp *.gsspat.jp *.gsspcln.jp *.gssprt.jp *.im-apps.net *.ad-stir.com *.i-mobile.co.jp *.amoad.com *.criteo.net *.criteo.com *.fout.jp *.goldspotmedia.com *.zucks.net j.zucks.net.zimg.jp *.zucks.co.jp ta-adquick.info nend.net *.rtbhouse.com *.ad-gate.net securepubads.g.doubleclick.net *.geniee.jp https:\/\/ec-widget.toranoana.jp nav.yumenosora.co.jp *.google-analytics.com www.googletagmanager.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com cdn.jsdelivr.net vjs.zencdn.net *.twitter.com static.ads-twitter.com *.clarity.ms *.recaptcha.net *.gstatic.com *.fontawesome.com *.chatplus.jp *.amplitude.com https:\/\/csp-report-ij4goxpsha-an.a.run.app\/api\/v1\/csp_report; font-src 'self' https:\/\/*.fantia.jp * data:; style-src 'self' https:\/\/*.fantia.jp 'unsafe-inline' * data:; img-src 'self' https:\/\/*.fantia.jp * blob: data: www.googletagmanager.com; child-src 'self' https:\/\/*.fantia.jp blob: *.genieesspv.jp *.gsspat.jp *.gsspcln.jp *.gssprt.jp *.im-apps.net *.ad-stir.com *.i-mobile.co.jp *.amoad.com *.criteo.net *.criteo.com *.fout.jp *.goldspotmedia.com *.zucks.net j.zucks.net.zimg.jp *.zucks.co.jp ta-adquick.info nend.net *.rtbhouse.com *.ad-gate.net securepubads.g.doubleclick.net *.geniee.jp platform.twitter.com www.googletagmanager.com www.youtube.com player.vimeo.com *.recaptcha.net *.chatplus.jp; connect-src 'self' https:\/\/*.fantia.jp *.genieesspv.jp *.gsspat.jp *.gsspcln.jp *.gssprt.jp *.im-apps.net *.ad-stir.com *.i-mobile.co.jp *.amoad.com *.criteo.net *.criteo.com *.fout.jp *.goldspotmedia.com *.zucks.net j.zucks.net.zimg.jp *.zucks.co.jp ta-adquick.info nend.net *.rtbhouse.com *.ad-gate.net securepubads.g.doubleclick.net *.geniee.jp https:\/\/cc.fantia.jp https:\/\/c.fantia.jp https:\/\/dd.fantia.jp https:\/\/d.fantia.jp https:\/\/ec-widget.toranoana.jp www.google-analytics.com stats.g.doubleclick.net *.clarity.ms *.fontawesome.com *.agora.io:* *.agoraio.cn *.ap.sd-rtn.com *.statscollector.sd-rtn.com:* *.veritrans.co.jp *.chatplus.jp wss:\/\/*.edge.agora.io:* wss:\/\/*.edge.agoraio.cn:* wss:\/\/*.edge.sd-rtn.com *.amplitude.com https:\/\/ogp-cache-system-prod-ij4goxpsha-an.a.run.app\/api\/v1\/ogp\/info https:\/\/csp-report-ij4goxpsha-an.a.run.app\/api\/v1\/csp_report https:\/\/fantia.s3.ap-northeast-1.amazonaws.com; media-src 'self' https:\/\/*.fantia.jp *.genieesspv.jp *.gsspat.jp *.gsspcln.jp *.gssprt.jp *.im-apps.net *.ad-stir.com *.i-mobile.co.jp *.amoad.com *.criteo.net *.criteo.com *.fout.jp *.goldspotmedia.com *.zucks.net j.zucks.net.zimg.jp *.zucks.co.jp ta-adquick.info nend.net *.rtbhouse.com *.ad-gate.net securepubads.g.doubleclick.net *.geniee.jp blob: https:\/\/*.chatplus.jp; frame-ancestors 'self' https:\/\/*.fantia.jp *.toranoana.jp toranoana.jp *.yumenosora.co.jp yumenosora.co.jp *.toranoana.co.jp toranoana.co.jp; form-action 'self' https:\/\/*.fantia.jp; report-to report-server; report-uri https:\/\/csp-report-ij4goxpsha-an.a.run.app\/api\/v1\/csp_report;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-jVQXWGKc4u9zoBwgVaXMTw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: *.icrc.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.icrc.org www.gstatic.com www.googletagmanager.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net *.youtube.com *.vimeo.com *.vimeocdn.com js.hs-analytics.net *.hs-scripts.com *.hs-banner.com  js.hsleadflows.net *.facebook.net *.bing.com *.getblue.io *.adnxs.com js.usemessages.com js.hsadspixel.net *.googlesyndication.com *.ads-twitter.com *.cloudflare.com *.licdn.com hcaptcha.com https:\/\/hcaptcha.com api.mapbox.com unpkg.com *.hubspot.com *.usercentrics.eu *.cmp.usercentrics.eu https:\/\/*.usercentrics.eu  *.hotjar.com *.facebook.com; object-src 'self' 'unsafe-inline' 'unsafe-eval'  *.icrc.org *.usercentrics.eu https:\/\/*.usercentrics.eu https:\/\/hcaptcha.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com api.mapbox.com web.cmp.usercentrics.eu app.usercentrics.eu *.usercentrics.eu https:\/\/hcaptcha.com; img-src 'self' data: icrc.org *.icrc.org *.usercentrics.eu hcaptcha.com *.bing.com *.facebook.com *.google.com *.google.ch analytics.twitter.com *.linkedin.com *.doubleclick.net *.hubspot.com ; media-src  icrc.org *.icrc.org *.usercentrics.eu hcaptcha.com; frame-src 'self' icrc.org *.icrc.org *.youtube.com *.vimeo.com *.youku.com *.getblue.io www.googletagmanager.com *.googletagmanager.com *.hcaptcha.com  td.doubleclick.net *.usercentrics.eu hcaptcha.com; frame-ancestors 'self' icrc.org *.icrc.org *.usercentrics.eu hcaptcha.com *.googletagmanager.com; child-src 'self' blob: icrc.org *.icrc.org *.usercentrics.eu hcaptcha.com; font-src 'self' fonts.gstatic.com fonts.gstatic.com *.usercentrics.euhcaptcha.com; connect-src 'self' icrc.org *.icrc.org *.linkedin.com *.hubspot.com *.bing.com api.hubapi.com *.google-analytics.com *.googlesyndication.com *.google.com *.google.ch google-analytics.com bat.bing.net *.adnxs.com *.hcaptcha.com hcaptcha.com *.mapbox.com *.arcgis.com *.visualstudio.com *.usercentrics.eu; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-eIxLUjmOOD-d4242urjQPA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http:\/\/*.files.wordpress.com wss:\/\/www.indiewire.com; report-uri https:\/\/pmcuri.report-uri.com\/r\/d\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-vfByRZDX3itg5l_ejN7a_Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-Fi8C6CVtSbEUMoVu-ZS92g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' data: blob: https:\/\/*openai.com https:\/\/*.bamboohr.com https:\/\/*.bamboohr.co.uk https:\/\/*.trustarc.com https:\/\/secure.feed5mown.com https:\/\/cdn.bizible.com https:\/\/bat.bing.com https:\/\/connect.facebook.com https:\/\/connect.facebook.net https:\/\/dbm.demdex.net https:\/\/bamboohr.demdex.net https:\/\/*.licdn.com https:\/\/*.hotjar.com https:\/\/tracking.g2crowd.com https:\/\/static.ads-twitter.com https:\/\/script.googleusercontent.com https:\/\/munchkin.marketo.com https:\/\/munchkin.marketo.net https:\/\/cdn.abrankings.com https:\/\/a.quora.com https:\/\/q.quora.com https:\/\/*.clarity.ms https:\/\/*.thebrightforks.com https:\/\/dx.mountain.com https:\/\/tag.clearbitscripts.com https:\/\/cdn.pdst.fm https:\/\/x.clearbitjs.com https:\/\/app.clearbitjs.com https:\/\/www.googletagmanager.com https:\/\/www.redditstatic.com https:\/\/snap.licdn.com https:\/\/www.google-analytics.com https:\/\/assets.adobedtm.com https:\/\/activitymap.adobe.com https:\/\/www.googleoptimize.com https:\/\/googleads.g.doubleclick.net https:\/\/abm-tracking.demandscience.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/match.prod.bidr.io https:\/\/bamboohr.zendesk.com https:\/\/*.zdassets.com https:\/\/assets.screensteps.com https:\/\/fast.wistia.com https:\/\/fast.wistia.net https:\/\/unpkg.com https:\/\/*.convertexperiments.com https:\/\/js.intercomcdn.com https:\/\/cdn.readme.io https:\/\/*.tiktok.com https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com https:\/\/edge.adobedc.net https:\/\/adobedc.demdex.net https:\/\/stats.g.doubleclick.net https:\/\/www.google.com https:\/\/analytics.google.com https:\/\/*.mktoresp.com https:\/\/*.clearbit.com https:\/\/*.linkedin.com https:\/\/t.co https:\/\/*.twitter.com https:\/\/*.facebook.com https:\/\/tracking.contanuity.com https:\/\/c.bing.com https:\/\/*.hlx.page https:\/\/*.hlx.live https:\/\/bamboohr--webchat.sandbox.my.site.com https:\/\/bamboohr--webchat.sandbox.my.salesforce-scrt.com https:\/\/bamboohr.my.site.com https:\/\/bamboohr.my.salesforce-scrt.com https:\/\/js.driftt.com https:\/\/static.cloudflareinsights.com https:\/\/script.crazyegg.com https:\/\/rc-widget-frame.js.driftt.com https:\/\/arttrk.com https:\/\/intentstream.contanuity.com https:\/\/td.doubleclick.net https:\/\/bamboohr.com wss:\/\/ws.hotjar.com https:\/\/*.hotjar.io https:\/\/*.gstatic.com https:\/\/*.leandata.com https:\/\/195-loz-515.mktoutil.com https:\/\/*.bizibly.com https:\/\/*.google.com.ua https:\/\/www.google.ca https:\/\/www.getapp.com https:\/\/*.wistia.com https:\/\/*.honey.io https:\/\/boards.greenhouse.io https:\/\/*.ucweb.com https:\/\/qvdt3feo.com https:\/\/*.srv.stackadapt.com https:\/\/ct.capterra.com https:\/\/*.youtube.com https:\/\/*.googleadservices.com https:\/\/hook.us1.make.celonis.com https:\/\/bamboohr.formstack.com https:\/\/*.google.com https:\/\/*.google.ad https:\/\/*.google.ae https:\/\/*.google.com.af https:\/\/*.google.com.ag https:\/\/*.google.al https:\/\/*.google.am https:\/\/*.google.co.ao https:\/\/*.google.com.ar https:\/\/*.google.as https:\/\/*.google.at https:\/\/*.google.com.au https:\/\/*.google.az https:\/\/*.google.ba https:\/\/*.google.com.bd https:\/\/*.google.be https:\/\/*.google.bf https:\/\/*.google.bg https:\/\/*.google.com.bh https:\/\/*.google.bi https:\/\/*.google.bj https:\/\/*.google.com.bn https:\/\/*.google.com.bo https:\/\/*.google.com.br https:\/\/*.google.bs https:\/\/*.google.bt https:\/\/*.google.co.bw https:\/\/*.google.by https:\/\/*.google.com.bz https:\/\/*.google.ca https:\/\/*.google.cd https:\/\/*.google.cf https:\/\/*.google.cg https:\/\/*.google.ch https:\/\/*.google.ci https:\/\/*.google.co.ck https:\/\/*.google.cl https:\/\/*.google.cm https:\/\/*.google.cn https:\/\/*.google.com.co https:\/\/*.google.co.cr https:\/\/*.google.com.cu https:\/\/*.google.cv https:\/\/*.google.com.cy https:\/\/*.google.cz https:\/\/*.google.de https:\/\/*.google.dj https:\/\/*.google.dk https:\/\/*.google.dm https:\/\/*.google.com.do https:\/\/*.google.dz https:\/\/*.google.com.ec https:\/\/*.google.ee https:\/\/*.google.com.eg https:\/\/*.google.es https:\/\/*.google.com.et https:\/\/*.google.fi https:\/\/*.google.com.fj https:\/\/*.google.fm https:\/\/*.google.fr https:\/\/*.google.ga https:\/\/*.google.ge https:\/\/*.google.gg https:\/\/*.google.com.gh https:\/\/*.google.com.gi https:\/\/*.google.gl https:\/\/*.google.gm https:\/\/*.google.gr https:\/\/*.google.com.gt https:\/\/*.google.gy https:\/\/*.google.com.hk https:\/\/*.google.hn https:\/\/*.google.hr https:\/\/*.google.ht https:\/\/*.google.hu https:\/\/*.google.co.id https:\/\/*.google.ie https:\/\/*.google.co.il https:\/\/*.google.im https:\/\/*.google.co.in https:\/\/*.google.iq https:\/\/*.google.is https:\/\/*.google.it https:\/\/*.google.je https:\/\/*.google.com.jm https:\/\/*.google.jo https:\/\/*.google.co.jp https:\/\/*.google.co.ke https:\/\/*.google.com.kh https:\/\/*.google.ki https:\/\/*.google.kg https:\/\/*.google.co.kr https:\/\/*.google.com.kw https:\/\/*.google.kz https:\/\/*.google.la https:\/\/*.google.com.lb https:\/\/*.google.li https:\/\/*.google.lk https:\/\/*.google.co.ls https:\/\/*.google.lt https:\/\/*.google.lu https:\/\/*.google.lv https:\/\/*.google.com.ly https:\/\/*.google.co.ma https:\/\/*.google.md https:\/\/*.google.me https:\/\/*.google.mg https:\/\/*.google.mk https:\/\/*.google.ml https:\/\/*.google.com.mm https:\/\/*.google.mn https:\/\/*.google.com.mt https:\/\/*.google.mu https:\/\/*.google.mv https:\/\/*.google.mw https:\/\/*.google.com.mx https:\/\/*.google.com.my https:\/\/*.google.co.mz https:\/\/*.google.com.na https:\/\/*.google.com.ng https:\/\/*.google.com.ni https:\/\/*.google.ne https:\/\/*.google.nl https:\/\/*.google.no https:\/\/*.google.com.np https:\/\/*.google.nr https:\/\/*.google.nu https:\/\/*.google.co.nz https:\/\/*.google.com.om https:\/\/*.google.com.pa https:\/\/*.google.com.pe https:\/\/*.google.com.pg https:\/\/*.google.com.ph https:\/\/*.google.com.pk https:\/\/*.google.pl https:\/\/*.google.pn https:\/\/*.google.com.pr https:\/\/*.google.ps https:\/\/*.google.pt https:\/\/*.google.com.py https:\/\/*.google.com.qa https:\/\/*.google.ro https:\/\/*.google.ru https:\/\/*.google.rw https:\/\/*.google.com.sa https:\/\/*.google.com.sb https:\/\/*.google.sc https:\/\/*.google.se https:\/\/*.google.com.sg https:\/\/*.google.sh https:\/\/*.google.si https:\/\/*.google.sk https:\/\/*.google.com.sl https:\/\/*.google.sn https:\/\/*.google.so https:\/\/*.google.sm https:\/\/*.google.sr https:\/\/*.google.st https:\/\/*.google.com.sv https:\/\/*.google.td https:\/\/*.google.tg https:\/\/*.google.co.th https:\/\/*.google.com.tj https:\/\/*.google.tl https:\/\/*.google.tm https:\/\/*.google.tn https:\/\/*.google.to https:\/\/*.google.com.tr https:\/\/*.google.tt https:\/\/*.google.com.tw https:\/\/*.google.co.tz https:\/\/*.google.com.ua https:\/\/*.google.co.ug https:\/\/*.google.co.uk https:\/\/*.google.com.uy https:\/\/*.google.co.uz https:\/\/*.google.com.vc https:\/\/*.google.co.ve https:\/\/*.google.co.vi https:\/\/*.google.com.vn https:\/\/*.google.vu https:\/\/*.google.ws https:\/\/*.google.rs https:\/\/*.google.co.za https:\/\/*.google.co.zm https:\/\/*.google.co.zw https:\/\/*.google.cat https:\/\/*.qualified.com https:\/\/js.qualified.com https:\/\/app.qualified.com https:\/\/*.6sc.co https:\/\/*.zi-scripts.com https:\/\/mapixl.com https:\/\/*.metadata.io https:\/\/tvspix.com https:\/\/*.ipify.org https:\/\/*.6sense.com https:\/\/*.zoominfo.com https:\/\/*.cloudinary.com https:\/\/*.googlesyndication.com https:\/\/*.adsrvr.org https:\/\/*.clickagy.com 'unsafe-inline' 'unsafe-eval'; report-uri https:\/\/app.bamboohr.com\/ajax\/parse_csp_report.php; report-to https:\/\/app.bamboohr.com\/ajax\/parse_csp_report.php;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/users.uptimerobot.com https:\/\/widget.intercom.io https:\/\/uptimerobot.user.com https:\/\/o4505555361792000.ingest.us.sentry.io https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com; style-src 'self' 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' data:; connect-src 'self' https:\/\/*.uptimerobot.com https:\/\/o4505555361792000.ingest.us.sentry.io https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com; media-src 'self' https:\/\/cdn.itrinity.com; frame-src https:\/\/youtube.com https:\/\/www.youtube.com https:\/\/youtube-nocookie.com https:\/\/www.youtube-nocookie.com https:\/\/youtu.be https:\/\/twitter.com https:\/\/platform.twitter.com https:\/\/x.com https:\/\/vimeo.com https:\/\/player.vimeo.com https:\/\/codepen.io https:\/\/gist.github.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com; object-src 'none'; base-uri 'self'; form-action 'self'","count":1},{"content-security-policy-report-only":" base-uri 'self';script-src-elem 'self' https:\/\/snap.licdn.com\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/js.hs-analytics.net\/analytics\/ https:\/\/www.googletagmanager.com\/gtag\/ https:\/\/js.hs-banner.com\/ https:\/\/js.hsadspixel.net\/ https:\/\/x.clearbitjs.com\/ https:\/\/reveal.clearbit.com\/ https:\/\/tag.clearbitscripts.com\/ https:\/\/cdn.koala.live\/ https:\/\/app.leandata.com\/ https:\/\/www.datadoghq-browser-agent.com\/ https:\/\/cdn.jsdelivr.net\/ https:\/\/browser.sentry-cdn.com\/ https:\/\/info.amplitude.com\/ https:\/\/cdn.amplitude.com\/ 'nonce-ee03bfe54f9724d1';report-uri \/api\/report_csp_violation;object-src 'self';form-action 'self';","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-z6Z2-5c7iu-gLkYGam3H_g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-gA1afo1CaGn1Shx2CL1L5Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-GDj8FXanf4b2OkTOvuXBjQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-bMqzanma7blQgb_J4NHCGQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-Ht_HYQe-9wccsj84f69kUg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src 'self' 'nonce-MTRmZjQ5MWYtNzFkNy00MmFlLWE0NTYtMjNmODQ2YjQwMDZj' 'strict-dynamic' 'report-sample' https:\/\/js.stripe.com https:\/\/*.js.stripe.com https:\/\/www.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/js.braintreegateway.com https:\/\/pay.google.com https:\/\/www.googletagmanager.com https:\/\/api.calm.com https:\/\/*.px-cloud.net https:\/\/*.px-cdn.net https:\/\/*.doubleclick.net https:\/\/www.google-analytics.com https:\/\/apis.google.com https:\/\/www.gstatic.com https:\/\/connect.facebook.net https:\/\/bat.bing.com https:\/\/www.tiktok.com https:\/\/*.tiktokcdn-us.com https:\/\/*.ttwstatic.com https:\/\/static.ads-twitter.com https:\/\/wa.appsflyersdk.com https:\/\/websdk.appsflyer.com https:\/\/utt.impactcdn.com https:\/\/cdn-cookieyes.com https:\/\/*.squarespace.com https:\/\/*.sqspcdn.com https:\/\/*.squarespace-cdn.com https:\/\/www.instagram.com https:\/\/www.youtube.com https:\/\/truemed-public.s3.us-west-1.amazonaws.com https:\/\/cdn.amplitude.com https:\/\/addevent.com https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com; frame-src https:\/\/js.stripe.com https:\/\/*.js.stripe.com https:\/\/hooks.stripe.com https:\/\/www.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/pay.google.com https:\/\/www.googletagmanager.com https:\/\/checkout.paypal.com https:\/\/accounts.google.com https:\/\/www.facebook.com https:\/\/www.youtube.com https:\/\/www.instagram.com https:\/\/www.tiktok.com https:\/\/*.px-cloud.net https:\/\/crcldu.com; connect-src 'self' https:\/\/api.stripe.com https:\/\/www.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/pay.google.com https:\/\/api2.amplitude.com https:\/\/api.lab.amplitude.com https:\/\/flag.lab.amplitude.com https:\/\/browser-intake-datadoghq.com https:\/\/api.calm.com https:\/\/*.calm.com https:\/\/payments.braintree-api.com https:\/\/payments.sandbox.braintree-api.com https:\/\/api.braintreegateway.com https:\/\/*.px-cloud.net https:\/\/*.px-cdn.net https:\/\/*.pxchk.net https:\/\/*.px-client.net https:\/\/*.perimeterx.net https:\/\/www.google.com https:\/\/*.doubleclick.net https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.analytics.google.com https:\/\/region1.google-analytics.com https:\/\/www.googleadservices.com https:\/\/pagead2.googlesyndication.com https:\/\/translate.googleapis.com https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/bat.bing.com https:\/\/wa.appsflyersdk.com https:\/\/wa.onelink.me https:\/\/wa.appsflyer.com https:\/\/websdk.appsflyer.com https:\/\/utt.impactcdn.com https:\/\/calmcom.sjv.io https:\/\/d.impct.site https:\/\/t.co https:\/\/analytics.twitter.com https:\/\/www.tiktok.com https:\/\/cdn-cookieyes.com https:\/\/log.cookieyes.com https:\/\/directory.cookieyes.com https:\/\/*.squarespace.com https:\/\/*.squarespace-cdn.com; worker-src 'self' blob:; report-uri \/webapi\/csp-report","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-D5ZEimw1aKGfkTyOoZxbvw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-EdIqWhXaIPHJQx_v0TeHBw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-Hs_cDvO-0KIq31N5osOCow' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" frame-ancestors 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* *.homedepot.com.mx;         frame-src 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* *.creativecdn.com *.youtube.com *.doubleclick.net *.googletagmanager.com *.bazaarvoice.com *.roomvo.com *.criteo.com ct.pinterest.com *.creativecdn.com *.criteo.net *.demdex.net;         default-src 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* blob:;         child-src 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* blob: *.homedepot.com.mx *.youtube.com;         script-src 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com assets.adobedtm.com *.adobedc.net cm.everesttech.net *.demdex.net *.hotjar.com *.hotjar.io *.criteo.com *.criteo.net *.bing.com *.revjet.com *.accenture.com *.accenture.vntana.com *.bazaarvoice.com unpkg.com *.roomvo.com *.adobe.com *.cybersource.com *.paypal.com *.openpay.mx *.liveperson.net btttag.com *.btttag.com *.scarabresearch.com *.googleapis.com *.google.com *.creativecdn.com *.facebook.net analytics.tiktok.com s.pinimg.com tag.rmp.rakuten.com static.ads-twitter.com *.sprinklr.com svht.afftrk1.com *.doubleclick.net ct.pinterest.com *.homedepot.com.mx *.go-mpulse.net;         connect-src 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* wss:\/\/prod2-live-chat-tier2-mqtt.sprinklr.com *.hotjar.io *.doubleclick.net *.googleapis.com *.google.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.scarabresearch.com cm.everesttech.net *.demdex.net api.digitalfemsa.io h.online-metrix.net *.liveperson.net *.openpay.mx *.creativecdn.com ct.pinterest.com *.sprinklr.com webchannel-content.eservice.emarsys.net *.btttag.com ct.pinterest.com *.bing.com *.homedepot.com.mx *.akamaihd.net *.akstat.io *.go-mpulse.net *.tiktok.com *.tiktokw.us *.bazaarvoice.com;         style-src 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* 'unsafe-inline' data: *.googleapis.com *.homedepot.com.mx;         font-src 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* data: *.gstatic.com *.google.com *.google.ca *.sprinklr.com *.homedepot.com.mx *.bazaarvoice.com;         img-src 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* data: blob: ct.pinterest.com *.bing.com analytics.tiktok.com s.pinimg.com static.ads-twitter.com *.doubleclick.net *.googleadservices.com *.facebook.com *.facebook.net *.twitter.com x.bidswitch.net *.adnxs.com r.casalemedia.com ad.360yield.com i.liadm.com contextual.media.net exchange.mediavine.com jadserve.postrelease.com sync.outbrain.com *.pubmatic.com trends.revcontent.com pixel.rubiconproject.com rtb-csync.smartadserver.com sync-t1.taboola.com criteo-sync.teads.tv criteo-partners.tremorhub.com ade.clmbtech.com eb2.3lift.com *.1rx.io ads.stickyadstv.com partner.mediawallahscript.com user-sync.fwmrm.net *.creativecdn.com *.agkn.com *.unrulymedia.com *.adsrvr.org *.rezync.com *.dmxleo.com quickchart.io *.sprinklr.com placehold.co *.scarabresearch.com www.google.com.mx *.google.com *.google.ca assets.adobedtm.com tag.rmp.rakuten.com svht.afftrk1.com webchannel-content.eservice.emarsys.net www.gstatic.com *.accenture.com *.bazaarvoice.com unpkg.com s3.amazonaws.com *.tiktokw.us akamaihd.net akstat.io go-mpulse.net online-metrix.net rtbhouse.com *.publitas.com *.surveymonkey.com *.adobe.com *.cybersource.com *.paypal.com api.digitalfemsa.io *.openpay.mx h.online-metrix.net cs.media.net p.rfihub.com pubmatic.com *.zemanta.com *.stackadapt.com sync.crwdcntrl.net *.liveperson.net *.lpsnmedia.net t.co *.criteo.com *.rlcdn.com *.demdex.net *.youtube.com *.homedepot.com.mx *.hclsoftware.cloud *.liftdsp.com *.criteo.net *.rkdms.com *.outbrain.com *.everesttech.net;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-NP99FHZ_HSF-hqqcaK4kMg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-kFlZiUj7Doxb1c5RtxfhWw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-w7olusdqI0YPOBY0AM21Qw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-PnaVmy-WtYR1aIlf4K-tfw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-mqsiT2fcupx4dpsP7i9IUw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-A1HoLq3RwiV9Mh3HiLzfLw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-xEuPgao1dQ9b_EE_Txz5kQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:\/\/app.tryst.link; frame-src 'self' https:\/\/a4-test.b-cdn.net; worker-src 'self' blob:; font-src 'self' data: https:\/\/discovery.tryst.a4cdn.org; img-src 'self' data: blob: https:\/\/imgproxy.tryst.link https:\/\/media-v2.tryst.a4cdn.org https:\/\/discovery.tryst.a4cdn.org https:\/\/tryst-blog-assets.a4cdn.org; style-src 'self' 'unsafe-inline' https:\/\/discovery.tryst.a4cdn.org; script-src 'self' https:\/\/p.i.tryst.link https:\/\/discovery.tryst.a4cdn.org; script-src-elem 'self' https:\/\/p.i.tryst.link https:\/\/discovery.tryst.a4cdn.org 'unsafe-inline'; script-src-attr 'unsafe-inline'; connect-src 'self' https:\/\/p.i.tryst.link https:\/\/j.i.tryst.link https:\/\/s.i.tryst.link https:\/\/imgproxy.tryst.link https:\/\/media-v2.tryst.a4cdn.org https:\/\/discovery.tryst.a4cdn.org https:\/\/a.tryst.link https:\/\/c.i.tryst.link https:\/\/tryst.link; report-uri https:\/\/s.i.tryst.link\/api\/3\/security\/?sentry_key=13d63df8626242e9a967c9da72eacbc3&sentry_environment=production&sentry_release=2026-09-03_22826_7c588f1637","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-53I7W9S7qemF85V-6txn6g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src 'self' addtocalendar.com cdn.amcharts.com cdn.jsdelivr.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/stage-unifiedsearch.geapps.io https:\/\/unifiedsearch.geapps.io https:\/\/www.google.com; script-src-attr 'self'; style-src 'self' addtocalendar.com cdn.jsdelivr.net cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/stage-unifiedsearch.geapps.io https:\/\/unifiedsearch.geapps.io maxcdn.bootstrapcdn.com; style-src-attr 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-laCZTWTAsTG-6wtNk7S2nA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.dedeman.ro data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com epos.unicredit.ro 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com maps.google.com *.recaptcha.net *.dedeman.ro applepay.cdn-apple.com epos.unicredit.ro *.gigya.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.dedeman.ro maps.gstatic.com *.googletagmanager.com server.arcgisonline.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org applepay.cdn-apple.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.gigya.com 'self' data: 'unsafe-inline' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.nr-ext.net *.nr-assets.net *.dedeman.ro *.googleapis.com *.google-analytics.com *.recaptcha.net *.facebook.com applepay.cdn-apple.com pay.google.com *.clarity.ms chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.gigya.com https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.dedeman.ro downloads.mailchimp.com 'unsafe-inline' data: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src *.dedeman.ro 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.dedeman.ro maps.googleapis.com cdns.eu1.gigya.com apple-pay-gateway.apple.com apple-pay-gateway-cert.apple.com apple.com *.clarity.ms form-assets.mailchimp.com *.intuit.com *.amazonaws.com epos.unicredit.ro *.gigya.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.dedeman.ro maps.googleapis.com *.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-eYmnkux8ZoLMUlte3Qsqiw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-hoVRF_i4wH4sZy1IqYN3BA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-PDGcXJHEE3-yniK6FJqXoQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-9EFzzvp2pm1fwbksECDntg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' *.adnxs.com *.adtrafficquality.google *.ads-twitter.com *.airbrake.io *.braintree-api.com *.braintreegateway.com *.cdn-apple.com *.clarity.ms *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.fullcontact.com *.g.doubleclick.net *.getnitropack.com *.google.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.liadm.com *.licdn.com *.linkedin.com *.mopinion.com *.nitrocdn.com *.nr-data.net *.online-metrix.net *.osano.com *.paypal.com *.pinimg.com *.pinterest.com *.pushnami.com *.quora.com *.spokeo.com *.taboola.com *.trustindex.io *.twitter.com *.wp.com *.youtube-nocookie.com *.youtube.com *.zdassets.com *.zendesk.com analytics.twitter.com bat.bing.com bat.bing.net c.6sc.co cdnjs.cloudflare.com cmp.osano.com connect.facebook.net epsilon.6sense.com google.com ipv6.6sc.co j.6sc.co js-agent.newrelic.com nitroscripts.com static.zdassets.com t.co 'unsafe-inline' 'unsafe-eval' blob:; img-src * data: blob:; font-src * data:; frame-ancestors 'self'; report-to csp-endpoint; report-uri https:\/\/cspcollector.production.spokeo.com\/csp-reports","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-j6sHpKlszN76Kib_gN_uWw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-RszPb5QaBDzHPFjrvlUOHQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-ThrCtDPqje0Nt0FBosms0A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-0AExRx1Tg0HN8Ekds6cd8g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-oQYqXNE1Pf5HCBiy3sZxsw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-0w0cop6cQ8WIlugVoSUpsw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-vQnwOLd8kZnvk12dBiz8Jg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-y8-pxlj5NSysW4LQ31to-A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-slyJvoV3Wk9L_9o4PEBJBg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src blob: https:\/\/*.mhcache.com;font-src 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com https:\/\/fonts.gstatic.com;frame-src 'self' https:\/\/*.mhcache.com https:\/\/portal.allyable.com https:\/\/mh-site-files-5c53d6a9947c.s3.amazonaws.com https:\/\/myheritage-container.com https:\/\/www.myheritage-partners.com https:\/\/www.myheritage.com https:\/\/*.mk-sense.com https:\/\/player.vimeo.com https:\/\/*.facebook.com https:\/\/*.google.com https:\/\/tpc.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/accounts.google.com\/gsi\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/recaptcha.google.com\/recaptcha\/  https:\/\/widget.trustpilot.com;script-src https:\/\/accounts.google.com\/gsi\/client https:\/\/www.datadoghq-browser-agent.com https:\/\/appleid.cdn-apple.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/maps.googleapis.com 'unsafe-eval' 'nonce-70c7d5038e982b9f530ee88174f423af' 'strict-dynamic' https:\/\/widget.trustpilot.com https:\/\/invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com https:\/\/fonts.googleapis.com https:\/\/accounts.google.com\/gsi\/style  https:\/\/widget.trustpilot.com;connect-src data: 'self' https:\/\/*.myheritage.com https:\/\/portal.allyable.com https:\/\/*.mhcache.com https:\/\/adservice.google.com https:\/\/*.logs.datadoghq.com https:\/\/*.browser-intake-datadoghq.com https:\/\/browser-intake-datadoghq.com https:\/\/sentry.io https:\/\/*.bing.com https:\/\/*.facebook.com https:\/\/*.doubleclick.net https:\/\/*.mk-sense.com https:\/\/*.filae.com https:\/\/accounts.google.com\/gsi\/ https:\/\/www.google.com\/pagead\/landing https:\/\/maps.googleapis.com\/maps\/api\/mapsjs\/gen_204 https:\/\/translate.googleapis.com https:\/\/www.google.com\/ccm\/collect https:\/\/cdn.builder.io https:\/\/www.google.com\/recaptcha\/enterprise\/* https:\/\/www.google.com\/recaptcha\/enterprise\/ https:\/\/www.google.com\/recaptcha\/enterprise\/clr https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com https:\/\/people.googleapis.com https:\/\/translate-pa.googleapis.com  https:\/\/widget.trustpilot.com;media-src 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com;frame-ancestors 'self' https:\/\/builder.io;img-src * data:  https:\/\/widget.trustpilot.com https:\/\/*.trustpilot.com;object-src 'none';base-uri 'self' https:\/\/*.mhcache.com;report-uri \/FP\/API\/ContentSecurityPolicy\/report-violation.php?report_mode=report&canonical_page_id=\/company\/home\/","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-0ojB-cGgCAsD2Z_5nwnvAw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-eGjGDjom8Zdctg4rSujD6g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-mH2c1918mM5sivVyIAhAVQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com self data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * https:\/\/store.plumrocket.com pal-test.adyen.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ * self *.doubleclick.net *.criteo.com *.easydmp.net *.snapchat.com https:\/\/store.plumrocket.com https:\/\/accounts.google.com checkoutshopper-test.adyen.com pal-test.adyen.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * self *.bing.com *.paypal.com *.google.fr *.electrodepot.fr *.electrodepot.be *.electrodepot.es *.cookielaw.org *.snapchat.com checkoutshopper-test.adyen.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com self sc-static.net *.abtasty.com *.jsdelivr.net *.gstatic.com *.facebook.net *.tiktok.com *.googleapis.com *.easydmp.net *.vzbl.eu *.aticdn.net *.m1by1.com *.woosmap.com *.doubleclick.net *.cookielaw.org *.snapchat.com *.valiuz.com *.mediarithmics.com *.prediggo.services https:\/\/accounts.google.com checkoutshopper-test.adyen.com 'self' 'unsafe-eval' 'nonce-Zjg1cmtrdXlrc3JraHRoNzZiNnh1dTBkcHRvb3pmdDM=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k\/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY\/CkTMBhjNhwPvglpYumjx31B4fjkY8='; style-src *.adobe.com fonts.googleapis.com *.cash.app self *.gstatic.com *.electrodepot.fr *.electrodepot.be *.electrodepot.es *.snapchat.com https:\/\/accounts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * self *.snapchat.com *.cookielaw.org *.abtasty.com *.googleapis.com *.vzbl.eu *.criteo.com *.easydmp.net *.paypal.com *.xiti.com *.valiuz.com *.doubleclick.net *.mediarithmics.com https:\/\/accounts.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.electrodepot.fr *.electrodepot.be *.electrodepot.es *.bing.com *.criteo.net *.snapchat.com *.netvigie.com *.xiti.com *.valiuz.com *.googletagmanager.com *.google.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-s6zHypdnDhTBmXV6JeIC1XIL3oPhUo1xD0l568D+3A8=' https:; script-src-attr 'self'; style-src 'self' 'nonce-s6zHypdnDhTBmXV6JeIC1XIL3oPhUo1xD0l568D+3A8='; style-src-attr 'self'; font-src 'self' https: data:; media-src 'self' https:; img-src 'self' https: data:; connect-src 'self' https: http:; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/wallet.csccloud.in https:\/\/payuat.csccloud.in https:\/\/pay.csccloud.in; frame-ancestors 'none'; frame-src 'self' https:\/\/www.youtube-nocookie.com","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-wdq-EHsOREf0qmf-ED---A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-U2NUg6mfMZv4Krw1TyVyiQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-CtcR3GewIs3AK5VVEzO8vQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-KHpFfTf4WIFx7dck9cnvHA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-CjUF7CpRKqEEDDJxTIaS7g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-IjK5NTS6MpBQtwxFMPHj-w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" block-all-mixed-content; report-uri https:\/\/www.warau.jp\/mixedcontentreport.php","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-8YtlNPyAKbK-0QC0vQFj8w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-CBesKnIOspVkJw1nYFEtUw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-IMe9XgbF5GjLwFhbUPAJow' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-veXNQY0OKGFLUzfbtMRaLg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-YKUI2O4JMwM0S1PHwwQ8-g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-zewB46KXmfOSnv2XMtV0jg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src https: ; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; report-uri \/csp\/","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-X0R4ONgP85JHV7_e8O-zQw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-VM27-CB8YrKxOp6ReTysuA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-9zOttnTU6kzOSqTeJxBO7Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" frame-ancestors 'self' http:\/\/localhost:4002;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-wugxebO2FmHIbuQXiwhkwA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-r6uo041_1YA3EvvUo48axw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-h8-r69mCUt7B-kgdOQIv5A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-8tSk_p4hU3LuKvmLiiAoVw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-OtQ4KbXFdN0vA6EdN-OhSg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-YptdlcOeqLbvVsIh0Wej4Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src https: data: https:\/\/www.uptodate.com https:\/\/www.uptodate.cn; child-src https: data: blob: edge: brave: puffin:; img-src data: https: blob: https:\/\/www.uptodate.com https:\/\/www.uptodate.cn https:\/\/*.d.aa.online-metrix.net https:\/\/cdn.cookielaw.org https:\/\/app.pendo.uptodate.com https:\/\/cdn.wolterskluwer.io; font-src https: data: https:\/\/www.uptodate.com https:\/\/www.uptodate.cn; worker-src blob: brave: edge: puffin: https:\/\/www.uptodate.com https:\/\/www.uptodate.cn; media-src data: https: https:\/\/www.uptodate.com https:\/\/www.uptodate.cn; connect-src data: https: wss: https:\/\/www.uptodate.com https:\/\/www.uptodate.cn https:\/\/geolocation.onetrust.com https:\/\/cdn.cookielaw.org https:\/\/app.pendo.uptodate.com https:\/\/privacyportal-de.onetrust.com; script-src 'unsafe-inline' 'unsafe-eval' https: https:\/\/www.uptodate.com https:\/\/www.uptodate.cn https:\/\/cdn.cookielaw.org https:\/\/cdn.pendo.uptodate.com https:\/\/www.googletagmanager.com https:\/\/tmx.uptodate.com https:\/\/rollouts.cdn.uptodate.com https:\/\/www.google-analytics.com https:\/\/code.jquery.com; style-src 'unsafe-inline' https: https:\/\/www.uptodate.com https:\/\/www.uptodate.cn https:\/\/cdn.pendo.uptodate.com; frame-src https: https:\/\/www.uptodate.com https:\/\/www.uptodate.cn baiduboxapp: ms-appx-web:; report-uri \/services\/app\/content-security-policy-report\/report\/json;frame-ancestors *;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-im7rSACk-qzNTToghlu9Ow' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-ZrKfWsDNmZddyY67UI1U1w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-R89t8B_2vViehJYnDeorCw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-DZie-GxvNy4uB7v_t2Ku0Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-qITw6mQR8p6zjdSqq8XK2w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl\/googleorg","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-8Qs3Ny4Br2Nno3g5yrAsmw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-S5LBt6Q38IPstLmgbcHPAA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-p8RdzpLGpvm9nniiyC9mLQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-B90Tj3drouO7cwQ25Wtc3w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-k8kvhu7uEZbjIUkD-4cNww' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce--M0W5fOdLN3UQsAHnUXfqA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-OCV7ptK8S93VcVNKyuLA2A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-XaHQIA1Vtjpr-ffCbjxzsQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-YkLe11vz1kP-QFksZWABvQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" frame-ancestors https:\/\/*.workable.com\/; report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pubcbe8d2ef0966e8645a91099cfac490bb&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=%40http.headers.cfray%3Aa35a95c56e76ebed","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-u4yijfTnv4jFj9SHW7fCVA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-_Ifq6dvyU3i6pj_N2uNCOg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" report-uri https:\/\/mon-ttp.lemon8-app.us\/monitor_browser\/collect\/batch\/security\/?bid=tiktok_pns&ev_type=csp&p=a2ER8eALdqWH8mbn5n3bkT&v=4&s=587&b=oab; report-to csp-endpoint; script-src 'report-sample' 'unsafe-eval' *.tiktokcdn-us.com connect.facebook.net ct.pinterest.com; worker-src 'self'","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-3ASQekeiT5NBiKdrF-BjHg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-lJp4WiaMIRCImSmqzaUTQA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-K-eNS_Z8XRoxhZ37Yb_GYg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-X_QgwoqBqNv05Itzj6Op_A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-L68gs8-IiDG9hCcZGpHzNw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-Cw5An4z8672p-NK1ubdN0g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src bam.nr-data.net cdn.growthbook.io cdn-ukwest.onetrust.com geolocation.onetrust.com pagead2.googlesyndication.com privacyportal-uk.onetrust.com prod.global-fragments-server.green.which.co.uk tpc.googlesyndication.com *.safeframe.googlesyndication.com www.googletagmanager.com ep2.adtrafficquality.google which-group.my.site.com 'unsafe-inline' 'self' https:\/\/*.which.co.uk;base-uri 'self';font-src fonts-which-co-uk.s3.amazonaws.com player.captivate.fm public.flourish.studio 'unsafe-inline' 'self' https:\/\/*.which.co.uk;form-action 'self';frame-ancestors 'self';img-src abs-0.twimg.com ad.doubleclick.net ade.googlesyndication.com adservice.google.com alb.reddit.com analytics.twitter.com artwork.captivate.fm bat.bing.com c.contentsquare.net cdn-ukwest.onetrust.com cf-images.eu-west-1.prod.boltdns.net ct.pinterest.com googleads.g.doubleclick.net house-fastly-signed-eu-west-1-prod.brightcovecdn.com maps.gstatic.com media.which.gpp.io metrics.brightcove.com pagead2.googlesyndication.com pbs.twimg.com q.quora.com s3-eu-west-1.amazonaws.com securepubads.g.doubleclick.net siteintercept.qualtrics.com storage.googleapis.com syndication.twitter.com t.co tpc.googlesyndication.com tracking.audio.thisisdax.com trx-hub.com www.facebook.com www.google-analytics.com www.google.co.uk www.google.com yksbw1yr.micpn.com ep1.adtrafficquality.google 'unsafe-inline' 'self' https:\/\/*.which.co.uk;object-src 'none';script-src a.quora.com ajax.googleapis.com bat.bing.com c.amazon-adsystem.com cdn-magiclinks.trackonomics.net cdn-ukwest.onetrust.com cdn.amplitude.com cdn.jsdelivr.net connect.facebook.net ct.pinterest.com cdn.growthbook.io googleads.g.doubleclick.net manifest.prod.boltdns.net maps.googleapis.com pagead2.googlesyndication.com platform.twitter.com player.captivate.fm players.brightcove.net prod.global-fragments-server.green.which.co.uk public.flourish.studio pym.nprapps.org region1.google-analytics.com s.pinimg.com siteintercept.qualtrics.com static-ssl.responsetap.com static.ads-twitter.com static.digidip.net t.contentsquare.net tpc.googlesyndication.com track.omguk.com which.resultspage.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.redditstatic.com yksbw1yr.micpn.com zeta-live.getsquirrel.co znbiyguoobqgm5gwu-which.siteintercept.qualtrics.com which-group.my.site.com 'unsafe-inline' 'self' https:\/\/*.which.co.uk 'nonce-cf4a3907a5a861e9628de1adb578c152ded18bb291d2a9676de00db7e916f159';script-src-attr 'none';style-src aaf1a18515da0e792f78-c27fdabe952dfc357fe25ebf5c8897ee.ssl.cf5.rackcdn.com cdn.jsdelivr.net flo.uri.sh fonts.googleapis.com pagead2.googlesyndication.com player.captivate.fm public.flourish.studio service.force.com zeta-live.getsquirrel.co which.resultspage.com which-group.my.site.com 'unsafe-inline' 'self' https:\/\/*.which.co.uk;connect-src region1.google-analytics.com which-group.my.salesforce-scrt.com cdn.growthbook.io cdn-ukwest.onetrust.com geolocation.onetrust.com pagead2.googlesyndication.com ep1.adtrafficquality.google ep2.adtrafficquality.google trackerapi.ebxcdn.com 'unsafe-inline' 'self' https:\/\/*.which.co.uk","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-jgnh3txI5Fyv_f9aCJHZYA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-wkVDLREkA_qfi_VoQnToSQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-R3COA-WGtL-ecPPUUXHYiw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-Hm8-CT5IG_jqOAc-Fr7Z9Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-di6xfxtumVMHIZs_C-ZsXA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-i3oc7oeW99wjIauAzRzBjg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; base-uri 'self' *.hackerrank.com; connect-src * data: blob: 'unsafe-inline' 'unsafe-eval'; frame-src 'unsafe-inline' *; img-src * data: blob: 'unsafe-inline'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.chatlio.com *.ads.linkedin.com *.demandbase.com *.firebaseio.com *.hackerrank.com *.hackerrank.io *.linkedin.com *.twitter.com *.wsp.hackerrank.com *.wss.hackerrank.com *.zopim.com api.filepicker.io api.olark.com app-sji.marketo.com bam.nr-data.net cdn.amplitude.com cdn.auryc.com cdn.bizible.com cdn.heapanalytics.com cdn.mxpnl.com cdn.optimizely.com cdn.raygun.io cdn.userty.com cdn.walkme.com cdnjs.cloudflare.com connect.facebook.net d1ka33fs6lvw5x.cloudfront.net d1ncy0v3du7k5q.cloudfront.net ds-aksb-a.akamaihd.net googleads.g.doubleclick.net www.gstatic.com hrcdn.net js-agent.newrelic.com js.stripe.com munchkin.marketo.net script.hotjar.com snap.licdn.com ssl.google-analytics.com static.ads-twitter.com static.hotjar.com static.olark.com static.zdassets.com stats.pusher.com use.typekit.net www.google-analytics.com www.google.com www.googleadservices.com www.googletagmanager.com s3.amazonaws.com cdn.pendo.io edge.fullstory.com media.twiliocdn.com *.pendo.hackerrank.com *.private.hackerrank.link download-cdn.perfext.hackerrank.link d2a3h6e71jcifd.cloudfront.net marketo.clearbit.com assets.churnkey.co rs.fullstory.com app.runrehearsals.com data.pendo.io www.vscode-web.hrcdn.net cdn.cookielaw.org hackerrank.chilipiper.com unpkg.com accounts.google.com d2i34c80a0ftze.cloudfront.net; style-src * data: blob: 'unsafe-inline'; worker-src 'self' data: blob:; report-uri https:\/\/hackerrank.report-uri.com\/r\/d\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-nPj3aSBZXkKyAcpyPK8HgQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-F4YLEYMbk2U4Nn8scy-zUw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" child-src 'self' https:\/\/*.qualified.com; default-src 'self'; frame-src 'self' https:\/\/9628652.fls.doubleclick.net https:\/\/td.doubleclick.net https:\/\/js.driftt.com https:\/\/*.qualified.com https:\/\/a8447815042.cdn-pci.optimizely.com https:\/\/ct.pinterest.com https:\/\/tealium-f.squarecdn.com; worker-src 'self' blob:; connect-src 'self' https:\/\/assets.ctfassets.net https:\/\/api.broadway.squareup.com https:\/\/campaign-hub-production-f.squarecdn.com https:\/\/api.squareup.com\/v1\/cdp\/batch https:\/\/api.squarestagingexternal.com\/v1\/cdp\/batch https:\/\/api.squarestagingexternal.com https:\/\/api.squareup.com https:\/\/api.squareupstaging.com *.contentsquare.net https:\/\/capi.squareup.com https:\/\/browser-intake-datadoghq.com https:\/\/*.browser-intake-datadoghq.com https:\/\/stats.g.doubleclick.net https:\/\/facebook.com https:\/\/www.facebook.com https:\/\/googleads.g.doubleclick.net http:\/\/www.google-analytics.com https:\/\/www.google-analytics.com https:\/\/google.com https:\/\/www.google.com https:\/\/us-central1-sq-sgtm-prod.cloudfunctions.net https:\/\/www.googletagmanager.com http:\/\/images.ctfassets.net https:\/\/images.ctfassets.net http:\/\/424-iab-218.mktoresp.com https:\/\/424-iab-218.mktoresp.com https:\/\/xms2-marketo.beta.stage.sqprod.co https:\/\/424-iab-218.mktoutil.com https:\/\/cdn.cookielaw.org https:\/\/geolocation.onetrust.com https:\/\/privacyportal.onetrust.com https:\/\/logx.optimizely.com https:\/\/ct.pinterest.com https:\/\/conversions-config.reddit.com https:\/\/pixel-config.reddit.com https:\/\/www.redditstatic.com *.ingest.us.sentry.io *.6sc.co https:\/\/api.sprig.com https:\/\/squareupstaging.com https:\/\/visitor-scoring-new.marketlinc.com https:\/\/api.chilipiper.com https:\/\/squareinc-sandbox.chilipiper.com https:\/\/squareinc.chilipiper.com https:\/\/www.workwithsquare.com wss:\/\/*.qualified.com https:\/\/*.qualified.com https:\/\/pw-renderer-production-c.squarecdn.com localhost:*; font-src 'self' https:\/\/cash-f.squarecdn.com https:\/\/square-fonts-production-f.squarecdn.com; img-src 'self' data: blob: https:\/\/ib.adnxs.com https:\/\/assets.ctfassets.net https:\/\/cdn.blisspointmedia.com https:\/\/campaign-hub-production-f.squarecdn.com *.contentsquare.net https:\/\/ad.doubleclick.net https:\/\/facebook.com https:\/\/www.facebook.com https:\/\/google.com https:\/\/www.google.com https:\/\/adservice.google.com https:\/\/googleads.g.doubleclick.net http:\/\/www.google-analytics.com https:\/\/www.google-analytics.com https:\/\/*.g.doubleclick.net https:\/\/www.googletagmanager.com http:\/\/images.ctfassets.net https:\/\/images.ctfassets.net https:\/\/px.ads.linkedin.com https:\/\/cdn.cookielaw.org https:\/\/pixel.pointmediatracker.com https:\/\/alb.reddit.com *.6sc.co https:\/\/api.squareup.com https:\/\/api.squareupstaging.com https:\/\/insight.adsrvr.org https:\/\/match.adsrvr.org https:\/\/*.qualified.com https:\/\/pw-renderer-production-c.squarecdn.com; manifest-src 'self' https:\/\/pw-renderer-production-c.squarecdn.com; media-src 'self' mediastream: https:\/\/assets.ctfassets.net https:\/\/js.driftt.com http:\/\/videos.ctfassets.net https:\/\/videos.ctfassets.net https:\/\/*.qualified.com; script-src 'self' *.contentsquare.net https:\/\/www.datadoghq-browser-agent.com https:\/\/js.driftt.com https:\/\/*.qualified.com https:\/\/connect.facebook.net https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net http:\/\/www.google-analytics.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/campaign-hub-production-f.squarecdn.com https:\/\/lift-ai-js.marketlinc.com https:\/\/martech-development-c.squarecdn.com https:\/\/martech-production-c.squarecdn.com https:\/\/martech-staging-c.squarecdn.com http:\/\/munchkin.marketo.net https:\/\/munchkin.marketo.net https:\/\/cdn.cookielaw.org https:\/\/a8447815042.cdn-pci.optimizely.com https:\/\/s.pinimg.com https:\/\/ct.pinterest.com https:\/\/pw-renderer-production-c.squarecdn.com https:\/\/pw-renderer-staging-c.squarecdn.com https:\/\/pwt-production-c.squarecdn.com https:\/\/pwt-staging-c.squarecdn.com https:\/\/sales-bridge-production-c.squarecdn.com https:\/\/sales-bridge-staging-c.squarecdn.com https:\/\/squareinc-sandbox.chilipiper.com https:\/\/squareinc.chilipiper.com https:\/\/www.workwithsquare.com https:\/\/www.redditstatic.com *.6sc.co https:\/\/cdn.sprig.com https:\/\/xms-production-f.squarecdn.com https:\/\/www.youtube.com https:\/\/pw-renderer-production-c.squarecdn.com 'nonce-I3Q1s1YkIe\/Kvzb5SrCMNA=='; style-src 'self' https:\/\/square-fonts-production-f.squarecdn.com https:\/\/sales-bridge-production-c.squarecdn.com https:\/\/sales-bridge-staging-c.squarecdn.com 'unsafe-inline' https:\/\/*.qualified.com https:\/\/pw-renderer-production-c.squarecdn.com; frame-ancestors 'self' https:\/\/app.contentful.com; report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pubd9af00759e65a48ba7ee3ff1dfa4260b&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to browser-intake-datadoghq","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-VpsoQ_PWcR8AVG_cqgvMIw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-vuhwrju7MfMGIJjjBjVIgQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; connect-src 'self' bam.nr-data.net sentry.io *.freshworksapi.com wss:\/\/*.freshworksapi.com www.google-analytics.com heapanalytics.com www.in-freshbots.ai *.pusher.com; font-src 'self' d2r0bfj5oxwi8g.cloudfront.net d3t6wcud4kij68.cloudfront.net d28y7gk8dndm8e.cloudfront.net data: fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com heapanalytics.com; frame-src 'self' *.webpush.freshchat.com *.freshreports.com wchat.freshchat.com *.freshid.io *.freshworks360.io *.chargebee.com *.myfreshworks.dev *.freshworksweb.com freshdesk.com *.freshworks.com *.int.myfreshworks.dev; img-src https: data: blob: heapanalytics.com; manifest-src 'self'; media-src 'self' https:; object-src 'none'; script-src 'report-sample' 'self' 'unsafe-eval' accounts.freshworks.com bam.nr-data.net d2r0bfj5oxwi8g.cloudfront.net d3t6wcud4kij68.cloudfront.net d28y7gk8dndm8e.cloudfront.net js-agent.newrelic.com polyfill.io wchat.freshchat.com sentry.io js.chargebee.com www.google-analytics.com *.freshworksapi.com heapanalytics.com *.heapanalytics.com fonts.googleapis.com cdn.in-freshbots.ai stats.pusher.com cdn.inlinemanual.com fe-perf-assets.freshworks.com 'unsafe-inline'; style-src 'report-sample' 'self' 'unsafe-inline' accounts.freshworks.com d2r0bfj5oxwi8g.cloudfront.net d3t6wcud4kij68.cloudfront.net d28y7gk8dndm8e.cloudfront.net wchat.freshchat.com fonts.googleapis.com cdn.in-freshbots.ai heapanalytics.com; worker-src 'self'; report-uri https:\/\/vfm4r1o44m.execute-api.us-east-1.amazonaws.com\/default\/FreshreleaseCSPReport","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-ON-3hGs-dXDML2GMtKm3Tw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-H3dByoSdhiTZBVFqW7mHyA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-iVknD3YJy1AEdeXZ_940jA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-eval' 'unsafe-inline' https: blob:;style-src 'self' 'unsafe-inline' https: data:;connect-src https: wss:;frame-src https:;script-src 'unsafe-eval' 'unsafe-inline' https: blob: data:;font-src https: data:;img-src https: data: blob:;media-src https: blob:; report-uri \/csp_rep","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-Ld7J_GEMhnUCcV1Oh-fwKg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-ind3aF4X7BXElS4O5rW7fg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" connect-src 'self' https:\/\/web.cmp.usercentrics.eu https:\/\/api.usercentrics.eu https:\/\/consents.usercentrics.eu https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.analytics.google.com https:\/\/region1.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/www.googletagmanager.com; frame-src 'self' https:\/\/web.cmp.usercentrics.eu https:\/\/www.googletagmanager.com; img-src 'self' https:\/\/web.cmp.usercentrics.eu https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/stats.g.doubleclick.net; object-src 'none'; script-src 'self' 'report-sample' https:\/\/web.cmp.usercentrics.eu https:\/\/www.googletagmanager.com https:\/\/ssl.google-analytics.com https:\/\/ajax.googleapis.com https:\/\/cdn.datatables.net https:\/\/cdn.jsdelivr.net https:\/\/cdn.tailwindcss.com https:\/\/cdnjs.cloudflare.com https:\/\/code.highcharts.com https:\/\/code.jquery.com https:\/\/code.responsivevoice.org https:\/\/js.stripe.com https:\/\/maps.googleapis.com https:\/\/s3-us-west-2.amazonaws.com https:\/\/unpkg.com https:\/\/www.google.com https:\/\/www.gstatic.com; style-src 'self' 'report-sample' https:\/\/web.cmp.usercentrics.eu https:\/\/fonts.googleapis.com cdn.jsdelivr.net fonts.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/stackpath.bootstrapcdn.com https:\/\/unpkg.com https:\/\/use.typekit.net; style-src-elem 'self' 'report-sample' https:\/\/web.cmp.usercentrics.eu https:\/\/fonts.googleapis.com cdn.jsdelivr.net fonts.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/stackpath.bootstrapcdn.com https:\/\/unpkg.com https:\/\/use.typekit.net; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' 'report-sample' 'unsafe-eval' https:\/\/unpkg.com 'unsafe-inline' https:\/\/webomat.unistra.fr\/; script-src-elem 'self' 'report-sample' 'unsafe-eval' https:\/\/unpkg.com; style-src 'self' 'report-sample'; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self' *.sleeknote.com https:\/\/*.kindlycdn.com *.boozt.com *.klarna.com *.booztx.com wss:\/\/ws-eu.pusher.com:443 https:\/\/*.pusher.com checkout-cdn.avarda.com wss:\/\/sage.kindly.ai static.criteo.net wss:\/\/ws-eu.pusher.com https:\/\/*.kindly.ai *.booztcdn.com; script-src 'self' data: blob: *.rewardspay.com static.cloudflareinsights.com dp64mxip2za0c.cloudfront.net www.barilliance.net cdn.avo.app *.booztcdn.com www.googleoptimize.com www.googletagmanager.com analytics.tiktok.com *.clarity.ms utt.impactcdn.com cookie-cdn.cookiepro.com atemda.com  script.koral.nu hst.tradedoubler.com cdn.loadbee.com cnstrc.com cdn.avo.app the.sciencebehindecommerce.com bat.bing.com *.zenaps.com s2.adform.net tagmanager.google.com vc.hotjar.io cdn.noibu.com *.sleeknote.com widget.eu.criteo.com tr.snapchat.com yastatic.net *.adyen.com googleads.g.doubleclick.net tracking.s24.com *.contentsquare.net cm.g.doubleclick.net *.issuu.com euob.isstarsbuilding.com cdn.cookielaw.org *.flixcar.com web-assets.stylitics.com s.pinimg.com scripts.dialogintelligens.dk pagead2.googlesyndication.com cdn.siftscience.com www.gstatic.com bam-cell.nr-data.net *.kronor.io www.googleadservices.com www.snapengage.com avdonl0p0checkout0fe.blob.core.windows.net 7276578.collect.igodigital.com www.awin1.com *.booztx.com connect.facebook.net bugcrowd.com track.adform.net www.datadoghq-browser-agent.com cdn.depict.ai ct.pinterest.com *.freshchat.com  obseu.isstarsbuilding.com utt.impactcdn.com *.criteo.com www.dwin1.com d38knilzwtuys1.cloudfront.net *.klarnacdn.net *.klarna.com sc-static.net sslwidget.criteo.com assets.bugcrowdusercontent.com *.google.com dev.visualwebsiteoptimizer.com cdn.evgnet.com *.google-analytics.com *.booztcdn.com *.boozt.com privacyportal.onetrust.com s3.amazonaws.com  maps.googleapis.com static.criteo.net *.tradedoubler.com swrap.tradedoubler.com chat.kindlycdn.com *.trustpilot.com www.google.com *.boozt.com tag.smartly.io bam.nr-data.net *.hotjar.com sdk.privacy-center.org geolocation.onetrust.com optimize.google.com lcx-embed.bambuser.com *.liveshopper.net widget.criteo.com 'unsafe-eval' 'unsafe-inline'; font-src 'self' cdn.honey.io *.booztx.com *.boozt.com fonts.gstatic.com cdnjs.cloudflare.com fonts.googleapis.com chat.kindlycdn.com avdonl0p0checkout0fe.blob.core.windows.net *.avarda.com data: *.booztcdn.com  data: ; img-src optimize.google.com data: https: data: blob: 'unsafe-inline'; connect-src 'self' data: chat.kindlycdn.com *.google.com.pr www.bing.com www.googletagmanager.com *.google.com.kh bam.nr-data.net *.google.fr *.google.co.jp checkout-cdn.avarda.com wss:\/\/input.noibu.com *.google.com.eg *.google.by boozt.com *.google.com.ni *.criteo.net *.googleapis.com *.googleapis.com dev.visualwebsiteoptimizer.com *.loadbee.com *.google.mn *.google.com.lb *.google.be *.google.co.nz *.google.ps scripts.dialogintelligens.dk *.googleoptimize.com *.google-analytics.com *.google.com.tw *.google.com.cu analytics.tiktok.com *.google.com.np *.stylitics.com *.google.mk *.google.co.ke d.impct.site *.adzerk.net *.google.sk *.google.com.mt obseu.isstarsbuilding.com *.google.com.uy *.kronor.io *.google.ro api.dialogintelligens.dk *.analytics.google.com tr.snapchat.com *.google.lv *.google.com.au *.adform.net *.google.com.et wss:\/\/proxy.depict.ai:7315 *.google.com.ec *.google.md *.google.com.co *.google.ae analytics.sleeknote.com bot.kindly.ai *.google.co.zw translate.googleapis.com *.google.com.sa *.clarity.ms *.hotjar.com partner.revieve.com  spk.boozt.com cdn.cookielaw.org *.snapchat.com *.onetrust.com *.google.ie vc.hotjar.io *.google.ch *.google.tn *.google.co.id *.google.cl *.google.mw *.datadoghq-browser-agent.com *.google.ba www.snapengage.com *.google.gl *.google.com.bo *.google.es *.google.co.th input.noibu.com *.avarda.com *.google.ci *.google.gr *.google.com.hk unpkg.com *.privacy-center.org *.criteo.net *.google.co.il *.google.am *.browser-intake-datadoghq.eu *.google.com.bh *.google.com *.evergage.com *.google.com.ar *.criteo.com *.google.com.ly adservice.google.com *.google.so *.booztx.com *.boozt.com *.google.co.tz *.google.com *.google.me *.google.mv *.clarity.ms google.com *.google.co.za api.depict.ai *.klarnacdn.net *.google.com.vn kronor.io bam-cell.nr-data.net www.getpica.com *.google.com.qa *.booztcdn.com *.logs.datadoghq.eu  *.hotjar.io browser-intake-datadoghq.eu *.google.ru *.google.pt *.google.co.cr app.vwo.com *.google.com.tr *.google.lu *.contentsquare.net *.hotjar.com dawa.aws.dk *.google.lt sp.boozt.com *.doubleclick.net *.google.co.bw *.google.com.gh *.google.no *.sleeknote.com *.google.com.bd *.google.com.kw *.visualwebsiteoptimizer.com booztfashionab.pxf.io *.google.ge *.google.com.pe *.google.com.sg *.google.it pagead2.googlesyndication.com www.facebook.com wss:\/\/kronor.io *.google.al *.google.com.br *.google.com.ua *.google.co.vi *.google.co.ck www.googleadservices.com *.google.mu *.google.az stats.g.doubleclick.net *.google.bi *.google.lt *.google.com.na *.klarna.com *.google.ee *.google.cz *.google.com.pk *.google.gm *.google.fi *.hotjar.io media.flixfacts.com api.avo.app *.google.com.do *.google.sc *.google.rs *.google.hu *.google.si *.google.co.uz ct.pinterest.com *.google.sr *.google.iq *.google.co.zm *.google.hr *.google.tg *.google.co.uk *.google.lk *.google.com.jm *.google.kg *.google.com.af bat.bing.net *.google.pl *.google.com.ph *.google.nl *.google.cn *.google.cv wss:\/\/ws-eu.pusher.com *.contentsquare.com *.google.com.my *.google.bg fpt.boozt.com bat.bing.com *.google.is *.google.at *.google.com.mx *.google-analytics.com *.google.bt dev.visualwebsiteoptimizer.com *.klarnaevt.com code.jquery.com *.google.ca *.google.com.cy *.google.jo *.hotjar.com *.google.co.ma *.google.de *.adyen.com *.google.ga *.google.kz *.avarda.org; child-src 'self' td.doubleclick.net js.klarna.com tr.snapchat.com track.adform.net ct.pinterest.com www.googletagmanager.com *.freshchat.com *.trustpilot.com static.criteo.net fpt.boozt.com *.google-analytics.com *.criteo.com *.hotjar.com blob: ; frame-src 'self' www.instagram.com *.secure2gw.ro *.otpbanka.hr *.sbanken.no *.fuib.com *.klarnacdn.net *.ing.ro td.doubleclick.net www.securesuite.co.uk static.criteo.net *.criteo.com static.criteo.net *.adyen.com widget.eu.criteo.com *.op.fi dialogintelligens.dk *.issuu.com www.facebook.com booztfashionab.pxf.io chatbot.dialogintelligens.dk payment-gateway.kronor.io *.trustpilot.com *.edb.com *.rewardspay.com *.sibs.pt sc-static.net bid.g.doubleclick.net *.cardinalcommerce.com *.komplettbank.se www.rsa3dsauth.co.uk vc.hotjar.io *.snapchat.com *.skandia.se web.facebook.com *.nordea.com *.rpc-raiffeisen.com *.redsys.es trustly.com *.trustly.com *.freshchat.com *.booztcdn.com bugcrowd.com td.doubleclick.net *.saastopankki.fi *.lcl.fr the.sciencebehindecommerce.com *.komplettbank.com *.hcaptcha.co *.arcot.com gum.criteo.com xn--nskeskyen-k8a.dk *.klarna.com *.estcard.ee *.netcetera-payment.ch *.vinea.es optimize.google.com *.bpcbt.com lcx-player.bambuser.com *.hotjar.com *.alandsbanken.fi *.kronor.io *.wirecard.com *.signicat.com *.targobank.de *.swedbank.lt *.rabobank.nl player.vimeo.com *.sparebank1.no cdn.depict.ai *.boozt.com *.sia.eu *.sparkassen-kreditkarten.de *.modirum.com www.awin1.com *.danskebank.com *.btrl.ro gum.criteo.com *.zenaps.com widget.koral.nu assets.pinterest.com www.facebook.com *.fio.cz *.nexi.it td.doubleclick.net *.3dsecure.no *.wlp-acs.com staticxx.facebook.com *.loadbee.com dev.visualwebsiteoptimizer.com *.nbg.gr ct.pinterest.com *.swedbank.se *.flixcar.com *.eewosecure.com acs-safekey.americanexpress.com track.adform.net dis.eu.criteo.com www.googletagmanager.com *.citadele.lv *.booztx.com  www.getpica.com *.touch.tech *.luottokunta.fi *.creditmutuel.fr *.cmbchina.com; style-src 'self' *.freshchat.com *.adyen.com cdn.cookielaw.org privacyportal.onetrust.com *.booztx.com *.booztcdn.com optimize.google.com *.boozt.com fonts.googleapis.com d38knilzwtuys1.cloudfront.net tagmanager.google.co geolocation.onetrust.com *.stylitics.com *.kronor.io chat.kindlycdn.com *.flixcar.com cdn.honey.io cookie-cdn.cookiepro.com translate.googleapis.com blob: data: blob: 'unsafe-inline'; manifest-src 'self' *.booztx.com *.boozt.com *.booztcdn.com; media-src 'self' data: *.booztcdn.com storage.googleapis.com *.booztx.com www.snapengage.com; frame-ancestors 'self' ; report-uri \/csp-report\/; report-to csp-reports","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' blob: https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/connect.facebook.net https:\/\/js-na1.hs-scripts.com https:\/\/js-na2.hs-scripts.com https:\/\/js-na2.hs-analytics.net https:\/\/js-na2.hs-banner.com https:\/\/js-na2.hscollectedforms.net https:\/\/js-na2.hsadspixel.net https:\/\/js-na2.hubspot.com https:\/\/static.ads-twitter.com https:\/\/snap.licdn.com https:\/\/www.redditstatic.com https:\/\/googleads.g.doubleclick.net https:\/\/data.cline.bot https:\/\/static.hsappstatic.net https:\/\/js-na2.hsforms.net https:\/\/js.hcaptcha.com https:\/\/tenor.com https:\/\/import-cdn.default.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' data: https:\/\/fonts.gstatic.com; img-src 'self' data: blob: https:\/\/www.facebook.com https:\/\/www.google-analytics.com https:\/\/*.ghost.io https:\/\/storage.googleapis.com https:\/\/*.githubusercontent.com https:\/\/cline.bot https:\/\/assets.int.cline.bot https:\/\/px.ads.linkedin.com https:\/\/alb.reddit.com https:\/\/www.redditstatic.com https:\/\/analytics.twitter.com https:\/\/t.co https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/*.google.com https:\/\/track-na2.hubspot.com https:\/\/forms-na2.hsforms.com https:\/\/perf-na2.hsforms.com https:\/\/img.spacergif.org https:\/\/www.googletagmanager.com https:\/\/i.ytimg.com; connect-src 'self' https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/analytics.google.com https:\/\/*.facebook.com https:\/\/*.hubspot.com https:\/\/api-na2.hubapi.com https:\/\/forms-na2.hscollectedforms.net https:\/\/*.unify.io https:\/\/api.unifyintent.com https:\/\/mpc-prod-21-1053047382554.us-central1.run.app https:\/\/app.posthog.com https:\/\/data.cline.bot https:\/\/px.ads.linkedin.com https:\/\/pixel-config.reddit.com https:\/\/analytics.twitter.com https:\/\/t.co https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/newassets.hcaptcha.com; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/www.facebook.com https:\/\/tenor.com https:\/\/newassets.hcaptcha.com; media-src 'self' https:\/\/assets.int.cline.bot https:\/\/storage.googleapis.com https:\/\/storage.ghost.io; worker-src 'self' blob:; base-uri 'self'; form-action 'self' https:\/\/www.facebook.com; object-src 'none'; report-uri \/api\/csp-report","count":1},{"content-security-policy-report-only":" base-uri 'self';script-src 'self' *.aliyun.com *.alicdn.com dxwebview: *.qwen.ai qwen.ai *.alibaba.com googleads.g.doubleclick.net 'unsafe-inline' 'unsafe-eval' 'report-sample' https: http: 'nonce-keTbw4d3JwwRhJ3b7NL0RQ' 'Strict-Dynamic' 'unsafe-hashes';frame-src 'self'  *.aliyun.com *.alicdn.com td.doubleclick.net *.alibaba-inc.com qwenlm.io *.alibabacloud.com dxwebview: *.qwen.ai qwen.ai www.youtube.com;worker-src blob: 'self';object-src 'none';frame-ancestors 'self' *.aliyun.com *.alibabacloud.com;report-uri \/report-csp","count":1},{"content-security-policy-report-only":" default-src 'self' lesta.ru *.lesta.ru tanki.su *.tanki.su *.edgevideo.ru https:\/\/www.youtube.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' tanki.su *.tanki.su lesta.ru *.lesta.ru *.tvsquared.com *.soloway.ru *.cookielaw.org *.onetrust.com *.outbrain.com *.snapchat.com *.edgevideo.ru https:\/\/image.sendsay.ru https:\/\/top-fwz1.mail.ru https:\/\/privacy-cs.mail.ru https:\/\/vk.com https:\/\/sc-static.net https:\/\/ob.cheqzone.com https:\/\/analytics.google.com https:\/\/www.google.com https:\/\/*.adform.net https:\/\/www.googleoptimize.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/www.googleadservices.com https:\/\/*.yandex.ru https:\/\/*.yandex.net https:\/\/*.yandex.ua https:\/\/*.yandex.by https:\/\/*.yandex.kz https:\/\/*.yandex.com.tr http:\/\/*.yandex.ru http:\/\/*.yandex.net http:\/\/*.yandex.ua http:\/\/*.yandex.by http:\/\/*.yandex.kz http:\/\/*.yandex.com.tr https:\/\/*.yandex.st https:\/\/*.yandex.com https:\/\/*.yandex.fr https:\/\/yandex.st https:\/\/u360.d-bi.fr https:\/\/bat.bing.com https:\/\/connect.ok.ru https:\/\/*.vk.com https:\/\/googleads.g.doubleclick.net https:\/\/*.adroll.com https:\/\/*.addthis.com https:\/\/*.addthisedge.com https:\/\/tag.marinsm.com https:\/\/pixel-geo.prfct.co https:\/\/static.criteo.net https:\/\/stackadapt.com https:\/\/*.creative-serving.com https:\/\/*.criteo.com https:\/\/*.vihub.ru https:\/\/*.cloudfront.net https:\/\/js.gleam.io https:\/\/a1.adform.net https:\/\/ajax.googleapis.com https:\/\/www.youtube.com https:\/\/animate.adobe.com https:\/\/inv-dmp.admixer.net ; style-src 'self' 'unsafe-inline' lesta.ru *.lesta.ru tanki.su *.tanki.su https:\/\/fonts.googleapis.com ; img-src 'self' data: android-webview-video-poster: * ; connect-src 'self' lesta.ru *.lesta.ru tanki.su *.tanki.su *.edgevideo.ru *.cookielaw.org *.onetrust.com *.outbrain.com *.snapchat.com https:\/\/privacy-cs.mail.ru https:\/\/sendsay.ru https:\/\/sc-static.net https:\/\/ob.cheqzone.com https:\/\/analytics.google.com https:\/\/www.google.com wss:\/\/lesta.ru wss:\/\/tanki.su wss:\/\/*.lstprod.net https:\/\/stats.g.doubleclick.net https:\/\/*.yandex.ru https:\/\/*.yandex.net https:\/\/*.yandex.ua https:\/\/*.yandex.by https:\/\/*.yandex.kz https:\/\/*.yandex.com.tr http:\/\/*.yandex.ru http:\/\/*.yandex.net http:\/\/*.yandex.ua http:\/\/*.yandex.by http:\/\/*.yandex.kz http:\/\/*.yandex.com.tr https:\/\/*.yandex.st https:\/\/*.yandex.com https:\/\/*.yandex.fr https:\/\/*.addthis.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/ymetrica1.com https:\/\/*.cloudfront.net https:\/\/google.com https:\/\/google.ru https:\/\/google.com.ua https:\/\/google.by https:\/\/www.googleoptimize.com https:\/\/google.pl https:\/\/*.doubleclick.net https:\/\/*.googleapis.com ; font-src 'self' lesta.ru *.lesta.ru *.tanki.su https:\/\/fonts.gstatic.com ; media-src 'self' lesta.ru *.lesta.ru tanki.su *.tanki.su *.edgevideo.ru ; frame-src 'self' lesta.ru *.lesta.ru tanki.su *.tanki.su *.edgevideo.ru https:\/\/*.yandex.ru https:\/\/webwisor.com https:\/\/metrika.yandex.ru https:\/\/metrika.yandex.by https:\/\/metrica.yandex.com https:\/\/metrica.yandex.com.tr https:\/\/tr.snapchat.com https:\/\/creativecdn.com https:\/\/*.adform.net https:\/\/ad3.adfarm1.adition.com https:\/\/www.youtube.com https:\/\/bid.g.doubleclick.net https:\/\/*.criteo.com https:\/\/yastatic.net https:\/\/*.addthis.com https:\/\/gleam.io https:\/\/aax-eu.amazon-adsystem.com ; frame-ancestors 'self' https:\/\/webwisor.com https:\/\/metrika.yandex.ru https:\/\/metrika.yandex.by https:\/\/metrica.yandex.com https:\/\/metrica.yandex.com.tr ; object-src 'self' lesta.ru *.lesta.ru tanki.su *.tanki.su *.edgevideo.ru https:\/\/www.youtube.com ; report-uri https:\/\/cspreport.lesta.ru\/cspreport","count":1},{"content-security-policy-report-only":" report-uri https:\/\/www.yelp.com\/csp_report_only?id=88b06be76e6323ce&page=csp_report_frame_directives%2Cfull_site_ssl_csp_report_directives&policy_hash=41d0c45536d2a082f11d1cd0e00fde7f&site=www&timestamp=1788484127; frame-ancestors 'self' https:\/\/*.yelp.com; default-src https:; img-src https: data: blob:; script-src https: data: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' data:; font-src data: https:; child-src https: yelp-webview:\/\/* yelp:\/\/* data:; object-src 'none'; worker-src blob: https:; base-uri 'self'; form-action https:","count":1},{"content-security-policy-report-only":" default-src 'self' mitel.io *.mitel.io mitel.com *.mitel.com; require-trusted-types-for 'script'; object-src 'self' mitel.io *.mitel.io mitel.com *.mitel.com;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/*.pie.org\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/accounts.google.com\/ https:\/\/www.gstatic.com\/ https:\/\/adblockforyoutube.com\/ https:\/\/www.adblockforyoutube.com\/; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: *; object-src 'none'; font-src 'self' https:\/\/fonts.gstatic.com; media-src 'self' https:\/\/cdn.pie.org; connect-src 'self' https:\/\/*.pie.org https:\/\/cdn.segment.com https:\/\/cdn.lottielab.com https:\/\/browser-intake-us5-datadoghq.com https:\/\/www.google.com\/recaptcha\/ https:\/\/adblockforyoutube.com https:\/\/www.adblockforyoutube.com; frame-src 'self' https:\/\/accounts.google.com\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/ https:\/\/recaptcha.google.com\/ https:\/\/adblockforyoutube.com\/ https:\/\/www.adblockforyoutube.com\/ https:\/\/demo.zeroclick.ai\/; base-uri 'self'; frame-ancestors 'none'; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' sentry.io https:\/\/widget.trustpilot.com https:\/\/sst.octopus.energy https:\/\/analytics.ahrefs.com\/ https:\/\/stapecdn.com\/dtag\/v8.js https:\/\/connect.facebook.net https:\/\/wurfl.io\/wurfl.js https:\/\/snap.licdn.com\/ https:\/\/googleads.g.doubleclick.net https:\/\/*.clarity.ms https:\/\/c.bing.com https:\/\/bat.bing.com\/ https:\/\/tk.octopus.energy https:\/\/analytics.tiktok.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/js-eu1.hs-analytics.net https:\/\/js-eu1.hubspot.com https:\/\/js-eu1.hsadspixel.net\/pixels.js https:\/\/js-eu1.hs-scripts.com https:\/\/js-eu1.hs-banner.com; style-src 'self' 'unsafe-inline' https:\/\/static.octopuscdn.com; img-src 'self' blob: data: https:\/\/static.octopuscdn.com https:\/\/a.storyblok.com https:\/\/octoenergy-production-media.s3.amazonaws.com https:\/\/cdn.jsdelivr.net\/npm\/emoji-datasource-apple\/ https:\/\/pbs.twimg.com\/ https:\/\/sst.octopus.energy https:\/\/*.clarity.ms https:\/\/*.bing.com https:\/\/*.google-analytics.com\/ https:\/\/ad.doubleclick.net https:\/\/*.g.doubleclick.net https:\/\/*.google.com\/ https:\/\/*.google.co.uk\/ https:\/\/pagad2.googlesyndication.com\/ https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/track-eu1.hubspot.com https:\/\/perf-eu1.hsforms.com https:\/\/connect.facebook.net https:\/\/tk.octopus.energy https:\/\/www.youtube.com; font-src 'self' https:\/\/static.octopuscdn.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/m.youtube.com https:\/\/youtu.be https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/www.instagram.com https:\/\/platform.twitter.com https:\/\/open.spotify.com https:\/\/form.typeform.com https:\/\/octopus.typeform.com https:\/\/w.soundcloud.com https:\/\/sst.octopus.energy https:\/\/www.facebook.com; connect-src 'self' *.ingest.de.sentry.io https:\/\/browser-intake-datadoghq.eu https:\/\/static.octopuscdn.com https:\/\/unpkg.com\/detect-gpu@5.0.70 https:\/\/www.gstatic.com\/ https:\/\/oe-trust-pilot.vercel.app\/api\/oegb https:\/\/analytics.ahrefs.com\/api\/ https:\/\/www.facebook.com\/tr\/ https:\/\/wurfl.io\/async-detect https:\/\/px.ads.linkedin.com https:\/\/*.clarity.ms https:\/\/*.bing.com\/ https:\/\/sst.octopus.energy https:\/\/*.google-analytics.com\/ https:\/\/*.analytics.google.com\/ https:\/\/ad.doubleclick.net https:\/\/*.g.doubleclick.net https:\/\/*.google.com\/ https:\/\/*.google.co.uk\/ https:\/\/pagad2.googlesyndication.com\/ https:\/\/www.googleadservices.com\/ https:\/\/tk.octopus.energy https:\/\/analytics.tiktok.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/api-eu1.hubapi.com\/hs-script-loader-public\/ https:\/\/cta-eu1.hubspot.com\/ https:\/\/tw-0fde0867b14c4d8e9131519b5349f6f2.ecs.us-west-2.on.aws; media-src https:\/\/video.twimg.com; worker-src 'self' blob:; frame-ancestors 'self'; report-uri https:\/\/browser-intake-datadoghq.eu\/api\/v2\/logs?dd-api-key=pub5598e064945ff99ce23929056268185c&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aoegb-content%2Cenv%3Aproduction%2C","count":1},{"content-security-policy-report-only":" default-src 'self'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; frame-src *; worker-src blob:; script-src 'self' erli.pl masterprice.de 'unsafe-inline' 'unsafe-eval' https:\/\/*.erli.pl https:\/\/*.masterprice.de https:\/\/*.erli.tech https:\/\/*.prod.erli.tech https:\/\/bat.bing.com\/bat.js https:\/\/bat.bing.com\/p\/action\/134629556.js https:\/\/static.hotjar.com\/c\/hotjar-1742207.js https:\/\/script.hotjar.com\/modules.*.js https:\/\/www.googletagmanager.com\/gtm.js https:\/\/www.googletagmanager.com\/gtag\/js https:\/\/www.googletagmanager.com\/gtag\/destination https:\/\/analytics.optimalpeople.fr\/js\/rd-o-sdk.js https:\/\/analytics.tiktok.com\/i18n\/pixel\/events.js https:\/\/analytics.tiktok.com\/i18n\/pixel\/static\/main.* https:\/\/analytics.tiktok.com\/i18n\/pixel\/static\/identify_935b0d03.js https:\/\/connect.facebook.net\/en_US\/fbevents.js https:\/\/connect.facebook.net\/signals\/config\/306722670488438 https:\/\/googleads.g.doubleclick.net\/pagead\/viewthroughconversion\/655077238 https:\/\/googleads.g.doubleclick.net\/pagead\/viewthroughconversion\/466746092 https:\/\/pixel.wp.pl\/w\/tr.js https:\/\/pixel.wp.pl\/w\/WP-ERLI-SOFQW-AHA\/ir.js https:\/\/fpx.wp.pl\/web\/v3\/geBqSFMxQ5V57gTthkuL\/loader_v3.11.0.js https:\/\/swrap.tradedoubler.com\/wrap https:\/\/ams.creativecdn.com\/tags\/v2 https:\/\/ams.creativecdn.com\/ig-membership https:\/\/tags.creativecdn.com\/J05AnhvDIxGtgSQnpWbK.js https:\/\/www.artfut.com\/static\/tagtag.min.js https:\/\/www.artfut.com\/static\/tracking.min.js https:\/\/www.artfut.com\/static\/crossdevice.min.js https:\/\/www.google.com\/pagead\/1p-conversion\/655077238 https:\/\/www.googleadservices.com\/pagead\/conversion\/655077238; script-src-elem 'self' 'unsafe-inline' erli.pl *.erli.pl masterprice.de *.masterprice.de *.erli.tech *.prod.erli.tech connect.facebook.net maps.googleapis.com www.googleadservices.com www.gstatic.com www.google.com fpx.wp.pl bat.bing.com static.hotjar.com script.hotjar.com www.googletagmanager.com analytics.optimalpeople.fr analytics.tiktok.com connect.facebook.net googleads.g.doubleclick.net pixel.wp.pl fpx.wp.pl swrap.tradedoubler.com ams.creativecdn.com tags.creativecdn.com www.artfut.com; connect-src 'self' erli.pl *.erli.pl masterprice.de *.masterprice.de *.erli.tech *.prod.erli.tech *.google-analytics.com *.analytics.google.com *.googleadservices.com https:\/\/storage.googleapis.com\/images-temp-erli-pl\/ https:\/\/storage.googleapis.com\/external-offers-import-erli-pl\/ www.google.pl www.google.com maps.googleapis.com *.hotjar.io pixel.wp.pl fpx.wp.pl bat.bing.com forms.fcc-online.pl analytics.tiktok.com pos.bliskapaczka.pl clk.leadexpert.pl analytics.optimalpeople.fr ams.creativecdn.com stats.g.doubleclick.net www.facebook.com; report-to 'csp-endpoint'","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl\/chromebook","count":1},{"content-security-policy-report-only":" report-to slardar-endpoint; script-src 'unsafe-eval' 'report-sample' 'nonce-158a0d4541b2c768b57d36382a3b9c63-argus' 'strict-dynamic';","count":1},{"content-security-policy-report-only":" base-uri 'self';connect-src https:\/\/*.go-mpulse.net https:\/\/*.akstat.io 'self' https: *.sentry.io *.amplitude.com *.care.com *.carezen.net *.signalfx.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net font.google.com analytics.google.com tagmanager.google.com www.google.com https:\/\/*.hotjar.com https:\/\/vc.hotjar.io https:\/\/content.hotjar.io https:\/\/events.hotjar.io https:\/\/surveystats.hotjar.io wss:\/\/*.hotjar.com https:\/\/geolocation.onetrust.com jsv3.recruitics.com accounts.google.com;default-src 'self' wss:\/\/*.care.com *.care.com *.careapis.com *.carezen.net *.cdn-care.com care.com cdn-care.com www.gstatic.com www.google.com *.googlesyndication.com tags.tiqcdn.com tags-eu.tiqcdn.com tk.getwork.com tr.snapchat.com shareasale.com *.doubleclick.net apps.rokt.com bid.g.doubleclick.net tags.w55c.net *.linkedin.com www.pinterest.com carecom.sjv.io staging-pt.ispot.tv ct.pinterest.com;font-src 'self' data: https:\/\/www.care.com https:\/\/www.dev.carezen.net https:\/\/www.stg.carezen.net fonts.gstatic.com https:\/\/script.hotjar.com;frame-ancestors 'self';img-src data: blob: *;object-src 'none';script-src https:\/\/*.go-mpulse.net 'nonce-8dd7dacf9eb6fdd7531f6af61bf01ccf' 'self' *.akamaihd.net *.care.com *.careapis.com *.carezen.net *.cdn-care.com *.cloudfront.net *.googlesyndication.com *.sift.com *.monetate.net acsbapp.com analytics.tiktok.com apps.rokt.com bat.bing.com care.com cdn-care.com cdn.pdst.fm connect.facebook.net d.impactradius-event.com googleads.g.doubleclick.net securepubads.g.doubleclick.net maps.googleapis.com s.pinimg.com ssl.google-analytics.com tags-eu.tiqcdn.com tags.tiqcdn.com wss:\/\/*.care.com www.emjcd.com www.google-analytics.com www.google.com www.googleadservices.com *.googletagmanager.com www.gstatic.com tr.outbrain.com tags.w55c.net clarity.ms staging-pt.ispot.tv tracker.mnixdata.com *.mountain.com tagmanager.google.com s.go-mpulse.net collector-12308.tvsquared.com js.adsrvr.org https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/cdn.cookielaw.org assets.calendly.com jsv3.recruitics.com accounts.google.com 'nonce-c742982b2a8a6bd3a15bdaa3f3f3e863' 'strict-dynamic';frame-src 'self' alchemy.veriff.com www.google.com recaptcha.google.com bid.g.doubleclick.net 12355078.fls.doubleclick.net s.go-mpulse.net carecom.sjv.io apps.rokt.com tr.snapchat.com 3239339.fls.doubleclick.net https:\/\/vars.hotjar.com insight.adsrvr.org match.adsrvr.org https:\/\/www.youtube.com\/ https:\/\/ots2-qa.learningcaregroup.com\/ScheduleATour\/ https:\/\/ots2.learningcaregroup.com\/ScheduleATour\/ td.doubleclick.net https:\/\/calendly.com securepubads.g.doubleclick.net *.googlesyndication.com ep2.adtrafficquality.google tagging.care.com accounts.google.com;style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.google.com fonts.googleapis.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/cdn.cookielaw.org 'nonce-c742982b2a8a6bd3a15bdaa3f3f3e863';style-src-attr 'self' 'unsafe-inline' tags.tiqcdn.com tags-eu.tiqcdn.com bat.bing.com;upgrade-insecure-requests;report-uri https:\/\/o466311.ingest.sentry.io\/api\/6004104\/security\/?sentry_key=2c284ff228ac4d0e8b8ad9ea17497eee&sentry_release=vhp-mfe%402.286.0&sentry_environment=prod","count":1},{"content-security-policy-report-only":" base-uri 'self'; default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: chrome: https:; worker-src 'self' data: blob:; child-src 'self' blob:; frame-src 'self' *.consumeraffairs.com *.google.com *.googletagmanager.com *.googleapis.com *.facebook.com *.youtube.com *.px-cloud.net i.liadm.com; connect-src 'self' *.consumeraffairs.com wss:\/\/ws.hotjar.com https:\/\/ws.hotjar.com *.px-cloud.net api.segment.io https:; report-uri https:\/\/stderr.consumeraffairs.com\/api\/40\/security\/?sentry_key=7cf6b3564e4343f68a310b937a3d823e&sentry_environment=production&sentry_release=ms-2025.12.23.00;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:   https:\/\/www.googletagmanager.com   https:\/\/www.google-analytics.com   https:\/\/www.googleadservices.com   https:\/\/googleads.g.doubleclick.net   https:\/\/kit.fontawesome.com   https:\/\/cdn.bc0a.com   https:\/\/fast.wistia.com   https:\/\/unpkg.com   https:\/\/*.hubspot.com   https:\/\/*.hubspot.net   https:\/\/*.hubspotusercontent-na1.net   https:\/\/*.hubspotusercontent30.net   https:\/\/js.hsadspixel.net   https:\/\/js.hs-analytics.net   https:\/\/js.hs-banner.com   https:\/\/abrtp2-cdn.marketo.com   https:\/\/abrtp2.marketo.com   https:\/\/rtp-static.marketo.com   https:\/\/munchkin.marketo.net   https:\/\/x.clearbitjs.com   https:\/\/js.zi-scripts.com   https:\/\/snap.licdn.com   https:\/\/connect.facebook.net   https:\/\/bat.bing.com   https:\/\/vidassets.terminus.services   https:\/\/js.adsrvr.org   https:\/\/metadata-static-files.sfo2.cdn.digitaloceanspaces.com   https:\/\/dev.visualwebsiteoptimizer.com   https:\/\/j.6sc.co   https:\/\/tools.luckyorange.com   https:\/\/browser.sentry-cdn.com   https:\/\/tags.clickagy.com;  style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; worker-src 'self' blob:;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-FdRmjNulJdMf-Jt1A1jtuw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" frame-ancestors https: canvas.uts.edu.au;  report-uri https:\/\/www.uts.edu.au\/api\/reporting\/;  report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-DjsNszTqNK4yFZpRlJpBWA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; connect-src https:; font-src 'self' data: cms.zdv.uni-mainz.de cms-cdn.zdv.uni-mainz.de; frame-src 'self' cms.zdv.uni-mainz.de video.uni-mainz.de; img-src blob: data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' cms.zdv.uni-mainz.de cms-cdn.zdv.uni-mainz.de; style-src 'self' 'unsafe-inline' cms.zdv.uni-mainz.de cms-cdn.zdv.uni-mainz.de; worker-src 'self' blob:;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/*.hsforms.net https:\/\/*.hsforms.com https:\/\/*.hs-scripts.com https:\/\/*.hscollectedforms.net https:\/\/*.hsleadflows.net https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/policy.app.cookieinformation.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:\/\/*.hsforms.net https:\/\/*.hsforms.com https:\/\/www.gstatic.com; font-src 'self' data:; connect-src 'self' wss: https:\/\/*.hsforms.com https:\/\/*.hscollectedforms.net https:\/\/*.hubapi.com https:\/\/www.google.com; frame-src 'self' blob: https:\/\/*.hsforms.net https:\/\/*.hsforms.com https:\/\/www.google.com https:\/\/recaptcha.google.com; worker-src 'self' blob:; media-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:\/\/*.hsforms.net https:\/\/*.hsforms.com; child-src 'self' blob: https:\/\/*.hsforms.com; report-uri https:\/\/cookieinformation.com\/wp-json\/pp-security\/v1\/csp-report; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'wasm-unsafe-eval' https:\/\/vercel.com https:\/\/vercel.live\/; style-src 'self' 'unsafe-inline'; img-src * data: blob:; connect-src * data: blob:; worker-src 'self' blob:; frame-src 'self' *; report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub62c07dc0877b0dd6e0c9d41dcb3bfee0&dd-evp-origin=content-security-policy&ddsource=csp-report; form-action none;","count":1},{"content-security-policy-report-only":" default-src 'self' ; script-src 'self'  pos.gosuslugi.ru mc.yandex.ru 'unsafe-inline' 'unsafe-eval'; style-src 'self'  'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self'  data: pos.gosuslugi.ru mc.yandex.ru; connect-src 'self'  pos.gosuslugi.ru mc.yandex.ru; font-src 'self'  https:\/\/fonts.gstatic.com data:; media-src 'self' ; frame-src 'self'  mc.yandex.ru; object-src 'none';","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-Pz3FGayz3-Wixe3o9zfleA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com www.googletagmanager.com *.optimizely.com *.onetrust.com *.optimonk.com *.debugbear.com *.google.com\/ccm *.doubleclick.net analytics.ahrefs.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com;font-src 'self' data: fonts.gstatic.com;img-src data: *;frame-src 'self' youtube.com www.youtube.com *.optimizely.com *.doubleclick.net googletagmanager.com *.googletagmanager.com;media-src 'self' youtube.com www.youtube.com;connect-src 'self' youtube.com www.youtube.com *.optimizely.com *.optimonk.com *.onetrust.com *.analytics.google.com *.google-analytics.com *.doubleclick.net *.debugbear.com google.com *.google.com analytics.ahrefs.com;frame-ancestors 'self';base-uri 'self';form-action 'self';object-src 'none';","count":1},{"content-security-policy-report-only":" default-src * data: blob: wss: 'unsafe-eval' 'unsafe-inline'; connect-src * wss:; script-src * 'unsafe-inline' 'unsafe-eval'; script-src-elem * 'unsafe-inline'; style-src * 'unsafe-inline'; img-src * data: blob:; object-src * data:; media-src * data:; frame-src *; font-src * data:; manifest-src *; worker-src * blob:; frame-ancestors 'self' *.speechify.com speechify.com *.speechify.dev; report-uri https:\/\/speechify.com\/api\/csp-reports; report-to speechify","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-e30UYOmZ2v2IV6YwbSF4Ag' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com 'unsafe-inline' data: *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https:\/\/static.addtoany.com\/ *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googleapis.com https:\/\/www.youtube.com https:\/\/c.paypal.com\/ *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com https:\/\/b.stats.paypal.com\/ https:\/\/slc.stats.paypal.com\/ https:\/\/c.paypal.com\/ https:\/\/cdn.sparkfun.com track.hubspot.com perf-na1.hsforms.com *.pixriot.com *.storeimaging.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page https:\/\/static.addtoany.com\/ *.certcapture.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com assets.shipperhq.com *.googleapis.com *.fontawesome.com *.google-analytics.com https:\/\/bam.nr-data.net https:\/\/bam-cell.nr-data.net https:\/\/c.paypal.com js.hs-scripts.com cta-service-cms2.hubspot.com api.hubspot.com js.usemessages.com js.hs-analytics.net js.hsleadflows.net js.hubspot.com js.hs-banner.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https:\/\/stats.addtoany.com\/menu *.certcapture.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com ovs.shipperhq.com *.googleapis.com https:\/\/bam.nr-data.net https:\/\/bam-cell.nr-data.net https:\/\/payments.sandbox.braintree-api.com\/ https:\/\/origin-analytics-sand.sandbox.braintree-api.com\/ https:\/\/cdn.sparkfun.com cta-service-cms2.hubspot.com api.hubspot.com forms.hubspot.com *.pixriot.com *.storeimaging.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/sparkfun.report-uri.com\/r\/d\/csp\/reportOnly; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/crm-form.avada.io https:\/\/avada-tools-api.vercel.app https:\/\/themechecker.avada.io https:\/\/backend.avada.io https:\/\/avadaio_assets.storage.googleapis.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/www.googletagmanager.com; frame-src https:\/\/challenges.cloudflare.com https:\/\/www.googletagmanager.com; form-action 'self' https:\/\/crm-form.avada.io","count":1},{"content-security-policy-report-only":" default-src https: data: 'unsafe-inline' 'unsafe-eval'; worker-src blob:; report-uri https:\/\/search.ch\/api\/mixedcontent.json","count":1},{"content-security-policy-report-only":" default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; media-src 'self' blob: https:; frame-src 'self' https:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:; upgrade-insecure-requests; report-uri https:\/\/hcn.health\/wp-json\/hcn\/v1\/csp-report","count":1},{"content-security-policy-report-only":" script-src 'nonce-VGZKRvm8MQypKt-LuN9GsQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https:\/\/csp.withgoogle.com\/csp\/static-on-bigtable; base-uri 'none'","count":1},{"content-security-policy-report-only":" default-src data: https: 'unsafe-inline' 'unsafe-eval'; report-uri https:\/\/track.buyma.com\/csp\/report.json","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/panoramio","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-KG6MpThPkkHhG3-R7n6dnA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; font-src * data: https:\/\/context.actionnetwork.org\/csp-ctx\/no-user\/production; img-src * data:; media-src * data: blob:; frame-src *; script-src 'nonce-c8876532a85107aec0ead9d47f68af58' 'unsafe-hashes' 'sha256-qwP4QCno5UAWneuNeQYFyvAiDvTfkg75J5D14cZjCDA=' 'sha256-S5xKDgI7S06g6YwGoh\/T\/JTDbndl\/QB9P\/WrrdygaUU=' 'sha256-lfXlPY3+MCPOPb4mrw1Y961+745U3WlDQVcOXdchSQc=' 'sha256-rRMdkshZyJlCmDX27XnL7g3zXaxv7ei6Sg+yt4R3svU=' 'sha256-kbHtQyYDQKz4SWMQ8OHVol3EC0t3tHEJFPCSwNG9NxQ=' 'sha256-F2FIxepkuC0NOVNSk0vN01FYQmWDYl4CITiGrDxcpZs=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-MhtPZXr7+LpJUY5qtMutB+qWfQtMaPccfe7QXtCcEYc=' 'sha256-1tjffMrOxPdkP4w\/XDnQFquGVJ+hRMdaRnvL6y+\/CtQ=' 'unsafe-eval' https:\/\/actionnetwork.org\/includes\/js\/ https:\/\/cdn.basejump.ai\/js\/ https:\/\/app.basejump.ai\/static\/ https:\/\/cdn.jsdelivr.net\/npm\/emojione@3.1.2\/; worker-src 'self' blob:; style-src * 'unsafe-inline'; style-src-attr 'unsafe-inline'; object-src 'none'; connect-src https:; report-uri \/_\/csp-reports; report-to local-csp-reports;","count":1},{"content-security-policy-report-only":" default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http:\/\/*.files.wordpress.com wss:\/\/www.sheknows.com; report-uri https:\/\/pmcuri.report-uri.com\/r\/d\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" default-src 'self' imagekit.io *.imagekit.io imgkit.net *.imgkit.net; form-action 'self' imagekit.io *.imagekit.io imgkit.net *.imgkit.net intercom.help api-iam.intercom.io api-iam.eu.intercom.io api-iam-au.intercom.io www.facebook.com; style-src 'self' 'unsafe-inline' 'report-sample' *.google.com fonts.googleapis.com cdn.jsdelivr.net www.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' blob: assets.apollo.io consent.cookiebot.com consentcdn.cookiebot.com plausible.io www.redditstatic.com www.googletagmanager.com *.googletagmanager.com *.google.com *.google-analytics.com bat.bing.com *.licdn.com *.hs-analytics.net *.hs-scripts.com connect.facebook.net static.ads-twitter.com rum-static.pingdom.net m.servedby-buysellads.com *.hscollectedforms.net *.hs-banner.com *.intercom.io *.intercomcdn.com fastgull.io *.hotjar.com *.g2crowd.com *.stripe.com *.gstatic.com\/recaptcha\/ *.google.com\/recaptcha\/ maps.googleapis.com https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/fabric.js\/4.1.0\/fabric.min.js js.storylane.io analytics.sayprimer.com cdn.jsdelivr.net *.ingest.sentry.io assets.revenuehero.io tags.fullcontact.com d-code.liadm.com; object-src 'self' ik.imagekit.io; font-src 'self' data: fonts.gstatic.com *.intercomcdn.com ik.imagekit.io script.hotjar.com cdn.jsdelivr.net cdnjs.cloudflare.com; frame-src 'self' accounts.google.com *.youtube.com *.stripe.com *.gstatic.com\/recaptcha\/ *.google.com\/recaptcha\/ *.storylane.io consentcdn.cookiebot.com giscus.app www.facebook.com ik.imagekit.io www.googletagmanager.com i.liadm.com eml.imagekit.io www.intercom-reporting.com popup.schedulehero.io; manifest-src 'self'; worker-src 'self' blob: imagekit.io; base-uri 'self'; img-src 'self' blob: data: *; media-src 'self' blob: data: imagekit.io *.imagekit.io imgkit.net *.imgkit.net *.intercomcdn.com; child-src 'self' blob: data: intercom-sheets.com www.intercom-reporting.com www.youtube.com player.vimeo.com fast.wistia.net; connect-src 'self' * blob: data:; report-uri https:\/\/o1277188.ingest.us.sentry.io\/api\/6474587\/security\/?sentry_key=8640a39841f24f8b91189ee00204f193&sentry_environment=prod&sentry_release=v3.1.0","count":1},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=VYrQCJA8BV.Pyfk87Rhu8tt5xtjn6TTh7XRVH7LvSXw-1788496609.3956695-1.0.1.1-Q_bBE4G12IkuUly5HZDbbyhLY7r1y9IXkhesBsJms8TUMgXeEhnrBAGtZLcq6iM8Y33GvhdIYLo4xzVOV.MFz6ZE_2dn6o7WeuwO9ExenAd0j46JXRvBfMG.FIGoGvY8K8.Rk56FV_bGwmjz3pEJ0f6Ug.cBEpK.a_dS1Zda7Uy1kex3rA3GVUYCLcZcdems; report-to cf-csp-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; script-src-elem 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; style-src-elem 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src https:; media-src 'self' https: blob:; worker-src 'self' blob: https:;","count":1},{"content-security-policy-report-only":" default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src *; img-src * data:; style-src * 'unsafe-inline'; font-src * data:; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=rX_RB_vwNiC.pxuZFVyhPrAKsZfvrTMkEzUAYd.xRZI-1788498030.5310144-1.0.1.1-M_2_QwvXIvLO2RjylyYQhm09KXDA9bQhgRqxh5M6UuMyfUBMZHnb9kuBfEavCTEuAesJtnftxw63XiaWElszd7vpxmRVdU9VxKPpQFaJG1L0ih.XK2J7zzUSK.b.d4SUmWnT.zs4x380KVdc2.UMcg5KkawODd8upLpCZI7RRMIPeoAkK8T4tNOYQm4cL8mY6wYVR2LqQzUGSumRe1yPUA; report-to cf-idjsqpgxqzortlqk","count":1},{"content-security-policy-report-only":" form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; font-src https:\/\/shop.vodacom.co.za\/ fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; style-src https:\/\/shop.vodacom.co.za\/ *.adobe.com fonts.googleapis.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: 'self' 'unsafe-inline'; connect-src https:\/\/gcpsmapi-pre.vodafone.com\/ https:\/\/s.metric.vodacom.co.za\/ https:\/\/vfza-analytics.digital.medallia.eu\/ https:\/\/vodacom.eum-appdynamics.com\/ https:\/\/eum.instana.io\/ https:\/\/gcpsmapi.vodafone.com\/ https:\/\/cdn.cookielaw.org\/ https:\/\/eum-blue-saas.instana.io\/ dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.klevu.com *.ksearchnet.com *.testfreaks.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss:\/\/*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.what3words.com *.googleapis.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss:\/\/widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: 'self' 'unsafe-inline'; frame-src https:\/\/cdn.appdynamics.com\/ https:\/\/vodacom.demdex.net\/ fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com *.facebook.com webchat.jdg.co.za *.jdg.co.za www.xtento.com 'self' 'unsafe-inline'; img-src https:\/\/shop.vodacom.co.za\/ https:\/\/s.metric.vodacom.co.za\/ https:\/\/px.ads.linkedin.com\/ assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: https:\/\/images.unsplash.com *.klevu.com *.ksearchnet.com https:\/\/www.mollie.com *.cloudflare.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.facebook.com *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src https:\/\/shop.vodacom.co.za\/ https:\/\/cdn.appdynamics.com\/ https:\/\/tags.tiqcdn.com\/ https:\/\/eum.instana.io\/ https:\/\/cdn.cookielaw.org\/ https:\/\/eum-blue-saas.instana.io\/ assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com js.klevu.com *.ksearchnet.com js.mollie.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.facebook.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval';","count":1},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval' blob: https:; object-src 'none'; base-uri 'none';","count":1},{"content-security-policy-report-only":" default-src 'none' ;script-src 'unsafe-eval' 'unsafe-inline' *.starbucks.co.jp *.google.com *.google-analytics.com www.googleadservices.com\/pagead\/ *.googletagmanager.com *.g.doubleclick.net cdn.optimizely.com\/js\/ *.facebook.net b92.yahoo.co.jp *.twitter.com d.adlpo.com *.treasuredata.com hm.mieru-ca.com d2fzkgg97cd93o.cloudfront.net platform.sumally.com p.jwpcdn.com jwpsrv.com apis.google.com starbucks-faq.pbcv.sitesearch.jp starbucks-faq.sitesearch.jp rum.optimizely.com s.yimg.jp b97.yahoo.co.jp ci-mpsnare.iovation.com dqpw8dh9f7d3f.cloudfront.net d3vgbguy0yofad.cloudfront.net ajax.googleapis.com auth1.freespot.com collect.ptengine.jp d-cache.microad.jp js.ptengine.jp js.fout.jp cdnjs.cloudflare.com in.treasuredata.com ssl.p.jwpcdn.com ;style-src 'unsafe-inline' *.starbucks.co.jp fonts.googleapis.com starbucks-faq.pbcv.sitesearch.jp starbucks-faq.sitesearch.jp ;img-src data: *.starbucks.co.jp *.google.com *.google.co.jp *.google-analytics.com www.googleadservices.com\/pagead\/ *.googletagmanager.com *.g.doubleclick.net *.twitter.com d2fzkgg97cd93o.cloudfront.net sumally.com jwpltx.com b97.yahoo.co.jp dqpw8dh9f7d3f.cloudfront.net d3vgbguy0yofad.cloudfront.net collect.ptengine.jp d-track.send.microad.jp target.fout.jp huaban.com map.chizumaru.com s3-ap-northeast-1.amazonaws.com www.google.co.id www.google.co.kr www.google.com.hk www.google.com.sg www.google.com.tw www.google.de www.gstatic.com ;font-src *.starbucks.co.jp fonts.gstatic.com ;media-src d2fzkgg97cd93o.cloudfront.net ;object-src *.starbucks.co.jp ;frame-src *.google.com *.g.doubleclick.net *.facebook.com *.twitter.com sumally.com www.youtube.com js.fout.jp dsp.fout.jp ;connect-src *.starbucks.co.jp *.g.doubleclick.net dwjw4x8nnai5d.cloudfront.net rum.optimizely.com uc.gre d11abxzrrvbz6o.cloudfront.net track.uc.cn ws:\/\/ntjp.mieru-ca.com ;report-uri https:\/\/sbjcsp2.report-uri.com\/r\/d\/csp\/reportOnly;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-ySDWBeTRWuUXd7BNaX3pVw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/www.heraldsun.com.au\/csp-reports","count":1},{"content-security-policy-report-only":" script-src 'nonce-8i\/KnyNJlgNyEWjYqqgd3A==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https:\/\/events.mercadolibre.com\/csp\/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=aecb1f8c-08be-4caf-aa49-67b7ca12f058; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https:\/\/http2.mlstatic.com\/ https:\/\/mlstaticquic-a.akamaihd.net\/; frame-ancestors 'self' https:\/\/*.mercadolibre.cl:* https:\/\/*.mercadolibre.com:* https:\/\/*.mercadolibre.com.ve:* https:\/\/*.mercadolibre.com.ar:* https:\/\/*.mercadolivre.com.br:* https:\/\/*.mercadolibre.com.co:* https:\/\/*.mercadolibre.com.ec:* https:\/\/*.mercadolibre.com.mx:* https:\/\/*.mercadolibre.com.pe:* https:\/\/*.mercadolibre.com.uy:* https:\/\/*.mercadopago.cl:* https:\/\/*.mercadopago.com.ar:* https:\/\/*.mercadopago.com.br:* https:\/\/*.mercadopago.com.co:* https:\/\/*.mercadopago.com.mx:* https:\/\/*.mercadopago.com.pe:* https:\/\/*.mercadopago.com.uy:* https:\/\/*.mercadopago.com.ve:* https:\/\/*.mercadopago.com:* https:\/\/*.adminml.com:* https:\/\/*.mercadolibre.co.cr:* https:\/\/*.mercadolibre.com.pa:* https:\/\/*.mercadolibre.com.do:* https:\/\/*.mercadolibre.com.bo:* https:\/\/*.mercadolibre.com.py:* https:\/\/*.mercadolibre.com.gt:* https:\/\/*.mercadolibre.com.hn:* https:\/\/*.mercadolibre.com.ni:* https:\/\/*.mercadolibre.com.sv:* https:\/\/*.mercadopago.com.ec:* https:\/\/*.portalinmobiliario.com:* https:\/\/*.mercadolivre.com:*","count":1},{"content-security-policy-report-only":" default-src * 'self' data: blob: 'unsafe-inline' 'unsafe-eval';  report-uri \/csp-report-endpoint;","count":1},{"content-security-policy-report-only":" default-src 100.20.58.101 *.100.20.58.101 18.210.229.244 *.18.210.229.244 3.212.39.155 *.3.212.39.155 34.215.155.61 *.34.215.155.61 35.160.46.251 *.35.160.46.251 35.85.84.151 *.35.85.84.151 44.212.189.233 *.44.212.189.233 44.228.85.26 *.44.228.85.26 44.238.122.172 *.44.238.122.172 52.22.50.55 *.52.22.50.55 52.71.121.170 *.52.71.121.170 54.156.2.105 *.54.156.2.105 adform.net *.adform.net adnxs.com *.adnxs.com adobedtm.com *.adobedtm.com ads-twitter.com *.ads-twitter.com adsrvr.org *.adsrvr.org affirm.com *.affirm.com ajax.googleapis.com *.ajax.googleapis.com amazon-adsystem.com *.amazon-adsystem.com arinet.com *.arinet.com azure.com *.azure.com bazaarvoice.com *.bazaarvoice.com bing.com *.bing.com bing.net *.bing.net bkrtx.com *.bkrtx.com boltdns.net *.boltdns.net boomtrain.com *.boomtrain.com bounceexchange.com *.bounceexchange.com brcdn.com *.brcdn.com brightcove.com *.brightcove.com brightcove.net *.brightcove.net brightcovecdn.com *.brightcovecdn.com capi-automation.s3.us-east-2.amazonaws.com *.capi-automation.s3.us-east-2.amazonaws.com cdn-apple.com *.cdn-apple.com cdnbasket.net *.cdnbasket.net cdnwidget.com *.cdnwidget.com clarity.ms *.clarity.ms cloudflare.com *.cloudflare.com cloudflareinsights.com *.cloudflareinsights.com contentsquare.net *.contentsquare.net creativecdn.com *.creativecdn.com criteo.com *.criteo.com cybersource.com *.cybersource.com decibelinsight.net *.decibelinsight.net demdex.net *.demdex.net disqometer.com *.disqometer.com dotomi.com *.dotomi.com doubleclick.net *.doubleclick.net ecs.us-east-1.on.aws *.ecs.us-east-1.on.aws ecs.us-east-2.on.aws *.ecs.us-east-2.on.aws exponea.com *.exponea.com facebook.com *.facebook.com facebook.net *.facebook.net force.com *.force.com gigya.com *.gigya.com google-analytics.com *.google-analytics.com google.at *.google.at google.be *.google.be google.ca *.google.ca google.ch *.google.ch google.cl *.google.cl google.co.in *.google.co.in google.co.id *.google.co.id google.co.jp *.google.co.jp google.co.kr *.google.co.kr google.co.nz *.google.co.nz google.co.uk *.google.co.uk google.co.ve *.google.co.ve google.com *.google.com google.com.ar *.google.com.ar google.cz *.google.cz google.de *.google.de google.dk *.google.dk google.es *.google.es google.fi *.google.fi google.fr *.google.fr google.gr *.google.gr google.it *.google.it google.mn *.google.mn google.nl *.google.nl google.no *.google.no google.pl *.google.pl google.ro *.google.ro google.rs *.google.rs google.ru *.google.ru google.se *.google.se googleadservices.com *.googleadservices.com googlesyndication.com *.googlesyndication.com googletagmanager.com *.googletagmanager.com gstatic.com *.gstatic.com harley-davidson.com *.harley-davidson.com iesnare.com *.iesnare.com igodigital.com *.igodigital.com ipinfo.io *.ipinfo.io ipredictive.com *.ipredictive.com kampyle.com *.kampyle.com kargo.com *.kargo.com klarna.com *.klarna.com klarnacdn.net *.klarnacdn.net klarnaevt.com *.klarnaevt.com liadm.com *.liadm.com line-scdn.net *.line-scdn.net maps.googleapis.com *.maps.googleapis.com marinsm.com *.marinsm.com mbww.com *.mbww.com medallia.com *.medallia.com micpn.com *.micpn.com mountain.com *.mountain.com mpc2-prod-23-is5qnl632q-ue.a.run.app *.mpc2-prod-23-is5qnl632q-ue.a.run.app mpc2-prod-25-is5qnl632q-wl.a.run.app *.mpc2-prod-25-is5qnl632q-wl.a.run.app netmng.com *.netmng.com online-metrix.net *.online-metrix.net osano.com *.osano.com outbrain.com *.outbrain.com paa-reporting-advertising.amazon *.paa-reporting-advertising.amazon paypal.com *.paypal.com pdst.fm *.pdst.fm pinimg.com *.pinimg.com pinterest.com *.pinterest.com po.st *.po.st quantcount.com *.quantcount.com t.co *.t.co stylitics.com *.stylitics.com stape.gl *.stape.gl spotify.com *.spotify.com sketchfab.com *.sketchfab.com simpli.fi *.simpli.fi shiftdigitalapps.io *.shiftdigitalapps.io sentry.io *.sentry.io quantserve.com *.quantserve.com redditstatic.com *.redditstatic.com rezync.com *.rezync.com rfihub.net *.rfihub.net s3.amazonaws.com *.s3.amazonaws.com safesearchinc.com *.safesearchinc.com taboola.com *.taboola.com teads.tv *.teads.tv tiktok.com *.tiktok.com tiktokw.us *.tiktokw.us tribalfusion.com *.tribalfusion.com twitter.com *.twitter.com us-east1-tranquil-petal-272922.cloudfunctions.net *.us-east1-tranquil-petal-272922.cloudfunctions.net wknd.ai *.wknd.ai yahoo.co.jp *.yahoo.co.jp yahoo.com *.yahoo.com yimg.com *.yimg.com yimg.jp *.yimg.jp youtube.com *.youtube.com zencdn.net *.zencdn.net zetaglobal.net *.zetaglobal.net; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=CKxT4_p30uUtnWW78LVux3X7sNpmnaP4yhemCZG4.zM-1788501345.4413958-1.0.1.1-9siAK3syw_Fbsf9HR1WILgFfTAYD.pMv37Isu9YndBu_6LzuXwha_9X02Z4NqxyISGemWMFrS.Gj7HUqsoSm0MIWdzuotYebAHGTGTIWDpGI0ZPgeXk9h8nuLjl1OewvG_r7WycZvjSguPoBnKd6opteZtuYzulmv.i03Bgixt245kPmduUOBJSlsnDPypiAT_ow2XOU0jdA4rhumrNbJQ; report-to cf-fxwkbguyuoszzbok","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/unpkg.com https:\/\/*.kinescope.io https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/analytics.ahrefs.com https:\/\/*.intercom.io https:\/\/*.intercomcdn.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:\/\/cdn.sanity.io https:\/\/cdn.prod.website-files.com https:\/\/*.kinescope.io https:\/\/*.google-analytics.com https:\/\/*.intercomcdn.com; font-src 'self' data:; frame-src 'self' https:\/\/*.kinescope.io https:\/\/kinescope.io https:\/\/calendly.com; connect-src 'self' https:\/\/*.kinescope.io https:\/\/cdn.sanity.io https:\/\/*.google-analytics.com https:\/\/analytics.ahrefs.com https:\/\/*.intercom.io wss:\/\/*.intercom.io; object-src 'none'; base-uri 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' analytics.init.de; base-uri 'self'; style-src 'self' 'unsafe-inline' *.openlayers.org openlayers.org *.openstreetmap.org *.twitter.com *.instagram.com *.europa.eu *.3qsdn.com *.twimg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google.com *.gstatic.com *.openlayers.org openlayers.org *.init.de *.openstreetmap.org *.twitter.com *.instagram.com *.europa.eu *.3qsdn.com *.twimg.com *.flockler.com *.bundesfinanzministerium.de; object-src 'self'; media-src 'self' *.youtube.com *.bundesfinanzministerium.de; child-src *.google.com *.gstatic.com *.youtube.com *.init.de *.twitter.com *.instagram.com *.europa.eu *.3qsdn.com *.twimg.com; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com *.openlayers.org openlayers.org *.openstreetmap.org *.init.de *.twitter.com *.instagram.com *.europa.eu *.3qsdn.com *.twimg.com *.bundesfinanzministerium.de; frame-ancestors 'self'; report-uri \/site\/servlet\/csp-report;","count":1},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=o0R4Glq5.InQtp1yhrjU_e.2HTJ.pBUpEhKEF6kz6Lg-1788504028.5677805-1.0.1.1-AlvwEfn0VFh9hUApFDzr1ywTVNZTQh0aCnYZCuZhlWqZUXrQStlqC_JCDXkBanlJETEQqKN17yCf8EiY32zSB_tn2ZGwx3A2gMGAmRwO2UFNMcGmxiutOjlT3Vub_DS6sP38zLyOwzslv5b1Hk7Ndx1tNObtbofXqF42bX1NOSY; report-to cf-csp-endpoint","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' https:\/\/sierra.chat https:\/\/*.skynettechnologies.com https:\/\/*.skynettechnologies.us https:\/\/dev.visualwebsiteoptimizer.com https:\/\/cdn-4.convertexperiments.com https:\/\/a.omappapi.com https:\/\/static.cloudflareinsights.com giving.classy.org https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/maps.googleapis.com https:\/\/platform.twitter.com https:\/\/unpkg.com https:\/\/www.googletagmanager.com https:\/\/www.skynettechnologies.com https:\/\/www.youtube.com public.flourish.studio; style-src 'self' 'report-sample' 'unsafe-inline' https:\/\/sierra.chat https:\/\/*.skynettechnologies.com https:\/\/a.omappapi.com cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/fonts.googleapis.com https:\/\/unpkg.com; worker-src 'self' blob:; base-uri 'self'; form-action 'self' https:\/\/sierra.chat; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self' *.openjdk.java.net feedburner.google.com; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' feeds.feedburner.com *.statcounter.com statcounter.com; img-src 'self' data: *.statcounter.com *.openjdk.java.net feedburner.google.com; frame-ancestors 'none'; report-uri https:\/\/openjdk.report-uri.io\/r\/default\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" frame-src *.force.com https:\/\/player.vimeo.com 'self' https:\/\/stats.g.doubleclick.net https:\/\/gmocloudcommunity.force.com *.youtube.co.uk https:\/\/sfdc-link-preview.hk.salesforce.com https:\/\/b99.yahoo.co.jp https:\/\/checkoutshopper-test.adyen.com\/ https:\/\/pal-test.adyen.com https:\/\/www.google.co.jp *.cybersource.com *.youtube.es https:\/\/www.domainking.jp *.adis.ws https:\/\/www.wadax.ne.jp https:\/\/jpn160.sfdc-p1i6qd.salesforce.com *.youtube.ie https:\/\/www.youtube.com *.cloudinary.com https:\/\/www.google.com https:\/\/pay.google.com https:\/\/analytics.google.com *.vimeo.com *.youtube.jp bcove.video https:\/\/app.arcade.software *.youtube.fr https:\/\/altus.gmocloud.com https:\/\/*.a.forceusercontent.com https:\/\/player.cloudinary.com https:\/\/dnsck.gmocloud.com https:\/\/sfdc-link-preview-staging.sfdc.sh https:\/\/s1.adis.ws *.forceusercontent.com *.brightcove.net *.youtube.com *.youtube.nl https:\/\/service.force.com\/embeddedservice\/ https:\/\/faq.wadax.ne.jp https:\/\/fast.wistia.net *.quip.com *.arkoselabs.com *.youtube-nocookie.com https:\/\/www.paypal.com https:\/\/appiniummastertrial.secure.force.com https:\/\/play.vidyard.com https:\/\/translation.googleapis.com *.youtube.com.br https:\/\/icl.dns.ishioka.xyz *.salesforce-experience.com *.salesforceliveagent.com https:\/\/scormanywhere.secure.force.com https:\/\/gmogshd-ch.file.force.com https:\/\/demo.arcade.software https:\/\/checkoutshopper-live.adyen.com\/ *.sfdcfc.net *.youtube.ca https:\/\/location.force.com *.vidyard.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/players.brightcove.net https:\/\/cdn.embedly.com https:\/\/www.google.com\/recaptcha\/ https:\/\/js.stripe.com\/ https:\/\/www.sandbox.paypal.com https:\/\/support.gmocloud.com https:\/\/*.a.forceusercontent.com\/lightningmaps\/ https:\/\/www.googletagmanager.com *.wistia.net https:\/\/www.google-analytics.com *.salesforce.com https:\/\/www.rapidsite.jp *.youtube.pl; report-to sfdc-csp-ep; report-uri https:\/\/gmogshd-ch.lightning.force.com\/_\/ContentDomainCSPNoAuth?tenantId=00D10000000Hq6P&networkId=0DM5F00000001rL&type=communities","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' blob: 'nonce-YCUzeSxu86KNUKiNGW1cFw' 'sha256-EcIhP2B3snRqL+1YQ8\/z4Jzyum5Fl6GV2p1zfwKeFJw=' https:\/\/browser.sentry-cdn.com https:\/\/cdn.rudderlabs.com https:\/\/cdn.cookielaw.org https:\/\/edge.fullstory.com https:\/\/widget.intercom.io https:\/\/js.intercomcdn.com https:\/\/accounts.google.com https:\/\/www.google-analytics.com https:\/\/geolocation.onetrust.com https:\/\/www.google.com https:\/\/www.redditstatic.com https:\/\/a.quora.com https:\/\/analytics.tiktok.com https:\/\/q.quora.com https:\/\/googleads.g.doubleclick.net https:\/\/static.geetest.com https:\/\/bat.bing.com https:\/\/pixel-config.reddit.com https:\/\/alb.reddit.com https:\/\/downloads.intercomcdn.com https:\/\/analytics.google.com https:\/\/www.gstatic.com https:\/\/www.clarity.ms https:\/\/scripts.clarity.ms https:\/\/api.geevisit.com https:\/\/www.googletagmanager.com https:\/\/blog.binance.us https:\/\/static.devfdg.us https:\/\/static.binance.us https:\/\/resource.binance.us\/ wss:\/\/stream.binance.us:* https:\/\/*.plaid.com https:\/\/cdn.cognitohq.com; style-src 'self' 'unsafe-inline' https:\/\/static.devfdg.us https:\/\/static.binance.us https:\/\/www.gstatic.com https:\/\/use.fontawesome.com\/; connect-src 'self' https:\/\/cdn.cookielaw.org https:\/\/edge.fullstory.com https:\/\/rs.fullstory.com https:\/\/api.rudderstack.com wss:\/\/mbx-wsp-wss.qafdg.us:* wss:\/\/ws-api.binance.us wss:\/\/ws-api.binance.us:* https:\/\/static.devfdg.us https:\/\/static.binance.us https:\/\/binanceseamg.dataplane.rudderstack.com https:\/\/sdk.iad-05.braze.com https:\/\/api-iam.intercom.io wss:\/\/nexus-websocket-a.intercom.io https:\/\/o588082.ingest.sentry.io https:\/\/*.ingest.sentry.io https:\/\/*.ingest.us.sentry.io https:\/\/accounts.google.com https:\/\/o588082.ingest.sentry.io https:\/\/*.ingest.sentry.io https:\/\/*.ingest.us.sentry.io https:\/\/o588082.ingest.us.sentry.io https:\/\/www.google-analytics.com https:\/\/geolocation.onetrust.com https:\/\/www.google.com https:\/\/www.redditstatic.com https:\/\/a.quora.com https:\/\/analytics.tiktok.com https:\/\/q.quora.com https:\/\/googleads.g.doubleclick.net https:\/\/static.geetest.com https:\/\/bat.bing.com https:\/\/pixel-config.reddit.com https:\/\/alb.reddit.com https:\/\/downloads.intercomcdn.com https:\/\/analytics.google.com https:\/\/www.gstatic.com https:\/\/www.clarity.ms https:\/\/scripts.clarity.ms https:\/\/api.geevisit.com https:\/\/www.googletagmanager.com https:\/\/blog.binance.us https:\/\/static.devfdg.us https:\/\/static.binance.us https:\/\/resource.binance.us\/ wss:\/\/stream.binance.us:* https:\/\/*.plaid.com https:\/\/cdn.cognitohq.com; img-src 'self' data: https:\/\/public.cstatic.us https:\/\/cdn.cookielaw.org https:\/\/static.binance.us https:\/\/public.bnbstatic.com https:\/\/www.google-analytics.com https:\/\/geolocation.onetrust.com https:\/\/www.google.com https:\/\/www.redditstatic.com https:\/\/a.quora.com https:\/\/analytics.tiktok.com https:\/\/q.quora.com https:\/\/googleads.g.doubleclick.net https:\/\/static.geetest.com https:\/\/bat.bing.com https:\/\/pixel-config.reddit.com https:\/\/alb.reddit.com https:\/\/downloads.intercomcdn.com https:\/\/analytics.google.com https:\/\/www.gstatic.com https:\/\/www.clarity.ms https:\/\/scripts.clarity.ms https:\/\/api.geevisit.com https:\/\/www.googletagmanager.com https:\/\/blog.binance.us https:\/\/static.devfdg.us https:\/\/static.binance.us https:\/\/resource.binance.us\/ wss:\/\/stream.binance.us:* https:\/\/*.plaid.com https:\/\/cdn.cognitohq.com; media-src 'self' https:\/\/static.devfdg.us https:\/\/static.binance.us https:\/\/resource.binance.us https:\/\/www.google-analytics.com https:\/\/geolocation.onetrust.com https:\/\/www.google.com https:\/\/www.redditstatic.com https:\/\/a.quora.com https:\/\/analytics.tiktok.com https:\/\/q.quora.com https:\/\/googleads.g.doubleclick.net https:\/\/static.geetest.com https:\/\/bat.bing.com https:\/\/pixel-config.reddit.com https:\/\/alb.reddit.com https:\/\/downloads.intercomcdn.com https:\/\/analytics.google.com https:\/\/www.gstatic.com https:\/\/www.clarity.ms https:\/\/scripts.clarity.ms https:\/\/api.geevisit.com https:\/\/www.googletagmanager.com https:\/\/blog.binance.us https:\/\/static.devfdg.us https:\/\/static.binance.us https:\/\/resource.binance.us\/ wss:\/\/stream.binance.us:* https:\/\/*.plaid.com https:\/\/cdn.cognitohq.com; font-src 'self' data: https:\/\/static.devfdg.us https:\/\/static.binance.us https:\/\/www.gstatic.com https:\/\/use.fontawesome.com\/; worker-src 'self' blob:; child-src 'self' blob:; object-src 'none'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-nonce-ed146a138cca15d1693f6cf65b890520'; img-src 'self' data: https:; font-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; block-all-mixed-content","count":1},{"content-security-policy-report-only":" script-src 'nonce-Sz6T61Dtj73V+8ZQB1BvRw==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https:\/\/events.mercadolibre.com\/csp\/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=51c0f638-55d7-427e-a65f-22e19a61aafe; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https:\/\/http2.mlstatic.com\/ https:\/\/mlstaticquic-a.akamaihd.net\/; frame-ancestors 'self' https:\/\/*.mercadolibre.cl:* https:\/\/*.mercadolibre.com:* https:\/\/*.mercadolibre.com.ve:* https:\/\/*.mercadolibre.com.ar:* https:\/\/*.mercadolivre.com.br:* https:\/\/*.mercadolibre.com.co:* https:\/\/*.mercadolibre.com.ec:* https:\/\/*.mercadolibre.com.mx:* https:\/\/*.mercadolibre.com.pe:* https:\/\/*.mercadolibre.com.uy:* https:\/\/*.mercadopago.cl:* https:\/\/*.mercadopago.com.ar:* https:\/\/*.mercadopago.com.br:* https:\/\/*.mercadopago.com.co:* https:\/\/*.mercadopago.com.mx:* https:\/\/*.mercadopago.com.pe:* https:\/\/*.mercadopago.com.uy:* https:\/\/*.mercadopago.com.ve:* https:\/\/*.mercadopago.com:* https:\/\/*.adminml.com:* https:\/\/*.mercadolibre.co.cr:* https:\/\/*.mercadolibre.com.pa:* https:\/\/*.mercadolibre.com.do:* https:\/\/*.mercadolibre.com.bo:* https:\/\/*.mercadolibre.com.py:* https:\/\/*.mercadolibre.com.gt:* https:\/\/*.mercadolibre.com.hn:* https:\/\/*.mercadolibre.com.ni:* https:\/\/*.mercadolibre.com.sv:* https:\/\/*.mercadopago.com.ec:* https:\/\/*.portalinmobiliario.com:* https:\/\/*.mercadolivre.com:*","count":1},{"content-security-policy-report-only":" script-src *.tiktok.com *.cloudflareinsights.com *.googleapis.com *.ensighten.com *.stylitics.com *.maurices.com *.rewardstyle.com *.gstatic.com *.facebook.net *.paypal.com *.pinimg.com *.curalate.com *.iesnare.com *.bazaarvoice.com *.taboola.com *.attn.tv *.googleadservices.com *.pure.cloud *.googletagmanager.com *.sc-static.net *.mountain.com *.bing.com *.oracleinfinity.io *.snapchat.com *.yimg.com *.hxplatform.com *.cnnx.link *.doubleclick.net *.pinterest.com *.rmtag.com *.lgrckt-in.com *.dynamicyield.com *.afterpay.com *.perimeterx.net *.cloudflare.com *.granify.com *.google.com *.cookielaw.org *.breadpayments.com; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=E4sVB9aD9x6nbfY0LVInAXGV3qE1aBFhcYau4rndTi0-1788507231.5032718-1.0.1.1-YZpGT.53g0AGdWf8YPtzWWzKy4qF2_eokmAWoqWVGnjjVf87Mt67dk6MWVaRn6leViYOWYT1Gpz6xSG_V_ohYIPppa52vWnD550_EGpBYWQHgl7Cxqzi.IrDTEoVkhxIpxOGPSXIGQUoLc5Zr8Svl8cozkSbLOGbHXSCv0ZQNycMumZNld8.xn0tf2wSn_MJFoWo3DRsck2jFgqiMeaFDBvGqdRbgNO2QaHNz1ogTt_9c9xLv8Fb5Bg9o0VaiXym; report-to cf-lpzsjedtwecjdhbd","count":1},{"content-security-policy-report-only":" default-src https: data: 'unsafe-eval' 'unsafe-inline'; report-uri \/csp_reports","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-gzUMLulSsNDfWFBBm0DPPg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none'; base-uri 'none'; script-src 'self' 'nonce-wL\/1g1YNwyqMYKzF4iycGw==' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:; script-src-elem 'self' 'unsafe-inline' https:; script-src-attr 'unsafe-inline'; report-to csp-endpoint; report-uri https:\/\/csp-reporting.onlinesupport-3aa.workers.dev\/csp-report\/8f43c2a1-76de-4b90-a124-5e7d93c840bf;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/b.speedkit.com https:\/\/baqend-website-sk.app.baqend.com; script-src-elem 'self' 'unsafe-inline' https:\/\/b.speedkit.com https:\/\/baqend-website-sk.app.baqend.com; style-src 'self' 'unsafe-inline'; worker-src 'self' blob: data:; img-src 'self' data: https:\/\/images.unsplash.com https:\/\/baqend-website-sk.app.baqend.com; media-src 'self'; font-src 'self' data:; connect-src 'self' https:\/\/b.speedkit.com https:\/\/baqend-website-sk.app.baqend.com; frame-src https:\/\/www.youtube-nocookie.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'nonce-wb4-1bFvyx1Lyja3Sr4I9w==' 'self' 'unsafe-inline' 'unsafe-eval' *.geotab.com *.google.com *.google.ca *.googleapis.com *.recaptcha.net *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.incontact.com *.salesforce.com  *.buzzsprout.com *.visualwebsiteoptimizer.com *.vidyard.com *.twitter.com *.ads-twitter.com https:\/\/www.youtube.com https:\/\/script.crazyegg.com https:\/\/googleads.g.doubleclick.net https:\/\/514004470.collect.igodigital.com\/collect.js https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/cmp.osano.com https:\/\/bugcrowd.com https:\/\/*.bugcrowdusercontent.com *.linkedin.com blob: https:\/\/s.saleswingsapp.com\/ https:\/\/cdn.c212.net\/ https:\/\/c212.net https:\/\/pixel.mathtag.com\/ *.zoominfo.com *.clickagy.com *.6sc.co https:\/\/client-registry.mutinycdn.com\/ https:\/\/js.zi-scripts.com https:\/\/bat.bing.com *.clarity.ms https:\/\/js.adsrvr.org *.niceincontact.com *.marketo.net https:\/\/*.qualified.com https:\/\/www.redditstatic.com https:\/\/cdnjs.cloudflare.com https:\/\/bzrcdn.openai.com\/sdk\/; font-src 'self' 'unsafe-eval' 'unsafe-inline' *.geotab.com *.google.com *.google.ca *.googleapis.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.typekit.net *.zoominfo.com data: *.niceincontact.com https:\/\/js.qualified.com; style-src 'self' 'unsafe-inline' *.geotab.com *.google.com *.google.ca *.googleapis.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.typekit.net *.niceincontact.com *.stackadapt.com https:\/\/*.qualified.com; img-src * data: blob:; connect-src *; object-src *; frame-src 'self' *.geotab.com *.google.com *.google.ca *.googleapis.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.youtube.com *.facebook.com *.salesforce.com https:\/\/home-c19.incontact.com *.doubleclick.net https:\/\/www.buzzsprout.com https:\/\/attendee.gotowebinar.com https:\/\/register.gotowebinar.com *.vidyard.com https:\/\/www.youtube.com https:\/\/cmp.osano.com https:\/\/www.recaptcha.net https:\/\/bugcrowd.com *.linkedin.com https:\/\/calendly.com\/ https:\/\/www.youtube-nocookie.com https:\/\/pixel.mathtag.com\/ https:\/\/insight.adsrvr.org\/ *.niceincontact.com *.arcade.software https:\/\/*.qualified.com https:\/\/my.datasubject.com https:\/\/www.welldonecode.com; media-src 'self' *.googleapis.com webtest2.geotab.com webtest3.geotab.com *.niceincontact.com mediastream: https:\/\/*.qualified.com; frame-ancestors 'self' *.geotab.com https:\/\/geotab.my.salesforce.com; ; report-uri \/api\/csp-report; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" frame-ancestors 'self' https:\/\/*.gong.io https:\/\/gong-next-sanity-studio.vercel.app https:\/\/*.vercel.app https:\/\/www.sanity.io https:\/\/optimize.webflow.com https:\/\/usepastel.com https:\/\/gong.storylane.io; report-uri https:\/\/o4509470677663744.ingest.us.sentry.io\/api\/4511231668256768\/security\/?sentry_key=56173b9b39273a99aba304731a83bb1b","count":1},{"content-security-policy-report-only":" script-src 'nonce-xxmVUfUSTL8qDIj-zVUiPw' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl; base-uri 'none'","count":1},{"content-security-policy-report-only":" script-src 'none'; connect-src 'none'; report-uri \/vc-ap-6a379c\/.well-known\/vercel\/csp-report?t=eyJlIjoxNzg4NTcxMDE1LCJkIjoiZHBsX0U2cXVWWTJuSmg0RWRRckxjUDM0dllrdmVLVnoiLCJ1IjoiXC92Yy1hcC02YTM3OWNcLy53ZWxsLWtub3duXC92ZXJjZWxcL2NzcC1yZXBvcnQiLCJoIjoidmVyY2VsLmNvbSJ9.0xjOyZ3NVK54eK4HSGJgDmfl4strOj9hZSBahvn-5so; report-to vercel-page-integrity-csp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'report-sample' https:\/\/*.zoom.us https:\/\/zoom.us https:\/\/gtm.menti.com https:\/\/gtm.mentimeter.com https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com 'nonce-NDRkYzQ4YzItMDQ5MC00Y2FiLThiYjYtNzhkY2Q5ZWUyNGI0' 'strict-dynamic'; style-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/fonts.googleapis.com; img-src 'self' blob: data: https:; connect-src 'self' https:\/\/www.menti.com https:\/\/o866780.ingest.sentry.io https:\/\/static.mentimeter.com https:\/\/*.zoom.us https:\/\/zoom.us wss:\/\/zoom.us https:\/\/resolver.confidence.dev https:\/\/gtm.menti.com https:\/\/gtm.mentimeter.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/internet-up.ably-realtime.com wss:\/\/ws-up.ably-realtime.com https:\/\/browser-intake-datadoghq.com https:\/\/*.menti.com wss:\/\/*.menti.com https:\/\/*.mentimeter.com wss:\/\/*.mentimeter.com; font-src 'self' data: https:\/\/static.mentimeter.com https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors *; frame-src https:\/\/www.mentimeter.com https:\/\/www.menti.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/miro.com https:\/\/gtm.menti.com; report-uri https:\/\/o866780.ingest.sentry.io\/api\/4507373948043265\/security\/?sentry_key=46be98bc087df5ba9f3586896554ffcb&sentry_environment=prod;","count":1},{"content-security-policy-report-only":" script-src 'nonce-NcYNc96clMxDVZY1WFOBBg==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https:\/\/events.mercadolibre.com\/csp\/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=16c5e817-5720-424f-8aa9-f6d0e733ee8b; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https:\/\/http2.mlstatic.com\/ https:\/\/mlstaticquic-a.akamaihd.net\/; frame-ancestors 'self' https:\/\/*.mercadolibre.cl:* https:\/\/*.mercadolibre.com:* https:\/\/*.mercadolibre.com.ve:* https:\/\/*.mercadolibre.com.ar:* https:\/\/*.mercadolivre.com.br:* https:\/\/*.mercadolibre.com.co:* https:\/\/*.mercadolibre.com.ec:* https:\/\/*.mercadolibre.com.mx:* https:\/\/*.mercadolibre.com.pe:* https:\/\/*.mercadolibre.com.uy:* https:\/\/*.mercadopago.cl:* https:\/\/*.mercadopago.com.ar:* https:\/\/*.mercadopago.com.br:* https:\/\/*.mercadopago.com.co:* https:\/\/*.mercadopago.com.mx:* https:\/\/*.mercadopago.com.pe:* https:\/\/*.mercadopago.com.uy:* https:\/\/*.mercadopago.com.ve:* https:\/\/*.mercadopago.com:* https:\/\/*.adminml.com:* https:\/\/*.mercadolibre.co.cr:* https:\/\/*.mercadolibre.com.pa:* https:\/\/*.mercadolibre.com.do:* https:\/\/*.mercadolibre.com.bo:* https:\/\/*.mercadolibre.com.py:* https:\/\/*.mercadolibre.com.gt:* https:\/\/*.mercadolibre.com.hn:* https:\/\/*.mercadolibre.com.ni:* https:\/\/*.mercadolibre.com.sv:* https:\/\/*.mercadopago.com.ec:* https:\/\/*.portalinmobiliario.com:* https:\/\/*.mercadolivre.com:*","count":1},{"content-security-policy-report-only":" default-src https: data: blob: wss: 'unsafe-inline' 'unsafe-eval'; frame-src 'self' https:\/\/pp.ephapay.net\/ https:\/\/pp.eshapay.net\/ https:\/\/scripts.agilone.com\/ https:\/\/widget.trustpilot.com\/ https:\/\/edigitalsurvey.com\/ https:\/\/static.addtoany.com\/ https:\/\/c.paypal.com\/ https:\/\/www.paypal.com https:\/\/www.paypalobjects.com\/ https:\/\/www.sandbox.paypal.com\/ https:\/\/www.zenaps.com\/ https:\/\/www.youtube.com\/ https:\/\/*.doubleclick.net\/ https:\/\/gum.criteo.com\/ https:\/\/www.facebook.com\/ https:\/\/*.hotjar.com\/ https:\/\/s.salecycle.com https:\/\/www.googletagmanager.com\/ https:\/\/www.google.com https:\/\/*.customizer.cadesignform.dk\/ https:\/\/static.criteo.net\/ https:\/\/www.youtube-nocookie.com\/ https:\/\/d16fk4ms6rqz1v.cloudfront.net\/ https:\/\/*.arcot.com\/ https:\/\/www.securesuite.co.uk\/ https:\/\/www.clicksafe.lloydstsb.com\/ https:\/\/secure.barclaycard.co.uk https:\/\/*.photorank.me\/ https:\/\/pay.google.com\/ https:\/\/js.playground.klarna.com\/ https:\/\/js.klarna.com\/ https:\/\/placement-api-sandbox.clearpay.co.uk\/ https:\/\/placement-api.clearpay.co.uk\/ https:\/\/portal.sandbox.clearpay.co.uk\/ https:\/\/portal.clearpay.co.uk\/; report-uri https:\/\/csp-violations.external.wickes.co.uk","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl\/admob_google_com","count":1},{"content-security-policy-report-only":" default-src 'self' *.iheartmedia.com data: blob: https:; img-src 'self' data: https:; font-src https: data:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; frame-src 'self' data: https:; child-src https:; media-src https:; object-src 'none'; connect-src 'self' wss: https:; report-uri https:\/\/csp.qw.iheartmedia.com\/api\/report","count":1},{"content-security-policy-report-only":" default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/connect.facebook.net https:\/\/*.alastyr.com; style-src 'self' 'unsafe-inline' https: https:\/\/fonts.googleapis.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/*.alastyr.com; img-src 'self' data: blob: https: https:\/\/*.alastyr.com; connect-src 'self' https: wss: https:\/\/www.google-analytics.com; frame-src 'self' https: https:\/\/www.google.com https:\/\/www.youtube.com https:\/\/www.facebook.com; object-src 'none'; base-uri 'self'; form-action 'self' https:","count":1},{"content-security-policy-report-only":" frame-ancestors 'none'; report-uri https:\/\/csp.some.porn\/csp-report; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors *.unionesarda.it s.clickiocdn.com *.ampproject.org *.google.com; report-uri \/csp-report","count":1},{"content-security-policy-report-only":" default-src * 'unsafe-inline' data: blob:; report-uri \"https:\/\/montrealgazette.com\/wp-json\/pmd\/v1\/csp-report\"; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' https:\/\/*.analytics.google.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/www.cloudflare.com\/; font-src 'self' data: https:\/\/cdnjs.cloudflare.com\/ https:\/\/fonts.gstatic.com; frame-src 'self' https:\/\/*.icc-cpi.int\/ https:\/\/www.youtube.com\/ https:\/\/www.youtube-nocookie.com https:\/\/widgets.ebscohost.com\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/signup.es-mail.co.uk\/ https:\/\/player.gvideo.co\/; img-src 'self' https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.ytimg.com; media-src 'self' blob: data:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/cdn.jsdelivr.net\/ https:\/\/cdnjs.cloudflare.com\/ https:\/\/static.cloudflareinsights.com\/ https:\/\/unpkg.com\/ https:\/\/www.gstatic.com\/ https:\/\/cdn.jsdelivr.net https:\/\/code.jquery.com https:\/\/unpkg.com https:\/\/www.google.com platform.twitter.com; style-src 'self' 'unsafe-inline' https:\/\/cdnjs.cloudflare.com\/ https:\/\/unpkg.com\/ https:\/\/cdnjs.cloudflare.com; frame-ancestors 'self'; report-uri https:\/\/www.icc-cpi.int\/report-uri\/reportOnly","count":1},{"content-security-policy-report-only":" default-src data: blob: 'unsafe-eval' 'unsafe-inline' px-client.net px-cdn.net pxchk.net perimeterx.net px-cloud.net https: 'self'; script-src 7299633.collect.igodigital.com ajax.cloudflare.com *.bazaarvoice.com bs.serving-sys.com cdn.evgnet.com\/beacon\/liderdomicilio\/pruebas\/scripts\/evergage.min.js connect.facebook.net deploy.mopinion.com googleads.g.doubleclick.net *.lider.cl media.richrelevance.com recs.richrelevance.com s3.amazonaws.com\/mapcity-assets\/leaflet-0.7.3\/leaflet.js secure-ds.serving-sys.com services.mapcity.com static.cloudflareinsights.com www.google-analytics.com www.google.com www.googletagmanager.com *.googleapis.com static.hotjar.com script.hotjar.com https:\/\/cdn.jsdelivr.net\/npm\/slick-carousel@1.8.1\/slick\/slick.min.js *.googleadservices.com *.gstatic.com cdn-widgets.chattigo.com media.flixfacts.com media.flixcar.com 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'none'; report-uri https:\/\/csp.walmart.com\/c\/r\/liders","count":1},{"content-security-policy-report-only":" default-src 'self' https:; object-src 'none'; img-src 'self' https: blob: data:; font-src 'self' https: data:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https: wss:; report-uri https:\/\/buildkite.uriports.com\/reports\/report","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' https: blob:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri \/csp-report","count":1},{"content-security-policy-report-only":" default-src 'nonce-d2b572648419de038b879a745b2b61ac' 'self' *.hugoboss.eu *.lpsnmedia.net blob:; object-src 'none'; base-uri 'self' *.hugoboss.com *.hugoboss.us pay.google.com; frame-ancestors 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.hugoboss.com *.hugoboss.eu *.fitanalytics.com *.googletagmanager.com *.google.com *.gstatic.com *.googleapis.com *.googleadservices.com *.google-analytics.com *.youtube.com *.cloud.google *.doubleclick.net *.facebook.net *.bing.com *.tiktok.com *.snapchat.com *.clarity.ms *.criteo.com *.cloudfront.net *.dynamicyield.com *.qualtrics.com *.taggstar.com *.contentsquare.net *.lpsnmedia.net *.bounceexchange.com *.flashtalking.com *.cquotient.com *.attraqt.io *.usercentrics.eu *.liveperson.net *.paypal.com *.cdn.optimizely.com *.optimizely.com *.tealiumiq.com *.tiqcdn.com *.cookielaw.org *.forter.com *.cdn4.forter.com *.appsflyer.com *.usablenet.com *.rakuten.com *.liadm.com *.godatafeed.com *.adyen.com *.mpulse.net *.global-e.com *.adsrvr.org *.mastercard.com *.visa.com *.cloudflareinsights.com *.confirmit.eu *.dwin1.com *.roeyecdn.com *.roeye.com *.jsdelivr.net *.fluidconfigure.com *.bambuser.com *.upsellit.com *.wknd.ai *.klarna.app *.payments-amazon.com *.smarterhq.io *.bglobale.com *.pstatic.net *.tradedoubler.com *.naver.net *.yahoo.co.jp sc-static.net esm.sh pay.google.com maps.googleapis.com tags.tiqcdn.com bat.bing.com googleads.g.doubleclick.net lo.v.liveperson.net app.usercentrics.eu cdn.horizons.confirmit.eu horizons.confirmit.eu js.adsrvr.org s.yimg.jp tag.rmp.rakuten.com tr2.smarterhq.io; connect-src 'self' *.hugoboss.com *.hugoboss.eu *.google.com *.google.de *.google.pt *.google.bg *.google.es *.google.ch *.google.rs *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.googletagmanager.com *.googleapis.com *.doubleclick.net *.paypal.com *.adyen.com *.liveperson.net *.msg.liveperson.net *.tealiumiq.com *.usercentrics.eu *.dynamicyield.com *.attraqt.io *.clarity.ms *.forter.com *.cloudfront.net *.contentsquare.net *.facebook.com *.fitanalytics.com *.optimizely.com *.qualtrics.com *.snapchat.com *.lpsnmedia.net *.adsrvr.org *.scene7.com *.addressy.com *.dy-api.eu *.dy-api.com *.tiktok.com *.tiktokw.us *.bing.com *.bing.net *.criteo.com *.criteo.net *.cookielaw.org *.onetrust.com *.mpulse.net *.siteperformancetest.net *.akamaihd.net *.cdnwidget.com *.cdnbasket.net *.global-e.com *.bglobale.com *.fluidconfigure.com *.verbolia.com *.backend.verbolia.com *.liadm.com *.techlab-cdn.com *.akstat.io *.payments-amazon.com *.naver.com *.samsung.com *.paytm.in *.horizons.confirmit.eu google.com play.google.com maps.googleapis.com www.paypal.com api.usercentrics.eu graphql.usercentrics.eu z.clarity.ms widget.fitanalytics.com geolocation.onetrust.com pd.cdnwidget.com p11.techlab-cdn.com metric.hugoboss.com ssta.hugoboss.com www.cloudflare.com payments-eu.amazon.com apay-us.amazon.com banner.appsflyersdk.com cdn.cookielaw.org view.cdnbasket.net svc-prod-us.liveshopping.bambuser.com connect.facebook.net tags.tiqcdn.com bat.bing.com analytics.tiktok.com hugoboss-privacy.my.onetrust.com wss:\/\/euwe1.msg.liveperson.net wss:\/\/lo.msg.liveperson.net wss:\/\/va.msg.liveperson.net wss:\/\/cdn0.forter.com; frame-src 'self' *.hugoboss.com *.paypal.com *.google.com *.adyen.com *.mastercard.com *.visa.com *.google-analytics.com *.optimizely.com *.adsrvr.org *.snapchat.com *.criteo.com *.criteo.net *.googletagmanager.com *.lpsnmedia.net *.liveperson.net *.flashtalking.com *.global-e.com *.confirmit.eu *.bounceexchange.com *.bouncex.net *.doubleclick.net *.facebook.com *.qualtrics.com *.awin1.com *.bglobale.com *.securesuite.co.uk *.imgstatics.com *.revolut.com *.americanexpress.com *.arcot.com *.bambuser.com *.parcellab.com *.tradedoubler.com pay.google.com uhugs.omni.manh.com wbiprod.storedvalue.com; form-action 'self' *.hugoboss.com *.global-e.com *.qualtrics.com *.facebook.com *.visa.com *.amazon.com *.amazon.fr *.amazon.co.uk *.amazon.it; upgrade-insecure-requests;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/cdn.yektanet.com https:\/\/*.yektanet.com https:\/\/*.mediaad.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; media-src 'self' https:; connect-src 'self' https:; frame-src https:; base-uri 'self'; form-action 'self'; object-src 'none'","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-lJDovmUdltO6nMefMaEWTw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" img-src 'self' https:\/\/gmgn.ai https:\/\/*.gmgn.ai https:\/\/pbs.twimg.com https:\/\/static.four.meme https:\/\/pump.mypinata.cloud https:\/\/public.bnbstatic.com https:\/\/www.googletagmanager.com https:\/\/bin.bnbstatic.com https:\/\/abs.twimg.com https:\/\/dd.dexscreener.com https:\/\/cdn.dexscreener.com https:\/\/*.cdninstagram.com https:\/\/*.fbcdn.net https:\/\/ipfs.io https:\/\/cf-ipfs.com https:\/\/gateway.pinata.cloud https:\/\/*.ipfs.nftstorage.link https:\/\/*.quicknode-ipfs.com https:\/\/clips.pump.fun https:\/\/thumbnails.pump.fun https:\/\/static.moonpay.com https:\/\/www.binance.com https:\/\/static-assets-1.truthsocial.com https:\/\/www.dextools.io https:\/\/gateway.irys.xyz https:\/\/static.geetest.com https:\/\/static.alchemyapi.io data: blob:; report-uri https:\/\/gmgn.ai\/csp-report\/csp-report?m=gAAAAAAAAAAAAelyWuw6P6sR-9AOqIT1CFs8qY81qvM2b8x9uZSDborBZUXkDj_aLjcP6FEcm78C7G_ebfn5CzzLWJuU6-7Z6PcTuoIMfRKezgPgygJBFEKt9JQg-Jd-C6MRqkbDKbIvtyLbhaX5SCZGFi2RHFIm8g==; report-to gmgn-csp-img","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/d3q9kdqrtloda.cloudfront.net\/ https:\/\/i.ytimg.com\/ https:\/\/www.youtube-nocookie.com\/ https:\/\/noembed.com\/ https:\/\/cdn.plyr.io\/ https:\/\/cdn-ukwest.onetrust.com\/ https:\/\/geolocation.onetrust.com\/ https:\/\/www.google.com\/ https:\/\/googleads.g.doubleclick.net\/ https:\/\/www.google-analytics.com\/ https:\/\/stats.g.doubleclick.net\/ https:\/\/px.ads.linkedin.com\/ https:\/\/api.hubapi.com\/ https:\/\/cta-service-cms2.hubspot.com\/ https:\/\/c1001.report.gbss.io\/ https:\/\/analytics.tiktok.com\/ https:\/\/forms.hubspot.com\/ https:\/\/region1.analytics.google.com\/ https:\/\/*.analytics.google.com\/ https:\/\/region1.google-analytics.com\/ https:\/\/*.google-analytics.com\/ https:\/\/pagead2.googlesyndication.com https:\/\/privacyportal-uk.onetrust.com\/ https:\/\/*.onetrust.com\/ https:\/\/cambridgeenglish.formstack.com\/forms\/ieltstrf https:\/\/cambridgeenglish.formstack.com\/forms\/ielts_recognising_organisation https:\/\/cambridgeenglish.formstack.com\/; style-src 'self' 'unsafe-inline' https:\/\/static.formstack.com\/forms\/css\/ https:\/\/static.formstack.com\/common\/css\/ https:\/\/cdn.craft.cloud; script-src 'self' https:\/\/www.youtube.com\/ https:\/\/cambridgeenglish.formstack.com\/forms\/ 'sha256-5woGd\/mZkUg7jRI9rPBZPHKC+LdyheFkTyKDMVNRNAs=' https:\/\/static.hotjar.com\/c\/ https:\/\/static.formstack.com\/forms\/js\/ 'sha256-BEia3zQX2ZCFqcEfWBg9chT7nMc26YOr506FmhGqIfE=' 'sha256-z+rMOYNYmUbRI0OKIZH9HZneWmS3dJkEIDLisI+5LwI=' 'sha256-4QifgdTNZlur9Y\/OOGOV3SggRLnQQR4peyehG9Y5buo=' https:\/\/www.google.com\/ https:\/\/www.gstatic.com\/ https:\/\/cdn-ukwest.onetrust.com\/ https:\/\/www.googletagmanager.com\/ 'sha256-rbMVlXlWb1FxlmTxqO6hQI+5VPCMoqHMqeyWMrzk9E4=' 'sha256-IgMQOOOedQeMPBl7lSreMVPmJvU62bc6l8HcsGXnbWc=' 'sha256-\/6m2tVE+3ZAyrBnUps+rDpHpCwMi0VgW9mdVym2y2cE=' 'sha256-nanbr0ZSJrOvEvr6c5gV8UarYfjNXF+TAtmA9GjvyJ0=' 'sha256-ATpn7Ex50rRSNqmoA432bWfqvlsGB6CD\/7fE2WtoU5A=' 'sha256-iXVjrS+TzaVqRdjZV8gecO6OkuAcobYu2OjiJVT8LYU=' 'sha256-+WTu64J4HVaiLZC0nSjR9XxbZZg1xX7cdNM\/WA\/pDcQ=' 'sha256-tOY0R\/wVWZCxGQPtXP0ptphYuCKkCpgNHQy\/ZkwhCCY=' 'sha256-xc61KVzUrz5aO4ACQyRqjH2fPpfIb\/xoMmSSEiU+PWU=' 'sha256-wyNlDF2abbsDx6TZogcKckBQwZ4N8qFR3SAepboU7Sk=' 'sha256-tOY0R\/wVWZCxGQPtXP0ptphYuCKkCpgNHQy\/ZkwhCCY=' blob: 'unsafe-eval' https:\/\/www.google-analytics.com\/ https:\/\/snap.licdn.com\/ https:\/\/googleads.g.doubleclick.net\/ https:\/\/static.ads-twitter.com https:\/\/www.googleadservices.com\/ https:\/\/connect.facebook.net\/ https:\/\/a.quora.com\/ https:\/\/js.hs-scripts.com\/ https:\/\/analytics.tiktok.com\/ https:\/\/cdn.gbqofs.com\/ https:\/\/cl.qualaroo.com\/ https:\/\/assets.ubembed.com\/ https:\/\/js.hs-analytics.net\/ https:\/\/js.hsadspixel.net\/ https:\/\/js.hsleadflows.net\/ https:\/\/js.hs-banner.com\/ https:\/\/js.hubspot.com\/ https:\/\/cdn.gbqofs.com\/ https:\/\/analytics.tiktok.com\/ https:\/\/cdn.gbqofs.com\/ https:\/\/snap.licdn.com\/ https:\/\/14d7fb0767d540569b202283222297c0.js.ubembed.com\/ 'sha256-1e5RR2OpHhuX2h0Bat19DsNTmqbo4M3T1pqfeTXCHaA='; object-src 'none'; font-src 'self' https:\/\/static.formstack.com\/forms\/fonts\/; img-src 'self' data: https:\/\/d3q9kdqrtloda.cloudfront.net\/ https:\/\/s3.eu-west-2.amazonaws.com\/ielts-web-static\/ www.googletagmanager.com https:\/\/i.ytimg.com\/ https:\/\/cdn-ukwest.onetrust.com\/ https:\/\/ad.doubleclick.net\/ https:\/\/px.ads.linkedin.com\/ https:\/\/googleads.g.doubleclick.net\/ https:\/\/www.google.com\/ https:\/\/t.co https:\/\/analytics.twitter.com\/ https:\/\/www.facebook.com\/ https:\/\/q.quora.com\/ https:\/\/adservice.google.com\/ https:\/\/perf-na1.hsforms.com\/ https:\/\/*.google.ad\/ https:\/\/*.google.ae\/ https:\/\/*.google.com.af\/ https:\/\/*.google.com.ag\/ https:\/\/*.google.al\/ https:\/\/*.google.am\/ https:\/\/*.google.co.ao\/ https:\/\/*.google.com.ar\/ https:\/\/*.google.as\/ https:\/\/*.google.at\/ https:\/\/*.google.com.au\/ https:\/\/*.google.az\/ https:\/\/*.google.ba\/ https:\/\/*.google.com.bd\/ https:\/\/*.google.be\/ https:\/\/*.google.bf\/ https:\/\/*.google.bg\/ https:\/\/*.google.com.bh\/ https:\/\/*.google.bi\/ https:\/\/*.google.bj\/ https:\/\/*.google.com.bn\/ https:\/\/*.google.com.bo\/ https:\/\/*.google.com.br\/ https:\/\/*.google.bs\/ https:\/\/*.google.bt\/ https:\/\/*.google.co.bw\/ https:\/\/*.google.by\/ https:\/\/*.google.com.bz\/ https:\/\/*.google.ca\/ https:\/\/*.google.cd\/ https:\/\/*.google.cf\/ https:\/\/*.google.cg\/ https:\/\/*.google.ch\/ https:\/\/*.google.ci\/ https:\/\/*.google.co.ck\/ https:\/\/*.google.cl\/ https:\/\/*.google.cm\/ https:\/\/*.google.cn\/ https:\/\/*.google.com.co\/ https:\/\/*.google.co.cr\/ https:\/\/*.google.com.cu\/ https:\/\/*.google.cv\/ https:\/\/*.google.com.cy\/ https:\/\/*.google.cz\/ https:\/\/*.google.de\/ https:\/\/*.google.dj\/ https:\/\/*.google.dk\/ https:\/\/*.google.dm\/ https:\/\/*.google.com.do\/ https:\/\/*.google.dz\/ https:\/\/*.google.com.ec\/ https:\/\/*.google.ee\/ https:\/\/*.google.com.eg\/ https:\/\/*.google.es\/ https:\/\/*.google.com.et\/ https:\/\/*.google.fi\/ https:\/\/*.google.com.fj\/ https:\/\/*.google.fm\/ https:\/\/*.google.fr\/ https:\/\/*.google.ga\/ https:\/\/*.google.ge\/ https:\/\/*.google.gg\/ https:\/\/*.google.com.gh\/ https:\/\/*.google.com.gi\/ https:\/\/*.google.gl\/ https:\/\/*.google.gm\/ https:\/\/*.google.gr\/ https:\/\/*.google.com.gt\/ https:\/\/*.google.gy\/ https:\/\/*.google.com.hk\/ https:\/\/*.google.hn\/ https:\/\/*.google.hr\/ https:\/\/*.google.ht\/ https:\/\/*.google.hu\/ https:\/\/*.google.co.id\/ https:\/\/*.google.ie\/ https:\/\/*.google.co.il\/ https:\/\/*.google.im\/ https:\/\/*.google.co.in\/ https:\/\/*.google.iq\/ https:\/\/*.google.is\/ https:\/\/*.google.it\/ https:\/\/*.google.je\/ https:\/\/*.google.com.jm\/ https:\/\/*.google.jo\/ https:\/\/*.google.co.jp\/ https:\/\/*.google.co.ke\/ https:\/\/*.google.com.kh\/ https:\/\/*.google.ki\/ https:\/\/*.google.kg\/ https:\/\/*.google.co.kr\/ https:\/\/*.google.com.kw\/ https:\/\/*.google.kz\/ https:\/\/*.google.la\/ https:\/\/*.google.com.lb\/ https:\/\/*.google.li\/ https:\/\/*.google.lk\/ https:\/\/*.google.co.ls\/ https:\/\/*.google.lt\/ https:\/\/*.google.lu\/ https:\/\/*.google.lv\/ https:\/\/*.google.com.ly\/ https:\/\/*.google.co.ma\/ https:\/\/*.google.md\/ https:\/\/*.google.me\/ https:\/\/*.google.mg\/ https:\/\/*.google.mk\/ https:\/\/*.google.ml\/ https:\/\/*.google.com.mm\/ https:\/\/*.google.mn\/ https:\/\/*.google.com.mt\/ https:\/\/*.google.mu\/ https:\/\/*.google.mv\/ https:\/\/*.google.mw\/ https:\/\/*.google.com.mx\/ https:\/\/*.google.com.my\/ https:\/\/*.google.co.mz\/ https:\/\/*.google.com.na\/ https:\/\/*.google.com.ng\/ https:\/\/*.google.com.ni\/ https:\/\/*.google.ne\/ https:\/\/*.google.nl\/ https:\/\/*.google.no\/ https:\/\/*.google.com.np\/ https:\/\/*.google.nr\/ https:\/\/*.google.nu\/ https:\/\/*.google.co.nz\/ https:\/\/*.google.com.om\/ https:\/\/*.google.com.pa\/ https:\/\/*.google.com.pe\/ https:\/\/*.google.com.pg\/ https:\/\/*.google.com.ph\/ https:\/\/*.google.com.pk\/ https:\/\/*.google.pl\/ https:\/\/*.google.pn\/ https:\/\/*.google.com.pr\/ https:\/\/*.google.ps\/ https:\/\/*.google.pt\/ https:\/\/*.google.com.py\/ https:\/\/*.google.com.qa\/ https:\/\/*.google.ro\/ https:\/\/*.google.ru\/ https:\/\/*.google.rw\/ https:\/\/*.google.com.sa\/ https:\/\/*.google.com.sb\/ https:\/\/*.google.sc\/ https:\/\/*.google.se\/ https:\/\/*.google.com.sg\/ https:\/\/*.google.sh\/ https:\/\/*.google.si\/ https:\/\/*.google.sk\/ https:\/\/*.google.com.sl\/ https:\/\/*.google.sn\/ https:\/\/*.google.so\/ https:\/\/*.google.sm\/ https:\/\/*.google.sr\/ https:\/\/*.google.st\/ https:\/\/*.google.com.sv\/ https:\/\/*.google.td\/ https:\/\/*.google.tg\/ https:\/\/*.google.co.th\/ https:\/\/*.google.com.tj\/ https:\/\/*.google.tl\/ https:\/\/*.google.tm\/ https:\/\/*.google.tn\/ https:\/\/*.google.to\/ https:\/\/*.google.com.tr\/ https:\/\/*.google.tt\/ https:\/\/*.google.com.tw\/ https:\/\/*.google.co.tz\/ https:\/\/*.google.com.ua\/ https:\/\/*.google.co.ug\/ https:\/\/*.google.co.uk\/ https:\/\/*.google.com.uy\/ https:\/\/*.google.co.uz\/ https:\/\/*.google.com.vc\/ https:\/\/*.google.co.ve\/ https:\/\/*.google.co.vi\/ https:\/\/*.google.com.vn\/ https:\/\/*.google.vu\/ https:\/\/*.google.ws\/ https:\/\/*.google.rs\/ https:\/\/*.google.co.za\/ https:\/\/*.google.co.zm\/ https:\/\/*.google.co.zw\/ https:\/\/*.google.cat\/ https:\/\/www.google-analytics.com\/ https:\/\/*.linkedin.com\/ https:\/\/*.amazonaws.com\/ielts-web-static\/ https:\/\/adservice.google.co.uk\/ https:\/\/cdn.craft.cloud; frame-src 'self' https:\/\/www.google.com\/ https:\/\/www.youtube-nocookie.com\/ https:\/\/www.youtube.com\/ https:\/\/dntcl.qualaroo.com\/ https:\/\/td.doubleclick.net\/ https:\/\/cambridgeenglish.formstack.com\/ https:\/\/*.formstack.com https:\/\/www.googletagmanager.com\/;","count":1},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=OAdTzhies876sLgsMfUJolEM.aluGRBmTN1pQjyMKyg-1788497519.5071511-1.0.1.1-0UuZzZbMyuMp1pF2tSL4aDoZ3lxSgjRSFP1fx4MpA0pOrooxdKYYOHYZ1um3mqmG3XdPaoJzSp89iAaD3PP8S_Xm49Uf8EL4dkoVwCAFBHlYacKB39LyayBAOjVxmShBhc6rJvLJmiOWCEjUmBJGdadjP9LDpKPaDKayW02317I; report-to cf-csp-endpoint","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-C7hABpa0neyDT7hsi1NTLw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/cdn.checkout.com instantcredit.net test.instantcredit.net *.klarnacdn.net *.oct8ne.com *.fontawesome.com https:\/\/fonts.bunny.net *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.doofinder.com *.afterpay.com oct8necdneu.azureedge.net *.cloudfront.net css.zohostatic.com static.zohocdn.com *.primor.eu *.frizbit.com *.bing.com *.awin.com *.tiktok.com *.outbrain.com *.reskyt.com cdn.reskyt.com *.zenaps.com *.the.sciencebehindecommerce.com the.sciencebehindecommerce.com ams.creativecdn.com tags.creativecdn.com fledge-eu.creativecdn.com *.dwin1.com *.awin1.com *.mrf.io auxwebpr1.primor.eu *.reetmo.com *.clic2buy.com *.clic2drive.com *.click2buy.com *.reetmo.media *.adnxs.com *.pinterest.com *.taboola.com s.pinimg.com *.jeanpaulgaultier.com *.facebook.com *.facebook.net criteo-sync.teads.tv sync-criteo.ads.yieldmo.com criteo-partners.tremorhub.com cdn.preciso.net ban.preciso.net cdn.2trk.info ban.2trk.info data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com www.paycomet.com api.paycomet.com *.twitter.com *.paycomet.com *.afterpay.com *.redsys.es *.redsys.es:25443 *.primor.eu *.bing.com *.awin.com *.tiktok.com *.outbrain.com *.reskyt.com cdn.reskyt.com *.zenaps.com *.the.sciencebehindecommerce.com the.sciencebehindecommerce.com static.zohocdn.com ams.creativecdn.com tags.creativecdn.com fledge-eu.creativecdn.com *.dwin1.com *.awin1.com *.mrf.io auxwebpr1.primor.eu *.reetmo.com *.clic2buy.com *.clic2drive.com *.click2buy.com *.reetmo.media *.adnxs.com *.pinterest.com *.taboola.com s.pinimg.com *.jeanpaulgaultier.com *.facebook.com *.facebook.net criteo-sync.teads.tv sync-criteo.ads.yieldmo.com criteo-partners.tremorhub.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com campaign.odicci.com 'self' 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/js.checkout.com *.klarna.com www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net *.redsys.es *.klarnaservices.com *.oct8ne.com *.syndigo.com *.weltpixel.com *.twitter.com *.fontawesome.com *.doofinder.com *.paycomet.com *.afterpay.com *.primor.eu *.crazyegg.com *.frizbit.com *.bing.com *.awin.com *.tiktok.com *.outbrain.com *.reskyt.com cdn.reskyt.com *.zenaps.com *.the.sciencebehindecommerce.com the.sciencebehindecommerce.com *.descuentoestudiante.com *.op.humi-agency.fr nars.jebbit.com static.zohocdn.com ams.creativecdn.com tags.creativecdn.com fledge-eu.creativecdn.com *.dwin1.com *.awin1.com campaign.odicci.com le-male-elixir-primor.jeanpaulgaultier.com *.mrf.io www.descontoestudante.com auxwebpr1.primor.eu *.criteo.com *.criteo.net *.reetmo.com *.clic2buy.com *.clic2drive.com *.click2buy.com d27sapsk5j0xr8.cloudfront.net *.reetmo.media *.adnxs.com *.pinterest.com *.taboola.com s.pinimg.com *.jeanpaulgaultier.com *.facebook.com *.facebook.net criteo-sync.teads.tv sync-criteo.ads.yieldmo.com criteo-partners.tremorhub.com kerastase-quiz.vercel.app narcisorodriguez.jebbit.com *.caast.tv fragrance.hermes.com leseldissey.isseymiyakeparfums.com *.odicci.com *.googletagmanager.com *.doubleclick.net *.mainad.com *.tangoo.it *.tangooserver.com *.2trk.info experiencezadig.zadig-et-voltaire.com la-bomba-eretail.carolinaherrera.com xponemillion.rabanne.com rb-xmas-xp-2025.rabanne-experience.com jpg-gaultier-divine-chatbot-fragrances.com www.carolinaherrera.com gift-finder-noel.jeanpaulgaultier.com lantern.roeye.com *.connectif.cloud *.mainadv.com cdn.preciso.net ban.preciso.net cdn.2trk.info ban.2trk.info gentlemansociety.efghosting.com www.canva.com mockup-berrycrushprimor.my.canva.site 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https:\/\/images.unsplash.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.connectif.cloud instantcredit.net test.instantcredit.net https:\/\/maps.googleapis.com *.oct8ne.com *.syndigo.com *.syndigo.cloud https:\/\/firebasestorage.googleapis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com 'self' *.lightemporium.com *.usercentrics.eu *.dendago.com *.fontawesome.com *.doofinder.com black.bird.eu *.primor.eu *.afterpay.com *.redsys.es oct8necdneu.azureedge.net *.ggpht.com *.openstreetmap.org *.2mdn.net cdn.doofinder.com *.googletagmanager.com *.zoho.eu css.zohostatic.eu *.clarity.ms *.crazyegg.com *.frizbit.com *.bing.com *.awin.com *.tiktok.com *.outbrain.com *.reskyt.com cdn.reskyt.com *.zenaps.com *.the.sciencebehindecommerce.com the.sciencebehindecommerce.com ad.360yield.com ad.yieldlab.net cm.adform.net contextual.media.net criteo-partners.tremorhub.com criteo-sync.teads.tv eb2.3lift.com exchange.mediavine.com id5-sync.com match.sharethrough.com matching.ivitrack.com pixel.rubiconproject.com r.casalemedia.com rtb-csync.smartadserver.com simage2.pubmatic.com sync-criteo.ads.yieldmo.com ups.analytics.yahoo.com visitor.omnitagjs.com x.bidswitch.net beacon.krxd.net s.thebrighttag.com *.etrusted.com static.zohocdn.com ams.creativecdn.com tags.creativecdn.com fledge-eu.creativecdn.com *.dwin1.com *.awin1.com www.google.es *.mrf.io *.criteo.com *.criteo.net retailmedia-static.azureedge.net auxwebpr1.primor.eu *.reetmo.com *.clic2buy.com *.clic2drive.com *.click2buy.com *.reetmo.media *.adnxs.com *.pinterest.com *.taboola.com s.pinimg.com *.jeanpaulgaultier.com *.facebook.com *.facebook.net *.caast.tv *.doubleclick.net *.mainad.com *.tangoo.it *.tangooserver.com *.bing.net *.ban.2trk.info cdn.preciso.net ban.preciso.net cdn.2trk.info ban.2trk.info *.googlesyndication.com *.reddit.com *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https:\/\/*.checkout.com *.klarnacdn.net *.connectif.cloud *.frizbit.com www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net code.jquery.com pay.google.com applepay.cdn-apple.com *.klarna.com *.oct8ne.com https:\/\/cdn.jsdelivr.net\/npm\/@fancyapps\/ui@5.0\/dist\/fancybox\/fancybox.umd.js *.syndigo.com *.avada.io *.shopify.com *.geoapify.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.doofinder.com *.afterpay.com *.etrusted.com *.cloudfront.net cdn.doofinder.com *.zoho.eu *.zohostatic.eu *.zoho.com *.zohostatic.com *.primor.eu *.googletagmanager.com *.clarity.ms *.crazyegg.com sdk.mrf.io flowcards.mrf.io *.bing.com *.awin.com *.tiktok.com *.outbrain.com *.reskyt.com cdn.reskyt.com *.criteo.net *.criteo.com static.zohocdn.com ams.creativecdn.com tags.creativecdn.com fledge-eu.creativecdn.com *.dwin1.com *.awin1.com *.zenaps.com *.the.sciencebehindecommerce.com the.sciencebehindecommerce.com 'self' api.odicci.com www.hlserve.com cdn.ampproject.org *.mrf.io *.chetools.com auxwebpr1.primor.eu *.reetmo.com *.clic2buy.com *.clic2drive.com *.click2buy.com *.reetmo.media *.adnxs.com *.pinterest.com *.taboola.com s.pinimg.com *.jeanpaulgaultier.com *.facebook.com *.facebook.net criteo-sync.teads.tv sync-criteo.ads.yieldmo.com criteo-partners.tremorhub.com *.caast.tv *.youtube-nocookie.com *.empathy.co *.doubleclick.net *.mainad.com *.tangoo.it *.tangooserver.com *.preciso.net *.2trk.info *.googlesyndication.com tagmanager.google.com cdn.equalweb.com *.appsflyer.com lantern.roeyecdn.com cdn.preciso.net ban.preciso.net cdn.2trk.info ban.2trk.info *.googleadservices.com *.redditstatic.com *.reddit.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/cdn.checkout.com *.frizbit.com instantcredit.net test.instantcredit.net *.klarnacdn.net https:\/\/cdn.jsdelivr.net\/npm\/@fancyapps\/ui@5.0\/dist\/fancybox\/fancybox.css https:\/\/cdnjs.cloudflare.com *.fontawesome.com https:\/\/fonts.bunny.net *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.doofinder.com *.afterpay.com *.primor.eu *.cloudfront.net *.zoho.com *.zohostatic.com *.crazyegg.com *.bing.com *.awin.com *.tiktok.com *.outbrain.com *.reskyt.com cdn.reskyt.com *.zenaps.com *.the.sciencebehindecommerce.com the.sciencebehindecommerce.com *.etrusted.com static.zohocdn.com ams.creativecdn.com tags.creativecdn.com fledge-eu.creativecdn.com *.dwin1.com *.awin1.com *.mrf.io auxwebpr1.primor.eu *.reetmo.com *.clic2buy.com *.clic2drive.com *.click2buy.com *.reetmo.media *.adnxs.com *.pinterest.com *.taboola.com s.pinimg.com *.jeanpaulgaultier.com *.facebook.com *.facebook.net criteo-sync.teads.tv sync-criteo.ads.yieldmo.com criteo-partners.tremorhub.com *.googletagmanager.com *.tagmanager.google.com cdn.preciso.net ban.preciso.net cdn.2trk.info ban.2trk.info 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com blob: *.caast.tv *.mux.com *.youtube.com *.youtube-nocookie.com *.primor.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https:\/\/js.checkout.com *.klarnaevt.com *.connectif.cloud *.frizbit.com instantcredit.net *.instantcredit.net pay.google.com apple-pay-gateway.apple.com *.klarna.com *.klarnacdn.net *.oct8ne.com *.syndigo.com https:\/\/get.geojs.io *.avada.io *.geoapify.com *.cloudflare.com *.twitter.com *.twimg.com *.fontawesome.com *.doofinder.com *.doubleclick.net *.afterpay.com *.googleapis.com wss:\/\/*.doofinder.com *.zoho.eu *.zoho.com *.primor.eu https:\/\/www.google.com\/pay https:\/\/google.com\/pay https:\/\/pay.google.com\/about\/redirect https:\/\/pay.google.com\/gp\/p\/payment_method_manifest.json https:\/\/pay.google.com\/gp\/p\/web_manifest.json *.googletagmanager.com *.clarity.ms *.crazyegg.com events.newsroom.bi flowcards.mrf.io *.bing.com *.awin.com *.tiktok.com *.outbrain.com *.reskyt.com cdn.reskyt.com *.zenaps.com *.the.sciencebehindecommerce.com the.sciencebehindecommerce.com *.wepowerconnections.com static.zohocdn.com ams.creativecdn.com tags.creativecdn.com fledge-eu.creativecdn.com *.dwin1.com *.awin1.com *.mrf.io auxwebpr1.primor.eu *.criteo.net *.criteo.com *.reetmo.com *.clic2buy.com *.clic2drive.com *.click2buy.com *.reetmo.media *.adnxs.com *.pinterest.com *.taboola.com s.pinimg.com *.jeanpaulgaultier.com *.facebook.com *.facebook.net criteo-sync.teads.tv sync-criteo.ads.yieldmo.com criteo-partners.tremorhub.com *.onlive.site *.googlesyndication.com cdn.caast.tv *.caast.tv *.mux.com *.empathy.co *.google.es *.bing.net *.analytics-ipv6.tiktokw.us cdn.preciso.net ban.preciso.net cdn.2trk.info ban.2trk.info *.redditstatic.com *.reddit.com *.run.app 'self' 'unsafe-inline'; child-src *.caast.tv *.primor.eu http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.cloudfront.net bc.marfeel.com *.bing.com *.awin.com *.tiktok.com *.outbrain.com *.reskyt.com cdn.reskyt.com *.zenaps.com *.the.sciencebehindecommerce.com the.sciencebehindecommerce.com static.zohocdn.com *.primor.eu *.dwin1.com *.awin1.com auxwebpr1.primor.eu *.reetmo.com *.clic2buy.com *.clic2drive.com *.click2buy.com *.reetmo.media *.adnxs.com *.pinterest.com *.taboola.com s.pinimg.com *.jeanpaulgaultier.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/cmp.inmobi.com https:\/\/cdn.intergient.com https:\/\/*.helpscout.net https:\/\/*.doubleclick.net https:\/\/cdn.intergi.com http:\/\/cdn.intergient.com https:\/\/btloader.com https:\/\/c.amazon-adsystem.com https:\/\/*.googlesyndication.com https:\/\/mowgoats.com; connect-src 'self' https:\/\/*.analytics.google.com https:\/\/*.google-analytics.com https:\/\/jamie-oliver-2.commercelayer.io https:\/\/*.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/*.sentry.io https:\/\/*.playwire.com https:\/\/*.amazon-adsystem.com https:\/\/api.btloader.com https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/auth.commercelayer.io https:\/\/*.auth0.com https:\/\/csi.gstatic.com https:\/\/*.helpscout.net https:\/\/simple-save.jamieoliver.workers.dev https:\/\/s5g.jamieoliver.workers.dev; img-src 'self' https:\/\/asset.jamieoliver.com https:\/\/www.google.co.uk https:\/\/www.google-analytics.com https:\/\/px.moatads.com https:\/\/ad-delivery.net https:\/\/ad.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/img.youtube.com https:\/\/i.ytimg.com https:\/\/s.gravatar.com https:\/\/*.auth0.com https:\/\/*.googlesyndication.com https:\/\/csi.gstatic.com https:\/\/cdn.sanity.io https:\/\/*.helpscout.net https:\/\/*.wp.com data:; media-src 'self' data:; frame-src 'self' https:\/\/td.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/cdn.intergient.com https:\/\/*.helpscout.net https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com; worker-src 'self' blob:; object-src 'none'; style-src 'self' 'unsafe-inline' https:\/\/config.playwire.com; frame-ancestors 'none';","count":1},{"content-security-policy-report-only":" default-src 'self' https:; base-uri https:\/\/www.elysee.fr; block-all-mixed-content; child-src *; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/www.elysee.fr https:\/\/admin.elysee.fr https:\/\/www.elysee.fr; form-action 'self'; frame-ancestors 'none'; img-src https:\/\/stats.g.doubleclick.net data: https:\/\/www.elysee.fr https:\/\/admin.elysee.fr https:\/\/www.elysee.fr https:\/\/captcha.liveidentity.com https:\/\/*.tile.openstreetmap.org; object-src 'none'; script-src 'unsafe-inline' https:\/\/www.elysee.fr https:\/\/isho.elysee.fr https:\/\/admin.elysee.fr https:\/\/www.elysee.fr https:\/\/captcha.liveidentity.com https:\/\/platform.twitter.com https:\/\/www.instagram.com; style-src https:\/\/fonts.googleapis.com 'unsafe-inline' https:\/\/www.elysee.fr https:\/\/admin.elysee.fr https:\/\/www.elysee.fr","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/code.jquery.com https:\/\/maps.googleapis.com https:\/\/js.fout.jp https:\/\/connect.facebook.net https:\/\/tm.r-ad.ne.jp https:\/\/lib-3pas.admatrix.jp https:\/\/s.yimg.jp https:\/\/googleads.g.doubleclick.net https:\/\/ajax.googleapis.com https:\/\/*.syncsearch.jp https:\/\/*.go-mpulse.net https:\/\/*.nakanohito.jp https:\/\/*.googletagmanager.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/www.google.com https:\/\/parts.stockweather.co.jp https:\/\/dimg.stockweather.co.jp https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/irpocket.com https:\/\/code.highcharts.com https:\/\/www.youtube.com; media-src 'self' https:\/\/*.stream.co.jp https:\/\/*.stream.ne.jp;img-src 'self' https:\/\/*.akstat.io;font-src 'self' https:\/\/fast.fonts.net https:\/\/fonts.googleapis.com;connect-src 'self' https:\/\/*.akstat.io https:\/\/*.go-mpulse.net;frame-ancestors 'self';object-src 'self';report-uri https:\/\/www.monex.co.jp\/csp","count":1},{"content-security-policy-report-only":" connect-src 'self' https: 'unsafe-eval' https:\/\/*.zoom.us wss:\/\/zpns.zoom.us wss:\/\/widget-mediator.zopim.com; default-src 'self' https:; font-src 'self' https: data: data: source.zoom.us; img-src 'self' https: data: blob: *.zoom.us https:\/\/v2assets.zopim.io https:\/\/static.zdassets.com; media-src 'self' https: *.zoom.us; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' blob: http:\/\/zoom.us *.zoom.us; style-src 'self' https: 'unsafe-inline'; worker-src 'self' https: blob:; report-uri \/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.intercom.io https:\/\/*.intercomcdn.com https:\/\/js.intercomcdn.com https:\/\/script.getreditus.com https:\/\/plausible.io; style-src 'self' 'unsafe-inline' https:\/\/assets.calendly.com; img-src 'self' data: blob: https:\/\/landing-cdn.liqvid.io https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.intercomcdn.com https:\/\/*.intercomassets.com https:\/\/i.ytimg.com https:\/\/*.doubleclick.net https:\/\/www.google.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/*.intercomcdn.com; connect-src 'self' https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/api.intercom.io https:\/\/*.intercomcdn.com wss:\/\/*.intercom.io https:\/\/www.google.com https:\/\/*.doubleclick.net https:\/\/analytics.google.com https:\/\/*.getreditus.com https:\/\/plausible.io; frame-src 'self' https:\/\/calendly.com https:\/\/*.calendly.com https:\/\/*.intercom.io https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com; media-src 'self' https:\/\/landing-cdn.liqvid.io; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval';frame-ancestors 'self';report-uri \/csp.php","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-flXW9FvL25aiPIxmK-wH7w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src * 'self' 'unsafe-eval' 'unsafe-inline' data: blob: ws: wss:; report-uri https:\/\/o1151714.ingest.us.sentry.io\/api\/4509640700461056\/security\/?sentry_key=74a33d973a69190986eba8f4bca540d2; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com chat.bncenlinea.com:8000 ajax.googleapis.com 341d26ed8226.bncenlinea.com ajax.aspnetcdn.com cdn.jsdelivr.net cdnjs.cloudflare.com d3i9pllfrk5tet.cloudfront.net d3q4nr72nuserl.cloudfront.net maxcdn.bootstrapcdn.com s3.amazonaws.com www.googletagmanager.com s3.amazonaws.com;style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com d3i9pllfrk5tet.cloudfront.net d3q4nr72nuserl.cloudfront.net;font-src 'self' d3i9pllfrk5tet.cloudfront.net fonts.gstatic.com fonts.googleapis.com; img-src 'self' data: s3.amazonaws.com d3i9pllfrk5tet.cloudfront.net d3q4nr72nuserl.cloudfront.net;connect-src 'self' ajax.aspnetcdn.com cdn.jsdelivr.net cdnjs.cloudflare.com cloudfront.net 341d26ed8226.bncenlinea.com www.google-analytics.com;","count":1},{"content-security-policy-report-only":" base-uri 'none'; font-src 'self' https: data:; form-action https:\/\/green.netcup.com https:\/\/red.netcup.com https:\/\/blue.netcup.com https:\/\/www.netcup.com https:\/\/www.facebook.com; frame-ancestors 'self'; img-src https:\/\/green.netcup.com https:\/\/red.netcup.com https:\/\/blue.netcup.com https:\/\/www.netcup.com https:\/\/ads-twitter.com https:\/\/ads-api.twitter.com https:\/\/analytics.twitter.com https:\/\/mautic.netcup.news https:\/\/px.ads.linkedin.com 'self' blob: data: https: https:\/\/www.captcha.eu; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https:\/\/www.captcha.eu; script-src https:\/\/green.netcup.com https:\/\/red.netcup.com https:\/\/blue.netcup.com https:\/\/www.netcup.com https:\/\/chat.netcup.com https:\/\/chat-dev-ui.netcup.net https:\/\/chat-ui.netcup.com https:\/\/cdn.cookielaw.org https:\/\/cookie-cdn.cookiepro.com https:\/\/*.onetrust.com https:\/\/measure.netcup.com https:\/\/www.googleadservices.com https:\/\/pagead2.googlesyndication.com https:\/\/widget.trustpilot.com https:\/\/cdn.brevo.com\/js\/sdk-loader.js https:\/\/www.captcha.eu 'self' 'wasm-unsafe-eval' 'nonce-1m0Lg9or5inP+g0gah18cIyF'; child-src blob: https:\/\/td.doubleclick.net; connect-src https:\/\/green.netcup.com https:\/\/red.netcup.com https:\/\/blue.netcup.com https:\/\/www.netcup.com https:\/\/chat.netcup.com https:\/\/chat-dev-ui.netcup.net https:\/\/chat-ui.netcup.com https:\/\/ads-twitter.com https:\/\/ads-api.twitter.com https:\/\/analytics.twitter.com https:\/\/cdn.cookielaw.org https:\/\/cookie-cdn.cookiepro.com https:\/\/*.onetrust.com https:\/\/www.google.com https:\/\/in-automate.brevo.com https:\/\/measure.netcup.com https:\/\/google.com https:\/\/px.ads.linkedin.com https:\/\/*.clarity.ms\/ 'self' https:\/\/*.analytics.google.com https:\/\/*.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/www.captcha.eu https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/cdn.cookielaw.org https:\/\/adservice.google.com https:\/\/pagead2.googlesyndication.com https:\/\/www.redditstatic.com https:\/\/pixel-config.reddit.com https:\/\/analytics.tiktok.com https:\/\/ads.tiktok.com https:\/\/bat.bing.com https:\/\/widget.trustpilot.com; frame-src https:\/\/td.doubleclick.net https:\/\/www.facebook.com https:\/\/www.googletagmanager.com https:\/\/measure.netcup.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com\/ https:\/\/widget.trustpilot.com https:\/\/green.netcup.com https:\/\/red.netcup.com https:\/\/blue.netcup.com https:\/\/www.netcup.com https:\/\/chat.netcup.com https:\/\/chat-dev-ui.netcup.net https:\/\/chat-ui.netcup.com; script-src-elem https:\/\/green.netcup.com https:\/\/red.netcup.com https:\/\/blue.netcup.com https:\/\/www.netcup.com https:\/\/chat.netcup.com https:\/\/chat-dev-ui.netcup.net https:\/\/chat-ui.netcup.com https:\/\/cdn.brevo.com\/js\/sdk-loader.js https:\/\/sibautomation.com\/sa.js https:\/\/sibforms.com\/ https:\/\/www.googleadservices.com https:\/\/www.redditstatic.com 'self' 'unsafe-inline' https:\/\/*.googletagmanager.com https:\/\/static.ads-twitter.com https:\/\/snap.licdn.com https:\/\/bat.bing.com https:\/\/connect.facebook.net https:\/\/*.clarity.ms https:\/\/googleads.g.doubleclick.net https:\/\/cdn.cookielaw.org https:\/\/analytics.tiktok.com https:\/\/ads.tiktok.com https:\/\/measure.netcup.com https:\/\/www.youtube.com https:\/\/pagead2.googlesyndication.com https:\/\/widget.trustpilot.com; worker-src blob:; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/securepubads.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/tpc.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/ep2.adtrafficquality.google https:\/\/challenges.cloudflare.com https:\/\/static.vic-m.co https:\/\/www.youtube.com https:\/\/public.bnbstatic.com https:\/\/platform.twitter.com https:\/\/static.ads-twitter.com https:\/\/proxy.beyondwords.io https:\/\/tally.so https:\/\/cdnjs.cloudflare.com https:\/\/analytics-cms.whitebeard.me https:\/\/stats.dailymaverick.co.za https:\/\/applets.ebxcdn.com https:\/\/powerad.ai; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/public.bnbstatic.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/public.bnbstatic.com; connect-src 'self' https:\/\/track-mavio.revengine.dailymaverick.co.za https:\/\/revengine-tracker.remp.dailymaverick.co.za https:\/\/revengine-tracker.revengine.dailymaverick.co.za https:\/\/revengine-tracker-test.revengine.dailymaverick.co.za https:\/\/stats.dailymaverick.co.za https:\/\/www.googletagmanager.com https:\/\/securepubads.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/tpc.googlesyndication.com https:\/\/*.ingest.de.sentry.io https:\/\/*.ingest.sentry.io https:\/\/www.google.com https:\/\/analytics.google.com https:\/\/analytics-cms.whitebeard.me https:\/\/ep1.adtrafficquality.google https:\/\/powerad.ai https:\/\/reporting.powerad.ai https:\/\/ad.doubleclick.net https:\/\/www.binance.com; frame-src 'self' https:\/\/charts.dailymaverick.co.za https:\/\/www.googletagmanager.com https:\/\/securepubads.g.doubleclick.net https:\/\/cm.g.doubleclick.net https:\/\/tpc.googlesyndication.com https:\/\/pagead2.googlesyndication.com https:\/\/*.googlesyndication.com https:\/\/*.safeframe.googlesyndication.com https:\/\/www.googleadservices.com https:\/\/ep2.adtrafficquality.google https:\/\/www.google.com https:\/\/challenges.cloudflare.com https:\/\/platform.twitter.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/tally.so https:\/\/player.simplecast.com https:\/\/podcasts.apple.com https:\/\/podcasts.google.com https:\/\/open.spotify.com https:\/\/iframe.iono.fm https:\/\/playlist.megaphone.fm; media-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https:\/\/*.dailymaverick.co.za;","count":1},{"content-security-policy-report-only":" report-to cf-csp-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/pagead2.googlesyndication.com https:\/\/*.googlesyndication.com https:\/\/securepubads.g.doubleclick.net https:\/\/*.doubleclick.net https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/cdn.taboola.com https:\/\/cdn.izooto.com https:\/\/*.izooto.com https:\/\/platform.twitter.com https:\/\/*.twitter.com https:\/\/connect.facebook.net https:\/\/www.instagram.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn.gujaratsamachar.com https:\/\/*.amazon-adsystem.com https:\/\/*.aniview.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdnjs.cloudflare.com; connect-src 'self' https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/*.googletagmanager.com https:\/\/www.google.com https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/*.izooto.com https:\/\/cdn.taboola.com https:\/\/*.sentry.io https:\/\/*.ingest.sentry.io https:\/\/*.cloudfront.net https:\/\/cdn.gujaratsamachar.com https:\/\/epaper.gujaratsamachar.com https:\/\/apis.gujaratsamachar.com https:\/\/*.amazon-adsystem.com https:\/\/*.aniview.com; frame-src 'self' https:\/\/*.doubleclick.net https:\/\/*.google.com https:\/\/googleads.g.doubleclick.net https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.instagram.com https:\/\/platform.twitter.com https:\/\/*.facebook.com https:\/\/cdn.taboola.com https:\/\/*.amazon-adsystem.com https:\/\/imasdk.googleapis.com; media-src 'self' data: blob: https:\/\/*.avplayer.com https:\/\/*.aniview.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self' https:\/\/bor.aniview.com; form-action 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/translate.googleapis.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com; font-src 'self' data: https:\/\/fonts.gstatic.com; frame-src 'self' https:\/\/connect.facebook.net https:\/\/m.facebook.com https:\/\/maps.google.com https:\/\/maps.googleapis.com https:\/\/mobile.facebook.com https:\/\/platform.twitter.com https:\/\/static.addtoany.com https:\/\/web.facebook.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.youtube.com; img-src 'self' data: blob: https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/fonts.gstatic.com https:\/\/*.fbcdn.net https:\/\/stats.g.doubleclick.net https:\/\/translate.google.com https:\/\/translate.googleapis.com https:\/\/www.gcis.gov.za https:\/\/www.google.com https:\/\/www.google.co.za https:\/\/www.googletagmanager.com https:\/\/www.gov.za https:\/\/www.gstatic.com https:\/\/www.publicsectormanager.gov.za https:\/\/www.sanews.gov.za https:\/\/www.vukuzenzele.gov.za https:\/\/*.openstreetmap.org https:\/\/*.ytimg.com https:\/\/www.google-analytics.com; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https:\/\/*.google-analytics.com https:\/\/connect.facebook.net https:\/\/maps.googleapis.com https:\/\/platform.twitter.com https:\/\/static.addtoany.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com; style-src 'self' 'report-sample' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/www.gstatic.com https:\/\/platform.twitter.com; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri \/system\/reporting\/default; report-to default","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-eval' 'unsafe-inline' *.algolia.com *.algolia.io *.algolia.net *.algolianet.com algolia.com algolia.io algolia.net algolianet.com blob: data: cdn.weglot.com *.3lift.com *.adroll.com *.affilae.com *.arcade.software *.bidr.io *.casalemedia.com *.clarity.ms *.clearbit.com *.company-target.com *.datadoghq.com *.doubleclick.net *.js.driftt.com *.facebook.com *.getbeamer.com *.googleoptimize.com *.googletagmanager.com *.hotjar.com *.licdn.com *.linkedin.com *.marketo.com *.mktoresp.com *.mutinycdn.com *.onetrust.com *.outbrain.com *.pendo.io *.pingdom.net *.pubmatic.com *.reddit.com *.rlcdn.com *.rubiconproject.com *.sitespect.com *.taboola.com *.twitter.com ajax.googleapis.com amplify.outbrain.com api.amplitude.com api.madkudu.com api.segment.io attr.ml-api.io bat.bing.com browser.sentry-cdn.com cdn.amplitude.com cdn.bizible.com cdn.cookielaw.org cdn.jsdelivr.net cdn.madkudu.com cdn.segment.com cdn.segment.io cdnjs.cloudflare.com client-registry.mutinycdn.com client.mutinycdn.com connect.facebook.net fonts.googleapis.com fonts.gstatic.com getbeamer.com js.driftt.com js.sentry-cdn.com js.stripe.com maxcdn.bootstrapcdn.com munchkin.marketo.net res.cloudinary.com s.ml-attr.com secure.adnxs.com secure.gravatar.com snap.licdn.com static.ads-twitter.com stats.g.doubleclick.net t.co tag.clearbitscripts.com tag.demandbase.com tr.outbrain.com tracking.g2crowd.com user-data.mutinycdn.com www.datadoghq-browser-agent.com www.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com www.redditstatic.com www.welcometothejungle.com x.clearbitjs.com m.servedby-buysellads.com paapi9371.d41.co api.c99.ai analytics.funnelfuel.io v2.d41.co ; img-src * data: *.mutinycdn.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com ; font-src 'self' data: fonts.gstatic.com github.com images.mutinycdn.com maxcdn.bootstrapcdn.com use.typekit.net use.fontawesome.com ; connect-src 'self' *.algolia.com *.algolia.io *.algolia.net *.algolianet.com algolia.com algolia.io algolia.net algolianet.com data: api.weglot.com cdn.weglot.com *.clarity.ms *.datadoghq.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.hotjar.com *.hotjar.io *.linkedin.com *.mktoresp.com *.mktoutil.com *.mutinyhq.io *.onetrust.com *.pingdom.net *.segment.com *.segment.io *.sentry.io *.mutinyhq.com *.mutinyhq.io *.mutinycdn.com adservice.google.com api.amplitude.com api.company-target.com api.madkudu.com api.segment.io app.clearbit.com app.getsentry.com backend.getbeamer.com cdn.cookielaw.org d.adroll.com in.hotjar.com maps.googleapis.com prod-algolia-blog-subscription.herokuapp.com raw.githubusercontent.com stats.g.doubleclick.net us-central1-documentation-feedback.cloudfunctions.net user-data.mutinycdn.com vitals.vercel-insights.com wss:\/\/*.hotjar.com www.google-analytics.com www.google.com analytics.funnelfuel.io tag-logger.demandbase.com api.c99.ai ; worker-src 'self' blob: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.algolia.com *.algolia.io *.algolia.net *.algolianet.com algolia.com algolia.io algolia.net algolianet.com blob: data: cdn.weglot.com *.3lift.com *.adroll.com *.affilae.com *.arcade.software *.bidr.io *.casalemedia.com *.clarity.ms *.clearbit.com *.company-target.com *.datadoghq.com *.doubleclick.net *.js.driftt.com *.facebook.com *.getbeamer.com *.googleoptimize.com *.googletagmanager.com *.hotjar.com *.licdn.com *.linkedin.com *.marketo.com *.mktoresp.com *.mutinycdn.com *.onetrust.com *.outbrain.com *.pendo.io *.pingdom.net *.pubmatic.com *.reddit.com *.rlcdn.com *.rubiconproject.com *.sitespect.com *.taboola.com *.twitter.com ajax.googleapis.com amplify.outbrain.com api.amplitude.com api.madkudu.com api.segment.io attr.ml-api.io bat.bing.com browser.sentry-cdn.com cdn.amplitude.com cdn.bizible.com cdn.cookielaw.org cdn.jsdelivr.net cdn.madkudu.com cdn.segment.com cdn.segment.io cdnjs.cloudflare.com client-registry.mutinycdn.com client.mutinycdn.com connect.facebook.net fonts.googleapis.com fonts.gstatic.com getbeamer.com js.driftt.com js.sentry-cdn.com js.stripe.com maxcdn.bootstrapcdn.com munchkin.marketo.net res.cloudinary.com s.ml-attr.com secure.adnxs.com secure.gravatar.com snap.licdn.com static.ads-twitter.com stats.g.doubleclick.net t.co tag.clearbitscripts.com tag.demandbase.com tr.outbrain.com tracking.g2crowd.com user-data.mutinycdn.com www.datadoghq-browser-agent.com www.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com www.redditstatic.com www.welcometothejungle.com x.clearbitjs.com m.servedby-buysellads.com paapi9371.d41.co api.c99.ai analytics.funnelfuel.io v2.d41.co ; report-uri https:\/\/algolia.report-uri.com\/r\/t\/csp\/wizard","count":1},{"content-security-policy-report-only":" default-src 'self';base-uri 'self';font-src 'self' https:\/\/*.audiencemedia.com https:\/\/use.fontawesome.com;form-action 'self';frame-ancestors 'none';img-src 'self' data: blob: https:\/\/*.ziniopro.com https:\/\/*.audiencemedia.com https:\/\/googleads.g.doubleclick.net https:\/\/www.google.com https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com https:\/\/google.com https:\/\/*.paypal.com https:\/\/*.braintreegateway.com https:\/\/static.zdassets.com https:\/\/*.zendesk.com https:\/\/media.smooch.io https:\/\/*.zdusercontent.com https:\/\/v2assets.zopim.io https:\/\/discover.zinio.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/www.facebook.com https:\/\/www.googletagmanager.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/*.kaptcha.com;object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn-web.zinio.com https:\/\/js-agent.newrelic.com https:\/\/*.nr-data.net https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/googleads.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/*.paypal.com https:\/\/www.paypalobjects.com https:\/\/*.braintreegateway.com https:\/\/*.cardinalcommerce.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.zdassets.com https:\/\/*.zendesk.com https:\/\/*.smooch.io https:\/\/*.twilio.com wss:\/\/*.zendesk.com wss:\/\/api.smooch.io wss:\/\/voice-js.roaming.twilio.com https:\/\/zinio-sjc.gravityrd-services.com https:\/\/*.zopim.com https:\/\/recaptcha.net https:\/\/www.gstatic.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/app.vwo.com https:\/\/apis.google.com https:\/\/accounts.google.com\/gsi\/client https:\/\/*.kaptcha.com;script-src-attr 'none';style-src 'self' 'unsafe-inline' https:\/\/*.audiencemedia.com https:\/\/app.vwo.com https:\/\/use.fontawesome.com https:\/\/accounts.google.com\/gsi\/style https:\/\/embed.typeform.com;media-src 'self' https:\/\/static.zdassets.com;connect-src 'self' webpack: https:\/\/*.audiencemedia.com https:\/\/*.ziniopro.com https:\/\/*.nr-data.net https:\/\/googleads.g.doubleclick.net https:\/\/adservice.google.com https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com https:\/\/google.com https:\/\/cdn.jsdelivr.net https:\/\/*.braintree-api.com https:\/\/*.braintreegateway.com https:\/\/*.cardinalcommerce.com https:\/\/www.paypal.com wss:\/\/widget-mediator.zopim.com https:\/\/*.zdassets.com https:\/\/*.zendesk.com https:\/\/*.smooch.io https:\/\/*.twilio.com wss:\/\/*.zendesk.com wss:\/\/api.smooch.io wss:\/\/voice-js.roaming.twilio.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/analytics.google.com https:\/\/www.google.com https:\/\/*.googletagmanager.com https:\/\/collector.datacloud.zinio.com https:\/\/www.facebook.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/sdk.iad-07.braze.com https:\/\/use.fontawesome.com https:\/\/accounts.google.com\/gsi\/ https:\/\/*.typeform.com https:\/\/*.kaptcha.com collector.datacloud.zinio.com;frame-src 'self' https:\/\/td.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/*.paypal.com https:\/\/*.braintreegateway.com https:\/\/recaptcha.net https:\/\/www.facebook.com https:\/\/web.facebook.com https:\/\/app.vwo.com https:\/\/accounts.google.com\/gsi\/ https:\/\/*.typeform.com;child-src 'self' https:\/\/*.kaptcha.com","count":1},{"content-security-policy-report-only":" default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:;","count":1},{"content-security-policy-report-only":" frame-ancestors *.storyblok.com 'self'; object-src 'self' 'unsafe-inline'; media-src *.salesforce-sites.com *.lightning.force.com *.storyblok.com *.zdassets.com *.doofinder.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; form-action https:\/\/www.facebook.com https:\/\/druni.my.salesforce-sites.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https:\/\/store.plumrocket.com www.paycomet.com api.paycomet.com 'self' 'unsafe-inline'; frame-src http:\/\/fast.amc.demdex.net https:\/\/www.youtube.com https:\/\/www.facebook.com https:\/\/app3.salesmanago.pl https:\/\/10138016.fls.doubleclick.net https:\/\/insight.adsrvr.org https:\/\/td.doubleclick.net https:\/\/druni.my.salesforce-sites.com https:\/\/www.googletagmanager.com https:\/\/pay.google.com https:\/\/app3.salesmanago.es https:\/\/webchatbot.aunoa.ai https:\/\/app3.manago.ai https:\/\/3ds.redsys.es  https:\/\/la-favorite-etail.jeanpaulgaultier.com\/ geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.checkout.com *.klarna.com https:\/\/store.plumrocket.com www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net https:\/\/sandbox.sequracdn.com https:\/\/live.sequracdn.com www.googletagmanager.com *.salesforce-sites.com *.lightning.force.com *.hotjar.com *.oct8ne.com *.pinterest.com *.doofinder.com *.empathybroker.com *.empathy.co *.criteo.com 'self' 'unsafe-inline'; connect-src https:\/\/dpm.demdex.net http:\/\/dpm.demdex.net https:\/\/www.paypal.com https:\/\/eu1-search.doofinder.com https:\/\/shops-si.trustedshops.com https:\/\/api.trustedshops.com https:\/\/trustbadge.api.etrusted.com https:\/\/storytech.io https:\/\/analytics.tiktok.com https:\/\/region1.analytics.google.com https:\/\/vc-service.salesmanago.com https:\/\/api.swogo.net https:\/\/content.syndigo.com https:\/\/tracking.swogo.net https:\/\/www.google.com https:\/\/bat.bing.com https:\/\/druni.my.salesforce-sites.com https:\/\/pay.google.com https:\/\/cdn.equalweb.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/www.googletagmanager.com https:\/\/vc-service.salesmanago.pl https:\/\/app3.salesmanago.es https:\/\/www.facebook.com https:\/\/war.salesmanago.com https:\/\/capig.stape.org https:\/\/webchatbot.aunoa.ai https:\/\/cdn.aunoa.ai https:\/\/google.com https:\/\/dataplane.rum.us-east-1.amazonaws.com https:\/\/cognito-identity.us-east-1.amazonaws.com https:\/\/sts.us-east-1.amazonaws.com https:\/\/pagead2.googlesyndication.com https:\/\/ade.googlesyndication.com https:\/\/cct.google https:\/\/cognito-identity.eu-west-1.amazonaws.com https:\/\/dataplane.rum.eu-west-1.amazonaws.com https:\/\/analytics.google.com https:\/\/www.googleadservices.com  https:\/\/access.equalweb.com https:\/\/the.sciencebehindecommerce.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.checkout.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.browser-intake-datadoghq.com *.doofinder.com wss:\/\/*.doofinder.com instantcredit.net *.instantcredit.net https:\/\/sandbox.sequracdn.com https:\/\/live.sequracdn.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.googletagmanager.com *.salesforce-sites.com *.lightning.force.com *.oct8ne.com *.zendesk.com *.zopim.com *.doubleclick.net *.hotjar.com *.hotjar.io *.clarity.ms *.smartsuppcdn.com *.googleapis.com *.gstatic.com *.google-analytics.com *.google.es *.connectif.cloud *.klaviyo.com *.photoslurp.com *.zdassets.com *.pinterest.com *.nosto.com *.empathybroker.com *.empathy.co 'self' 'unsafe-inline'; img-src data: http:\/\/cm.everesttech.net http:\/\/amcglobal.sc.omtrdc.net https:\/\/asistentecosmeticatest1.herokuapp.com https:\/\/ad.doubleclick.net https:\/\/p1.zemanta.com https:\/\/www.storytech.io https:\/\/cdnstory.com https:\/\/insight.adsrvr.org https:\/\/www.druni.es https:\/\/event.syndigo.cloud https:\/\/ui.swogo.net https:\/\/googleads.g.doubleclick.net https:\/\/tau.collect.igodigital.com https:\/\/www.googletagmanager.com https:\/\/analytics.tiktok.com https:\/\/app3.salesmanago.es https:\/\/c.clarity.ms https:\/\/connect.facebook.net https:\/\/www.gstatic.com https:\/\/pagead2.googlesyndication.com https:\/\/ade.googlesyndication.com https:\/\/www.zenaps.com https:\/\/access.equalweb.com https:\/\/click.s51.exacttarget.com https:\/\/the.sciencebehindecommerce.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.checkout.com *.doofinder.com instantcredit.net test.instantcredit.net https:\/\/sandbox.sequracdn.com https:\/\/live.sequracdn.com https:\/\/images.unsplash.com *.criteo.com static.criteo.net www.googletagmanager.com *.salesforce-sites.com *.lightning.force.com *.facebook.com *.google.com *.google.es widgets.trustedshops.com *.twitter.com t.co *.azureedge.net *.pinterest.com *.bing.com *.storyblok.com 'self' data: data: 'self' 'unsafe-inline'; font-src http:\/\/widgets.trustedshops.com http:\/\/maxcdn.bootstrapcdn.com https:\/\/fonts.gstatic.com https:\/\/asistentecosmeticatest1.herokuapp.com *.checkout.com *.cdn-apple.com instantcredit.net test.instantcredit.net *.salesforce-sites.com *.lightning.force.com fonts.gstatic.com *.azureedge.net *.doofinder.com *.typekit.net *.googleapis.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; style-src http:\/\/fonts.googleapis.com http:\/\/maxcdn.bootstrapcdn.com https:\/\/asistentecosmeticatest1.herokuapp.com https:\/\/storytech.io https:\/\/druni.my.salesforce-sites.com https:\/\/access.equalweb.com *.checkout.com *.doofinder.com instantcredit.net test.instantcredit.net *.salesforce-sites.com *.lightning.force.com *.photoslurp.com *.nosto.com *.klaviyo.com *.typekit.net *.storyblok.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; script-src http:\/\/widgets.trustedshops.com http:\/\/www.gstatic.com http:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.dwin1.com https:\/\/eu1-search.doofinder.com https:\/\/cdn.doofinder.com https:\/\/asistentecosmeticatest1.herokuapp.com https:\/\/cdnjs.cloudflare.com\/ https:\/\/ui.swogo.net https:\/\/analytics.tiktok.com https:\/\/storytech.io https:\/\/bucket.cdnwebcloud.com https:\/\/js.adsrvr.org https:\/\/js-tag.zemanta.com https:\/\/content.syndigo.com https:\/\/ct.pinterest.com https:\/\/fonts.googleapis.com https:\/\/druni.my.salesforce-sites.com https:\/\/536005834.collect.igodigital.com https:\/\/cdn.equalweb.com https:\/\/access.equalweb.com https:\/\/app3.salesmanago.es https:\/\/webchatbot.aunoa.ai https:\/\/client.rum.us-east-1.amazonaws.com https:\/\/pagead2.googlesyndication.com https:\/\/www.zenaps.com live.sequrapi.com www.zenaps.com https:\/\/the.sciencebehindecommerce.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.checkout.com *.klarnacdn.net *.cdn-apple.com *.doofinder.com www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net code.jquery.com https:\/\/sandbox.sequracdn.com https:\/\/live.sequracdn.com https:\/\/maps.googleapis.com static.criteo.net www.googletagmanager.com *.salesforce-sites.com *.lightning.force.com *.googleoptimize.com widgets.trustedshops.com static-eu.oct8ne.com static.zdassets.com *.facebook.net *.tradedoubler.com *.doubleclick.net *.hotjar.com *.ads-twitter.com smct.co *.bsmartdata.com *.retargeted.co *.bing.com *.clarity.ms *.smartsuppcdn.com *.smartsuppchat.com *.smartsupp.com *.connectif.cloud *.klaviyo.com *.photoslurp.com *.pinimg.com *.nosto.com *.empathybroker.com *.unpkg.com *.storyblok.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src  'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.galvia.ai https:\/\/helper.portsmouth.galvia.ai www-embed-player.js *.cookiebot.com *.cookiefirst.com *.google-analytics.com www.instagram.com *.facebook.net *.tiktok.com *.ads-twitter.com *.twitter.com lf16-tiktok-web.ttwstatic.com cdn.unibuddy.co *.googletagmanager.com bat.bing.com w.soundcloud.com s.yimg.com sc-static.net snap.licdn.com www.googleadservices.com *.doubleclick.net siteimproveanalytics.com www.youtube.com *.hotjar.com *.linkedin.com service.force.com *.salesforceliveagent.com universityofportsmouth.my.salesforce.com *.formstack.com *.googleapis.com cdn.jsdelivr.net www.google.ie sfapi.formstack.io az416426.vo.msecnd.net discoveruni.gov.uk *.discoveruni.gov.uk *.matterport.com webteamuop.github.io *.port.ac.uk *.secure.force.com portsmouthuni.h5p.com *.go-mpulse.net js-agent.newrelic.com *.algolia.net *.jquery.com bot.ivy.ai bam.nr-data.net *.force.com *.clarity.ms dev.visualwebsiteoptimizer.com artsthread.com tr.snapchat.com tags.srv.stackadapt.com https:\/\/rv-vepple-embed.web.app https:\/\/builder.lift.acquia.com universityofportsmouth.my.salesforce-sites.com vimeo.com https:\/\/player.vimeo.com universityofportsmouth--chatbotdv2.sandbox.my.salesforce.com universityofportsmouth--chatbotdv2.sandbox.my.salesforce-sites.com universityofportsmouth--chatbotdv2.sandbox.lightning.force.com universityofportsmouth.tfaforms.net universityofportsmouth--qa.sandbox.my.site.com https:\/\/*.sandbox.lightning.force.com https:\/\/*.sandbox.my.salesforce.com universityofportsmouth.my.site.com universityofportsmouth.my.salesforce-scrt.com  https:\/\/d8ejoa1fys2rk.cloudfront.net https:\/\/js-agent.newrelic.com; object-src 'self' https:\/\/discoveruni.gov.uk; style-src 'self' 'unsafe-inline'  https:\/\/helper.portsmouth.galvia.ai modernizr.min.js *.googleapis.com platform.twitter.com lf16-tiktok-web.ttwstatic.com  *.force.com static.formstack.com formsprod.azureedge.net sfapi.formstack.io port.formstack.com *.cookiefirst.com webteamuop.github.io *.port.ac.uk *.googletagmanager.com artsthread.com tags.srv.stackadapt.com *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com s3.amazonaws.com universityofportsmouth.my.salesforce-sites.com embed.tawk.to *.tawk.to cdn.jsdelivr.net builder.lift.acquia.com *.formstack.io universityofportsmouth--chatbotdv2.sandbox.my.salesforce-sites.com universityofportsmouth.my.salesforce.com https:\/\/universityofportsmouth--qa.sandbox.my.site.com universityofportsmouth.tfaforms.net universityofportsmouth.my.site.com https:\/\/cdnjs.cloudflare.com; img-src  'self' data: *.google-analytics.com i.vimeocdn.com i.ytimg.com *.googletagmanager.com jadserve.postrelease.com bat.bing.com sp.analytics.yahoo.com *.siteimproveanalytics.io *.facebook.com *.facebook.net *.twitter.com t.co *.doubleclick.net googleads.g.doubleclick.net *.linkedin.com uks-prd-xp2-cd.azurewebsites.net ormsprod.azureedge.net port.formstack.com maps.gstatic.com *.googleapis.com lh3.ggpht.com www.google.ie *.cookiefirst.com formsprod.azureedge.net discoveruni.gov.uk *.force.com *.universityofportsmouth.my.salesforce.com *.salesforce.com *.port.ac.uk bot.ivy.ai *.clarity.ms *.bing.com dev.visualwebsiteoptimizer.com *.visualwebsiteoptimizer.com cdn.pushcrew.com chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google eat2mpk5ajg.exactdn.com *.eat2mpk5ajg.exactdn.com blob: https:\/\/egopbtuk8gz.exactdn.com *.egopbtuk8gz.exactdn.com *.frontdoorcdn.formstack.io https:\/\/frontdoorcdn.formstack.io images.artsthread.com *.google.co.uk https:\/\/cdn.galvia.ai\/portsmouth\/nellie-helper.js https:\/\/helper.portsmouth.galvia.ai https:\/\/*.ivy-cdn.com; media-src 'self'; frame-src 'self'  https:\/\/www.googletagmanager.com https:\/\/helper.portsmouth.galvia.ai player.vimeo.com www.youtube.com *.linkedin.com portsmouthuni.h5p.com w.soundcloud.com viewer.joomag.com *.cookiebot.com www.instagram.com *.facebook.com *.tiktok.com *.twitter.com embed.acast.com unibuddy.co popcard.unibuddy.co tr.snapchat.com *.doubleclick.net view.genial.ly service.force.com *.hotjar.com *.matterport.com webteamuop.github.io universityofportsmouth.force.com *.port.ac.uk *.secure.force.com open.spotify.com *.google.com port.cloud.panopto.eu bot.ivy.ai app.nearpod.com *.visualwebsiteoptimizer.com universityofportsmouth.my.salesforce-sites.com *.tawk.to https:\/\/cdn.galvia.ai\/portsmouth\/nellie-helper.js universityofportsmouth.my.salesforce.com https:\/\/*.sandbox.lightning.force.com https:\/\/*.sandbox.my.salesforce.com https:\/\/universityofportsmouth--qa.sandbox.my.site.com https:\/\/universityofportsmouth--qa.sandbox.my.site.com https:\/\/universityofportsmouth.my.site.com https:\/\/outlook.office365.com https:\/\/discoveruni.gov.uk https:\/\/*.arcgis.com university-of-portsmouth-web-team.github.io; frame-ancestors 'self' portsmouthuni.h5p.com https:\/\/universityofportsmouth.my.site.com ; child-src 'self' blob:; font-src 'self' data: fonts.gstatic.com use.typekit.net *.modernizr.min.js  static.formstack.com fonts.googleapis.com bot.ivy.ai cdn.scite.ai embed.tawk.to *.tawk.to res-1.cdn.office.net https:\/\/cdnjs.cloudflare.com; connect-src  'self' *.google-analytics.com www.googletagmanager.com marketing.port.ac.uk sentry10.bynder.cloud www.ucas.com *.tiktok.com tr.snapchat.com *.doubleclick.net s.yimg.com *.linkedin.com *.secure.force.com sfapi.formstack.io *.googleapis.com *.algolia.net *.cookiefirst.com ohpuem12fk-3.algolianet.com *.facebook.com vc.hotjar.io dc.services.visualstudio.com prod-discoveruni.azure-api.net cdn.linkedin.oribi.io webteamuop.github.io *.algolianet.com *.go-mpulse.net bam.nr-data.net *.akstat.io *.akamaihd.net *.hotjar.com plugin.ucads.ucweb.com *.clarity.ms tags.srv.stackadapt.com *.visualwebsiteoptimizer.com app.vwo.com *.port.ac.uk vimeo.com universityofportsmouth.my.salesforce-sites.com artsthread.com eu.perz-api.cloudservices.acquia.io *.google.com va.tawk.to embed.tawk.to *.tawk.to wss:\/\/*.tawk.to insights.algolia.io virtual.port.ac.uk *.virtual.port.ac.uk *.analytics.pangle-ads.com https:\/\/api.portsmouth.rvhosted.com eat2mpk5ajg.exactdn.com *.eat2mpk5ajg.exactdn.com https:\/\/google.com blob: https:\/\/analytics.pangle-ads.com https:\/\/egopbtuk8gz.exactdn.com *.egopbtuk8gz.exactdn.com universityofportsmouth--chatbotdv2.sandbox.my.salesforce-sites.com https:\/\/*.sandbox.lightning.force.com https:\/\/*.sandbox.my.salesforce.com https:\/\/universityofportsmouth--qa.sandbox.my.salesforce-scrt.com https:\/\/universityofportsmouth.my.site.com https:\/\/*.my.site.com https:\/\/cdn.jsdelivr.net https:\/\/universityofportsmouth.my.salesforce-scrt.com https:\/\/fonts.gstatic.com https:\/\/universityofportsmouth.my.salesforce.com https:\/\/d.la11-core1.sfdc-cehfhs.salesforceliveagent.com https:\/\/universityofportsmouth.tfaforms.net *.jquery.com code.jquery.com https:\/\/bot.ivy.ai https:\/\/cdn.galvia.ai\/portsmouth\/portia-helper.js","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-NjVX2ZIs0sh0LSTf_wDZxQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' *.adobedtm.com *.scene7.com *.amazon-adsystem.com *.appdemostore.com *.atdmt.com *.avocet.io *.blubrry.com *.clicktale.net *.craftyclicks.co.uk  *.chatcora.natwest.com *.doubleclick.net *.everesttech.net *.facebook.com *.facebook.net *.fca.org.uk *.google.co.uk *.google.com *.googleadservices.com *.jwpcdn.com *.liveperson.net *.linkedin.com *.lpsnmedia.net *.natwest.com *.neolane.net *.nwolb.com *.omguk.com *.omtrdc.net *.pinimg.com *.pinterest.com *.raptmedia.com *.snapchat.com *.userzoom.com *.youtube.com *.ytimg.com analytics.twitter.com api.swiftype.com dcs.demdex.net dpm.demdex.net fast.demdex.net fast.rbs.demdex.net jwpltx.com rbs.demdex.net sc-static.net static.ads-twitter.com t.co www.brightedge.com *.google.ae *.google.al *.google.am *.google.at *.google.az *.google.ba *.google.be *.google.bg *.google.bs *.google.by *.google.ca *.google.cd *.google.ch *.google.cl *.google.cm *.google.co.ao *.google.co.bw *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ma *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uz *.google.co.ve *.google.co.za *.google.co.zm *.google.co.zw *.google.com.af *.google.com.ag *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sb *.google.com.sg *.google.com.sl *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dk *.google.dm *.google.dz *.google.es *.google.fi *.google.fr *.google.ge *.google.gg *.google.gm *.google.gp *.google.gr *.google.gy *.google.hr *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kz *.google.la *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.mg *.google.mk *.google.ml *.google.mn *.google.mu *.google.mv *.google.mw *.google.nl *.google.no *.google.pl *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.sc*.google.se *.google.sh *.google.si *.google.sk *.google.sn *.google.so *.google.tg *.google.tm *.google.tn *.google.tt adservice.google.ro *.googleapis.com *.live.hdexternal.co.uk *.hdddirectsolutions.co.uk fonts.gstatic.com *.everesttech.net *.everestjs.net cdn.cookielaw.org cdn-apple.com; upgrade-insecure-requests; report-uri https:\/\/natwestpersonal.report-uri.com\/r\/t\/csp\/reportOnly;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-dZO0eh9w9Re6EUY1EokskA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-tFpfg5XaSeAqnmxSIqdG9g==' https:\/\/chat.totohost.hr https:\/\/www.paypal.com https:\/\/*.paypal.com https:\/\/www.paypalobjects.com https:\/\/static.zdassets.com https:\/\/ekr.zdassets.com https:\/\/*.zopim.com https:\/\/*.zendesk.com; script-src-attr 'none'; style-src 'self' 'nonce-tFpfg5XaSeAqnmxSIqdG9g==' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:\/\/chat.totohost.hr https:\/\/*.zopim.com wss:\/\/*.zopim.com https:\/\/*.zendesk.com wss:\/\/*.zendesk.com https:\/\/*.zdassets.com https:\/\/eracun.eposlovanje.hr https:\/\/*.paypal.com https:\/\/www.paypalobjects.com https:\/\/api-m.paypal.com; frame-src 'self' https:\/\/*.zopim.com https:\/\/*.zendesk.com https:\/\/test-wallet.corvuspay.com https:\/\/*.paypal.com https:\/\/www.paypal.com; object-src 'none'; base-uri 'self'; report-uri \/api\/csp-report; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" connect-src 'self' data: *.amazonaws.com *.analytics.google.com *.google-analytics.com *.doubleclick.net *.facebook.com *.googleapis.com *.gstatic.com *.masonline.id *.stockbit.com *.stockbit.io *.tiktok.com *.youtube.com wss:\/\/*.crisp.chat wss:\/\/*.stockbit.com analytics.google.com analytics-ipv6.tiktokw.us api.trongrid.io cdnjs.cloudflare.com cdnma.cdnservice.space client.crisp.chat connect.facebook.net www.google.co.id www.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.stockbit.com analytics.tiktok.com apis.google.com app.midtrans.com client.crisp.chat connect.facebook.net d2r1yp2w7bby2u.cloudfront.net midtrans.com s3.tradingview.com sg1.wzrkt.com sg1.clevertap-prod.com www.google-analytics.com www.google.com\/recaptcha\/api.js www.googletagmanager.com www.gstatic.com\/firebasejs\/ www.gstatic.com\/recaptcha\/ www.youtube.com\/iframe_api www.youtube.com\/s\/player\/ ssl.google-analytics.com; worker-src blob:; style-src 'self' 'unsafe-inline' *.stockbit.com *.cloudfront.net assets-nextjs.stockbit.com client.crisp.chat translate.googleapis.com fonts.googleapis.com; font-src 'self' *.stockbit.com client.crisp.chat fonts.gstatic.com; object-src 'none'; media-src 'self' assets-nextjs.stockbit.com; report-uri https:\/\/browser-intake-us5-datadoghq.com\/api\/v2\/logs?dd-api-key=pub521231ea4d284aa9bbf819c83a438ad4&dd-evp-origin=content-security-policy&ddsource=csp-report;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval' 'nonce-0fTejwP741e4WNZPsPQVIQ==' https:\/\/cortex.gigahost.dk https:\/\/whoislookup.gigahost.dk https:\/\/signals.gigahost.dk; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self' https:\/\/whoislookup.gigahost.dk wss:\/\/whoislookup.gigahost.dk https:\/\/signals.gigahost.dk; frame-src 'self' https:\/\/www.youtube.com; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/payment.gigahost.dk https:\/\/ssl.epay.dk https:\/\/pay.gigahost.dk https:\/\/payments.epay.eu https:\/\/ssl.ditonlinebetalingssystem.dk; report-to front-csp; report-uri https:\/\/signals.gigahost.dk\/csp-report\/front","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/apis.google.com https:\/\/va.vercel-scripts.com https:\/\/www.googletagmanager.com https:\/\/cdn.intergient.com https:\/\/config.playwire.com https:\/\/*.playwire.com https:\/\/*.intergient.com https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/*.googletagservices.com https:\/\/*.adtrafficquality.google https:\/\/btloader.com https:\/\/*.btloader.com https:\/\/*.amazon-adsystem.com https:\/\/*.adsymptotic.com https:\/\/*.rubiconproject.com https:\/\/*.pubmatic.com https:\/\/*.openx.net https:\/\/*.adnxs.com https:\/\/*.moatads.com https:\/\/*.sharethrough.com https:\/\/*.criteo.com https:\/\/*.crwdcntrl.net https:\/\/cdn.hadronid.net https:\/\/*.id5-sync.com https:\/\/secure.cdn.fastclick.net https:\/\/*.ad.gt https:\/\/*.3lift.com https:\/\/*.2mdn.net; style-src 'self' 'unsafe-inline' https:\/\/www.gstatic.com https:\/\/fonts.googleapis.com https:\/\/config.playwire.com https:\/\/*.intergient.com https:\/\/*.playwire.com; img-src 'self' data: blob: https:\/\/efimg.com https:\/\/cdn.efhub.com https:\/\/img.efhub.com https:\/\/lh3.googleusercontent.com https:\/\/www.gstatic.com https:\/\/firebasestorage.googleapis.com https:\/\/*.firebasestorage.app https:\/\/cdn.discordapp.com https:\/\/media.discordapp.net https:\/\/*.playwire.com https:\/\/*.intergient.com https:\/\/*.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/*.amazon-adsystem.com https:\/\/*.moatads.com https:\/\/*.adsymptotic.com https:\/\/raw.githubusercontent.com https:\/\/www.googletagmanager.com https:\/\/*.google.com https:\/\/ad-delivery.net https:\/\/*.ad-delivery.net https:\/\/*.crwdcntrl.net https:\/\/*.id5-sync.com https:\/\/*.nextmillmedia.com https:\/\/*.3lift.com https:\/\/*.criteo.com https:\/\/*.2mdn.net; font-src 'self' https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/identitytoolkit.googleapis.com https:\/\/securetoken.googleapis.com https:\/\/www.googleapis.com https:\/\/apis.google.com https:\/\/firestore.googleapis.com https:\/\/firebasestorage.googleapis.com https:\/\/img.efhub.com https:\/\/efootballhub-501e4.firebaseapp.com https:\/\/aqiefltgaydhzehddawg.supabase.co wss:\/\/aqiefltgaydhzehddawg.supabase.co https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/*.r2.cloudflarestorage.com https:\/\/*.amazonaws.com https:\/\/cdn.intergient.com https:\/\/config.playwire.com https:\/\/*.playwire.com https:\/\/*.intergient.com https:\/\/*.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/*.googletagservices.com https:\/\/*.amazon-adsystem.com https:\/\/*.rubiconproject.com https:\/\/*.pubmatic.com https:\/\/*.openx.net https:\/\/*.adnxs.com https:\/\/*.moatads.com https:\/\/*.adsymptotic.com https:\/\/*.sharethrough.com https:\/\/*.criteo.com https:\/\/fundingchoicesmessages.google.com https:\/\/btloader.com https:\/\/*.btloader.com https:\/\/*.ad-delivery.net https:\/\/ab.dns-finder.com https:\/\/*.crwdcntrl.net https:\/\/*.id5-sync.com https:\/\/cdn.hadronid.net https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.adtrafficquality.google https:\/\/ad-delivery.net https:\/\/id5-sync.com https:\/\/*.eu-1-id5-sync.com https:\/\/direct.adsrvr.org https:\/\/hb.yellowblue.io https:\/\/*.3lift.com https:\/\/*.cootlogix.com https:\/\/*.nextmillmedia.com https:\/\/secure.cdn.fastclick.net https:\/\/*.ad.gt https:\/\/*.gstatic.com https:\/\/*.gumgum.com https:\/\/*.a9.amazon.dev https:\/\/*.tq-tungsten.com; frame-src https:\/\/efootballhub-501e4.firebaseapp.com https:\/\/accounts.google.com https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.adtrafficquality.google https:\/\/*.playwire.com https:\/\/*.intergient.com https:\/\/*.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/*.amazon-adsystem.com https:\/\/*.rubiconproject.com https:\/\/*.pubmatic.com https:\/\/*.openx.net https:\/\/*.adnxs.com https:\/\/*.sharethrough.com https:\/\/*.criteo.com https:\/\/*.3lift.com https:\/\/*.cootlogix.com https:\/\/*.streamrail.com https:\/\/fundingchoicesmessages.google.com https:\/\/btloader.com https:\/\/*.btloader.com; worker-src 'self' blob:; media-src 'self' blob: data: https:\/\/img.efhub.com https:\/\/*.intergient.com https:\/\/*.playwire.com https:\/\/*.azurefd.net; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; frame-src https:; connect-src 'self' https: wss:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https:\/\/jadlog.com.br https:\/\/www.jadlog.com.b; script-src 'self' https:\/\/static.zdassets.com https:\/\/www.googletagmanager.com https:\/\/ssl.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/static.cloudflareinsights.com https:\/\/code.jquery.com https:\/\/cdnjs.cloudflare.com https:\/\/ajax.cloudflare.com https:\/\/pod-27-sunco-ws.zendesk.com; style-src 'self' https:\/\/fonts.googleapis.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/code.jquery.com https:\/\/cdnjs.cloudflare.com https:\/\/static.zdassets.com https:\/\/cdn.cookielaw.org; img-src 'self' data: https:\/\/*.tile.openstreetmap.org https:\/\/ssl.google-analytics.com https:\/\/www.google-analytics.com https:\/\/www.google.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/maxcdn.bootstrapcdn.com; connect-src 'self' https:\/\/cdn.cookielaw.org https:\/\/ekr.zdassets.com https:\/\/jadloglogsticahelp.zendesk.com https:\/\/pod-27-sunco-ws.zendesk.com https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/cloudflareinsights.com; frame-src 'self' https:\/\/www.google.com https:\/\/jadlog.force.com https:\/\/jadloglogsticahelp.zendesk.com; report-uri https:\/\/service.jadlog.com.br\/csp-report-endpoint; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" default-src https:; script-src https: 'unsafe-inline' https:\/\/challenges.cloudflare.com https:\/\/cdnjs.cloudflare.com; style-src https: 'unsafe-inline'; frame-src https: https:\/\/challenges.cloudflare.com; connect-src https: https:\/\/challenges.cloudflare.com https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/*.hs-scripts.com https:\/\/*.hubapi.com;","count":1},{"content-security-policy-report-only":" default-src 'none'; font-src 'self' fonts.gstatic.com data:; img-src * 'self' data: https: https:\/\/*.usepylon.com https:\/\/pylon-avatars.s3.us-west-1.amazonaws.com https:\/\/d3vl36l12sfx26.cloudfront.net; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' *.clickhouse-dev.com:* *.clickhouse-staging.com:* *.clickhouse.cloud:* clickhouse.com discover.clickhouse.com statuspage.incident.io www.recaptcha.net recaptcha.net munchkin.marketo.net www.google.com google.com *.googletagmanager.com *.licdn.com www.gstatic.com js.stripe.com *.fullstory.com vercel.live https:\/\/widget.usepylon.com; style-src 'self' 'unsafe-inline' clickhouse.com discover.clickhouse.com fonts.googleapis.com vercel.live https:\/\/*.usepylon.com; object-src 'none'; worker-src 'self' blob:; connect-src 'self' 'unsafe-inline' clickhouse.com discover.clickhouse.com wss: *.clickhouse-dev.com:* *.clickhouse-staging.com:* *.clickhouse.cloud:* statuspage.incident.io www.recaptcha.net recaptcha.net *.us-east-2.amazonaws.com *.google-analytics.com *.linkedin.oribi.io *.mktoresp.com s3.eu-west-1.amazonaws.com *.fullstory.com *.auth0.com https:\/\/cdn.growthbook.io vercel.live https:\/\/*.usepylon.com wss:\/\/*.pusher.com; frame-src *.clickhouse-dev.com:* *.clickhouse-staging.com:* *.clickhouse.cloud:* clickhouse.com discover.clickhouse.com www.recaptcha.net recaptcha.net https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/js.stripe.com https:\/\/player.vimeo.com *.auth0.com vercel.live; frame-ancestors 'none';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/www.ipn.mx https:\/\/cdnjs.cloudflare.com https:\/\/www.googletagmanager.com; style-src 'self' https:\/\/www.ipn.mx https:\/\/cdnjs.cloudflare.com https:\/\/fonts.googleapis.com; img-src 'self' https:\/\/ipn.mx https:\/\/*.ipn.mx framework-gb.cdn.gob.mx https:\/\/cdnjs.cloudflare.com; data: https:\/\/www.google-analytics.com; font-src 'self' https:\/\/cdnjs.cloudflare.com https:\/\/fonts.gstatic.com https:\/\/framework-gb.cdn.gob.mx; connect-src 'self'; frame-src 'self'; object-src 'none'; base-uri 'self' https:\/\/www.ipn.mx https:\/\/ipn.mx https:\/\/test.desarrolloweb.ipn.mx;","count":1},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=mIsYkctj0Vp9ncaOftqtOnrNb9keTa6eYm94TCQhFHE-1788496176.6715868-1.0.1.1-f5BbDhyV50aFMaZ5HqIKScLcLd.1BRiVEvsCQBrpGT9wGAe.9VwkH9nAtyMM3ZNzSecqiU1nizvjqaq075rkJkagTonGKaUuELdWMirD1erQTeskJUbfFqMylZckSgvsZfKdTmnQYY6tHACD4mqIITMz9aY3GB9gY2CSs0y52Ok; report-to cf-csp-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.quechoisir.org *.qccdn.fr *.cloudflare.com *.cloudflareinsights.com  *.tagcommander.com *.commander1.com *.trustcommander.net *.aticdn.net *.xiti.com *.bing.com *.google.com *.youtube.com *.youtu.be www.youtube-nocookie.com *.facebook.com *.kameleoon.io *.kameleoon.eu *.xiti.com *.aticdn.net *.facebook.net flo.uri.sh public.flourish.studio wss:\/\/dl1.quechoisir.org  wss:\/\/dl2.quechoisir.org wss:\/\/dl.quechoisir.org upgrade-insecure-requests; report-uri https:\/\/www.quechoisir.org\/csp-violation-report-endpoint\/; report-to csp-endpoint>","count":1},{"content-security-policy-report-only":" base-uri 'self'; media-src 'none'; object-src 'self'; manifest-src 'self'; style-src 'self' 'unsafe-inline' https:\/\/*.content.powerapps.com https:\/\/*.static.powerapps.com https:\/\/*.cdn.office.net https:\/\/vsa.services.microsoft.com https:\/\/mfpembedcdnmsit.azureedge.net; script-src 'self' blob: https:\/\/wcpstatic.microsoft.com https:\/\/shell.cdn.office.net https:\/\/res.cdn.office.net https:\/\/r4.res.office365.com https:\/\/amcdn.msftauth.net https:\/\/js.monitor.azure.com https:\/\/vsa.services.microsoft.com https:\/\/api.flow.microsoft.com https:\/\/content.powerapps.com 'sha256-CnzmUY9XDWPjkAgzDPEHLlm4gygKztleRupzQDsr608=' 'sha256-JEwSVBrCE741EV9rbuu3EqBV+pc2dpFhRHIV6+9J0mY=' 'sha256-+2jm5SNRB4WubmMQDChnXjseeCIhj34lMFWKhVn1qBE=' 'sha256-y7y27Uq4p88K6EhwSUfbhCk9VakghnU\/hORgjhopExY=' 'sha256-yt+SNVxRkIi6H6yb7ndFuZM1esMX9esg3UpRHaTsyVk=' 'sha256-VJbrKjdtohscRRMgakh5WvNM8RQrmNBXrCe7oyOFR7k=' 'sha256-TRsq5vkmHlqVgkpiE7RBLWrt6Punq9JsRG+VubnDdAI=' 'sha256-UfdivO7F44Ja9k+up5zEwxTTjeacqe+5aLcO5TOAbnw=' 'sha256-wODu+VfY8ND+vPVOUkzkfC\/1jpkO6aSN5rGEBoSdnys='; font-src 'self' data: https:\/\/*.content.powerapps.com https:\/\/*.static.powerapps.com https:\/\/static2.sharepointonline.com https:\/\/*.cdn.office.net https:\/\/appsforoffice.microsoft.com https:\/\/spoprod-a.akamaihd.net; form-action 'self'; report-uri https:\/\/csp.microsoft.com\/report\/PowerAutomate-MakerPortal;","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/abt.s3.yandex.net https:\/\/api.mindbox.ru https:\/\/emd.hybrid.ai https:\/\/dss.hybrid.ai https:\/\/pxl.webarchivator.com https:\/\/gc.kis.v2.scr.kaspersky-labs.com https:\/\/aebdgd.com https:\/\/polyfill.io https:\/\/api.mindbox.ru https:\/\/sso-forms-prod.t-static.ru https:\/\/browser.sentry-cdn.com https:\/\/captcha-api.yandex.ru https:\/\/sdk.kokocads.com https:\/\/yandex.ru https:\/\/get4click.ru https:\/\/top-fwz1.mail.ru https:\/\/cdn.retailrocket.ru https:\/\/www.googletagmanager.com https:\/\/yastatic.net https:\/\/cdn.diginetica.net https:\/\/lcab.talk-me.ru https:\/\/x.cnt.my https:\/\/gdeslon.ru https:\/\/mc.yandex.ru https:\/\/vk.com https:\/\/cdn.rutarget.ru https:\/\/retagro.com https:\/\/widget.me-talk.ru https:\/\/mod.calltouch.ru https:\/\/www.google-analytics.com https:\/\/clicks.gdeslon.ru https:\/\/privacy-cs.mail.ru https:\/\/api-maps.yandex.ru https:\/\/personalization-web-stable.mindbox.ru https:\/\/web-static.mindbox.ru https:\/\/s4fmvl.com https:\/\/sso-forms-prod.s3-msk.tinkoff.ru https:\/\/aebdgd.ru https:\/\/connect.facebook.net https:\/\/static.me-talk.ru https:\/\/mc.yandex.by https:\/\/mc.yandex.kz https:\/\/mc.yandex.com https:\/\/oleg-dirtrider.github.io; script-src-elem 'self' 'unsafe-inline' https:\/\/vk.com https:\/\/sso-forms-prod.t-static.ru https:\/\/privacy-cs.mail.ru https:\/\/aebdgd.com https:\/\/vk.com https:\/\/yandex.ru https:\/\/gdeslon.ru https:\/\/api-maps.yandex.ru https:\/\/abt.s3.yandex.net https:\/\/yandex.ru https:\/\/abt.s3.yandex.net https:\/\/api.mindbox.ru https:\/\/sso-forms-prod.t-static.ru https:\/\/browser.sentry-cdn.com https:\/\/captcha-api.yandex.ru https:\/\/lcab.talk-me.ru https:\/\/cdn.retailrocket.ru https:\/\/yastatic.net https:\/\/cdn.diginetica.net https:\/\/clicks.gdeslon.ru https:\/\/mc.yandex.ru https:\/\/mc.yandex.com https:\/\/web-static.mindbox.ru https:\/\/x.cnt.my https:\/\/top-fwz1.mail.ru https:\/\/tm.oriol.pro https:\/\/cdn.targetads.io https:\/\/st.hybrid.ai https:\/\/fp.hybrid.ai https:\/\/dss.hybrid.ai https:\/\/emd.hybrid.ai https:\/\/pxl.webarchivator.com https:\/\/citydsp.com https:\/\/retagro.com https:\/\/get4click.ru https:\/\/www.google-analytics.com https:\/\/gdeslon.ru https:\/\/cdn.rutarget.ru https:\/\/vk.com https:\/\/www.googletagmanager.com https:\/\/widget.me-talk.ru https:\/\/banners.adfox.ru https:\/\/code.createjs.com; worker-src 'self' blob:; report-uri https:\/\/sentry.adv.ru\/api\/27\/security\/?sentry_key=b61ff971011b47378e5c5097a24bf21a;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-vMJACf4qvhwTi6sdTi6x' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https:\/\/csp.withgoogle.com\/csp\/scfe","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-L+NtoJmV0J0T6CyRhKY+Zw==' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; connect-src 'self';","count":1},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' https:\/\/www.google.com https:\/\/analytics.google.com https:\/\/pixel-config.reddit.com https:\/\/analytics.ahrefs.com https:\/\/ipv4.podscribe.com https:\/\/tags.srv.stackadapt.com https:\/\/a.klaviyo.com https:\/\/r.clarity.ms https:\/\/answersstatus.pagescdn.com https:\/\/analytics.heyhalda.com https:\/\/app.heyhalda.com https:\/\/insight.adsrvr.org https:\/\/3.212.39.155 https:\/\/44.228.85.26 https:\/\/34.215.155.61 https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com; font-src 'self' https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/fonts.gstatic.com; frame-src 'self' https:\/\/insight.adsrvr.org https:\/\/match.adsrvr.org https:\/\/www.youtube.com https:\/\/answers-embed.bucknell.pagescdn.com; img-src 'self' data: https:\/\/fei.pro-market.net https:\/\/alb.reddit.com https:\/\/verifi.podscribe.com https:\/\/c.clarity.ms https:\/\/um.simpli.fi https:\/\/www.googleadservices.com https:\/\/cm.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/www.google.com https:\/\/www.google.co.cr https:\/\/x.bidswitch.net https:\/\/bcp.crwdcntrl.net https:\/\/idsync.rlcdn.com https:\/\/simplifi.partners.tremorhub.com https:\/\/pixel.tapad.com https:\/\/aa.agkn.com https:\/\/ps.eyeota.net https:\/\/s.ad.smaato.net https:\/\/eb2.3lift.com https:\/\/sync.1rx.io https:\/\/image2.pubmatic.com https:\/\/synchroscript.deliveryengine.adswizz.com https:\/\/us-u.openx.net https:\/\/pixel.rubiconproject.com https:\/\/ib.adnxs.com https:\/\/sync.intentiq.com https:\/\/loadm.exelator.com https:\/\/user-sync.fwmrm.net https:\/\/ups.analytics.yahoo.com https:\/\/sync.bfmio.com https:\/\/ce.lijit.com https:\/\/ml314.com https:\/\/onetag-sys.com https:\/\/pippio.com https:\/\/c.bing.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' https:\/\/assets.sitescdn.net https:\/\/www.googletagmanager.com https:\/\/www.redditstatic.com https:\/\/js.adsrvr.org https:\/\/tags.srv.stackadapt.com https:\/\/dx.mountain.com https:\/\/px.mountain.com https:\/\/gs.mountain.com https:\/\/static.klaviyo.com https:\/\/static-tracking.klaviyo.com https:\/\/www.clarity.ms https:\/\/scripts.clarity.ms https:\/\/tag.simpli.fi https:\/\/i.simpli.fi https:\/\/d34r8q7sht0t9k.cloudfront.net https:\/\/analytics.ahrefs.com https:\/\/www.youtube.com https:\/\/app.heyhalda.com calendar.bucknell.edu https:\/\/bucknell.photoshelter.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/fd.cleantalk.org https:\/\/maxcdn.bootstrapcdn.com https:\/\/unpkg.com https:\/\/www.google.com; style-src 'self' 'unsafe-inline' https:\/\/assets.sitescdn.net https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/tags.srv.stackadapt.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/fonts.googleapis.com https:\/\/unpkg.com https:\/\/use.fontawesome.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'none'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: blob: https:\/\/api-visitor-us-east.velaro.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/shg.factory73.com https:\/\/appnhs24wp222b8656a3.blob.core.windows.net https:\/\/appnhs24wpcb76d5f712.blob.core.windows.net https:\/\/appnhs24wp41a8c38064.blob.core.windows.net; font-src 'self' data: https:\/\/cdnjs.cloudflare.com https:\/\/appnhs24wp222b8656a3.blob.core.windows.net https:\/\/appnhs24wpcb76d5f712.blob.core.windows.net https:\/\/appnhs24wp41a8c38064.blob.core.windows.net; style-src 'self' 'unsafe-inline' https:\/\/cdnjs.cloudflare.com https:\/\/local.test.s.url https:\/\/appnhs24wp222b8656a3.blob.core.windows.net https:\/\/appnhs24wpcb76d5f712.blob.core.windows.net https:\/\/appnhs24wp41a8c38064.blob.core.windows.net; script-src 'self' 'unsafe-inline' https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/cc.cdn.civiccomputing.com https:\/\/local.test.s.url https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/nhs24-shgapi-live.azurewebsites.net https:\/\/www.browsealoud.com https:\/\/appnhs24wp222b8656a3.blob.core.windows.net https:\/\/appnhs24wpcb76d5f712.blob.core.windows.net https:\/\/appnhs24wp41a8c38064.blob.core.windows.net; connect-src 'self' https:\/\/api.postcodes.io https:\/\/www.browsealoud.com https:\/\/plus.browsealoud.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/apikeys.civiccomputing.com https:\/\/appnhs24wp222b8656a3.blob.core.windows.net https:\/\/appnhs24wpcb76d5f712.blob.core.windows.net; frame-src 'self' https:\/\/www.youtube.com; media-src 'self' blob:; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests; block-all-mixed-content","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' https:; frame-src https:; child-src https:; frame-ancestors 'self'; form-action 'self';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.clarity.ms https:\/\/*.mediaad.org https:\/\/*.mediaffic.ir https:\/\/*.tapsell.ir; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https:\/\/*.clarity.ms https:\/\/*.google-analytics.com https:\/\/*.mediaad.org https:\/\/*.tapcell.ir https:\/\/*.mediaffic.ir; frame-src 'self' https:\/\/*.mediaad.org https:\/\/*.mediaffic.ir; frame-ancestors 'self'; base-uri 'self'; form-action 'self'","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/static4.smokva.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/static4.smokva.com https:\/\/js.pusher.com https:\/\/challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.bunny.net https:\/\/static4.smokva.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' blob: https: wss:; media-src 'self' blob: https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; frame-src https:\/\/challenges.cloudflare.com","count":1},{"content-security-policy-report-only":" child-src 'self' blob:; connect-src 'self' *.adentifi.com *.adnxs.com *.adobeaemcloud.com *.agkn.com *.amazon-adsystem.com *.analytics.google.com *.awsapprunner.com *.awswaf.com *.azurefd.net *.bing.com *.contentsquare.net *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.lexus.com *.linkedin.com *.omtrdc.net *.on.aws *.rlcdn.com *.scene7.com *.teads.tv *.toyota.com *.turn.com *.undertone.com *.yimg.com adserv.mobi alb.reddit.com ara.paa-reporting-advertising.amazon at.alicdn.com bat.bing-int.com bat.bing.net browser-intake-datadoghq.com cm.everesttech.net connect.carfax.com conv-pix.adstk.io conversions-config.reddit.com ct.pinterest.com data: doh.cq0.co dpm.demdex.net dsp.tk0x1.com evnt.byspotify.com fonts.gstatic.com gdpr.loopme.com i18n.contentsquare.com insight.adsrvr.org kcc0.com lciapi.ninthdecimal.com login.microsoftonline.com maps.googleapis.com maps.gstatic.com match.adsrvr.org pagead2.googlesyndication.com peornia-comargers.icu pixel-config.reddit.com pixel.logtrackback.com pixel.quantserve.com pixels.spotify.com pt.ispot.tv px.gumgum.com rum.hlx.page s-a.innovid.com s.pinimg.com snap.licdn.com snapshot.carfax.com sp.analytics.yahoo.com tagging-staging.shiftdigitalapps.io tagging.shiftdigitalapps.io tags.srv.stackadapt.com tags.w55c.net tk0x1.com toyota.demdex.net tr.snapchat.com tr6.snapchat.com wss:\/\/*.toyota.com www.googleadservices.com www.googletagmanager.com www.pinterest.com www.redditstatic.com www.youtube.com x.bidswitch.net zen-dco.innovid.com; default-src 'self' *.lexus.com login.microsoftonline.com; font-src 'self' *.lexus.com *.linkedin.com *.toyota.com assets.alicdn.com at.alicdn.com data: fonts.googleapis.com fonts.gstatic.com login.microsoftonline.com snap.licdn.com www.gazooracing.com; frame-src 'self' *.adnxs.com *.amazon-adsystem.com *.bing.com *.contentsquare.net *.doubleclick.net *.ep-mimecast.snapchat.com *.facebook.com *.flashtalking.com *.google.com *.lexus.com *.teads.tv ct.pinterest.com insight.adsrvr.org lciapi.ninthdecimal.com login.microsoftonline.com m.youtube.com match.adsrvr.org pixel.rubiconproject.com rtr.innovid.com toyota.demdex.net tr.snapchat.com www.googletagmanager.com www.youtube-nocookie.com www.youtube.com; img-src 'self' *.adentifi.com *.adnxs.com *.adobeaemcloud.com *.adstk.io *.agkn.com *.amazon-adsystem.com *.azurefd.net *.bing.com *.cognitivlabs.com *.contentsquare.net *.doubleclick.net *.facebook.com *.facebook.net *.flashtalking.com *.google.com *.inventoryrsc.com *.lexus.com *.linkedin.com *.rlcdn.com *.scene7.com *.teads.tv *.toyota.com *.tribalfusion.com *.turn.com *.tvsquared.com *.undertone.com *.yimg.com abs.twimg.com accretivemedia.go2cloud.org ade.googlesyndication.com adserv.mobi ag.innovid.com alb.reddit.com analytics.twitter.com bat.bing.net cm.everesttech.net ct.pinterest.com data: dpm.demdex.net dsp.tk0x1.com fonts.gstatic.com hb.yahoo.net i.ytimg.com images.inventoryservices.lexusdealerdigital.com img.alicdn.com insight.adsrvr.org jadserve.postrelease.com kcc0.com lciapi.ninthdecimal.com lexus.assets.shiftdigitalinventory.com lexus.com log.pinterest.com login.microsoftonline.com maps.googleapis.com maps.gstatic.com match.adsrvr.org pagead2.googlesyndication.com pbs.twimg.com peornia-comargers.icu pippio.com pixel-ssn.quantserve.com pixel.logtrackback.com pixel.quantserve.com pixel.rubiconproject.com pr-bh.ybp.yahoo.com pt.ispot.tv px.gumgum.com rtr.innovid.com s-a.innovid.com snap.licdn.com snapshot.carfax.com sp.analytics.yahoo.com static.carfax.com static.reportdelivery.production.aws.carfax.io tagging-staging.shiftdigitalapps.io tagging.shiftdigitalapps.io tags.srv.stackadapt.com tags.w55c.net tk0x1.com trkn.us twittercounter.com ups.analytics.yahoo.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com www.pinterest.com www.youtube.com x.bidswitch.net yt3.ggpht.com zen-dco.innovid.com; media-src 'self' *.doubleclick.net *.lexus.com dts.innovid.com m.youtube.com pdst.fm s-static.innovid.com www.googleadservices.com www.youtube-nocookie.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.adnxs.com *.agkn.com *.amazon-adsystem.com *.awswaf.com *.azureedge.net *.azurefd.net *.bing.com *.contentsquare.com *.contentsquare.net *.doubleclick.net *.facebook.net *.google.com *.linkedin.com *.rlcdn.com *.teads.tv *.toyota.com *.tribalfusion.com *.turn.com *.tvsquared.com *.yimg.com accretivemedia.go2cloud.org adserv.mobi assets.adobedtm.com bat.bing-int.com c.gumgum.com cdn.pdst.fm ct.pinterest.com dts.innovid.com g.alicdn.com i.loopme.me js.adsrvr.org js.adstk.io login.microsoftonline.com maps.googleapis.com pagead2.googlesyndication.com peornia-comargers.icu pixel.byspotify.com pixel.mathtag.com rules.quantcount.com rum.hlx.page s-static.innovid.com s.pinimg.com sc-static.net scripts.inmarkethub.com secure.quantserve.com snap.licdn.com snapshot.carfax.com static.ads-twitter.com tagging-staging.shiftdigitalapps.io tagging.shiftdigitalapps.io tags.srv.stackadapt.com tr.snapchat.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com www.redditstatic.com www.youtube-nocookie.com www.youtube.com; style-src 'self' 'unsafe-inline' *.lexus.com *.toyota.com fonts.googleapis.com snapshot.carfax.com tags.srv.stackadapt.com www.youtube.com; worker-src 'self' 'unsafe-inline' *.lexus.com blob: data:;upgrade-insecure-requests; report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pubd963f598149f172b4b36c022bf30d5d5&dd-evp-origin=content-security-policy&ddsource=csp-report","count":1},{"content-security-policy-report-only":" default-src 'self' adobedtm.com *.adobedtm.com adroll.com *.adroll.com ads-twitter.com *.ads-twitter.com afterpay.com *.afterpay.com apxprogrammatic.com *.apxprogrammatic.com bazaarvoice.com *.bazaarvoice.com bing.com *.bing.com boldchat.com *.boldchat.com braintree-api.com *.braintree-api.com braintreegateway.com *.braintreegateway.com brcdn.com *.brcdn.com cloudflare.com *.cloudflare.com cookielaw.org *.cookielaw.org demdex.net *.demdex.net dotomi.com *.dotomi.com doubleclick.net *.doubleclick.net facebook.net *.facebook.net fullstory.com *.fullstory.com genpt.com *.genpt.com google-analytics.com *.google-analytics.com google.ca *.google.ca google.com *.google.com googleadservices.com *.googleadservices.com googletagmanager.com *.googletagmanager.com fonts.gstatic.com iesnare.com *.iesnare.com jst.ai *.jst.ai klaviyo.com *.klaviyo.com livechatinc.com *.livechatinc.com maps.googleapis.com *.maps.googleapis.com maxmind.com *.maxmind.com micpn.com *.micpn.com mmapiws.com *.mmapiws.com napaonline.com *.napaonline.com netmng.com *.netmng.com newrelic.com *.newrelic.com nr-data.net *.nr-data.net omtrdc.net *.omtrdc.net onetrust.com *.onetrust.com paypal.com *.paypal.com paypalobjects.com *.paypalobjects.com pinterest.com *.pinterest.com rakuten.com *.rakuten.com repairpal.com *.repairpal.com rfihub.net *.rfihub.net scene7.com *.scene7.com sentry-cdn.com *.sentry-cdn.com signifyd.com *.signifyd.com skyword.com *.skyword.com smartystreets.com *.smartystreets.com twitter.com *.twitter.com vibescm.com *.vibescm.com vimeo.com *.vimeo.com wp.com *.wp.com youtube.com *.youtube.com localhost *.localhost; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=XG7G1dSUIaCPfDff4oLP7CsZfxHz1rrSVlAgH1PdiAI-1788505779.2516997-1.0.1.1-Tl057SaKFQtbLXkwNR8B9QjINP5hDSFMqW98zYZs3j5Wnvl_vxhXu7RVTo0SjYEgflHNjeszzlfNbvuy9YuIOfpmgPJDbksPddLlRGr84YSkwgeUcuha_qDkVKWbLohEUF1XKqI3C.SVqIeGblGtYXEdtY3SsL84wNaMm4V_uw8zfqQJI8BSc09yUGrqYPUj; report-to cf-pgfufhdqrljfjopw","count":1},{"content-security-policy-report-only":" default-src adtrafficquality.google *.adtrafficquality.google ajax.googleapis.com *.ajax.googleapis.com jsdelivr.net *.jsdelivr.net 'self' altmetric.com *.altmetric.com bootstrapcdn.com *.bootstrapcdn.com cloudflare.com *.cloudflare.com cloudflareinsights.com *.cloudflareinsights.com d1bxh8uas1mnw7.cloudfront.net *.d1bxh8uas1mnw7.cloudfront.net d3js.org *.d3js.org dimensions.ai *.dimensions.ai doubleclick.net *.doubleclick.net facebook.net *.facebook.net google-analytics.com *.google-analytics.com google.com *.google.com google.com.co *.google.com.co googleadservices.com *.googleadservices.com googletagmanager.com *.googletagmanager.com gstatic.com *.gstatic.com instagram.com *.instagram.com plu.mx *.plu.mx translate.googleapis.com *.translate.googleapis.com twitter.com *.twitter.com udea.edu.co *.udea.edu.co unpkg.com *.unpkg.com; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=j6n0Z2Ra6rMuJxMt3CLxGrxHy3ueImA868TRboFvK6M-1788506260.4377444-1.0.1.1-yMNyCHdU2VnNEo4fdKSV47wFQKsfe3GkAjdI.z6ASKYU3KCmQ_dWS4xp4I5XRAUFpdWfvTzHHFQnkL4mBNh.mm3Ubxk9O8InPusB8FpSb25GazdKljHl1.GFJrJhp4HHKji49rSWFgsau8EP2C6_JGX9484a.HNQdv5W7km8oGUArle7xPYAcLdzlDrV0.FSdXavD91aFbRrFNIrC0n4vQ; report-to cf-ivrbwmxuxfhgwnsq","count":1},{"content-security-policy-report-only":" script-src 'unsafe-eval' 'unsafe-inline' https: 'nonce-1eff6ec999a52187e8d001bcc3404c03' 'strict-dynamic'; report-uri \/api\/fb\/cspLogs; script-src-attr 'sha256-bwK6T5wZVTANitXbrTsel7kl\/PyCjCd\/Dq5Qoz3imjM=' 'unsafe-hashes';","count":1},{"content-security-policy-report-only":" default-src 'self' *.commerzbank.de; script-src 'self' *.commerzbank.de 'unsafe-inline' 'unsafe-eval' https:\/\/*.googletagmanager.com https:\/\/googletagmanager.com https:\/\/tagmanager.google.com https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/pagead2.googlesyndication.com https:\/\/googleads.g.doubleclick.net extend.vimeocdn.com www.facebook.com connect.facebook.net; style-src 'self' *.commerzbank.de 'unsafe-inline' 'unsafe-eval' https:\/\/googletagmanager.com https:\/\/tagmanager.google.com; frame-src 'self' *.commerzbank.de blob: https:\/\/www.googletagmanager.com https:\/\/*.fls.doubleclick.net player.vimeo.com; worker-src 'self' *.commerzbank.de blob:; connect-src 'self' *.commerzbank.de https:\/\/*.googletagmanager.com https:\/\/*.google.com https:\/\/google.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/ad.doubleclick.net https:\/\/*.g.doubleclick.net https:\/\/*.google.de https:\/\/*.google.bg https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com vimeo.com www.facebook.com connect.facebook.net https:\/\/bf71104dpj.bf.dynatrace.com\/bf; font-src 'self' *.commerzbank.de data:; img-src 'self' *.commerzbank.de https: data: https:\/\/*.googletagmanager.com https:\/\/googletagmanager.com https:\/\/*.google-analytics.com https:\/\/ad.doubleclick.net https:\/\/*.g.doubleclick.net https:\/\/google.com https:\/\/*.google.com https:\/\/*.google.de https:\/\/*.google.bg https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com https:\/\/ade.googlesyndication.com https:\/\/adservice.google.com i.vimeocdn.com www.facebook.com connect.facebook.net; media-src 'self' *.commerzbank.de data:; base-uri 'self'; report-uri https:\/\/tp.commerzbank.de\/csp;","count":1},{"content-security-policy-report-only":" default-src 'self' cdn.segment.com myob.com *.myob.com *.myobdev.com *.ninetailed.co *.clarity.ms *.bing.com *.linkedin.com *.reddit.com connect.facebook.net *.facebook.com *.fullstory.com *.segmentapis.com *.google.com.au *.redditstatic.com d.impactradius-event.com analytics.tiktok.com analytics-ipv6.tiktokw.us www.googletagmanager.com *.hsforms.net *.hsforms.com *.hs-scripts.com *.hs-banner.com *.hubspot.com *.hubspotfeedback.com *.hs-analytics.net *.hsadspixel.net *.segment.io *.hsappstatic.net *.clickagy.com *.adsrvr.org *.zoominfo.com feedback.hubapi.com *.survicate.com snap.licdn.com *.pinimg.com *.google.com *.google-analytics.com fast.wistia.net *.mypurecloud.com.au *.newrelic.com *.pinterest.com *.zi-scripts.com *.doubleclick.net *.wistia.com *.youtube.com *.youtu.be *.jsdelivr.net *.algolia.io *.algolia.net *.algolia.com alg.li *.algolianet.com *.ctfassets.net *.sentry-cdn.com *.sentry.io *.contentful.com *.survicate-cdn.com *.googleapis.com *.zdassets.com *.zendesk.com *.googleadservices.com myob.74xz8u.net d.impct.site google.com recaptcha.net *.gstatic.com d34r8q7sht0t9k.cloudfront.net ipv4.pdscrb.com tracking-api.g2.com cdn.veritonic.com *.veritonicmetrics.com tr.capterra.com bzrcdn.openai.com bzr.openai.com *.litix.io bam.nr-data.net *.hubapi.com csp.withgoogle.com ws: blob:; style-src 'self' *.myob.com *.myobdev.com *.wistia.com *.survicate.com *.survicate-cdn.com www.googletagmanager.com *.googleapis.com *.hsappstatic.net *.gstatic.com *.youtube.com 'unsafe-inline' ws: blob:; img-src 'self' *.myob.com *.myobdev.com *.wistia.com *.ctfassets.net *.survicate-cdn.com *.survicate.com *.google-analytics.com *.googleadservices.com www.googletagmanager.com *.doubleclick.net *.facebook.com connect.facebook.net *.linkedin.com snap.licdn.com *.hubspot.com *.hsforms.com *.hsforms.net *.bing.com *.clarity.ms *.google.com *.google.com.au *.gstatic.com *.reddit.com *.clickagy.com *.adsrvr.org *.youtube.com i.ytimg.com yt3.ggpht.com *.pdscrb.com *.adnxs.com *.rubiconproject.com *.tapad.com *.casalemedia.com *.pubmatic.com *.bidswitch.net *.adswizz.com *.covatic.io data: blob:; font-src 'self' *.myob.com *.myobdev.com *.wistia.com fast.wistia.net *.survicate-cdn.com fonts.gstatic.com data:; object-src 'none'; frame-src 'self' *.youtube.com *.youtu.be *.wistia.com *.hubspot.com *.hsforms.com *.hsforms.net *.survicate.com *.mypurecloud.com.au app.contentful.com www.googletagmanager.com www.google.com www.recaptcha.net google.com *.doubleclick.net *.pinterest.com *.adsrvr.org *.adnxs.com *.casalemedia.com *.rubiconproject.com *.pubmatic.com *.bidswitch.net *.ninetailed.io *.widgets.ninetailed.io; frame-ancestors 'self' https:\/\/app.contentful.com; script-src 'nonce-MzQyMWU5NWItYzc4YS00NTQ2LThhMDUtMzU1YzlkNjkxMjE3' 'strict-dynamic' 'unsafe-eval' ws: blob:; report-uri \/api\/csp-report;","count":1},{"content-security-policy-report-only":" default-src 'self' https: data: blob:; base-uri 'self'; object-src 'none'; img-src 'self' https: data: blob:; font-src 'self' https: data:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: data: blob:; worker-src 'self' blob:; manifest-src 'self'; form-action 'self' https:; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hotjar.com *.amplitude.com *.ads-twitter.com use.typekit.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.segment.com *.doubleclick.net sc-static.net *.google.com *.gstatic.com *.googlesyndication.com connect.facebook.net js.stripe.com cdn.seon.io www.redditstatic.com analytics.tiktok.com bat.bing.com *.checkout.com; font-src 'self' data: fonts.gstatic.com use.typekit.net frontend-assets.sorare.tech frontend-assets.sorare.com frontend-assets.sorare.dev; media-src 'self' *.ctfassets.net frontend-assets.sorare.com frontend-assets.sorare.tech frontend-assets.sorare.dev assets.sorare.com assets.sorare.tech assets.sorare.dev; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net use.typekit.net use.fontawesome.com blob:; connect-src *; img-src * data:; frame-src *; manifest-src 'self' https:\/\/sorare.cloudflareaccess.com; object-src 'none'; worker-src blob:;","count":1},{"content-security-policy-report-only":" default-src 'none'; child-src 'self' https:\/\/info.arup.com; connect-src 'self' data: 173-yrh-728.mktoresp.com\/ 173-yrh-728.mktoweb.com\/ https:\/\/*.marketo.com https:\/\/*.marketo.net https:\/\/*.mktoutil.com https:\/\/*.mktoweb.com https:\/\/173-yrh-728.mktoresp.com https:\/\/a.clarity.ms https:\/\/analytics-ipv6.tiktokw.us https:\/\/analytics.google.com https:\/\/analytics.google.com\/ https:\/\/analytics.tiktok.com https:\/\/api.killadsapi.com https:\/\/api.mf.webcontentassessor.com https:\/\/api.software-downloading.com https:\/\/apm-volcano.zuoyebang.com https:\/\/app.reprintsdesk.com https:\/\/baidustatics.net https:\/\/c.ba.contentsquare.net https:\/\/cdn-ukwest.onetrust.com https:\/\/cdn-ukwest.onetrust.com\/ https:\/\/cdn.shopimgs.com https:\/\/cdn.snitcher.com\/ https:\/\/cdnml.global-cache.online https:\/\/cdnmmh.global-cache.online https:\/\/code.jquery.com https:\/\/connect.facebook.net\/ https:\/\/dc.services.visualstudio.com\/v2\/track https:\/\/esp-eu.aptrinsic.com https:\/\/geolocation.onetrust.com\/cookieconsentpub\/v1\/geo\/location https:\/\/info.arup.com https:\/\/l.clarity.ms https:\/\/pagead2.googlesyndication.com\/ccm\/ https:\/\/player.podigee-cdn.net https:\/\/privacyportal-uk.onetrust.com https:\/\/px.ads.linkedin.com\/ https:\/\/radar.snitcher.com https:\/\/region1.analytics.google.com https:\/\/region1.google-analytics.com\/g\/ https:\/\/res-1.cdn.office.net https:\/\/stats.g.doubleclick.net https:\/\/vc.hotjar.io\/ https:\/\/www.facebook.com\/ https:\/\/www.google.co.uk https:\/\/www.google.com https:\/\/www.google.ie\/ https:\/\/www.googletagmanager.com https:\/\/y.clarity.ms www.google-analytics.com\/g\/ www.google.com\/ccm\/; font-src 'self' data: https:\/\/*.cloudfront.net\/graphik\/ https:\/\/*.cloudfront.net\/lato\/ https:\/\/fonts.gstatic.com\/ https:\/\/info.arup.com https:\/\/player.podigee-cdn.net; form-action 'self' https:\/\/info.arup.com https:\/\/www.facebook.com\/; frame-src 'self' 173-yrh-728.mktoresp.com\/ 173-yrh-728.mktoweb.com\/ https:\/\/flo.uri.sh\/ https:\/\/info.arup.com https:\/\/player.podigee-cdn.net https:\/\/td.doubleclick.net https:\/\/www.googletagmanager.com\/ https:\/\/www.youtube-nocookie.com; img-src 'self' data: https:\/\/*.google.co.in https:\/\/*.linkedin.com https:\/\/a.emea01.idio.episerver.net\/ https:\/\/c.clarity.ms https:\/\/cdn-ukwest.onetrust.com\/ https:\/\/info.arup.com https:\/\/player.podigee-cdn.net https:\/\/public.flourish.studio\/resources\/bosh.svg https:\/\/px.ads.linkedin.com https:\/\/px.ads.linkedin.com\/ https:\/\/px4.ads.linkedin.com\/ https:\/\/www.facebook.com\/ https:\/\/www.google.ca https:\/\/www.google.co.uk https:\/\/www.google.ie\/ https:\/\/www.googletagmanager.com https:\/\/www.googletagmanager.com\/td www.facebook.com\/privacy_sandbox\/ www.google.com\/pagead\/; media-src 'self' https:\/\/info.arup.com; script-src-elem 'self' 'unsafe-inline' 173-yrh-728.mktoresp.com\/ 173-yrh-728.mktoweb.com\/ https:\/\/*.marketo.com https:\/\/acsbapp.com\/apps\/app\/dist\/js\/app.js https:\/\/analytics.tiktok.com https:\/\/cdn-ukwest.onetrust.com\/scripttemplates\/ https:\/\/connect.facebook.net\/ https:\/\/googleads.g.doubleclick.net https:\/\/info.arup.com https:\/\/js.monitor.azure.com\/scripts\/b\/ai.2.gbl.min.js https:\/\/lonrtp1.marketo.com https:\/\/munchkin.marketo.net\/ https:\/\/player.podigee-cdn.net https:\/\/public.flourish.studio\/resources\/embed.js https:\/\/radar.snitcher.com https:\/\/s.emea01.idio.episerver.net\/ia.js https:\/\/script.hotjar.com\/ https:\/\/scripts.clarity.ms https:\/\/snap.licdn.com\/li.lms-analytics\/ https:\/\/static.hotjar.com\/c\/ https:\/\/www.clarity.ms https:\/\/www.googletagmanager.com\/ https:\/\/www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/connect.facebook.net\/ https:\/\/info.arup.com https:\/\/player.podigee-cdn.net https:\/\/public.flourish.studio\/resources\/embed.js https:\/\/radar.snitcher.com; style-src-elem 'self' 'unsafe-inline' 173-yrh-728.mktoresp.com\/ 173-yrh-728.mktoweb.com\/ https:\/\/cdn.jsdelivr.net\/npm\/gsap@3.12.5\/dist\/gsap.min.js https:\/\/info.arup.com https:\/\/rtp-static.marketo.com; style-src 'self' 'unsafe-inline' https:\/\/info.arup.com; script-src-attr https:\/\/info.arup.com https:\/\/public.flourish.studio\/resources\/embed.js https:\/\/radar.snitcher.com; base-uri https:\/\/info.arup.com; frame-ancestors https:\/\/info.arup.com; manifest-src https:\/\/info.arup.com; navigate-to https:\/\/info.arup.com; object-src https:\/\/info.arup.com; prefetch-src https:\/\/info.arup.com; style-src-attr https:\/\/info.arup.com; worker-src https:\/\/info.arup.com; report-to stott-security-endpoint;report-uri https:\/\/www.arup.com\/stott.security.optimizely\/api\/cspreporting\/reporturiviolation\/;","count":1},{"content-security-policy-report-only":" default-src 'self' http:\/\/*.hotjar.com:* https:\/\/*.hotjar.com:* http:\/\/*.hotjar.io https:\/\/*.hotjar.io wss:\/\/*.hotjar.com ; script-src  'report-sample' 'self' 'unsafe-eval' 'sha256-DXn3s\/4YxFMzeJ\/A5gjzuC0rWhzyk0SyyxuYNZJmzIk=' 'sha256-vcyDAqC3FhDj7EQXaK8q+v99Tl6OFxdXaH78ZGY4E4o=' 'sha256-IVTixZn+6cCCDCbV81FbiLr+tQcQNWJBVNQCLBY9R1o='  'sha256-rhHBN5crgRlkZOsUoaeA5v8QVm1B7TZMAPay6pGn1+Y=' 'sha256-WcBCCmbLPJQqjR5mwdyqnULxC7+IG8Znd3x\/IxpXL+U=' 'sha256-rBrTgk4F\/JRLLThC7ln+W8x1zgAeI6tIFAhW5EPFd1I=' 'sha256-w75SxlN6rw0wbHhTV1xNPj0em4LHTFSa17eYR+gFbXg=' 'sha256-gxjQMNTWQtcITxtZmXUTZRbXD8gi7RUvK4YWKdz8+yY=' 'sha256-Sl7rujPz9OXGo\/Fv\/ji8Vnyj1QmnPi+CTybCaJh45SM='  'sha256-lE+O+OX5mKlsz2kg5bPpTFHYF32Tgvxhy6xg39etttQ=' 'sha256-vr8e+f1qKu5l9nVuC4OROA7+Bp7ci3dZkncoRyI3+bw=' 'sha256-lphW\/tVuE38c8R\/Uk1LxVbzeIW4F2lUFy0QnjSF2l5Q=' 'sha256-7FXKzRkUi1okBTyDwjzIX5JMHceHEGCMQfH7s\/6v1Ec=' 'sha256-e0xROvJsKSf9i8XP3F1FAQK16l80qEavKITwDPROgo4=' 'sha256-hvhzA9QeWUJKMFmW3lECppfWid7Uzg2ZRmu9wYSxNl8='https:\/\/www.seznam.cz\/rs\/static\/rc.js https:\/\/connect.facebook.net https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.googletagmanager.com https:\/\/c.imedia.cz\/js\/retargeting.js https:\/\/connect.facebook.net\/en_US\/fbevents.js https:\/\/googleads.g.doubleclick.net\/pagead\/viewthroughconversion\/776530235\/ https:\/\/piwik.antee.cz\/piwik\/piwik.js https:\/\/sc.lfeeder.com\/lftracker_v1_JMvZ8g1x9qm42pOd.js https:\/\/script.hotjar.com\/modules.84fa04a166a73fe7fc83.js https:\/\/static.hotjar.com\/c\/hotjar-868578.js https:\/\/t.leady.com\/TWSABXgb3KTu24y2\/L.js https:\/\/www.google-analytics.com\/analytics.js https:\/\/www.google-analytics.com\/* https:\/\/www.google.com\/recaptcha\/api.js https:\/\/www.googletagmanager.com\/gtm.js https:\/\/www.gstatic.com\/recaptcha\/releases\/RDRwZ7RcROX_wCxEJ01WeqEX\/recaptcha__cs.js http:\/\/*.hotjar.com https:\/\/*.hotjar.com http:\/\/*.hotjar.io https:\/\/*.hotjar.io ; style-src 'unsafe-inline' 'report-sample' 'self' https:\/\/cdn.antee.cz https:\/\/fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' http:\/\/*.hotjar.com:* https:\/\/*.hotjar.com:* http:\/\/*.hotjar.io https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/in.hotjar.com https:\/\/t.leady.com https:\/\/ws24.hotjar.com https:\/\/www.facebook.com https:\/\/www.google-analytics.com wss:\/\/ws24.hotjar.com; font-src 'self' data: https:\/\/cdn.antee.cz https:\/\/fonts.gstatic.com; frame-src 'self' https:\/\/www.facebook.com\/ https:\/\/docs.google.com\/ https:\/\/bid.g.doubleclick.net\/ https:\/\/docs.google.com\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/recaptcha.google.com\/recaptcha\/ https:\/\/vars.hotjar.com https:\/\/www.google.com; img-src 'self' * 'self'; media-src 'self'; worker-src 'none'; report-to default; report-uri https:\/\/antee.report-uri.com\/r\/d\/csp\/enforce","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https:\/\/c.teramind.co https:\/\/*.hsforms.net https:\/\/*.hsappstatic.net https:\/\/*.hs-scripts.com https:\/\/*.hs-analytics.net https:\/\/*.hscollectedforms.net https:\/\/*.hsadspixel.net https:\/\/*.usemessages.com https:\/\/www.youtube.com https:\/\/*.hotjar.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/www.googleadservices.com https:\/\/*.doubleclick.net https:\/\/www.gstatic.com https:\/\/*.mxpnl.com https:\/\/snap.licdn.com https:\/\/bat.bing.com https:\/\/connect.facebook.net https:\/\/*.cookieyes.com https:\/\/*.omappapi.com https:\/\/*.opmnstr.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/*.hsforms.net; font-src 'self' data: https:\/\/fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' https:\/\/go.teramind.co; connect-src 'self' https:\/\/c.teramind.co https:\/\/*.hsforms.com https:\/\/*.hubapi.com https:\/\/*.hubspot.com https:\/\/*.hs-analytics.net https:\/\/*.hscollectedforms.net https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.doubleclick.net https:\/\/*.mxpnl.com https:\/\/*.mixpanel.com https:\/\/px.ads.linkedin.com https:\/\/bat.bing.com https:\/\/*.facebook.com https:\/\/*.cookieyes.com https:\/\/*.omappapi.com https:\/\/*.opmnstr.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/api.riverside.fm https:\/\/*.hsforms.com https:\/\/*.hsforms.net https:\/\/*.hubspot.com https:\/\/go.teramind.co https:\/\/www.googletagmanager.com https:\/\/*.doubleclick.net https:\/\/www.facebook.com; report-uri \/_tera\/csp; form-action 'self' https:\/\/*.hsforms.com https:\/\/forms.hubspot.com; worker-src 'self' blob:; manifest-src 'self'","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' 'unsafe-inline' connect.facebook.net platform.linkedin.com platform.twitter.com cdn.matomo.cloud cdn.gtranslate.net translate.google.com translate.googleapis.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com https:\/\/www.google.com; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-eval' 'sha256-Tzu6+wuu1SjTdVaXJEV6PivtY9mRqZb0xhhm2BLRAOA=' 'sha256-7IyttL+tUqfo+WQfAWL3v6YMknUKo9ajmbpNtuTjMN0=' 'sha256-3hfUlZv\/u0yM7A3uB3JvxOvBYAe8qn24uA4O2An1VRY=' 'sha256-MV1RuepqvbyT5NhbRPeSj1juoiQBimzZ\/wO2CMs3kus=' 'sha256-ABZr65Zok8xacqLFUeZR+42Msgxys7C+6WB+vtacJb8=' 'sha256-bHVKPlpu6EceFvLitpQwu5mjjCOghOO0EQqqS41Qn6Q=' 'sha256-wxehmTJycT+YLBVHLN3bWj\/zTcxemiqmfRQzTQW8ir4=' 'sha256-xCJKn7hMM9SELWl17uBsfarS81wpzMEJEmq9eKBxtzs=' 'sha256-+2rXXU3laxTDtQNsImGyQ1X64rn4ISQLNShnWzx821g=' 'sha256-\/J1Ywi0oxHQHCpzRvtKWWe4P+hIt7HcIaSwR9c4c5Rs=' 'sha256-39X4GDwTjoEuiHC\/2kJYF7mNFjiDloAgzPDJAZFmXUA=' 'sha256-4H8OjgRPgGcbXIWnunILQFptlaDulDAprEkdWAmd5rs=' 'sha256-6ncdpKw08Cc1EFsSeeLsVjAIaYvgm1rBcI4cNp12+Qw=' 'sha256-7PIxQkJpqFtF3ibD6pIWa3xB9NioZz\/ynQRYzL0\/GQk=' 'sha256-7gtkfRfWNDeobU0B\/hfsPp2BIWvoaQl9Qnyy5LiRnxs=' 'sha256-FCJSELYJJqB55vIG3t\/ph5fM8YdnNvdK1wyBgKoLBv8=' 'sha256-FTGWq2sxofS5L8Yq87ilEpDqn9l5NkLK0cc3sd7OvnM=' 'sha256-IHOzCHp\/\/Jl1lFsowvMxAPGD+T7zlnWM2mFk53CcUCQ=' 'sha256-Lbd7CfEvDCWYMyHY0+sXbfaSIJoSyADQN1msRc5GDNI=' 'sha256-UIJOLWy\/Osv+QGQ4imdRlRujM6eUI1MSyU7o0yUPUZY=' 'sha256-ZdDTEfl8xrGn7iZ\/2mMDizDIe6JRmep2vz9STHJi4Zs=' 'sha256-av+IGVQJsQwpqceEC0sQFA8e9C8QabH8uLcfyhwM7SQ=' 'sha256-eVK40NIq3UGWc8qEju5kUvLu1HgsUzj88BW49m\/q4j0=' 'sha256-ggRYfkK\/3LVUNlNZMQmNN9BFxap4CrJfPbtZ6v2xbjo=' 'sha256-grcTsfRWbkeUhSuDjdKCkH5D8wGl\/7m\/mQ40fxHu0mw=' 'sha256-jFtAwO73SFINACr8TD6icHqaE8VW008cFmXWwD0f9fM=' 'sha256-r217nY7GmxmFONoUAdkKv3HkplOIco6U4dEWu4mrSIs=' 'sha256-u24cgm8XlTjNvJyJKe51ekUDI8IYMtxoJZ\/6Obf\/+y0=' 'sha256-xGfPUma\/ZEUO\/hLpxJqIvAXja0IQ6z6bdVSim0NgRs0=' 'report-sample' https:\/\/*.doubleclick.net https:\/\/*.cdn4.forter.com https:\/\/*.google.com https:\/\/*.googleadservices.com https:\/\/*.googlesyndication.com https:\/\/*.googletagservices.com https:\/\/*.nr-data.net https:\/\/*.yahoo.com https:\/\/api.bounceexchange.com https:\/\/assets.bounceexchange.com https:\/\/at1.listrakbi.com https:\/\/bat.bing.com https:\/\/bam.nr-data.net https:\/\/cdn.attn.tv https:\/\/cdn.browsiprod.com https:\/\/connect.facebook.net https:\/\/code.jquery.com https:\/\/cdn.jsdelivr.net https:\/\/content.linkedin.com https:\/\/cdn.listrakbi.com https:\/\/connect.nosto.com https:\/\/cdn.roirevolution.com https:\/\/f.clarity.ms https:\/\/googleads.g.doubleclick.net https:\/\/graph.facebook.com https:\/\/geoipwebservice.com https:\/\/google-analytics.com https:\/\/googletagmanager.com https:\/\/guarantee-cdn.com https:\/\/js.facebook.com https:\/\/js-agent.newrelic.com https:\/\/platform.linkedin.com https:\/\/query.yahooapis.com https:\/\/r.bing.com https:\/\/r.webeyez.com https:\/\/static.cloudflareinsights.com https:\/\/ssl.google-analytics.com https:\/\/snap.licdn.com https:\/\/static-exp1.licdn.com https:\/\/services.listrak.com https:\/\/s1.listrakbi.com https:\/\/s.pinimg.com https:\/\/sec.webeyez.com https:\/\/s.yimg.com https:\/\/tag.bounceexchange.com https:\/\/tagmanager.google.com https:\/\/www.clarity.ms https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/sdk.helloextend.com\/extend-sdk-client\/v1\/extend-sdk-client.min.js https:\/\/cdn1.affirm.com\/js\/v2\/affirm.js https:\/\/*.clarity.ms\/s\/0.6.34\/clarity.js;frame-ancestors 'self' *.yahoo.com s.yimg.com;frame-src https:\/\/www.affirm.com\/ https:\/\/creatives.attn.tv\/ https:\/\/r.webeyez.com\/ https:\/\/assets.bounceexchange.com\/;block-all-mixed-content;style-src 'self' 'report-sample' 'unsafe-inline' *.licdn.com *.google.com *.bing.com code.jquery.com cdn.jsdelivr.net cdn.listrakbi.com www.googletagmanager.com;object-src *.googlesyndication.com;child-src 'self' blob: *.googlesyndication.com *.google.com *.facebook.com *.doubleclick.net connect.facebook.net www.googletagmanager.com;base-uri 'self' *.yahoo.com;form-action 'self' *.google.com *.facebook.com connect.facebook.net;worker-src 'self' blob: www.google.com; report-to default","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.sugarondemand.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.avery.com https:\/\/*.osano.com https:\/\/analytics.tiktok.com https:\/\/www.google-analytics.com https:\/\/s.pinimg.com https:\/\/*.bazaarvoice.com https:\/\/*.dynamicyield.com https:\/\/js.squarecdn.com https:\/\/*.usablenet.com https:\/\/www.googletagmanager.com https:\/\/*.livechatinc.com https:\/\/unpkg.com\/web-vitals\/dist\/web-vitals.iife.js https:\/\/*.google.com https:\/\/*.debugbear.com https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/picturefill\/3.0.3\/picturefill.min.js https:\/\/cdn.jsdelivr.net\/npm\/jquery@3.5.1\/dist\/jquery.slim.min.js https:\/\/cdn.jsdelivr.net\/npm\/bootstrap@4.1.3\/dist\/js\/bootstrap.min.js https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/tether\/1.4.0\/js\/tether.min.js https:\/\/*.salesloft.com https:\/\/*.bc0a.com https:\/\/*.attn.tv https:\/\/*.lrkt-in.com https:\/\/connect.facebook.net https:\/\/www.gstatic.com https:\/\/ct.pinterest.com https:\/\/*.curalate.com https:\/\/www.redditstatic.com https:\/\/*.doubleclick.net https:\/\/*.bing.com https:\/\/cdn.dashhudson.com\/web\/js\/board-carousel-embed.js https:\/\/cdn.jsdelivr.net\/npm\/swiper@11\/ https:\/\/*.cloudinary.com https:\/\/ajax.googleapis.com\/ajax\/libs\/jquery\/3.2.1\/jquery.min.js https:\/\/cdn.jsdelivr.net\/npm\/popper.js@1.16.1\/dist\/umd\/popper.min.js https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/lightbox2\/2.11.5\/js\/lightbox-plus-jquery.min.js 'wasm-unsafe-eval' https:\/\/*.glance.net https:\/\/*.glancecdn.net https:\/\/*.amazon-adsystem.com https:\/\/container.pepperjam.com https:\/\/*.lrkt-in.com https:\/\/cdn.lgrckt-in.com https:\/\/cdn.logr-in.com *.udev1a.net *.usablenet.com https:\/\/cdn.jsdelivr.net\/npm\/beerslider@1.0.3\/dist\/BeerSlider.js; style-src 'self' 'unsafe-inline' https:\/\/*.avery.com https:\/\/fonts.googleapis.com https:\/\/*.dynamicyield.com https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/font-awesome\/4.7.0\/css\/font-awesome.min.css https:\/\/*.typekit.net https:\/\/cdn.jsdelivr.net\/npm\/swiper@11\/swiper-bundle.min.css https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/lightbox2\/2.11.5\/css\/lightbox.min.css https:\/\/*.glance.net https:\/\/*.glancecdn.net https:\/\/avery-static-tailwind.s3.us-east-1.amazonaws.com\/ *.udev1a.net *.usablenet.com https:\/\/cdn.jsdelivr.net\/npm\/beerslider@1.0.3\/dist\/BeerSlider.css https:\/\/googletagmanager.com https:\/\/tagmanager.google.com; img-src 'self' data: blob: https:\/\/*.avery.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/*.afterpay.com https:\/\/*.bazaarvoice.com https:\/\/*.doubleclick.net https:\/\/*.usablenet.com https:\/\/www.facebook.com https:\/\/*.dynamicyield.com https:\/\/*.livechatinc.com https:\/\/s3.amazonaws.com https:\/\/*.gstatic.com https:\/\/*.sugarondemand.com https:\/\/i.ytimg.com https:\/\/*.reddit.com https:\/\/*.bing.com https:\/\/*.cloudfront.net https:\/\/likeshop.me https:\/\/images.dashsocial.com https:\/\/images.dashhudson.com https:\/\/*.google.com https:\/\/*.glance.net https:\/\/*.glancecdn.net https:\/\/tvspix.com https:\/\/arttrk.com https:\/\/*.attentivemobile.com; font-src 'self' data: https:\/\/*.avery.com https:\/\/fonts.gstatic.com https:\/\/*.dynamicyield.com https:\/\/cdnjs.cloudflare.com https:\/\/*.squarecdn.com https:\/\/*.bazaarvoice.com https:\/\/*.typekit.net https:\/\/likeshop.me https:\/\/*.glance.net https:\/\/*.glancecdn.net; connect-src 'self' https:\/\/*.avery.com https:\/\/www.googletagmanager.com https:\/\/*.dynamicyield.com https:\/\/*.doubleclick.net https:\/\/dy-api.com https:\/\/www.google-analytics.com https:\/\/*.osano.com https:\/\/ct.pinterest.com https:\/\/analytics.tiktok.com https:\/\/*.bazaarvoice.com https:\/\/*.salesloft.com https:\/\/*.lrkt-in.com https:\/\/*.bc0a.com https:\/\/events.attentivemobile.com https:\/\/*.attn.tv https:\/\/*.afterpay.com https:\/\/server-side-tagging-ykzfrilmoq-uc.a.run.app https:\/\/*.amplitude.com https:\/\/*.google.com https:\/\/*.salsify.com https:\/\/salsify-ecdn.com https:\/\/*.curalate.com https:\/\/ls.chatid.com\/events https:\/\/*.reddit.com https:\/\/www.redditstatic.com https:\/\/*.debugbear.com https:\/\/*.bing.com https:\/\/www.googleadservices.com https:\/\/api.likeshop.me\/gallery-more https:\/\/www.facebook.com *.livechatinc.com wss:\/\/*.glance.net https:\/\/*.glance.net https:\/\/*.glancecdn.net https:\/\/direct-collect.dy-api.com https:\/\/*.amazon-adsystem.com https:\/\/ara.paa-reporting-advertising.amazon https:\/\/analytics-ipv6.tiktokw.us https:\/\/google.com https:\/\/*.lrkt-in.com https:\/\/*.lgrckt-in.com https:\/\/*.logr-in.com https:\/\/*.braintreegateway.com https:\/\/*.braintree-api.com https:\/\/static.dy-api.com; frame-src 'self' https:\/\/*.avery.com https:\/\/ct.pinterest.com https:\/\/*.google.com https:\/\/*.dynamicyield.com https:\/\/*.doubleclick.net https:\/\/*.livechatinc.com https:\/\/*.afterpay.com https:\/\/*.attn.tv https:\/\/www.facebook.com https:\/\/salsify-ecdn.com https:\/\/www.youtube.com https:\/\/server-side-tagging-ykzfrilmoq-uc.a.run.app https:\/\/www.googletagmanager.com https:\/\/*.amazon-adsystem.com https:\/\/*.cloudinary.com https:\/\/*.sugarondemand.com https:\/\/*.glance.net https:\/\/*.braintreegateway.com; frame-ancestors 'self' https:\/\/*.avery.com https:\/\/*.google.com; worker-src 'self' blob:; object-src 'none'; report-uri \/_api\/csp-report; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self';  script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.hsadspixel.net *.hscollectedforms.net *.hsforms.com *.hsforms.net *.hsleadflows.net *.hubspot.com *.hubspot.net *.hubspotfeedback.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.usemessages.com *.hotjar.com https:\/\/js.hubspot.com *.hs-sites.com https:\/\/*.clearbit.com https:\/\/*.clearbitjs.com https:\/\/*.clearbitscripts.com https:\/\/*.g.doubleclick.net https:\/\/app.revenuehero.io https:\/\/community.traefik.io https:\/\/feedback-eu1.hubapi.com https:\/\/feedback.hubapi.com https:\/\/js-eu1.hscta.net https:\/\/js.hscta.net https:\/\/px.ads.linkedin.com https:\/\/r2.leadsy.ai https:\/\/s3-us-west-2.amazonaws.com https:\/\/9xgnrndqve.execute-api.us-west-2.amazonaws.com https:\/\/snap.licdn.com https:\/\/static.ads-twitter.com https:\/\/static.hsappstatic.net https:\/\/traefik.github.io https:\/\/traefik.io https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com https:\/\/x.clearbitjs.com https:\/\/b-code.liadm.com https:\/\/cdn.jsdelivr.net https:\/\/connect.facebook.net https:\/\/platform.twitter.com;  style-src 'self' 'unsafe-inline' *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net https:\/\/7052064.fs1.hubspotusercontent-na1.net https:\/\/cdn2.hubspot.net https:\/\/cdnjs.cloudflare.com https:\/\/fonts.googleapis.com https:\/\/traefik.io https:\/\/www.gstatic.com https:\/\/cdn.jsdelivr.net;  object-src 'none';  base-uri 'self';  child-src 'self' https:\/\/*.hsforms.com;  connect-src 'self' *.liadm.com *.hs-sites.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com *.hubapi.com *.hubspot.com https:\/\/*.google.com https:\/\/www.google.co.in https:\/\/www.google.ca https:\/\/www.google.co.jp https:\/\/www.google.co.kr https:\/\/www.google.co.uk https:\/\/www.google.co.id https:\/\/www.google.co.za https:\/\/www.google.co.tz https:\/\/www.google.co.ma https:\/\/www.google.nl https:\/\/www.google.de https:\/\/www.google.at https:\/\/www.google.es https:\/\/www.google.se https:\/\/www.google.az https:\/\/www.google.so https:\/\/www.google.lk https:\/\/www.google.com.br https:\/\/www.google.com.au https:\/\/www.google.com.sg https:\/\/www.google.com.hk https:\/\/www.google.com.co https:\/\/www.google.com.pe https:\/\/www.google.com.uy https:\/\/www.google.com.eg https:\/\/www.google.ae https:\/\/www.google.al https:\/\/www.google.ba https:\/\/www.google.be https:\/\/www.google.by https:\/\/www.google.ch https:\/\/www.google.cl https:\/\/www.google.co.cr https:\/\/www.google.co.il https:\/\/www.google.co.nz https:\/\/www.google.co.th https:\/\/www.google.co.uz https:\/\/www.google.co.ve https:\/\/www.google.com.ar https:\/\/www.google.com.bd https:\/\/www.google.com.do https:\/\/www.google.com.gh https:\/\/www.google.com.mx https:\/\/www.google.com.ng https:\/\/www.google.com.np https:\/\/www.google.com.ph https:\/\/www.google.com.pk https:\/\/www.google.com.tr https:\/\/www.google.com.tw https:\/\/www.google.com.ua https:\/\/www.google.com.vn https:\/\/www.google.cz https:\/\/www.google.dk https:\/\/www.google.fr https:\/\/www.google.gr https:\/\/www.google.hr https:\/\/www.google.hu https:\/\/www.google.ie https:\/\/www.google.iq https:\/\/www.google.it https:\/\/www.google.kz https:\/\/www.google.lt https:\/\/www.google.lv https:\/\/www.google.no https:\/\/www.google.pl https:\/\/www.google.pt https:\/\/www.google.ro https:\/\/www.google.rs https:\/\/www.google.ru https:\/\/www.google.si https:\/\/www.google.sk https:\/\/www.google.tn https:\/\/hubspot-forms-static-embed.s3.amazonaws.com https:\/\/s3-us-west-2.amazonaws.com https:\/\/9xgnrndqve.execute-api.us-west-2.amazonaws.com https:\/\/www.googleadservices.com https:\/\/*.hotjar.com wss:\/\/*.hotjar.com https:\/\/*.analytics.google.com https:\/\/*.hotjar.io https:\/\/*.clearbit.com https:\/\/*.clearbitjs.com https:\/\/*.clearbitscripts.com https:\/\/*.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/*.google-analytics.com https:\/\/*.traefik.io https:\/\/api.github.com https:\/\/app.clearbit.com https:\/\/app.revenuehero.io https:\/\/containous.ghost.io https:\/\/storage.ghost.io https:\/\/google.com https:\/\/pagead2.googlesyndication.com https:\/\/ingesteer.services-prod.nsvcs.net https:\/\/js-eu1.hscta.net https:\/\/js.hscta.net https:\/\/js.hsforms.net https:\/\/pro.ip-api.com https:\/\/px.ads.linkedin.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/static.scarf.sh https:\/\/static.hsappstatic.net https:\/\/*.ingest.de.sentry.io https:\/\/alocdn.com;  font-src 'self' data: https:\/\/cdnjs.cloudflare.com https:\/\/fonts.gstatic.com https:\/\/use.typekit.net https:\/\/cdn.jsdelivr.net;  frame-src 'self' *.hs-sites-eu1.com *.hs-sites.com *.hsforms.com *.hsforms.net *.hubspot.com *.hubspot.net https:\/\/*.g.doubleclick.net https:\/\/app.netlify.com https:\/\/community.traefik.io https:\/\/play-eu1.hubspotvideo.com https:\/\/play.hubspotvideo.com https:\/\/px.ads.linkedin.com https:\/\/traefik.io https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.youtube.com;  img-src 'self' blob: data: https:;  form-action 'self' https:\/\/*.hsforms.com;  manifest-src 'self' https:\/\/traefik.io;  media-src 'self' data: https:\/\/ssl.gstatic.com;  worker-src 'self'; report-uri https:\/\/o4511099878637568.ingest.de.sentry.io\/api\/4511134031937616\/security\/?sentry_key=64999a84abc3469206792e982d195c43; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" report-uri \/api\/report-violation\/; form-action 'self' https:\/\/*.formlabs.com https:\/\/*.marketo.com https:\/\/www.facebook.com\/tr\/; base-uri 'self'; object-src https:\/\/formlabs.com https:\/\/*.formlabs.com http:\/\/localhost:3001; frame-ancestors https:\/\/partneruniversity-formlabs.talentlms.com https:\/\/university-formlabs.talentlms.com https:\/\/internal-formlabs.talentlms.com https:\/\/formlabs.com https:\/\/*.formlabs.com https:\/\/dental.formlabs.com https:\/\/careers.formlabs.com http:\/\/localhost:3000; upgrade-insecure-requests;","count":1},{"content-security-policy-report-only":" base-uri 'none'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-Ye7OArapG2wkXQ4pH\/IGsA=='","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/tforms.fcc-online.pl https:\/\/*.google.com https:\/\/*.google.pl https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.doubleclick.net https:\/\/*.googleadservices.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/*.salesmanago.pl https:\/\/*.salesmanago.com https:\/\/*.albacross.com https:\/\/*.facebook.com https:\/\/analytics.greensender.pl https:\/\/*.cookiebot.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdnjs.cloudflare.com https:\/\/stackpath.bootstrapcdn.com https:\/\/maps.googleapis.com https:\/\/www.googletagmanager.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/serve.albacross.com https:\/\/*.salesmanago.pl https:\/\/*.salesmanago.com https:\/\/www.clarity.ms https:\/\/*.google.com https:\/\/*.google-analytics.com https:\/\/tforms.fcc-online.pl https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/connect.facebook.net https:\/\/analytics.greensender.pl https:\/\/*.doubleclick.net blob:; style-src 'self' 'unsafe-inline' https:\/\/cdnjs.cloudflare.com https:\/\/stackpath.bootstrapcdn.com https:\/\/fonts.googleapis.com https:\/\/tforms.fcc-online.pl; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdnjs.cloudflare.com https:\/\/stackpath.bootstrapcdn.com https:\/\/tforms.fcc-online.pl; img-src 'self' data: https:\/\/*.googleapis.com https:\/\/maps.gstatic.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.google.com https:\/\/*.google.pl https:\/\/*.doubleclick.net https:\/\/imgsct.cookiebot.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/*.salesmanago.pl https:\/\/*.salesmanago.com https:\/\/secure.gravatar.com https:\/\/s.w.org https:\/\/*.albacross.com https:\/\/*.facebook.com https:\/\/analytics.greensender.pl https:\/\/*.googleadservices.com; connect-src 'self' https:\/\/*.google-analytics.com https:\/\/*.google.com https:\/\/*.google.pl https:\/\/*.doubleclick.net https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/*.salesmanago.pl https:\/\/*.salesmanago.com https:\/\/*.clarity.ms https:\/\/*.albacross.com https:\/\/maps.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/stackpath.bootstrapcdn.com https:\/\/www.googletagmanager.com https:\/\/tforms.fcc-online.pl https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/*.googleadservices.com https:\/\/analytics.greensender.pl; frame-src 'self' https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/*.google.com https:\/\/www.facebook.com https:\/\/*.facebook.com https:\/\/tforms.fcc-online.pl;","count":1},{"content-security-policy-report-only":" script-src 'self'; report-uri \/record-browser-reports; report-to default","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' *.wb.ru *.rwb.ru *.wildberries.ru *.wb-basket.ru *.wbbasket.ru *.wbcontent.net 1337.wb.ru  *.geobasket.net *.geobasket.ru; report-uri https:\/\/nel.wb.ru\/cspl;","count":1},{"content-security-policy-report-only":" worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com cdnjs.cloudflare.com *.cloudflare.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/plumrocket.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com https:\/\/plumrocket.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https:\/\/www.googletagmanager.com *.googletagmanager.com *.hcaptcha.com www.xtento.com *.yotpo.com https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net *.sharethis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com https:\/\/*.gstatic.com https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com https:\/\/firebasestorage.googleapis.com maps.gstatic.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/www.googletagmanager.com *.pixriot.com *.storeimaging.com cdnjs.cloudflare.com *.cloudflare.com viewsonic.com www.viewsonic.com *.viewsonic.com t.co analytics.twitter.com di.rlcdn.com www.facebook.com *.6sc.co px.ads.linkedin.com px.owneriq.net px.spiceworks.com *.google.com *.googletagmanager.com pay.google.com *.criteo.com *.signifyd.com *.doubleclick.net *.adnxs.com *.pubmatic.com *.casalemedia.com *.360yield.com *.outbrain.com *.rubiconproject.com *.taboola.com *.bing.com *.mediavine.com *.teads.tv *.3lift.com *.1rx.io *.media.net *.crwdcntrl.net *.agkn.com *.tapad.com *.smartadserver.com *.bidswitch.net *.mediawallahscript.com *.liadm.com *.postrelease.com *.revcontent.com *.tremorhub.com *.clmbtech.com *.tpmn.co.kr he.lijit.com *.clarity.ms ad.tpmn.io *.dmxleo.com thrtle.com yotpoapi.com *.yotpoapi.com viewsonicvsa.freshchat.com www.xtento.com cdn.xtento.com *.yotpo.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com https:\/\/*.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.avada.io *.shopify.com maps.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https:\/\/www.googletagmanager.com https:\/\/*.googletagmanager.com googleads.g.doubleclick.net analytics.google.co *.yotpo.com yotpoapi.com *.yotpoapi.com *.smsbump.com *.execute-api.us-east-1.amazonaws.com *.cloudfront.net cdn.jsdelivr.net www.mczbf.com *.ads-twitter.com c.amazon-adsystem.com *.6sc.co *.licdn.com connect.facebook.net resources.xg4ken.com pi.pardot.com px.owneriq.net px.spiceworks.com *.viewsonic.com *.hcaptcha.com *.signifyd.com *.criteo.com cdn.id5-sync.com bat.bing.com darkvisitors.com js.zi-scripts.com knownagents.com *.clarity.ms public-prod-dspcookiematching.dmxleo.com datadoghq-browser-agent.com *.datadoghq-browser-agent.com viewsonicvsa.freshchat.com blob: www.xtento.com cdn.xtento.com https:\/\/cdn-scripts.signifyd.com https:\/\/cdn-scripts.signifyd.com\/api\/script-tag.js https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com assets.braintreegateway.com https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com cdnjs.cloudflare.com hcaptcha.com *.hcaptcha.com *.yotpo.com *.googleapis.com *.cloudfront.net cdn.jsdelivr.net *.viewsonic.com viewsonicvsa.freshchat.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/get.geojs.io *.avada.io maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/www.googletagmanager.com https:\/\/region1.google-analytics.com *.pixriot.com *.storeimaging.com www.mczbf.com *.amazon-adsystem.com px.ads.linkedin.com ipv6.6sc.co ara.paa-reporting-advertising.amazon epsilon.6sense.com *.hcaptcha.com cdn.jsdelivr.net *.signifyd.com pay.google.com *.criteo.com resources.xg4ken.com js.zi-scripts.com id5-sync.com lbs.eu-1-id5-sync.com lb.eu-1-id5-sync.com *.clarity.ms *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.g.googleadservices.com *.g.doubleclick.net browser-intake-us3-datadoghq.com *.browser-intake-us3-datadoghq.com viewsonicvsa.freshchat.com *.yotpo.com https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" media-src https:\/\/content.instrumentation.getconga.com https:\/\/c.amazon-adsystem.com https:\/\/optimize.google.com 'self' https:\/\/stats.g.doubleclick.net https:\/\/*.livekit.cloud https:\/\/opengraph.io https:\/\/www.facebook.com https:\/\/www.gstatic.com http:\/\/api.ipstack.com https:\/\/www.google.ca https:\/\/xcelnew.my.site.com https:\/\/composer.congamerge.com https:\/\/idsync.rlcdn.com https:\/\/assets.adobedtm.com https:\/\/b.videoamp.com https:\/\/www.google.com *.medallia.com https:\/\/www.googleoptimize.com https:\/\/analytics.google.com https:\/\/events.api.boomtrain.com http:\/\/adobedtm.com blob: https:\/\/accounts.google.com https:\/\/20844768p.rfihub.com http:\/\/googleadservices.com https:\/\/insight.adsrvr.org https:\/\/region1.analytics.google.com https:\/\/20844767p.rfihub.com https:\/\/20844766p.rfihub.com *.kargo.com https:\/\/20844765p.rfihub.com https:\/\/data.instrumentation.getconga.com https:\/\/ssl.gstatic.com http:\/\/doubleclick.net trkn.us https:\/\/xcelnew--c.vf.force.com https:\/\/xcelnew.my.salesforce-scrt.com wss:\/\/*.livekit.cloud *.allegiancetech.com https:\/\/pdx-col.eum-appdynamics.com https:\/\/people.api.boomtrain.com https:\/\/fonts.gstatic.com https:\/\/cdn.appdynamics.com *.kampyle.com https:\/\/twin-iq.kickfire.com http:\/\/kickfire.com https:\/\/fonts.googleapis.com https:\/\/ad.doubleclick.net https:\/\/beacon.lynx.cognitivlabs.com https:\/\/tagmanager.google.com https:\/\/tags.tiqcdn.com https:\/\/a.rfihub.com https:\/\/td.doubleclick.net https:\/\/www.google.co.in https:\/\/xcelnew--xeteam7.sandbox.my.salesforce.com https:\/\/www.google.com.ph https:\/\/www.googletagmanager.com storage.cloud.kargo.com https:\/\/www.google-analytics.com *.salesforce.com https:\/\/*.my.site.com; report-to sfdc-csp-ep; report-uri https:\/\/xcelnew.lightning.force.com\/_\/ContentDomainCSPNoAuth?tenantId=00D1U0000011ttV&networkId=0DM2R000000CbkT&type=communities","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/platform.twitter.com https:\/\/cdn.cookielaw.org https:\/\/www.googletagmanager.com https:\/\/s3.amazonaws.com\/assets.freshdesk.com\/ https:\/\/cdn.jsdelivr.net https:\/\/munchkin.marketo.net https:\/\/*.mktoweb.com https:\/\/www.google.com https:\/\/www.gstatic.com; style-src 'self' 'unsafe-inline' https:\/\/*.mktoweb.com https:\/\/fonts.googleapis.com https:\/\/www.googletagmanager.com\/; img-src 'self' data: blob: https:\/\/images.contentstack.io https:\/\/syndication.twitter.com https:\/\/cdn.cookielaw.org https:\/\/*.g.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/fonts.gstatic.com https:\/\/*.google-analytics.com https:\/\/www.googleadservices.com https:\/\/*.google.com https:\/\/*.google.ad https:\/\/*.google.ae https:\/\/*.google.com.af https:\/\/*.google.com.ag https:\/\/*.google.al https:\/\/*.google.am https:\/\/*.google.co.ao https:\/\/*.google.com.ar https:\/\/*.google.as https:\/\/*.google.at https:\/\/*.google.com.au https:\/\/*.google.az https:\/\/*.google.ba https:\/\/*.google.com.bd https:\/\/*.google.be https:\/\/*.google.bf https:\/\/*.google.bg https:\/\/*.google.com.bh https:\/\/*.google.bi https:\/\/*.google.bj https:\/\/*.google.com.bn https:\/\/*.google.com.bo https:\/\/*.google.com.br https:\/\/*.google.bs https:\/\/*.google.bt https:\/\/*.google.co.bw https:\/\/*.google.by https:\/\/*.google.com.bz https:\/\/*.google.ca https:\/\/*.google.cd https:\/\/*.google.cf https:\/\/*.google.cg https:\/\/*.google.ch https:\/\/*.google.ci https:\/\/*.google.co.ck https:\/\/*.google.cl https:\/\/*.google.cm https:\/\/*.google.cn https:\/\/*.google.com.co https:\/\/*.google.co.cr https:\/\/*.google.com.cu https:\/\/*.google.cv https:\/\/*.google.com.cy https:\/\/*.google.cz https:\/\/*.google.de https:\/\/*.google.dj https:\/\/*.google.dk https:\/\/*.google.dm https:\/\/*.google.com.do https:\/\/*.google.dz https:\/\/*.google.com.ec https:\/\/*.google.ee https:\/\/*.google.com.eg https:\/\/*.google.es https:\/\/*.google.com.et https:\/\/*.google.fi https:\/\/*.google.com.fj https:\/\/*.google.fm https:\/\/*.google.fr https:\/\/*.google.ga https:\/\/*.google.ge https:\/\/*.google.gg https:\/\/*.google.com.gh https:\/\/*.google.com.gi https:\/\/*.google.gl https:\/\/*.google.gm https:\/\/*.google.gr https:\/\/*.google.com.gt https:\/\/*.google.gy https:\/\/*.google.com.hk https:\/\/*.google.hn https:\/\/*.google.hr https:\/\/*.google.ht https:\/\/*.google.hu https:\/\/*.google.co.id https:\/\/*.google.ie https:\/\/*.google.co.il https:\/\/*.google.im https:\/\/*.google.co.in https:\/\/*.google.iq https:\/\/*.google.is https:\/\/*.google.it https:\/\/*.google.je https:\/\/*.google.com.jm https:\/\/*.google.jo https:\/\/*.google.co.jp https:\/\/*.google.co.ke https:\/\/*.google.com.kh https:\/\/*.google.ki https:\/\/*.google.kg https:\/\/*.google.co.kr https:\/\/*.google.com.kw https:\/\/*.google.kz https:\/\/*.google.la https:\/\/*.google.com.lb https:\/\/*.google.li https:\/\/*.google.lk https:\/\/*.google.co.ls https:\/\/*.google.lt https:\/\/*.google.lu https:\/\/*.google.lv https:\/\/*.google.com.ly https:\/\/*.google.co.ma https:\/\/*.google.md https:\/\/*.google.me https:\/\/*.google.mg https:\/\/*.google.mk https:\/\/*.google.ml https:\/\/*.google.com.mm https:\/\/*.google.mn https:\/\/*.google.com.mt https:\/\/*.google.mu https:\/\/*.google.mv https:\/\/*.google.mw https:\/\/*.google.com.mx https:\/\/*.google.com.my https:\/\/*.google.co.mz https:\/\/*.google.com.na https:\/\/*.google.com.ng https:\/\/*.google.com.ni https:\/\/*.google.ne https:\/\/*.google.nl https:\/\/*.google.no https:\/\/*.google.com.np https:\/\/*.google.nr https:\/\/*.google.nu https:\/\/*.google.co.nz https:\/\/*.google.com.om https:\/\/*.google.com.pa https:\/\/*.google.com.pe https:\/\/*.google.com.pg https:\/\/*.google.com.ph https:\/\/*.google.com.pk https:\/\/*.google.pl https:\/\/*.google.pn https:\/\/*.google.com.pr https:\/\/*.google.ps https:\/\/*.google.pt https:\/\/*.google.com.py https:\/\/*.google.com.qa https:\/\/*.google.ro https:\/\/*.google.ru https:\/\/*.google.rw https:\/\/*.google.com.sa https:\/\/*.google.com.sb https:\/\/*.google.sc https:\/\/*.google.se https:\/\/*.google.com.sg https:\/\/*.google.sh https:\/\/*.google.si https:\/\/*.google.sk https:\/\/*.google.com.sl https:\/\/*.google.sn https:\/\/*.google.so https:\/\/*.google.sm https:\/\/*.google.sr https:\/\/*.google.st https:\/\/*.google.com.sv https:\/\/*.google.td https:\/\/*.google.tg https:\/\/*.google.co.th https:\/\/*.google.com.tj https:\/\/*.google.tl https:\/\/*.google.tm https:\/\/*.google.tn https:\/\/*.google.to https:\/\/*.google.com.tr https:\/\/*.google.tt https:\/\/*.google.com.tw https:\/\/*.google.co.tz https:\/\/*.google.com.ua https:\/\/*.google.co.ug https:\/\/*.google.co.uk https:\/\/*.google.com.uy https:\/\/*.google.co.uz https:\/\/*.google.com.vc https:\/\/*.google.co.ve https:\/\/*.google.co.vi https:\/\/*.google.com.vn https:\/\/*.google.vu https:\/\/*.google.ws https:\/\/*.google.rs https:\/\/*.google.co.za https:\/\/*.google.co.zm https:\/\/*.google.co.zw https:\/\/*.google.cat; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/insights.algolia.io https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/cdn.cookielaw.org https:\/\/*.onetrust.com\/ https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.g.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com https:\/\/ad.doubleclick.net https:\/\/*.mktoresp.com https:\/\/*.mktoweb.com https:\/\/*.mktoutil.com https:\/\/pages.iapp.org https:\/\/*.google.com https:\/\/*.google.ad https:\/\/*.google.ae https:\/\/*.google.com.af https:\/\/*.google.com.ag https:\/\/*.google.al https:\/\/*.google.am https:\/\/*.google.co.ao https:\/\/*.google.com.ar https:\/\/*.google.as https:\/\/*.google.at https:\/\/*.google.com.au https:\/\/*.google.az https:\/\/*.google.ba https:\/\/*.google.com.bd https:\/\/*.google.be https:\/\/*.google.bf https:\/\/*.google.bg https:\/\/*.google.com.bh https:\/\/*.google.bi https:\/\/*.google.bj https:\/\/*.google.com.bn https:\/\/*.google.com.bo https:\/\/*.google.com.br https:\/\/*.google.bs https:\/\/*.google.bt https:\/\/*.google.co.bw https:\/\/*.google.by https:\/\/*.google.com.bz https:\/\/*.google.ca https:\/\/*.google.cd https:\/\/*.google.cf https:\/\/*.google.cg https:\/\/*.google.ch https:\/\/*.google.ci https:\/\/*.google.co.ck https:\/\/*.google.cl https:\/\/*.google.cm https:\/\/*.google.cn https:\/\/*.google.com.co https:\/\/*.google.co.cr https:\/\/*.google.com.cu https:\/\/*.google.cv https:\/\/*.google.com.cy https:\/\/*.google.cz https:\/\/*.google.de https:\/\/*.google.dj https:\/\/*.google.dk https:\/\/*.google.dm https:\/\/*.google.com.do https:\/\/*.google.dz https:\/\/*.google.com.ec https:\/\/*.google.ee https:\/\/*.google.com.eg https:\/\/*.google.es https:\/\/*.google.com.et https:\/\/*.google.fi https:\/\/*.google.com.fj https:\/\/*.google.fm https:\/\/*.google.fr https:\/\/*.google.ga https:\/\/*.google.ge https:\/\/*.google.gg https:\/\/*.google.com.gh https:\/\/*.google.com.gi https:\/\/*.google.gl https:\/\/*.google.gm https:\/\/*.google.gr https:\/\/*.google.com.gt https:\/\/*.google.gy https:\/\/*.google.com.hk https:\/\/*.google.hn https:\/\/*.google.hr https:\/\/*.google.ht https:\/\/*.google.hu https:\/\/*.google.co.id https:\/\/*.google.ie https:\/\/*.google.co.il https:\/\/*.google.im https:\/\/*.google.co.in https:\/\/*.google.iq https:\/\/*.google.is https:\/\/*.google.it https:\/\/*.google.je https:\/\/*.google.com.jm https:\/\/*.google.jo https:\/\/*.google.co.jp https:\/\/*.google.co.ke https:\/\/*.google.com.kh https:\/\/*.google.ki https:\/\/*.google.kg https:\/\/*.google.co.kr https:\/\/*.google.com.kw https:\/\/*.google.kz https:\/\/*.google.la https:\/\/*.google.com.lb https:\/\/*.google.li https:\/\/*.google.lk https:\/\/*.google.co.ls https:\/\/*.google.lt https:\/\/*.google.lu https:\/\/*.google.lv https:\/\/*.google.com.ly https:\/\/*.google.co.ma https:\/\/*.google.md https:\/\/*.google.me https:\/\/*.google.mg https:\/\/*.google.mk https:\/\/*.google.ml https:\/\/*.google.com.mm https:\/\/*.google.mn https:\/\/*.google.com.mt https:\/\/*.google.mu https:\/\/*.google.mv https:\/\/*.google.mw https:\/\/*.google.com.mx https:\/\/*.google.com.my https:\/\/*.google.co.mz https:\/\/*.google.com.na https:\/\/*.google.com.ng https:\/\/*.google.com.ni https:\/\/*.google.ne https:\/\/*.google.nl https:\/\/*.google.no https:\/\/*.google.com.np https:\/\/*.google.nr https:\/\/*.google.nu https:\/\/*.google.co.nz https:\/\/*.google.com.om https:\/\/*.google.com.pa https:\/\/*.google.com.pe https:\/\/*.google.com.pg https:\/\/*.google.com.ph https:\/\/*.google.com.pk https:\/\/*.google.pl https:\/\/*.google.pn https:\/\/*.google.com.pr https:\/\/*.google.ps https:\/\/*.google.pt https:\/\/*.google.com.py https:\/\/*.google.com.qa https:\/\/*.google.ro https:\/\/*.google.ru https:\/\/*.google.rw https:\/\/*.google.com.sa https:\/\/*.google.com.sb https:\/\/*.google.sc https:\/\/*.google.se https:\/\/*.google.com.sg https:\/\/*.google.sh https:\/\/*.google.si https:\/\/*.google.sk https:\/\/*.google.com.sl https:\/\/*.google.sn https:\/\/*.google.so https:\/\/*.google.sm https:\/\/*.google.sr https:\/\/*.google.st https:\/\/*.google.com.sv https:\/\/*.google.td https:\/\/*.google.tg https:\/\/*.google.co.th https:\/\/*.google.com.tj https:\/\/*.google.tl https:\/\/*.google.tm https:\/\/*.google.tn https:\/\/*.google.to https:\/\/*.google.com.tr https:\/\/*.google.tt https:\/\/*.google.com.tw https:\/\/*.google.co.tz https:\/\/*.google.com.ua https:\/\/*.google.co.ug https:\/\/*.google.co.uk https:\/\/*.google.com.uy https:\/\/*.google.co.uz https:\/\/*.google.com.vc https:\/\/*.google.co.ve https:\/\/*.google.co.vi https:\/\/*.google.com.vn https:\/\/*.google.vu https:\/\/*.google.ws https:\/\/*.google.rs https:\/\/*.google.co.za https:\/\/*.google.co.zm https:\/\/*.google.co.zw https:\/\/*.google.cat; frame-src 'self' https:\/\/platform.twitter.com https:\/\/www.linkedin.com https:\/\/privacypros.freshdesk.com https:\/\/*.mktoweb.com https:\/\/www.google.com https:\/\/html5-player.libsyn.com https:\/\/www.youtube.com https:\/\/e.infogram.com; media-src 'self' https:\/\/assets.contentstack.io; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri \/api\/csp-report;","count":1},{"content-security-policy-report-only":" frame-src 'self' accounts.firefox.com www.google-analytics.com www.googletagmanager.com www.youtube-nocookie.com www.youtube.com; base-uri 'none'; style-src 'self' 'unsafe-inline' cdn.transcend.io transcend-cdn.com www.firefox.com; upgrade-insecure-requests; connect-src 'self' *.analytics.google.com *.google-analytics.com *.googletagmanager.com analytics.google.com basket.mozilla.org cdn.transcend.io google-analytics.com googletagmanager.com gtm-dev.springfield.moz.works gtm.firefox.com gtm.springfield.moz.works https:\/\/accounts.firefox.com\/ https:\/\/basket.mozilla.org o1069899.ingest.sentry.io o1069899.ingest.us.sentry.io o1069899.sentry.io pa.firefox.com telemetry.transcend.io telemetry.us.transcend.io transcend-cdn.com www.firefox.com; font-src 'self' www.firefox.com; img-src 'self' *.google-analytics.com *.googletagmanager.com data: google-analytics.com googletagmanager.com www.firefox.com www.mozilla.org; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google-analytics.com *.googletagmanager.com cdn.transcend.io google-analytics.com googletagmanager.com pa.firefox.com s.ytimg.com tagmanager.google.com transcend-cdn.com www.firefox.com www.youtube.com; form-action 'self' https:\/\/accounts.firefox.com\/ https:\/\/basket.mozilla.org; default-src 'self' www.firefox.com; frame-ancestors 'none'; media-src 'self' assets.mozilla.net videos.cdn.mozilla.net www.firefox.com www.mozilla.org","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/js.stripe.com https:\/\/connect.facebook.net https:\/\/www.googletagmanager.com https:\/\/snap.licdn.com https:\/\/challenges.cloudflare.com https:\/\/www.gstatic.com https:\/\/import-cdn.default.com https:\/\/www.dubcdn.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:\/\/js.stripe.com https:\/\/hooks.stripe.com https:\/\/m.stripe.network https:\/\/challenges.cloudflare.com https:\/\/www.youtube.com https:\/\/app.dub.co https:\/\/connect.facebook.net https:\/\/*.default.com; worker-src 'self' blob: https:\/\/cdn.jsdelivr.net; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-P4JDdP1yVSDovGV9U06jow' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" upgrade-insecure-requests; default-src 'self'; connect-src 'self' https:\/\/webanalytics.tubitak.gov.tr; style-src-attr 'unsafe-inline'; script-src 'self' 'unsafe-inline' https:\/\/unpkg.com\/ https:\/\/webanalytics.tubitak.gov.tr; object-src 'none'; img-src 'self' data:; style-src-elem 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/fonts.cdnfonts.com\/; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com https:\/\/fonts.cdnfonts.com; frame-ancestors 'self'; report-uri https:\/\/csp.tubitak.gov.tr\/;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/va.vercel-scripts.com https:\/\/www.googletagmanager.com https:\/\/pagead2.googlesyndication.com https:\/\/*.googlesyndication.com https:\/\/*.google.com https:\/\/*.googleadservices.com https:\/\/*.doubleclick.net https:\/\/scripts.cleverwebserver.com https:\/\/*.cleverwebserver.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdn.jsdelivr.net; connect-src 'self' https:\/\/cdn.jsdelivr.net https:\/\/va.vercel-scripts.com https:\/\/*.vercel-insights.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/www.googletagmanager.com https:\/\/pagead2.googlesyndication.com https:\/\/*.google.com https:\/\/*.doubleclick.net https:\/\/*.cleverwebserver.com; frame-src 'self' https:\/\/widget.livepix.gg https:\/\/*.livepix.gg https:\/\/*.googlesyndication.com https:\/\/*.google.com https:\/\/*.doubleclick.net https:\/\/*.cleverwebserver.com https:\/\/clvrads.com https:\/\/*.clvrads.com https:\/\/ep2.adtrafficquality.google; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/*.livepix.gg","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval' https: http: 'nonce-OWM3MzBjZTMtMzI3NC00N2MyLWFlMjgtM2E5NjI0NmU4Y2Vi' 'strict-dynamic'; script-src-elem 'self' 'unsafe-inline' https:\/\/yamap.com https:\/\/www.googletagmanager.com https:\/\/js.stripe.com https:\/\/apis.google.com connect.facebook.net d.line-cdn.net d.line-scdn.net https:\/\/www.clarity.ms https:\/\/scripts.clarity.ms; style-src 'self' 'unsafe-inline' https:\/\/use.fontawesome.com https:\/\/accounts.google.com\/gsi\/style https:\/\/www.gstatic.com; font-src 'self' data: https:\/\/use.fontawesome.com https:\/\/fonts.gstatic.com; img-src 'self' https: blob: data:; object-src 'none'; form-action 'self'; connect-src 'self' https:\/\/*; worker-src 'self' blob:; child-src 'self' blob:; report-uri https:\/\/twsl4dsz5v3oknxl3hwsjkphty0gioei.lambda-url.ap-northeast-1.on.aws\/; frame-src 'self' https:\/\/docs.google.com https:\/\/accounts.google.com https:\/\/labo.yamap.com https:\/\/js.stripe.com https:\/\/www.youtube-nocookie.com https:\/\/www.youtube.com blob:;","count":1},{"content-security-policy-report-only":" default-src 'self' media1.jpc.de www.jpc.de; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; script-src 'self' media1.jpc.de www.jpc.de 'nonce-GFiZw7MFFO7rV1rfszWDZeieJyuhzHrhgJ\/oWyF1dTJln78phEgPAmbldb4MmZOv6F\/JirhNiJuJpdmQkmjC5g==' 'report-sample'; style-src 'self' media1.jpc.de www.jpc.de 'report-sample' 'unsafe-inline'; font-src 'self' media1.jpc.de www.jpc.de; img-src 'self' media1.jpc.de www.jpc.de data:; connect-src 'self' media1.jpc.de www.jpc.de https:\/\/use.jpc.de; report-uri \/csp\/; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/www.adelaidenow.com.au\/csp-reports","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-MzsCz5g9Tsf66L8yGe558Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src * data: blob:; font-src 'self' https: data:; frame-src 'self' https:; object-src 'none'; base-uri 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'nonce-f69vk6up9gJ6ii1EC18tZA==' 'strict-dynamic' https: 'unsafe-inline'; style-src 'self' 'unsafe-inline' blob: https:\/\/app.getbeamer.com https:\/\/assets.openlearning.com https:\/\/*.ssl.cf4.rackcdn.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' https:\/\/*.openlearning.com https:\/\/oluploadslive.blob.core.windows.net https:\/\/front-us-rest.ably.io https:\/\/api.amplitude.com https:\/\/api.hubapi.com https:\/\/api.hubspot.com https:\/\/api.ipify.org https:\/\/backend.getbeamer.com https:\/\/chat.frontapp.com https:\/\/www.facebook.com https:\/\/find.userpilot.io https:\/\/forms.hubspot.com https:\/\/iframe.ly https:\/\/in.hotjar.com https:\/\/learningtime.servicebus.windows.net https:\/\/pythonutilityfunctions.azurewebsites.net https:\/\/python-util-funcs-c2dzg6bdbrdbd0g6.australiaeast-01.azurewebsites.net https:\/\/sentry.io https:\/\/stats.g.doubleclick.net https:\/\/us-west-1-chat-server.frontapp.com https:\/\/vc.hotjar.io https:\/\/www.google-analytics.com https:\/\/pagead2.googlesyndication.com https:\/\/static.userguiding.com https:\/\/metrics.userguiding.com wss:\/\/analytex.userpilot.io wss:\/\/front-us-realtime.ably.io wss:\/\/*.openlearning.com; font-src 'self' data: https:\/\/*.ssl.cf4.rackcdn.com https:\/\/assets.openlearning.com https:\/\/cdnjs.cloudflare.com https:\/\/fonts.gstatic.com https:\/\/maxcdn.bootstrapcdn.com; frame-src 'self' https:; img-src 'self' data: blob: https:; manifest-src 'self' https:\/\/*.ssl.cf4.rackcdn.com; media-src 'self' https:\/\/dev-uploads.openlearning.com https:\/\/uploads.openlearning.com https:\/\/qencode.blob.core.windows.net; worker-src 'none'; child-src blob:;","count":1},{"content-security-policy-report-only":" report-uri https:\/\/csp-report.browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub515a0c272a23bbad11e786f6502cfe21&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aproduction","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdnjs.cloudflare.com https:\/\/jobs.ashbyhq.com https:\/\/va.vercel-scripts.com https:\/\/www.googletagmanager.com https:\/\/*.hs-scripts.com https:\/\/*.hsforms.net https:\/\/*.hsforms.com https:\/\/*.hs-analytics.net https:\/\/*.hs-banner.com https:\/\/*.hscollectedforms.net https:\/\/*.usemessages.com https:\/\/us-assets.i.posthog.com https:\/\/calendar.chilipiper.com https:\/\/calendar.cpcdp.com https:\/\/static.claydar.com https:\/\/*.amplitude.com https:\/\/fast.wistia.com https:\/\/fast.wistia.net https:\/\/prod-assets.sequelvideo.com https:\/\/www.youtube.com https:\/\/www.google-analytics.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/fast.wistia.com https:\/\/fast.wistia.net; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/fast.wistia.com https:\/\/fast.wistia.net; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https:; frame-src 'self' https:\/\/jobs.ashbyhq.com https:\/\/calendar.chilipiper.com https:\/\/*.chilipiper.com https:\/\/*.hsforms.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/fast.wistia.net https:\/\/fast.wistia.com https:\/\/embed.sequel.io https:\/\/*.navattic.com https:\/\/*.storylane.io https:\/\/www.googletagmanager.com https:\/\/fast.chameleon.io; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/*.hsforms.com https:\/\/forms.hsforms.com; frame-ancestors 'self'; report-uri \/api\/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self' *.booztlet.com; script-src 'self' data: blob: bat.bing.com t.contentsquare.net geolocation.onetrust.com *.datadoghq.eu *.g.doubleclick.net cdn.taggstar.com cdn.cookielaw.org www.googletagmanager.com chat.kindlycdn.com *.sleeknote.com www.google.com *.hotjar.com www.snapengage.com 7276579.collect.igodigital.com *.trustpilot.com static.cloudflareinsights.com *.liveshopper.net sleeknotestaticcontent.sleeknote.com cdn.avo.app *.criteo.com track.adform.net *.klarnacdn.net *.criteo.net connect.facebook.net maps.googleapis.com *.hotjar.io cdn.noibu.com www.googleoptimize.com *.datadog.eu *.booztcdn.com *.kronor.io www.datadoghq-browser-agent.com *.google-analytics.com www.googleadservices.com s2.adform.net dev.visualwebsiteoptimizer.com svht.tradedoubler.com sdk.privacy-center.org analytics.tiktok.com sleeknotecustomerscripts.sleeknote.com 'unsafe-eval' 'unsafe-inline'; font-src 'self' *.booztcdn.com fonts.gstatic.com *.booztlet.com *.booztx.com chat.kindlycdn.com fonts.googleapis.com data: ; img-src optimize.google.com https: data: blob: 'unsafe-inline'; connect-src 'self' data: *.visualwebsiteoptimizer.com *.datadoghq.eu *.kronor.io wss:\/\/*.kronor.io *.google-analytics.com www.googleadservices.com www.googleoptimize.com api.mkmediaworks.com www.googletagmanager.com api.taggstar.com bat.bing.com *.contentsquare.net kronor.io api.liveshopper.net analytics.tiktok.com cdn.avo.app wss:\/\/kronor.io input.noibu.com *.hotjar.com www.google.com www.googleadservices.com stats.g.doubleclick.net www.facebook.com geolocation.onetrust.com *.datadog.eu cdn.cookielaw.org *.hotjar.io *.hotjar.com browser-intake-datadoghq.eu wss:\/\/input.noibu.com pagead2.googlesyndication.com *.booztlet.com *.sleeknote.com *.klarnacdn.net *.trustpilot.com *.g.doubleclick.net www.snapengage.com ws.hotjar.com chat.kindlycdn.com *.booztcdn.com www.datadoghq-browser-agent.com *.booztlet.com *.browser-intake-datadoghq.eu dev.visualwebsiteoptimizer.com; child-src 'self' www.googletagmanager.com *.freshchat.com fpt.booztlet.com *.google-analytics.com *.criteo.net www.booztlet.com www.facebook.com *.trustpilot.com blob: ; frame-src 'self' *.kronor.io *.criteo.com *.criteo.com *.sleeknote.com www.googletagmanager.com www.facebook.com *.trustpilot.com *.klarnacdn.net *.hotjar.com connect.facebook.net; style-src 'self' *.sleeknote.com *.booztlet.com cdn.taggstar.com *.booztcdn.com *.kronor.io chat.kindlycdn.com data: blob: 'unsafe-inline'; manifest-src 'self' *.booztlet.com; media-src 'self' data: *.booztcdn.com *.booztlet.com storage.googleapis.com; frame-ancestors 'self' ; report-uri \/csp-report\/; report-to csp-reports","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-YmfR0MpoJYx_BIzh57RM1g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http:\/\/*.files.wordpress.com wss:\/\/stylecaster.com; report-uri https:\/\/pmcuri.report-uri.com\/r\/d\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: 'unsafe-inline' 'unsafe-eval' data: ; report-uri https:\/\/booklog.report-uri.io\/r\/default\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" default-src 'self'; frame-ancestors 'none'; object-src 'none'; base-uri 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; connect-src *; img-src * data:; script-src 'self' cdn.bizible.com kit.fontawesome.com; style-src 'self' 'unsafe-inline' https:\/\/404-tpa-276.mktoweb.com\/ https:\/\/*.qualified.com; font-src 'self' kit.fontawesome.com ka-p.fontawesome.com https:\/\/fast.wistia.net\/ data:; form-action 'self'; object-src 'none'; media-src 'self' blob: mediastream: https:\/\/*.qualified.com; frame-src https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net\/ https:\/\/gtm.mycase.com\/ https:\/\/insight.adsrvr.org\/ https:\/\/match.adsrvr.org\/ https:\/\/404-tpa-276.mktoweb.com\/ https:\/\/*.qualified.com; child-src https:\/\/*.qualified.com; frame-ancestors demo.affinipay.com; upgrade-insecure-requests; block-all-mixed-content","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.paypalobjects.com https:\/\/cdnjs.cloudflare.com https:\/\/code.jquery.com https:\/\/cdn.jsdelivr.net https:\/\/cdn.sheetjs.com https:\/\/cse.google.com https:\/\/www.google.com https:\/\/pagead2.googlesyndication.com https:\/\/*.adtrafficquality.google; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cdn.materialdesignicons.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn.materialdesignicons.com; img-src 'self' data: https:; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.googletagmanager.com https:\/\/*.paypal.com https:\/\/nccnet-ec.nccc.com.tw https:\/\/nccnet-ectest.nccc.com.tw https:\/\/cse.google.com https:\/\/*.adtrafficquality.google https:\/\/googleads.g.doubleclick.net https:\/\/tpc.googlesyndication.com https:\/\/www.google.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/*.analytics.google.com https:\/\/www.googletagmanager.com https:\/\/*.adtrafficquality.google https:\/\/pagead2.googlesyndication.com; form-action 'self' https:\/\/nccnet-ec.nccc.com.tw https:\/\/nccnet-ectest.nccc.com.tw https:\/\/*.paypal.com; object-src 'none'; base-uri 'self'","count":1},{"content-security-policy-report-only":" script-src 'report-sample' 'nonce-B7-1Hbz91SqK0Uner6cD-g' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';worker-src 'self';report-uri \/us\/_\/BgcMiscSites\/cspreport","count":1},{"content-security-policy-report-only":" style-src 'self' 'unsafe-inline' cdn.sidefx.com static.sidefx.com d2wvmrjymyrujw.cloudfront.net media.sidefx.com fonts.googleapis.com www.google.com tagmanager.google.com *.vimeocdn.com www.gstatic.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com; font-src 'self' data: cdn.sidefx.com static.sidefx.com media.sidefx.com fonts.gstatic.com; media-src www.sidefx.com cdn.sidefx.com static.sidefx.com media.sidefx.com d2wvmrjymyrujw.cloudfront.net; frame-src 'self' data: static.sidefx.com media.sidefx.com www.google.com connect.facebook.net www.facebook.net www.facebook.com docs.google.com maps.google.com www.youtube.com lists.sidefx.com *.vimeo.com *.vimeocdn.com www.sandbox.paypal.com www.paypal.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com; default-src 'self'; connect-src 'self' *.google-analytics.com *.google.com *.googletagmanager.com stats.g.doubleclick.net www.facebook.com ig.instant-tokens.com graph.instagram.com vimeo.com www.sandbox.paypal.com www.paypal.com sidefx.bamboohr.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com forms.copper.com; script-src 'self' 'nonce-OpaeEd9p5Q7x9cunK9ZJDg==' 'unsafe-eval' cdn.sidefx.com static.sidefx.com media.sidefx.com d2wvmrjymyrujw.cloudfront.net *.googleapis.com www.gstatic.com www.google.com cse.google.com *.facebook.net api.instagram.com cdnjs.cloudflare.com unpkg.com cdn.jsdelivr.net *.googletagmanager.com tagmanager.google.com www.google-analytics.com stats.g.doubleclick.net analytics.google.com vimeo.com *.vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net www.youtube.com www.paypal.com www.sandbox.paypal.com sidefx.bamboohr.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com forms.copper.com; img-src 'self' data: cdn.sidefx.com static.sidefx.com media.sidefx.com d2wvmrjymyrujw.cloudfront.net *.cdninstagram.com *.gravatar.com www.facebook.com static.lulu.com www.gstatic.com ssl.gstatic.com www.googleapis.com i.ytimg.com *.vimeocdn.com www.paypal.com t.paypal.com www.paypalobjects.com placekitten.com http:\/\/dummyimage.com resources.bamboohr.com connect.facebook.com connect.facebook.net placehold.co *.google.com www.googletagmanager.com www.google-analytics.com stats.g.doubleclick.net; report-uri \/csp-report\/","count":1},{"content-security-policy-report-only":" img-src 'self' data: blob: *.commercecloud.salesforce.com *.dev.art.com *.dev.allposters.com *.stage.art.com *.stage.allposters.com imgc.artprintimages.com imgc.allpostersimages.com *.artprintimages.com *.allpostersimages.com *.allposters.com *.art.com cache1.artprintimages.com nova.collect.igodigital.com cdn-assets.affirm.com www.google.com www.google-analytics.com *.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net www.facebook.com ct.pinterest.com bat.bing.com track.linksynergy.com tags.rd.linksynergy.com click.s13.exacttarget.com events.attentivemobile.com;script-src 'self' 'nonce-3u7DJBMMHVL2i+BuAne8mQ==' storage.googleapis.com *.collect.igodigital.com widget.trustpilot.com cdn-4.convertexperiments.com cdn-3.convertexperiments.com www.googletagmanager.com *.googletagmanager.com www.google-analytics.com *.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net connect.facebook.net s.pinimg.com bat.bing.com tag.rmp.rakuten.com tags.rd.linksynergy.com services.xg4ken.com www.datadoghq-browser-agent.com www.clarity.ms rum-static.pingdom.net *.chat.digital.ringcentral.com consent.trustarc.com cdnjs.cloudflare.com www.paypal.com *.paypal.com *.paypalobjects.com static.cloudflareinsights.com cdn1.affirm.com cdn.id5-sync.com dynamic.criteo.com sslwidget.criteo.com cdn.attn.tv cdn.userway.org;script-src-elem 'self' 'nonce-3u7DJBMMHVL2i+BuAne8mQ==' storage.googleapis.com *.collect.igodigital.com widget.trustpilot.com cdn-4.convertexperiments.com cdn-3.convertexperiments.com www.googletagmanager.com *.googletagmanager.com www.google-analytics.com *.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net connect.facebook.net s.pinimg.com bat.bing.com tag.rmp.rakuten.com tags.rd.linksynergy.com services.xg4ken.com www.datadoghq-browser-agent.com www.clarity.ms rum-static.pingdom.net *.chat.digital.ringcentral.com consent.trustarc.com cdnjs.cloudflare.com www.paypal.com *.paypal.com *.paypalobjects.com static.cloudflareinsights.com cdn1.affirm.com cdn.id5-sync.com dynamic.criteo.com sslwidget.criteo.com cdn.attn.tv cdn.userway.org;connect-src 'self' api.cquotient.com *.salesforce.com *.dev.art.com *.dev.allposters.com dev-bizapi.art.com dev-bizapi.allposters.com bizapi.art.com bizapi.allposters.com stg-bizapi.art.com stg-bizapi.allposters.com rel1-bizapi.art.com rel1-bizapi.allposters.com localhost:* *.affirm.com *.doubleclick.net *.googletagmanager.com *.google-analytics.com *.analytics-google.com analytics.google.com www.googleadservices.com www.facebook.com bat.bing.com track.linksynergy.com tags.rd.linksynergy.com services.xg4ken.com datadoghq.com www.clarity.ms id5-sync.com *.id5-sync.com eu-1-id5-sync.com *.eu-1-id5-sync.com events.attentivemobile.com *.attn.tv *.chat.digital.ringcentral.com consent.trustarc.com cdn-4.convertexperiments.com cdn-3.convertexperiments.com 10017911.metrics.convertexperiments.com logs.convertexperiments.com www.paypal.com *.paypal.com *.paypalobjects.com widget.trustpilot.com www.google.com rum-collector-2.pingdom.net ct.pinterest.com s.pinimg.com;frame-src 'self' *.affirm.com *.googletagmanager.com www.google.com googleads.g.doubleclick.net survey.alchemer.com www.surveygizmo.com *.chat.digital.ringcentral.com consent.trustarc.com *.attn.tv www.paypal.com *.paypal.com *.paypalobjects.com widget.trustpilot.com gum.criteo.com;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/www.googletagmanager.com https:\/\/js-eu1.hsforms.net https:\/\/js-eu1.hs-scripts.com https:\/\/sc.lfeeder.com https:\/\/video.helloretail.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com; img-src 'self' data: https:; frame-src https:\/\/capture.navattic.com https:\/\/www.youtube-nocookie.com https:\/\/video.helloretail.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com; connect-src 'self' https:\/\/api.hsforms.com https:\/\/forms-eu1.hsforms.com https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/pagead2.googlesyndication.com https:\/\/www.googletagmanager.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com; object-src 'none'; base-uri 'self'","count":1},{"content-security-policy-report-only":" script-src 'nonce-QWuaeisHo0c7wO3nouUKMQ==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https:\/\/events.mercadolibre.com\/csp\/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=dabffb92-b59a-458f-936b-fcebec358c58; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https:\/\/http2.mlstatic.com\/ https:\/\/mlstaticquic-a.akamaihd.net\/; frame-ancestors 'self' https:\/\/*.mercadolibre.cl:* https:\/\/*.mercadolibre.com:* https:\/\/*.mercadolibre.com.ve:* https:\/\/*.mercadolibre.com.ar:* https:\/\/*.mercadolivre.com.br:* https:\/\/*.mercadolibre.com.co:* https:\/\/*.mercadolibre.com.ec:* https:\/\/*.mercadolibre.com.mx:* https:\/\/*.mercadolibre.com.pe:* https:\/\/*.mercadolibre.com.uy:* https:\/\/*.mercadopago.cl:* https:\/\/*.mercadopago.com.ar:* https:\/\/*.mercadopago.com.br:* https:\/\/*.mercadopago.com.co:* https:\/\/*.mercadopago.com.mx:* https:\/\/*.mercadopago.com.pe:* https:\/\/*.mercadopago.com.uy:* https:\/\/*.mercadopago.com.ve:* https:\/\/*.mercadopago.com:* https:\/\/*.adminml.com:* https:\/\/*.mercadolibre.co.cr:* https:\/\/*.mercadolibre.com.pa:* https:\/\/*.mercadolibre.com.do:* https:\/\/*.mercadolibre.com.bo:* https:\/\/*.mercadolibre.com.py:* https:\/\/*.mercadolibre.com.gt:* https:\/\/*.mercadolibre.com.hn:* https:\/\/*.mercadolibre.com.ni:* https:\/\/*.mercadolibre.com.sv:* https:\/\/*.mercadopago.com.ec:* https:\/\/*.portalinmobiliario.com:* https:\/\/*.mercadolivre.com:*","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/www.madavi.de; font-src 'self' data: https:\/\/www.madavi.de; img-src 'self' insecure.madavi.de https:\/\/www.madavi.de; script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.ampproject.org https:\/\/www.madavi.de; style-src 'self' 'unsafe-inline' https:\/\/www.madavi.de; report-uri https:\/\/www.madavi.de\/wp-json\/wpcsp\/v1\/route\/LogPolicyViolation?_wpnonce=331440ae86","count":1},{"content-security-policy-report-only":" base-uri 'self'; default-src 'self'; img-src 'self' data: img.part-kom.ru yastatic.net *.yandex.ru *.yandex.com *.yandex.net storage.chat2desk.com ; font-src 'self' data: static.part-kom.ru yastatic.net livechatv2.chat2desk.com ; style-src 'self' 'unsafe-inline' static.part-kom.ru yastatic.net *.yandex.ru *.yandex.com *.yandex.net ; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.part-kom.ru yastatic.net yandex.ru yandex.com *.yandex.ru *.yandex.com livechatv2.chat2desk.com *.roistat.com ; connect-src 'self' mc.part-kom.ru *.yandex.ru *.yandex.com *.yandex.net wss:\/\/*.yandex.ru wss:\/\/*.yandex.com wss:\/\/*.yandex.net livechatv2.chat2desk.com wss:\/\/livechatv2.chat2desk.com ; media-src 'self' livechatv2.chat2desk.com ; frame-src 'self' b2b.part-kom.ru *.yandex.ru ; worker-src data: yastatic.net api-maps.yandex.ru *.api-maps.yandex.ru ; report-uri https:\/\/part-kom.ru\/-\/reporting-api\/; report-to default;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-W-CLqShLm6VuCZ4XArC9_Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" frame-src 'self' https:\/\/*.trustpilot.com https:\/\/challenges.cloudflare.com https:\/\/*.cloudflare.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/player.vimeo.com https:\/\/vimeo.com https:\/\/www.googletagmanager.com https:\/\/newassets.hcaptcha.com blob:; child-src 'self' https:\/\/*.trustpilot.com https:\/\/challenges.cloudflare.com https:\/\/*.cloudflare.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/player.vimeo.com https:\/\/vimeo.com https:\/\/www.googletagmanager.com https:\/\/newassets.hcaptcha.com blob:; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'none'; script-src 'self' 'sha256-SZWBoYoO8ImOGV7gLCk11wbz34efYQBIExhxvnM4Zi0=' https:\/\/www.googletagmanager.com https:\/\/challenges.cloudflare.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/maps.googleapis.com https:\/\/widget.trustpilot.com https:\/\/static.hotjar.com","count":1},{"content-security-policy-report-only":" default-src 'self'; frame-src 'self' https:\/\/replicate-search.replicate-search.workers.dev https:\/\/www.googletagmanager.com; worker-src https:\/\/static.replicateassets.com; connect-src 'self' https:\/\/api.replicate.com https:\/\/stream.replicate.com https:\/\/replicate.delivery https:\/\/*.replicate.delivery https:\/\/api.us.svix.com https:\/\/*.sentry.io https:\/\/*.usepylon.com https:\/\/*.posthog.com https:\/\/pylon-avatars.s3.us-west-1.amazonaws.com https:\/\/cloud.workers-logging.cfdata.org https:\/\/d3vl36l12sfx26.cloudfront.net https:\/\/og.replicateassets.com https:\/\/static.replicateassets.com https:\/\/*.pusher.com https:\/\/www.googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/www.replicatestatus.com https:\/\/replicate-search.replicate-search.workers.dev; font-src 'self' data: https:\/\/*.usepylon.com https:\/\/*.posthog.com https:\/\/pylon-avatars.s3.us-west-1.amazonaws.com https:\/\/d31rfu1d3w8e4q.cloudfront.net https:\/\/d3vl36l12sfx26.cloudfront.net https:\/\/fonts.replicateassets.com https:\/\/*.pusher.com https:\/\/fonts.gstatic.com https:\/\/replicate-search.replicate-search.workers.dev; img-src 'self' blob: data: https:\/\/replicate.delivery https:\/\/*.replicate.delivery https:\/\/og.replicateassets.com https:\/\/static.replicateassets.com https:\/\/d31rfu1d3w8e4q.cloudfront.net https:\/\/d3vl36l12sfx26.cloudfront.net https:\/\/*.githubusercontent.com https:\/\/github.com https:\/\/www.googletagmanager.com https:\/\/ssl.gstatic.com https:\/\/www.gstatic.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/replicate-search.replicate-search.workers.dev https:\/\/replicateassets.com\/cdn-cgi\/image\/; media-src 'self' https:\/\/replicate.delivery https:\/\/*.replicate.delivery https:\/\/static.replicateassets.com https:\/\/d31rfu1d3w8e4q.cloudfront.net https:\/\/d3vl36l12sfx26.cloudfront.net https:\/\/*.sentry.io https:\/\/replicate-search.replicate-search.workers.dev https:\/\/replicateassets.com\/cdn-cgi\/media\/ https:\/\/cloud.workers-logging.cfdata.org; script-src 'report-sample' 'self' 'nonce-NjFhODM1MDEtOWE1MC00OTI4LWJiZGQtNzU2OTRiNTZiMTQ2' https:\/\/*.usepylon.com https:\/\/*.posthog.com https:\/\/pylon-avatars.s3.us-west-1.amazonaws.com https:\/\/d31rfu1d3w8e4q.cloudfront.net https:\/\/d3vl36l12sfx26.cloudfront.net https:\/\/static.replicateassets.com https:\/\/*.pusher.com https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/*.googletagmanager.com https:\/\/replicate-search.replicate-search.workers.dev https:\/\/challenges.cloudflare.com; style-src 'self' https:\/\/*.usepylon.com https:\/\/*.posthog.com https:\/\/pylon-avatars.s3.us-west-1.amazonaws.com https:\/\/d31rfu1d3w8e4q.cloudfront.net https:\/\/d3vl36l12sfx26.cloudfront.net https:\/\/static.replicateassets.com https:\/\/*.pusher.com https:\/\/googletagmanager.com https:\/\/tagmanager.google.com https:\/\/fonts.googleapis.com https:\/\/replicate-search.replicate-search.workers.dev; frame-ancestors 'self'; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: gravatar.com; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' http:\/\/s3.amazonaws.com; style-src 'self' https: 'unsafe-inline' cdnjs.cloudflare.com; report-uri \/csp_violation_report","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-j2mNl03OH6PgRtWuc8xfDA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' *.drmartens.com *.adyen.com *.google.com *.onetrust.com *.monetate.net js-agent.newrelic.com *.cloudflare.com static.cloudflareinsights.com *.paypal.com *.klaviyo.com js.afterpay.com cdn.attraqt.io *.forter.com dlthst9q2beh8.cloudfront.net d2nww8zpyj5pk0.cloudfront.net d2w2nqfk3z9hdt.cloudfront.net *.global-e.com www.googletagmanager.com www.google-analytics.com x.klarnacdn.net js.klarna.com assets.ntcacdn.net cdn-widgetsrepository.yotpo.com staticw2.yotpo.com www.recaptcha.net maps.googleapis.com www.googleadservices.com googleads.g.doubleclick.net pagead2.googlesyndication.com ad.doubleclick.net www.gstatic.com connect.facebook.net connect.facebook.net static.srcspot.com analytics.tiktok.com cdn.userway.org bat.bing.com *.attn.tv c.amazon-adsystem.com photorankstatics-a.akamaihd.net widgets.olapic-cdn.com s.pinimg.com ct.pinterest.com *.contentsquare.net tr.snapchat.com sc-static.net *.upsellit.com tag.rmp.rakuten.com www.redditstatic.com api.myunidays.com cdn.unidays.world rum-static.pingdom.net *.storystream.ai ucarecdn.com; worker-src 'self'; report-uri \/cdn-cgi\/script_monitor\/report?m=G0Ll.3Mw3IsByINLG7xsfVRhXN.T2NOsg7JNR3SKzNQ-1788493812.4641132-1.0.1.1-qQ0elE0jsNsnIEyc.1XmMF_5bTgEHkbuUB_GmDq6vn7gP.66_N4OZZ3ccFnZHjc6Kn7PIXImUNmobvW_jcvVAxPocVM.OOSEOt9C2SNuwlk1vIttYj6AChI04vr6g5gCnkVD80xbKBNdoiO.HhWVxE9b_aIr2nsz32lIBsEnRBic7Fq7H7Pol6dzi43ccD4cKnC5sdhj5uGvPAwS1fxZKg; report-to cf-noahffgyolkuiivb","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdnjs.cloudflare.com https:\/\/cdn.datatables.net https:\/\/unpkg.com https:\/\/cdn.fuseplatform.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdn.datatables.net https:\/\/cdnjs.cloudflare.com https:\/\/netdna.bootstrapcdn.com; img-src 'self' data: https: http:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdnjs.cloudflare.com; connect-src 'self' ws: wss:; frame-src 'self' https:\/\/zkillboard.com; form-action 'self'","count":1},{"content-security-policy-report-only":" block-all-mixed-content; report-uri https:\/\/csp-reports.pravmir.ru\/https-mixed-content-logger\/csp_report_log.php;","count":1},{"content-security-policy-report-only":" img-src 'self' data: blob: *.commercecloud.salesforce.com *.dev.art.com *.dev.allposters.com *.stage.art.com *.stage.allposters.com imgc.artprintimages.com imgc.allpostersimages.com *.artprintimages.com *.allpostersimages.com *.allposters.com *.art.com cache1.artprintimages.com nova.collect.igodigital.com cdn-assets.affirm.com www.google.com www.google-analytics.com *.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net www.facebook.com ct.pinterest.com bat.bing.com track.linksynergy.com tags.rd.linksynergy.com click.s13.exacttarget.com events.attentivemobile.com;script-src 'self' 'nonce-WHBK2wr0aWY\/hyjEqaOKlA==' storage.googleapis.com *.collect.igodigital.com widget.trustpilot.com cdn-4.convertexperiments.com cdn-3.convertexperiments.com www.googletagmanager.com *.googletagmanager.com www.google-analytics.com *.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net connect.facebook.net s.pinimg.com bat.bing.com tag.rmp.rakuten.com tags.rd.linksynergy.com services.xg4ken.com www.datadoghq-browser-agent.com www.clarity.ms rum-static.pingdom.net *.chat.digital.ringcentral.com consent.trustarc.com cdnjs.cloudflare.com www.paypal.com *.paypal.com *.paypalobjects.com static.cloudflareinsights.com cdn1.affirm.com cdn.id5-sync.com dynamic.criteo.com sslwidget.criteo.com cdn.attn.tv cdn.userway.org;script-src-elem 'self' 'nonce-WHBK2wr0aWY\/hyjEqaOKlA==' storage.googleapis.com *.collect.igodigital.com widget.trustpilot.com cdn-4.convertexperiments.com cdn-3.convertexperiments.com www.googletagmanager.com *.googletagmanager.com www.google-analytics.com *.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net connect.facebook.net s.pinimg.com bat.bing.com tag.rmp.rakuten.com tags.rd.linksynergy.com services.xg4ken.com www.datadoghq-browser-agent.com www.clarity.ms rum-static.pingdom.net *.chat.digital.ringcentral.com consent.trustarc.com cdnjs.cloudflare.com www.paypal.com *.paypal.com *.paypalobjects.com static.cloudflareinsights.com cdn1.affirm.com cdn.id5-sync.com dynamic.criteo.com sslwidget.criteo.com cdn.attn.tv cdn.userway.org;connect-src 'self' api.cquotient.com *.salesforce.com *.dev.art.com *.dev.allposters.com dev-bizapi.art.com dev-bizapi.allposters.com bizapi.art.com bizapi.allposters.com stg-bizapi.art.com stg-bizapi.allposters.com rel1-bizapi.art.com rel1-bizapi.allposters.com localhost:* *.affirm.com *.doubleclick.net *.googletagmanager.com *.google-analytics.com *.analytics-google.com analytics.google.com www.googleadservices.com www.facebook.com bat.bing.com track.linksynergy.com tags.rd.linksynergy.com services.xg4ken.com datadoghq.com www.clarity.ms id5-sync.com *.id5-sync.com eu-1-id5-sync.com *.eu-1-id5-sync.com events.attentivemobile.com *.attn.tv *.chat.digital.ringcentral.com consent.trustarc.com cdn-4.convertexperiments.com cdn-3.convertexperiments.com 10017911.metrics.convertexperiments.com logs.convertexperiments.com www.paypal.com *.paypal.com *.paypalobjects.com widget.trustpilot.com www.google.com rum-collector-2.pingdom.net ct.pinterest.com s.pinimg.com;frame-src 'self' *.affirm.com *.googletagmanager.com www.google.com googleads.g.doubleclick.net survey.alchemer.com www.surveygizmo.com *.chat.digital.ringcentral.com consent.trustarc.com *.attn.tv www.paypal.com *.paypal.com *.paypalobjects.com widget.trustpilot.com gum.criteo.com;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/challenges.cloudflare.com https:\/\/cdn.segment.com https:\/\/www.googletagmanager.com https:\/\/cdn-cookieyes.com https:\/\/cdn.broadstreetads.com https:\/\/player.vimeo.com https:\/\/s.swiftypecdn.com; style-src 'self' 'unsafe-inline' https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/s.swiftypecdn.com; font-src 'self' data: https:\/\/use.typekit.net; img-src 'self' data: https:; connect-src 'self' https:\/\/api.segment.io https:\/\/cdn.segment.com https:\/\/*.datadoghq.eu https:\/\/*.datadoghq.com https:\/\/challenges.cloudflare.com https:\/\/s.swiftypecdn.com https:\/\/cdn-cookieyes.com https:\/\/log.cookieyes.com https:\/\/*.google-analytics.com; frame-src https:\/\/challenges.cloudflare.com https:\/\/player.vimeo.com https:\/\/www.googletagmanager.com; object-src 'none'; base-uri 'self'; report-uri \/api\/csp-report; report-to csp","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.firstcitizens.com;                 script-src 'self' https:\/\/*.firstcitizens.com https:\/\/cdn.cookielaw.org https:\/\/assets.adobedtm.com https:\/\/acrobatservices.adobe.com https:\/\/cds-sdkcfg.onlineaccess1.com https:\/\/www.googletagmanager.com https:\/\/s.go-mpulse.net https:\/\/connect.facebook.net https:\/\/bat.bing.com https:\/\/snap.licdn.com https:\/\/js-cdn.dynatrace.com https:\/\/googleads.g.doubleclick.net https:\/\/td.doubleclick.net https:\/\/www.googleadservices.com https:\/\/px.ads.linkedin.com https:\/\/edge.adobedc.net https:\/\/www.facebook.com https:\/\/px4.ads.linkedin.com https:\/\/siteimproveanalytics.com https:\/\/www.clarity.ms https:\/\/www.google.com https:\/\/google.com https:\/\/2884.global.siteimproveanalytics.io https:\/\/c.go-mpulse.net https:\/\/zndhwk2nlgcbvdel3-firstcitizensbank.siteintercept.qualtrics.com https:\/\/t.contentsquare.net https:\/\/munchkin.marketo.net https:\/\/siteintercept.qualtrics.com https:\/\/296-cpx-295.mktoresp.com https:\/\/894-itd-344.mktoresp.com https:\/\/284-lbb-572.mktoresp.com https:\/\/151-fhs-046.mktoresp.com https:\/\/412-tmw-562.mktoresp.com https:\/\/u.clarity.ms https:\/\/c.contentsquare.net https:\/\/173bf10e.akstat.io https:\/\/k-aus1.contentsquare.net https:\/\/trial-eum-clientnsv4-s.akamaihd.net https:\/\/eyaqbbekafz5ajqacqnryaaabbtmzouy-p2jke9-59ac193c4-clienttons-s.akamaihd.net https:\/\/daaisiixzsmj6zwmxkma-p2jke9-1aa48d9c7-clientnsv4-s.akamaihd.net https:\/\/assets.sitescdn.net https:\/\/answers.yext-pixel.com https:\/\/analytics.google.com https:\/\/embed-ssl.wistia.com https:\/\/pipedream.wistia.com https:\/\/js.sentry-cdn.com https:\/\/distillery.wistia.com https:\/\/embed-cloudfront.wistia.com https:\/\/srm.bf.contentsquare.net https:\/\/www.gstatic.com https:\/\/app.fintelconnect.com https:\/\/browser.sentry-cdn.com https:\/\/*.cit.com https:\/\/answers-embed.firstcitizens.com.pagescdn.com https:\/\/info.onewestbank.com https:\/\/rum.hlx.page https:\/\/script.crazyegg.com https:\/\/js.adsrvr.org https:\/\/bat.bing.com https:\/\/scripts.clarity.ms https:\/\/dvract3a1itr1.cloudfront.net https:\/\/c.amazon-adsystem.com https:\/\/s.amazon-adsystem.com https:\/\/ad.doubleclick.net;                 connect-src 'self' https:\/\/*.firstcitizens.com https:\/\/cdn.cookielaw.org https:\/\/analytics.google.com https:\/\/answers.yext-pixel.com https:\/\/ad.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/adobedc.demdex.net https:\/\/viewlicense.adobe.io https:\/\/www.google.com https:\/\/www.google-analytics.com https:\/\/dpm.demdex.net https:\/\/edge.adobedc.net https:\/\/px.ads.linkedin.com https:\/\/siteintercept.qualtrics.com https:\/\/cds-sdkcfg.onlineaccess1.com https:\/\/prod-cdn.us.yextapis.com https:\/\/ipapi.co https:\/\/api.openweathermap.org https:\/\/296-cpx-295.mktoutil.com https:\/\/script.crazyegg.com https:\/\/tracking.crazyegg.com https:\/\/pagestates-tracking.crazyegg.com https:\/\/assets-tracking.crazyegg.com https:\/\/insight.adsrvr.org https:\/\/dayintegrationintern.tt.omtrdc.net https:\/\/www.googleadservices.com https:\/\/business.linkedin.com https:\/\/openknowledge.worldbank.org https:\/\/acrobatservices.adobe.com https:\/\/assets.sitescdn.net https:\/\/bat.bing.com https:\/\/scripts.clarity.ms https:\/\/smetrics.firstcitizens.com https:\/\/browser.sentry-cdn.com https:\/\/mpc-prod-2-1053047382554.us-central1.run.app https:\/\/demo-1.conversionsapigateway.com https:\/\/graph.facebook.com https:\/\/c.amazon-adsystem.com https:\/\/s.amazon-adsystem.com https:\/\/fls.doubleclick.net https:\/\/api.ipdata.co https:\/\/6jk6d9jp92.execute-api.us-east-2.amazonaws.com https:\/\/ara.paa-reporting-advertising.amazon https:\/\/ipdata.co;                 worker-src 'self';                 style-src 'self' https:\/\/*.firstcitizens.com https:\/\/fonts.googleapis.com https:\/\/assets.sitescdn.net;                 style-src-elem 'self' https:\/\/*.firstcitizens.com https:\/\/assets.sitescdn.net https:\/\/*.cit.com https:\/\/info.onewestbank.com https:\/\/fonts.googleapis.com https:\/\/www.googletagmanager.com;                 img-src 'self' https:\/\/*.firstcitizens.com https:\/\/cdn.cookielaw.org https:\/\/2884.global.siteimproveanalytics.io px.ads.linkedin.com https:\/\/px4.ads.linkedin.com https:\/\/cm.everesttech.net https:\/\/dpm.demdex.net https:\/\/www.linkedin.com https:\/\/www.googletagmanager.com https:\/\/www.facebook.com https:\/\/googleads.g.doubleclick.net https:\/\/*.cit.com https:\/\/www.google.com https:\/\/google.com https:\/\/info.onewestbank.com https:\/\/siteintercept.qualtrics.com https:\/\/fonts.gstatic.com https:\/\/ad.doubleclick.net https:\/\/insight.adsrvr.org https:\/\/ib.adnxs.com https:\/\/cm.g.doubleclick.net https:\/\/match.adsrvr.org https:\/\/pixel.rubiconproject.com https:\/\/www.googleadservices.com https:\/\/c.amazon-adsystem.com https:\/\/s.amazon-adsystem.com https:\/\/fls.doubleclick.net https:\/\/dl5oelilihj3e.cloudfront.net;                 frame-src 'self' https:\/\/*.firstcitizens.com https:\/\/acrobatservices.adobe.com https:\/\/td.doubleclick.net https:\/\/firstcitizens.demdex.net https:\/\/www.google.com https:\/\/www.citrail.com https:\/\/answers-embed.firstcitizens.com.pagescdn.com https:\/\/*.cit.com https:\/\/info.onewestbank.com https:\/\/www.googletagmanager.com https:\/\/insight.adsrvr.org https:\/\/privacyportaluat.onetrust.com https:\/\/privacyportal.onetrust.com https:\/\/match.adsrvr.org https:\/\/fintactix.com https:\/\/14741597.fls.doubleclick.net https:\/\/fast.wistia.net https:\/\/15758689.fls.doubleclick.net https:\/\/ad.doubleclick.net;                 frame-ancestors 'self' https:\/\/www.google.com https:\/\/9808-sbx.btbanking.com https:\/\/*.firstcitizens.com https:\/\/*.fcbint.net https:\/\/bostonprivate--full.sandbox.my.salesforce.com https:\/\/bostonprivate.my.salesforce.com;                 media-src 'self';                 font-src 'self';","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-anfx0wSAszpj1NZ6NtBhNw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-CYoN-4Vzq45Hw9Iu1Ls-6w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/www.googletagmanager.com https:\/\/*.hotjar.com https:\/\/cdn-cookieyes.com https:\/\/cdn.roomvo.com https:\/\/snap.licdn.com https:\/\/*.hs-scripts.com https:\/\/*.hsadspixel.net https:\/\/*.hscollectedforms.net https:\/\/*.hs-banner.com https:\/\/*.hubspot.com https:\/\/static.hsappstatic.net https:\/\/*.hs-analytics.net https:\/\/*.hsforms.net https:\/\/js.zi-scripts.com https:\/\/js.usemessages.com https:\/\/r2.leadsy.ai https:\/\/connect.facebook.net https:\/\/code.jquery.com https:\/\/www.redditstatic.com https:\/\/unpkg.com https:\/\/cdnjs.cloudflare.com https:\/\/capi-automation.s3.us-east-2.amazonaws.com https:\/\/*.doubleclick.net https:\/\/www.roomvo.com https:\/\/www.clickcease.com https:\/\/www.youtube.com; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; connect-src 'self' https:\/\/www.googletagmanager.com https:\/\/*.cookieyes.com https:\/\/cdn-cookieyes.com https:\/\/px.ads.linkedin.com https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/analytics.google.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/alb.reddit.com https:\/\/*.hubspot.com https:\/\/*.hubapi.com https:\/\/*.hsforms.com https:\/\/*.hsforms.net https:\/\/*.hscollectedforms.net https:\/\/js.zi-scripts.com https:\/\/ws.zoominfo.com https:\/\/cdn.jsdelivr.net https:\/\/*.ecs.us-east-1.on.aws https:\/\/www.roomvo.com https:\/\/roomvo-atlas.vercel.app https:\/\/www.facebook.com https:\/\/monitor.clickcease.com wss:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/www.google.ca https:\/\/www.google.co.il https:\/\/www.google.es https:\/\/www.google.gr https:\/\/www.google.com.sg https:\/\/www.google.co.za https:\/\/www.google.com.pk; frame-src blob: https:\/\/*.hubspot.com https:\/\/roomvo-atlas.vercel.app https:\/\/www.roomvo.com https:\/\/www.youtube-nocookie.com https:\/\/www.youtube.com https:\/\/forms.zohopublic.com https:\/\/www.facebook.com https:\/\/www.googletagmanager.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri https:\/\/get.roomvo.com\/csp-report-endpoint.php","count":1},{"content-security-policy-report-only":" default-src 'self' blob:  https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; frame-src 'self' https:\/\/*.noxiaohao.com https:\/\/telegram.org https:\/\/*.bitget.com https:\/\/accounts.google.com https:\/\/oauth.telegram.org https:\/\/sgtm.btsgtm.com ; script-src 'self' 'nonce-6uZ\/apfw4K5AvExcJMnImQ==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6\/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh\/v3RIRuG3kMikr5iha+7P\/0TN\/GNA=' https:\/\/*.noxiaohao.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com https:\/\/accounts.google.com https:\/\/www.googletagmanager.com https:\/\/fonts.googleapis.com https:\/\/play.google.com https:\/\/analytics.google.com https:\/\/fonts.gstatic.com https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/*.geetest.com https:\/\/*.geevisit.com https:\/\/sgtm.btsgtm.com; connect-src 'self' wss: https:\/\/stats.g.doubleclick.net https:\/\/analytics.google.com https:\/\/www.google.com wss:\/\/stream.bitget.cloud https:\/\/*.noxiaohao.com wss:\/\/*.noxiaohao.com wss:\/\/*.bitget.com https:\/\/www.turingfraud.net https:\/\/play.google.com https:\/\/accounts.google.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/sgtm.btsgtm.com ; worker-src 'self' blob:; img-src 'self' data: blob: https:\/\/www.googletagmanager.com https:\/\/img.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/img.bitgetimg.com https:\/\/img.gurenla.com https:\/\/*.bgbstatic.com https:\/\/lh3.googleusercontent.com https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/static-web.jjdsn.vip https:\/\/cdn.bitkeep.vip https:\/\/www.google.co.jp https:\/\/bin.wangsustatic.com https:\/\/sgtm.btsgtm.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/accounts.google.com https:\/\/fonts.googleapis.com https:\/\/static.bgbstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; font-src 'self' data: https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/fonts.gstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri \/v1\/buried\/log\/cspSecurity \/v1\/monitor\/csp?appId=d4b6df7d;","count":1},{"content-security-policy-report-only":" frame-src 'self' https:\/\/*.youtube.com https:\/\/*.youtube-nocookie.com https:\/\/*.vimeo.com https:\/\/*.fls.doubleclick.net https:\/\/*.adsrvr.org https:\/\/tr.snapchat.com https:\/\/ct.pinterest.com https:\/\/s.company-target.com https:\/\/ams.creativecdn.com https:\/\/gum.criteo.com https:\/\/www.facebook.com https:\/\/app.guideflow.com; report-uri https:\/\/o74188.ingest.sentry.io\/api\/6504792\/security\/?sentry_key=ea161aee3e064e27892214d07aa71245&sentry_environment=production","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.jsdelivr.net https:\/\/*.cloudflare.com https:\/\/*.googletagmanager.com https:\/\/*.google.com https:\/\/*.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/connect.facebook.net https:\/\/*.mczbf.com https:\/\/*.kdukvh.com https:\/\/*.emjcd.com https:\/\/*.jdoqocy.com https:\/\/*.dotomi.com https:\/\/*.cj.com https:\/\/*.sjwoe.com https:\/\/*.clarity.ms https:\/\/onelinksmartscript.appsflyer.com https:\/\/*.apple-mapkit.com https:\/\/embed.reddit.com https:\/\/static.zdassets.com https:\/\/platform.twitter.com https:\/\/www.instagram.com https:\/\/widget.trustpilot.com https:\/\/unpkg.com; style-src 'self' 'unsafe-inline' https:\/\/cdn.jsdelivr.net https:\/\/*.cloudflare.com https:\/\/*.googleoptimize.com https:\/\/*.googletagmanager.com https:\/\/www.gstatic.com https:\/\/fonts.googleapis.com; img-src 'self' data: https:\/\/cdn.jsdelivr.net https:\/\/*.cloudflare.com https:\/\/*.googletagmanager.com https:\/\/*.google.com https:\/\/*.google-analytics.com https:\/\/storage.googleapis.com https:\/\/fonts.gstatic.com https:\/\/stats.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/purecatamphetamine.github.io http:\/\/purecatamphetamine.github.io https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/*.clarity.ms https:\/\/googleads.g.doubleclick.net https:\/\/*.googleusercontent.com https:\/\/storage.googleapis.com https:\/\/secure.gravatar.com https:\/\/*.apple-mapkit.com https:\/\/syndication.twitter.com https:\/\/s0.wp.com https:\/\/*.bing.com; font-src 'self' data: https:\/\/cdn.jsdelivr.net https:\/\/fonts.gstatic.com https:\/\/s0.wp.com https:\/\/applepay.cdn-apple.com; worker-src 'self'; frame-src 'self' https:\/\/www.youtube.com https:\/\/*.googletagmanager.com https:\/\/embed.reddit.com https:\/\/platform.twitter.com https:\/\/www.instagram.com https:\/\/widget.trustpilot.com; connect-src 'self' https:\/\/cdn.jsdelivr.net https:\/\/*.cloudflare.com https:\/\/lown4qvbisme2qafgzvjetqzzy0tbyyr.lambda-url.us-west-2.on.aws https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/www.google.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/stats.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/*.mczbf.com https:\/\/*.kdukvh.com https:\/\/*.emjcd.com https:\/\/*.jdoqocy.com https:\/\/*.dotomi.com https:\/\/*.cj.com https:\/\/*.sjwoe.com https:\/\/www.facebook.com https:\/\/*.clarity.ms https:\/\/*.apple-mapkit.com https:\/\/*.mydnsip.com https:\/\/www.googleadservices.com https:\/\/engagements.appsflyer.com https:\/\/meta.veepn.com https:\/\/ekr.zdassets.com; media-src 'self'; frame-ancestors 'self'; object-src 'none'; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http:\/\/*.files.wordpress.com wss:\/\/www.artforum.com; report-uri https:\/\/pmcuri.report-uri.com\/r\/d\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.firstdata.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.firstdata.com *.ipg-online.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; frame-ancestors https:\/\/api.clerk.io https:\/\/cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.firstdata.com https:\/\/pay.google.com https:\/\/pay.sandbox.google.com https:\/\/pay.google.co.uk https:\/\/pay.google.ie https:\/\/applepay.cdn-apple.com https:\/\/apple-pay-gateway.apple.com https:\/\/apple-pay-gateway-cert.apple.com https:\/\/apple-pay-gateway-nc-pod1.apple.com https:\/\/apple-pay-gateway-pr-pod1.apple.com *.ipg-online.com https:\/\/ci.checkout-lane.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * js.stripe.com *.hotjar.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.firstdata.com *.ipg-online.com https:\/\/www.gstatic.com https:\/\/cdn.clerk.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.facebook.com bat.bing.com *.google.com *.google.co.uk *.googleadservices.com *.google-analytics.com *.magentocommerce.com *.widgets.magentocommerce.com *.paypalobjects.com *.postcodeanywhere.co.uk *.hsforms.net *.hsforms.com *.civiccomputing.com *.hs-scripts.com *.hsadspixel.net *.hs-banner.com *.hs-analytics.net *.clerk.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.firstdata.com self unsafe-inline https:\/\/pay.google.com https:\/\/pay.sandbox.google.com https:\/\/pay.google.co.uk https:\/\/pay.google.ie https:\/\/applepay.cdn-apple.com https:\/\/apple-pay-gateway.apple.com https:\/\/apple-pay-gateway-cert.apple.com https:\/\/apple-pay-gateway-nc-pod1.apple.com https:\/\/apple-pay-gateway-pr-pod1.apple.com *.ipg-online.com https:\/\/ci.checkout-lane.com https:\/\/api.clerk.io https:\/\/cdn.clerk.io chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com connect.facebook.net js-agent.newrelic.com bam.nr-data.net *.hsforms.net *.hsforms.com *.civiccomputing.com *.hs-scripts.com *.hsadspixel.net *.hs-banner.com *.hs-analytics.net *.clerk.io https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.firstdata.com *.ipg-online.com https:\/\/api.clerk.io https:\/\/cdn.clerk.io downloads.mailchimp.com *.fontawesome.com assets.braintreegateway.com services.postcodeanywhere.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.firstdata.com *.ipg-online.com https:\/\/pay.google.com https:\/\/pay.sandbox.google.com https:\/\/pay.google.co.uk https:\/\/pay.google.ie https:\/\/payments.google.com https:\/\/applepay.cdn-apple.com https:\/\/apple-pay-gateway.apple.com https:\/\/apple-pay-gateway-cert.apple.com https:\/\/apple-pay-gateway-nc-pod1.apple.com https:\/\/apple-pay-gateway-pr-pod1.apple.com https:\/\/ci.checkout-lane.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.hsforms.net *.hsforms.com *.civiccomputing.com *.hs-scripts.com *.hsadspixel.net *.hs-banner.com *.hs-analytics.net *.clerk.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.navigraph.com; connect-src 'self' https:\/\/*.google-analytics.com https:\/\/*.navigraph.com https:\/\/*.braintree-api.com https:\/\/google.com https:\/\/*.google.com https:\/\/bat.bing.net https:\/\/bat.bing.com https:\/\/*.paypal.com https:\/\/*.cardinalcommerce.com https:\/\/*.cardinaltrusted.com https:\/\/api.ipstack.com https:\/\/*.braintreegateway.com https:\/\/www.googletagmanager.com https:\/\/*.amazonaws.com https:\/\/analytics.tiktok.com https:\/\/www.facebook.com https:\/\/pixel-config.reddit.com https:\/\/*.doubleclick.net https:\/\/*.tiktokw.us; script-src 'self' https:\/\/*.navigraph.com https:\/\/*.braintreegateway.com https:\/\/*.cardinaltrusted.com https:\/\/pay.google.com https:\/\/*.cdn-apple.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/www.paypal.com https:\/\/code.jquery.com https:\/\/connect.facebook.net https:\/\/www.redditstatic.com https:\/\/bat.bing.com https:\/\/analytics.tiktok.com https:\/\/*.doubleclick.net 'unsafe-inline'; style-src 'self' https:\/\/*.typekit.net 'unsafe-inline'; img-src 'self' https:\/\/*.navigraph.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com https:\/\/www.paypalobjects.com https:\/\/*.youtube.com https:\/\/www.google.com https:\/\/alb.reddit.com https:\/\/www.facebook.com https:\/\/bat.bing.net https:\/\/bat.bing.com blob: data:; media-src 'self'; font-src 'self' https:\/\/fonts.gstatic.com https:\/\/use.typekit.net https:\/\/*.cdn-apple.com; child-src 'self' https:\/\/*.paypal.com https:\/\/pay.google.com https:\/\/*.braintreegateway.com\/ https:\/\/*.cardinalcommerce.com\/ https:\/\/www.youtube.com; manifest-src 'self'; worker-src 'self'; report-uri https:\/\/collect.navigraph.com\/csp-report; report-to ng-csp","count":1},{"content-security-policy-report-only":" script-src 'report-sample' data: 'nonce-d1f5ac1b68e25bbc4e2312fe9a0340ff-argus' 'strict-dynamic' 'self' 'unsafe-eval' blob: *.bytescm.com *.bytetos.com *.ibytedapm.com *.zijieapi.com *.snssdk.com *.bytedance.com *.bytedance.net *.pstatp.com *.bytednsdoc.com *.bytegoofy.com *.byted-static.com *.yhgfb-cn-static.com *.baidu.com *.byteimg.com; connect-src 'self' *.bytedance.net *.snssdk.com *.zijieapi.com *.byted.org *.ugsdk.cn *.bytedance.com hm.baidu.com *.usergrowth.com.cn *.bytescm.com *.toutiao.com *.yhgfb-cn-static.com *.idouyinvod.com:* *.volcsiriusbd.com:* *.volcsirius.com:* *.tt.x.bsgslb.cn:* *.dy.zzcdnx.com:* *.qc.bsccdn.net:* *.smtcdns.com:* *.ugslb.com:* *.livehwc3.cn:* *.smtcdns.net:* *.bytefcdnrd.com:* *.ksyungslb.com:* *.ksyungslb2.com:* *.ourdvsss.com:* *.tbcache.com:* *.jomodns.com:* *.douyincdn.com:* *.ixigua.com:* *.bdxigualive.com:* *.pstatp.com:* *.douyinliving.com:* *.picovr.com:* *.huoshanlive.com:* *.ihuoshanlive.com:* *.volccdn.com:* *.bestv.com.cn:* *.bytefcdn.com:* *.douyinvod.com:* *.bytetos.com *.ibytedapm.com *.pstatp.com *.bytednsdoc.com *.bytegoofy.com *.byted-static.com *.byteimg.com *.qnqcdn.net:* *.weilayun.com:* *.saxysec.com:* *.saxyit.com:* *.saxydc.com:* *.sjxysec.com:* *.sjxydc.com:* *.hiecheimaetu.com:* *.ppio.cloud:* *.vegslb.com:* *.xsj.wasu.tv:* *.zebracdn.com:* *.volctranscdn.com:* *.fqnovelstatic.com *.bytedanceapi.com; frame-ancestors 'self' *.feishu.cn; report-to slardar-endpoint; upgrade-insecure-requests; report-uri https:\/\/mon.zijieapi.com\/monitor_browser\/collect\/batch\/security\/?bid=novel_pc; base-uri 'self'; object-src 'self'; frame-src 'self' *.bytedance.com:* *.douyin.com:*;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-n6wuvLO4rj0o0oKW0m2QjQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' blob; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.googletagmanager.com static.addtoany.com cse.google.com cdnjs.cloudflare.com dev.visualwebsiteoptimizer.com cdn.visualwebsiteoptimizer.com app.vwo.com cdn.cookielaw.org analytics.tiktok.com www.youtube.com bat.bing.com s.pinimg.com connect.facebook.net script.hotjar.com collector-939.tvsquared.com static.hotjar.com www.clarity.ms scripts.clarity.ms static.ads-twitter.com c5.adalyser.com snap.licdn.com maps.googleapis.com static.cognitoforms.com www.cognitoforms.com assets.pinterest.com; script-src-elem 'self' 'unsafe-inline' www.google.com www.googletagmanager.com static.addtoany.com cse.google.com cdnjs.cloudflare.com dev.visualwebsiteoptimizer.com cdn.visualwebsiteoptimizer.com app.vwo.com cdn.jsdelivr.net ct.pinterest.com www.clarity.ms script.hotjar.com scripts.clarity.ms analytics.tiktok.com connect.facebook.net s.pinimg.com static.hotjar.com static.ads-twitter.com collector-939.tvsquared.com c5.adalyser.com cdn.cookielaw.org snap.licdn.com bat.bing.com www.youtube.com secure.callhandling.co.uk ep2.adtrafficquality.google partner.googleadservices.com diabetes-uk.org maps.googleapis.com static.cognitoforms.com www.cognitoforms.com r1.dotdigital-pages.com assets.pinterest.com; style-src 'self' 'unsafe-inline' www.google.com www.gstatic.com fonts.googleapis.com app.vwo.com; style-src-elem 'self' 'unsafe-inline' www.google.com www.gstatic.com fonts.googleapis.com app.vwo.com; style-src-attr 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'; img-src 'self' data: blob: i.ytimg.com dev.visualwebsiteoptimizer.com cdn.visualwebsiteoptimizer.com useruploads.vwo.io www.google.co.uk *.google.co.in *.google.ie *.google.com.au *.google.ca *.google.co.nz *.google.co.za *.google.fr *.google.es *.google.nl *.google.com.ph *.google.de *.google.com.pk *.google.com.my *.google.ae *.google.com.mx *.google.co.id *.google.com.ng *.google.se *.google.com.sg *.google.com.hk *.google.gr *.google.im *.google.it *.google.ro *.google.be *.google.je *.google.lk *.google.gg *.google.ch *.google.pl *.google.co.ke *.google.com.sa *.google.fi *.google.com.mt *.google.com.tr *.google.com.cy *.google.com.eg *.google.dk *.google.co.th *.google.com.ar *.google.cz *.google.pt *.google.com.gh *.google.no *.google.com.br *.google.co.jp *.google.ru *.google.cl *.google.ee *.google.hr *.google.co.ug *.google.at *.google.co.zw *.google.is c5.adalyser.com collector-939.tvsquared.com px.ads.linkedin.com analytics.twitter.com bat.bing.com t.co c.bing.com cdn.cookielaw.org www.googletagmanager.com *.gstatic.com c.clarity.ms www.google.com www.facebook.com www.googleadservices.com ad.doubleclick.net stats.g.doubleclick.net analytics.tiktok.com diabetes-resources-production.s3-eu-west-1.amazonaws.com clients1.google.com ep1.adtrafficquality.google translate.google.com storage.googleapis.com log.pinterest.com thumborcdn.acast.com diabetes-resources-production.s3.eu-west-1.amazonaws.com www.google.com.bd www.google.com.vn www.google.tt www.google.com.co www.google.bg www.google.co.il www.google.com.pe www.google.hu www.google.al www.google.com.qa www.google.mu www.google.com.et www.google.com.jm www.google.com.np www.google.iq www.google.com.kw www.google.co.ma www.google.com.ua www.google.com.gi www.google.co.tz www.google.co.zm www.google.com.om www.google.com.ec www.google.co.kr www.google.rs www.google.dz www.google.si www.google.jo www.google.com.bo www.google.co.ve www.google.mw www.google.com.mm www.google.lv www.google.com.gt www.google.lt www.google.com.tw www.google.sk www.google.com.lb www.google.cm www.google.co.cr www.google.lu www.google.co.bw www.google.com.pa www.google.gy www.google.mv www.google.com.ni www.google.com.do www.google.com.bh www.google.com.na www.google.com.kh www.google.com.uy www.google.ba www.google.kz www.google.co.ls www.google.ge www.google.com.fj www.google.tn www.google.mk www.google.com.pg www.google.com.pr www.google.so www.google.rw www.google.com.bn www.google.hn www.google.com.sv www.google.ps www.google.bs www.google.me www.google.com.py www.google.md www.google.mn www.google.com.bz www.google.com.ly www.google.az www.google.com.sl www.google.co.mz www.google.com.ag www.google.co.uz www.google.gm www.google.com.vc www.google.ci www.google.com.cu www.google.sh www.google.by www.google.ad www.google.sc www.google.ws www.google.am; font-src 'self' data: fonts.gstatic.com static.cognitoforms.com script.hotjar.com; connect-src 'self' dev.visualwebsiteoptimizer.com o341786.ingest.sentry.io vc.hotjar.io surveystats.hotjar.io *.clarity.ms stats.g.doubleclick.net googleads.g.doubleclick.net analytics-ipv6.tiktokw.us region1.analytics.google.com analytics.google.com px.ads.linkedin.com bat.bing.com bat.bing.net ct.pinterest.com www.google.com www.google.co.uk *.google.com.au *.google.ie *.google.co.in *.google.co.nz *.google.ca *.google.es *.google.fr *.google.com.ph *.google.lk cdn.cookielaw.org analytics.tiktok.com www.googleadservices.com t.co analytics.twitter.com www.google-analytics.com region1.google-analytics.com secure.callhandling.co.uk content.hotjar.io wss:\/\/ws.hotjar.com wss:\/\/ws.hotjar.io metrics.hotjar.io www.googletagmanager.com www.googleapis.com maps.googleapis.com translate.googleapis.com syndicatedsearch.goog pagead2.googlesyndication.com www.cognitoforms.com ad.doubleclick.net ep1.adtrafficquality.google stats.addtoany.com translate-pa.googleapis.com places.googleapis.com readaloud.googleapis.com ask.hotjar.io in.hotjar.io www.google.com.co www.google.com.bd www.google.co.tz www.google.com.vn www.google.tt www.google.co.zm www.google.al www.google.com.pe www.google.si www.google.com.ec www.google.com.jm www.google.com.qa www.google.ba www.google.co.kr www.google.com.et www.google.co.il www.google.com.gi www.google.rs www.google.com.kw www.google.jo www.google.hu www.google.lv www.google.mu; frame-src 'self' static.addtoany.com ct.pinterest.com www.youtube-nocookie.com www.youtube.com syndicatedsearch.goog ep2.adtrafficquality.google www.googletagmanager.com diabetes-uk.org app.powerbi.com *.fls.doubleclick.net www.cognitoforms.com r1.dotdigital-pages.com www.google.com calendar.google.com embed.acast.com app.vwo.com givp.nl assets.pinterest.com share.transistor.fm; media-src 'self' ssl.gstatic.com; worker-src 'self' blob:; report-uri https:\/\/www.diabetes.org.uk\/sites\/default\/files\/csp-report.php","count":1},{"content-security-policy-report-only":" style-src-elem 'unsafe-inline' cdn.listrakbi.com *.googleapis.com *.livehelpnow.net *.shipperhq.com tcc.test cary.test *.userway.org thecarycompany.com *.thecarycompany.com; font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com data: *.hawksearch.com *.hawksearch.net *.userway.org *.livehelpnow.net *.shipperhq.com *.gstatic.com *.googleapis.com tcc.test cary.test *.thecarycompany.com thecarycompany.com fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com www.googletagmanager.com *.certcapture.com data: *.avis-verifies.com *.livechatinc.com *.shipperhq.com *.userway.org *.trustpilot.com guarantee-cdn.com *.pinterest.com *.google.com services.listrak.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com https:\/\/www.googletagmanager.com\/ pay.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com validator.swagger.io *.certcapture.com tcc.test cary.test *.thecarycompany.com www.thecarycompany.com *.adobedtm.com *.wistia.com *.wistia.net *.akamaihd.net seal-chicago.bbb.org *.listrakbi.com maps.gstatic.com *.bing.com *.linkedin.com *.google.com *.googleapis.com nsg.symantec.com tcs-analytics-tracker.now.sh tcs-analytics-tracker.vercel.app guarantee-cdn.com www.facebook.com hn.inspectlet.com thecarycompany.com *.livehelpnow.net googleadservices.com *.cookielaw.org *.userway.org http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ www.gstatic.com connect.facebook.net graph.facebook.com business.facebook.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.magento-datasolutions.com https:\/\/rum.hlx.page *.certcapture.com 'unsafe-inline' data: *.wistia.com *.wistia.net seal-chicago.bbb.org *.listrakbi.com nsg.symantec.com *.online-metrix.net *.shipperhq.com *.authorize.net secure.authorize.net test.authorize.net *.licdn.com *.chatservice.co *.inspectlet.com www.facebook.com *.msecnd.net *.bing.com *.doubleclick.net *.google.com *.googleadservices.com *.google-analytics.com *.googlecommerce.com *.googletagmanager.com *.googleapis.com *.gstatic.com guarantee-cdn.com *.cardinalcommerce.com.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trustpilot.com *.cookielaw.org *.userway.org *.livehelpnow.net *.sentry-cdn.com *.thomasnet.com ip.convirza.com tcc.test cary.test thecarycompany.com *.thecarycompany.com cdn.jsdelivr.net *.pinimg.com *.fontawesome.com *.pinterest.com services.listrak.com testflex.cybersource.com flex.cybersource.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ pay.google.com x.klarnacdn.net connect.facebook.net graph.facebook.com business.facebook.com assets.shipperhq.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com data: *.listrakbi.com *.shipperhq.com *.userway.org *.livehelpnow.net tcc.test cary.test *.googleapis.com *.thecarycompany.com thecarycompany.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: *.wistia.com *.wistia.net *.akamaihd.net *.userway.org tcc.test cary.test *.thecarycompany.com thecarycompany.com *.livehelpnow.net http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.certcapture.com data: *.wistia.com *.litix.io *.shipperhq.com wss:\/\/rms.shipperhq.com *.doubleclick.net *.chatservice.co *.inspectlet.com ws.inspectlet.com tcs-analytics-tracker.now.sh tcs-analytics-tracker.vercel.app *.google.com *.googleapis.com *.bing.com *.trustpilot.com *.cookielaw.org developer.livehelpnow.net *.userway.org *.livehelpnow.net wss:\/\/app.livehelpnow.net ip.convirza.com dni.logmycalls.com tcc.test cary.test *.thecarycompany.com thecarycompany.com geolocation.onetrust.com *.linkedin.com *.pinterest.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com ovs.shipperhq.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/5502b8453f99696234832a80aaf978ec.report-uri.com\/r\/d\/csp\/reportOnly; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" script-src 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' app.contentsquare.com t.contentsquare.net *.heapanalytics.com *.2mdn.net *.33across.com *.acexchange.co.kr *.ad-generation.jp *.adagio.io *.addthis.com *.addthisedge.com *.adform.com *.adiiix.com *.adingo.jp *.admanmedia.com *.admixer.com *.admixer.net *.adtech.com *.adtiming.com *.advangelists.com *.advertising.com *.adyoulike.com *.amazon-adsystem.com *.amazon.com *.ampproject.org *.amxrtb.com *.aniview.com *.aol.com *.appnexus.com *.aps.amazon.com *.aralego.com *.avantisvideo.com *.axonix.com *.beachfront.com *.behave.com *.betweendigital.com *.bidmachine.io *.bidstreammedia.com *.bidtellect.com *.bing.com *.blis.com *.braintreegateway.com *.brid.tv *.brightcove.com *.brightcove.net *.chocolateplatform.com *.clarity.ms *.cloudflare.com *.cloudfront.net *.consumable.com *.contextweb.com *.conversantmedia.com *.crazyegg.com *.criteo.com *.criteo.net *.districtm.io *.doubleclick.net *.doubleverify.com *.e-planning.net *.e-volution.ai *.emxdgt.com *.engagebdr.com *.eskimi.com *.exponential.com *.facebook.com *.facebook.net *.fastclick.net *.freewheel.tv *.google-analytics.com *.google.ad *.google.ae *.google.al *.google.am *.google.as *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bi *.google.bj *.google.bs *.google.bt *.google.by *.google.ca *.google.cat *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.ck *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.vi *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ag *.google.com.ai *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sb *.google.com.sg *.google.com.sl *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.dz *.google.ee *.google.es *.google.fi *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.gl *.google.gm *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kg *.google.ki *.google.kz *.google.la *.google.li *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.mn *.google.ms *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.nr *.google.nu *.google.pl *.google.pn *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.sh *.google.si *.google.sk *.google.sm *.google.sn *.google.so *.google.sr *.google.st *.google.td *.google.tg *.google.tl *.google.tm *.google.tn *.google.to *.google.tt *.google.vg *.google.vu *.google.ws *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.gumgum.com *.id5-sync.com *.improvedigital.com *.indexexchange.com *.infolinks.com *.inmobi.com *.inskinmedia.com *.instagram.com *.insticator.com *.jquery.com *.kargo.com *.launchdarkly.com *.lemmatechnologies.com *.lijit.com *.lkqd.com *.lkqd.net *.logan.ai *.loopme.com *.marketo.net *.media.net *.mediago.io *.mediatradecraft.com *.moatads.com *.mobfox.com *.mobileadtrading.com *.my.com *.my6sense.com *.narrativ.com *.nativo.com *.newrelic.com *.nr-data.net *.ogury.com *.onetag.com *.openexchangerates.org *.openx.com *.outbrain.com *.playbuzz.com *.pokkt.com *.prodooh.com *.proper.io *.pubmatic.com *.pubnative.net *.px-cdn.net *.quantcount.com *.quantserve.com *.realself.com *.revcontent.com *.rhythmone.com *.richaudience.com *.risecodes.com *.rlcdn.com *.rsdev.co *.rubiconproject.com *.s-onetag.com *.sharethrough.com *.smaato.com *.smartadserver.com *.smartclip.net *.smartyads.com *.snapengage.com *.somoaudience.com *.sonobi.com *.sovrn.com *.speedcurve.com *.spotx.tv *.spotxchange.com *.springserve.com *.ssp.e-volution.ai *.ssp.logan.ai *.stackadapt.com *.synacor.com *.target.my.com *.teads.tv *.telaria.com *.themediagrid.com *.tremorhub.com *.tribalfusion.com *.triplelift.com *.typekit.net *.ucfunnel.com *.undertone.com *.unrulymedia.com *.vdopia.com *.velismedia.com *.verve.com *.video.unrulymedia.com *.vidoomy.com *.yahoo.com *.yieldmo.com *.zencdn.net btloader.com openexchangerates.org ep2.adtrafficquality.google blob:; worker-src 'self' blob:; frame-ancestors *; form-action *; report-uri https:\/\/api.realself.com\/v1\/rs-csp-sc\/csp-info; report-to security-report","count":1},{"content-security-policy-report-only":" default-src 'self' *.signnow.com; script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' *.bing.com *.cloudflare.com googleads.g.doubleclick.net *.stripe.com run.pstmn.io *.signnow.com *.google.com www.google.com *.googletagmanager.com *.gstatic.com *.upsellit.com *.intercom.io *.paypal.com *.recaptcha.net *.checkout.com infird.com *.gstatic.cn *.braintreegateway.com *.intercomcdn.com *.smartlook.com widget.intercom.io *.clarity.ms static.ads-twitter.com a.quora.com secure.rocketgate.com *.pdffiller.com widget.trustpilot.com applepay.cdn-apple.com ajax.googleapis.com ct.capterra.com js.zi-scripts.com www.dropbox.com stats.wp.com cdn.mrkhub.com code.jquery.com https:\/\/www.googletagmanager.com\/gtm.js secure.gravatar.com blog-signnow-com.disqus.com cdn.mr-prod.xyz; style-src 'report-sample' 'unsafe-inline' 'self' *.googleapis.com *.signnow.com *.pdffiller.com *.google.com cdnjs.cloudflare.com cdn.airslate-pmnt-hub.com cdn.quilljs.com cdn.mrkhub.com fonts.bunny.net 0.gravatar.com www.gstatic.com www.paypalobjects.com; object-src 'none'; base-uri 'self'; connect-src 'self' *.ingest.sentry.io *.ingest.us.sentry.io *.signnow.com *.google-analytics.com *.google.com *.googleadservices.com *.smartlook.cloud *.braintreegateway.com *.bing.com bat.bing.com *.intercom.io wss:\/\/*.intercom.io *.intercom-messenger.com wss:\/\/*.intercom-messenger.com *.googleapis.com *.checkout.com *.usrsprt.com *.braintree-api.com *.infrateam.net *.recaptcha.net *.googletagmanager.com google.com *.paypal.com *.clarity.ms *.pdffiller.com js.zi-scripts.com *.cdn77.org *.zoominfo.com *.mrkhub.com mm-websocket.pdffiller.com *.doubleclick.net *.rocketgate.com *.browser-intake-datadoghq.com *.pmnt-prod.xyz bat.bing.net; font-src 'self' fonts.gstatic.com fonts.intercomcdn.com *.signnow.com r2cdn.perplexity.ai cdn.scite.ai static.rakuten.com *.intercomcdn.com applepay.cdn-apple.com *.pdffiller.com cdn.airslate-pmnt-hub.com fonts.bunny.net cdn.mrkhub.com use.typekit.net data: www.paypalobjects.com; frame-src 'self' *.signnow.com signnow.com *.statuspage.io *.airslate.com *.stripe.com *.google.com *.googletagmanager.com *.pdffiller.com www.youtube.com *.braintreegateway.com *.paypal.com *.altaflow.com *.recaptcha.net *.checkout.com challenges.cloudflare.com widget.trustpilot.com signnow.sjv.io ssl.kaptcha.com applepay.cdn-apple.com; img-src 'self' blob: data: engagement-static.amplitude.com *.google.com *.bing.com *.analytics.google.com www.google.com.co *.intercomcdn.com *.google.de *.google.ca googleads.g.doubleclick.net img.youtube.com *.signnow.com stats.g.doubleclick.net *.google-analytics.com i.ytimg.com *.paypal.com *.googletagmanager.com *.rakuten.com *.doubleclick.net *.gstatic.com *.pdffiller.com *.airslate-pmnt-hub.com analytics.twitter.com t.co bat.bing.net q.quora.com s.w.org cdn.airslate.com applepay.cdn-apple.com cdn.mrkhub.com crawlers-tracking.mrkhub.com storage.googleapis.com static.intercomassets.com pixel.wp.com secure.gravatar.com uslegalforms.com; manifest-src 'self' *.signnow.com; media-src 'self' *.signnow.com static.rakuten.com js.intercomcdn.com; report-uri https:\/\/csp-collector.signnow.com\/csp-report; worker-src 'self' *.signnow.com *.pdffiller.com blob:;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' addevent.com cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/challenges.cloudflare.com https:\/\/polyfill-fastly.io static.addtoany.com; style-src 'self' addtocalendar.com cdn.jsdelivr.net fonts.googleapis.com https:\/\/cdnjs.cloudflare.com","count":1},{"content-security-policy-report-only":" default-src 'self';connect-src 'self' https: https:\/\/accounts.hytale.com;font-src 'self' data: https:;img-src 'self' data: https:;frame-src 'self' https:;frame-ancestors 'none';base-uri 'self';form-action 'self' https:\/\/hytale.com https:\/\/accounts.hytale.com;worker-src 'self' blob:;upgrade-insecure-requests;report-uri https:\/\/sentry.hytale.com\/api\/8\/security\/?sentry_key=65d742ee9e0be01c88c43da4f87fb15e;report-to csp-endpoint;  script-src 'nonce-2adaf7464e095cd3abdb851b722fb155' 'self' 'report-sample' https:\/\/challenges.cloudflare.com https:\/\/static.cloudflareinsights.com 'sha256-5OM\/q8LddaMkI7TixtaPmkKWPdIXNnjdHyGclVUcyUU=' 'sha256-GY4B\/CNojgHuwAMXvB0Vz7Ll4NgZhcP6ZSnjYtK9EjM=' 'sha256-rWMsPn1sMnLwFwzMMxYk4wUmG2inrEs43dCrC8UWjQU=' 'sha256-3HXOx9\/PR9K3VeHz+P9qbYJcFtd9pTf84DI8tQYFDI4=' 'sha256-KV5ChVKuVwVZZKTeVM2Ko6Z42cMsMvgN0RdGnqCWf0k=' 'sha256-t21xvzaemDSJ9aaSoWqJ+3oHlgga3cJXgSDyE7AhnTw=' 'sha256-l\/MFoR\/z4hCACPY0ZBZhthBc+RhtdJWzYDc29GZI1Ic=' 'sha256-8Ng\/AVrCJxAha5so8wJZmICsVlolq2OP2+SFcpxBETA=' 'sha256-Onah6RNmDvqI9h52l99pBUMKfM6wcSBPfjNlHA0xkd8=' 'sha256-BF0290pkb3jxQsE7z00xR8Imp8X34FLC88L0lkMnrGw=' 'sha256-QzWFZi+FLIx23tnm9SBU4aEgx4x8DsuASP07mfqol\/c=' 'sha256-0chmwFk0zaA528yFfGV7J9ppIpdfTPPULncDF3WG7Zs=' 'sha256-eIXWvAmxkr251LJZkjniEK5LcPF3NkapbJepohwYRIc=' 'sha256-Q2BPg90ZMplYY+FSdApNErhpWafg2hcRRbndmvxuL\/Q=' 'sha256-Ya0pUYrC7nM5Cn\/056TyVuEiz6dFGrzmkWzgON0pF0U=' 'sha256-SHXg3YtOAVshUMT3f+eElYDgbV0kaujWj8DSaXSS4Vs=' 'sha256-47DEQpj8HBSa+\/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='; style-src 'self' 'report-sample' https: data: 'sha256-pTm6mUDM53IwEIFG2Zc1E2OtF6\/S2SWocbmQc\/4YO+Y=' 'sha256-w7BvN42M6BLNCDMz91p6TlxvO\/Wue34iDnt+t7021VQ=' 'sha256-iMp6Qn0iW1EI7+p3GzYe5grzVduBKDx95gmvVExULV4=' 'sha256-SNFo1u4Let7BMLzIA+oIxwnNWMG1T51WNTt8sObAPjk=' 'sha256-+yD\/RpbKUL6+AhMuXB2lH2WJl5QXdVKR6ln5XBhXP0U=' 'sha256-ivHfNnVmwGcSz6QXbYeu25xvPwjndDKU+ugTFXgR+RU=' 'sha256-ePbvicjUlVRQhXa8\/ahHAjaBCev26S8p7Q8CgWCyLLw=' 'sha256-vv9IoKo7BSLbWcUHr3tNmfNVmm5L\/9Cfn2H6LMk7\/ow=' 'sha256-47DEQpj8HBSa+\/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-GAW6+AF+G8qdY61Sy\/Pl82yAA2mYqG+zp7bFYLCtVvo=';","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-au6y3g9DCPTR2T1iT4AyEA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/connect.facebook.net https:\/\/js.hs-scripts.com https:\/\/js.hscollectedforms.net https:\/\/js.hs-analytics.net https:\/\/js.hs-banner.com https:\/\/js.hsforms.net https:\/\/widget.intercom.io https:\/\/js.intercomcdn.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:\/\/cdn.sanity.io https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/googleads.g.doubleclick.net https:\/\/i.ytimg.com https:\/\/files.stripe.com https:\/\/*.amazonaws.com https:\/\/*.intercomcdn.com https:\/\/*.intercom.io; font-src 'self' data:; connect-src 'self' https:\/\/*.sanity.io https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/*.google.com https:\/\/*.doubleclick.net https:\/\/*.facebook.com https:\/\/api.hubspot.com https:\/\/*.hubspot.com https:\/\/*.intercom.io wss:\/\/*.intercom.io https:\/\/vitals.vercel-insights.com https:\/\/mkt-site-phoenix-rising.vercel.app https:\/\/staging-phoenix-rising.vercel.app; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/player.mux.com https:\/\/js.stripe.com https:\/\/hooks.stripe.com https:\/\/intercom-sheets.com https:\/\/open.spotify.com https:\/\/embed.podcasts.apple.com https:\/\/share.descript.com https:\/\/forms.hsforms.com https:\/\/meetings.hubspot.com https:\/\/scribe.heidihealth.com https:\/\/scribe.dev.heidihealth.com; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/hooks.stripe.com; frame-ancestors 'self' https:\/\/studio.heidihealth.com https:\/\/*.sanity.studio; report-uri \/api\/csp-report; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" connect-src *.affirm.com https:\/\/tracker.affirm.com https:\/\/assets.braintreegateway.com *.braintreegateway.com *.braintree-api.com *.braze.com https:\/\/sdk.iad-05.braze.com\/api\/v3\/data\/ *.datadoghq.com *.browser-intake-us5-datadoghq.com https:\/\/browser-intake-us5-datadoghq.com https:\/\/session-replay.browser-intake-us5-datadoghq.com\/api\/v2\/replay https:\/\/experiments.gametime.co https:\/\/gametimesf.github.io https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/www.facebook.com\/tr\/ *.forter.com wss:\/\/cdn0.forter.com https:\/\/d2o5idwacg3gyw.cloudfront.net https:\/\/dz8rit8v72mig.cloudfront.net https:\/\/db7q4jg5rkhk8.cloudfront.net https:\/\/1.1.1.1 https:\/\/d94qwxh6czci4.cloudfront.net https:\/\/dr6vcclmzwk74.cloudfront.net https:\/\/d6rak4b14t5gp.cloudfront.net https:\/\/d3k4bt74u9esq1.cloudfront.net https:\/\/d1ezzflfzltk6e.cloudfront.net https:\/\/d3nocrch4qti4v.cloudfront.net https:\/\/duuytoqss3gu4.cloudfront.net https:\/\/df45ay5pw60dy.cloudfront.net *.google.com https:\/\/www.google.com https:\/\/www.google-analytics.com https:\/\/www.google-analytics.com\/j\/collect https:\/\/www.gstatic.com https:\/\/www.google.com.mx https:\/\/www.google.ca https:\/\/www.google.co.uk https:\/\/www.googletagmanager.com https:\/\/google.com\/pay https:\/\/adservice.google.com https:\/\/pay.google.com https:\/\/pay.google.com\/about\/redirect\/ https:\/\/analytics.google.com https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/googleads.g.doubleclick.net\/ *.gr4vy.app https:\/\/paypal.com https:\/\/www.paypal.com\/sdk\/js https:\/\/checkout.paypal.com https:\/\/www.paypalobjects.com *.paypal.com https:\/\/ipv4.podscribe.com https:\/\/verifi.podscribe.com https:\/\/d34r8q7sht0t9k.cloudfront.net *.pusher.com https:\/\/sockjs-mt1.pusher.com wss:\/\/ws-mt1.pusher.com https:\/\/us-east-1.hightouch-events.com https:\/\/*.hightouch-events.com https:\/\/apps.rokt-api.com https:\/\/*.rokt-api.com https:\/\/*.rokt.com https:\/\/sandbox.affirm.com https:\/\/sandbox.affirm.com\/fonts https:\/\/www.sandbox.paypal.com\/ *.sentry.io *.ingest.sentry.io *.ingest.us.sentry.io https:\/\/pixel.byspotify.com https:\/\/pixels.spotify.com api.statsig.com api.statsigcdn.com assetsconfigcdn.org beyondwickedmapping.org cdn.console.statsig.com cloudflare-dns.com console.statsig.com console.statsigcdn.com events.statsigapi.net featureassets.org featuregates.org idliststorage.blob.core.windows.net prodregistryv2.org statsigapi.net https:\/\/api.stripe.com https:\/\/*.tiktok.com https:\/\/*.tiktokw.us *.amazonaws.com https:\/\/api.buttercms.com https:\/\/d.impct.site https:\/\/pixels.spotify.com bat.bing.com *.cloudfront.net *.doubleclick.net https:\/\/gametime.hnyj8s.net *.gametime.co\/ https:\/\/boards-api.greenhouse.io\/v1\/boards\/gametimeunited\/departments https:\/\/global.ketchcdn.com *.riskified.com 'self';default-src 'self';font-src 'self' data: https:\/\/sandbox.affirm.com https:\/\/sandbox.affirm.com\/fonts https:\/\/www.sandbox.paypal.com\/ *.google.com https:\/\/www.google.com https:\/\/www.google-analytics.com https:\/\/www.google-analytics.com\/j\/collect https:\/\/www.gstatic.com https:\/\/www.google.com.mx https:\/\/www.google.ca https:\/\/www.google.co.uk https:\/\/www.googletagmanager.com https:\/\/google.com\/pay https:\/\/adservice.google.com https:\/\/pay.google.com https:\/\/pay.google.com\/about\/redirect\/ https:\/\/analytics.google.com https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/googleads.g.doubleclick.net\/ https:\/\/fp.affirm-stage.com https:\/\/use.fontawesome.com;form-action 'self' https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/www.facebook.com\/tr\/;frame-src https:\/\/assets.braintreegateway.com *.braintreegateway.com *.braintree-api.com https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/www.facebook.com\/tr\/ *.google.com https:\/\/www.google.com https:\/\/www.google-analytics.com https:\/\/www.google-analytics.com\/j\/collect https:\/\/www.gstatic.com https:\/\/www.google.com.mx https:\/\/www.google.ca https:\/\/www.google.co.uk https:\/\/www.googletagmanager.com https:\/\/google.com\/pay https:\/\/adservice.google.com https:\/\/pay.google.com https:\/\/pay.google.com\/about\/redirect\/ https:\/\/analytics.google.com https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/googleads.g.doubleclick.net\/ *.gr4vy.app https:\/\/paypal.com https:\/\/www.paypal.com\/sdk\/js https:\/\/checkout.paypal.com https:\/\/www.paypalobjects.com *.paypal.com https:\/\/sandbox.affirm.com https:\/\/sandbox.affirm.com\/fonts https:\/\/www.sandbox.paypal.com\/ https:\/\/js.stripe.com https:\/\/*.js.stripe.com https:\/\/hooks.stripe.com bytedance: https:\/\/player.vimeo.com\/ https:\/\/www.affirm.com sslocal: *.doubleclick.net 'self';img-src 'self' data: blob: *.gametime.co\/ https:\/\/*.tiktok.com https:\/\/*.tiktokw.us *;manifest-src 'self' *.google.com https:\/\/www.google.com https:\/\/www.google-analytics.com https:\/\/www.google-analytics.com\/j\/collect https:\/\/www.gstatic.com https:\/\/www.google.com.mx https:\/\/www.google.ca https:\/\/www.google.co.uk https:\/\/www.googletagmanager.com https:\/\/google.com\/pay https:\/\/adservice.google.com https:\/\/pay.google.com https:\/\/pay.google.com\/about\/redirect\/ https:\/\/analytics.google.com https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/googleads.g.doubleclick.net\/;script-src *.affirm.com https:\/\/tracker.affirm.com https:\/\/assets.braintreegateway.com *.braintreegateway.com *.braintree-api.com *.braze.com https:\/\/sdk.iad-05.braze.com\/api\/v3\/data\/ https:\/\/experiments.gametime.co https:\/\/gametimesf.github.io https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/www.facebook.com\/tr\/ *.forter.com https:\/\/dlthst9q2beh8.cloudfront.net https:\/\/d2nww8zpyj5pk0.cloudfront.net https:\/\/d2w2nqfk3z9hdt.cloudfront.net https:\/\/d27623md02evp.cloudfront.net https:\/\/d1qmrxg9gbf226.cloudfront.net *.google.com https:\/\/www.google.com https:\/\/www.google-analytics.com https:\/\/www.google-analytics.com\/j\/collect https:\/\/www.gstatic.com https:\/\/www.google.com.mx https:\/\/www.google.ca https:\/\/www.google.co.uk https:\/\/www.googletagmanager.com https:\/\/google.com\/pay https:\/\/adservice.google.com https:\/\/pay.google.com https:\/\/pay.google.com\/about\/redirect\/ https:\/\/analytics.google.com https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/googleads.g.doubleclick.net\/ *.gr4vy.app https:\/\/paypal.com https:\/\/www.paypal.com\/sdk\/js https:\/\/checkout.paypal.com https:\/\/www.paypalobjects.com *.paypal.com https:\/\/ipv4.podscribe.com https:\/\/verifi.podscribe.com https:\/\/d34r8q7sht0t9k.cloudfront.net https:\/\/apps.rokt-api.com https:\/\/*.rokt-api.com https:\/\/*.rokt.com https:\/\/cdn.hightouch-events.com https:\/\/pixel.byspotify.com https:\/\/pixels.spotify.com *.sentry.io *.ingest.sentry.io *.ingest.us.sentry.io https:\/\/www.datadoghq-browser-agent.com https:\/\/datadoghq-browser-agent.com https:\/\/js.stripe.com https:\/\/*.js.stripe.com https:\/\/*.tiktok.com https:\/\/*.tiktokw.us https:\/\/www.upsellit.com https:\/\/app.upsellit.com https:\/\/extmanagers.com https:\/\/app.link https:\/\/cdn.ketchjs.com https:\/\/cdn.sift.com\/s.js https:\/\/utt.impactcdn.com https:\/\/applepay.cdn-apple.com bat.bing.com blob: https:\/\/global.ketchcdn.com 'report-sample' *.riskified.com 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'report-sample' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/www.gstatic.com https:\/\/use.fontawesome.com https:\/\/www.googletagmanager.com;worker-src 'self' blob:;media-src 'self' *.forter.com;report-to csp-endpoint;report-uri https:\/\/o193734.ingest.us.sentry.io\/api\/1823111\/security\/?sentry_key=d34125aec97d44b6959ff62f3a287a66","count":1},{"content-security-policy-report-only":" default-src 'self'; frame-src 'self' https:\/\/datawrapper.dwcdn.net https:\/\/js.stripe.com https:\/\/www.youtube.com https:\/\/platform.twitter.com; worker-src blob:; connect-src 'self' data: wss:\/\/ws.datawrapper.de https:\/\/pwk.datawrapper.de https:\/\/*.cloudfront.net https:\/\/*.sentry.io https:\/\/*.gstatic.com https:\/\/static.dwcdn.net https:\/\/datawrapper.dwcdn.net https:\/\/tiles.dwcdn.net https:\/\/comments.datawrapper.de https:\/\/staging-chart-tests.s3.eu-central-1.amazonaws.com https:\/\/fonts.googleapis.com\/ https:\/\/app.datawrapper.de https:\/\/i.datawrapper.de  app.datawrapper.de ; font-src 'self' data: https:\/\/static.dwcdn.net https:\/\/fonts.gstatic.com https:\/\/fonts.dwcdn.net ; img-src * data: blob:; media-src * data:; script-src 'self' 'unsafe-eval' https:\/\/appsforoffice.microsoft.com https:\/\/datawrapper.dwcdn.net https:\/\/pwk.datawrapper.de 'nonce-PfBpRhKyyT0wlul4dI+ijQ=='; script-src-elem 'self' https:\/\/pwk.datawrapper.de https:\/\/js.stripe.com https:\/\/appsforoffice.microsoft.com https:\/\/platform.twitter.com https:\/\/pt.dwcdn.net https:\/\/datawrapper.dwcdn.net\/ https:\/\/app.datawrapper.de  'nonce-PfBpRhKyyT0wlul4dI+ijQ=='; script-src-attr 'unsafe-inline'; style-src 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/datawrapper.dwcdn.net https:\/\/static.dwcdn.net https:\/\/pt.dwcdn.net; style-src-elem 'self' 'unsafe-inline' https:\/\/static.dwcdn.net https:\/\/fonts.googleapis.com https:\/\/pt.dwcdn.net https:\/\/datawrapper.dwcdn.net","count":1},{"content-security-policy-report-only":" frame-ancestors 'self'; base-uri 'none'; report-uri https:\/\/o38422.ingest.sentry.io\/api\/1381643\/security\/?sentry_key=035194ae1605493c99dd66c2a7b2ca98;","count":1},{"content-security-policy-report-only":" default-src https: data: 'unsafe-inline' 'unsafe-eval' blob: wss:; report-uri https:\/\/464b711251f54c909b7a68dbb569ad3b.myssl-uri.com\/api\/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self' *.mradx.net *.okcdn.ru *.userapi.com; script-src-elem 'self' vk.com www.googletagmanager.com *.mail.ru www.googletagmanager.com:443 *.mail.ru:443 mc.yandex.ru mc.yandex.com st.max.ru yastatic.net 'unsafe-inline'; frame-src 'self' td.doubleclick.net *.vk.com *.vk.ru vk.com *.vkpay.io *.vkpay.fun *.mradx.net mc.yandex.ru sub.nspk.ru payments.niveldevelopment.com *.money.mail.ru *.mirconnect.ru platiecom.ru id.sber.ru secure.tbank.ru id.tbank.ru *.sbrf.ru; connect-src 'self' www.google-analytics.com *.google-analytics.com analytics.google.com *.analytics.google.com www.googletagmanager.com stats.g.doubleclick.net *.google.ru *.vk.com *.mail.ru vk.ru vk.com blob: *.mail.ru *.mradx.net:443 *.mradx.net *.okcdn.ru *.userapi.com sdk-api.apptracer.ru mc.yandex.ru mc.yandex.com yastatic.net wss:\/\/mc.yandex.com\/solid.ws; script-src 'self' 'nonce-MTc4Nzc2NzQzNA==' *.googletagmanager.com googletagmanager.com *.mail.ru st.max.ru 'unsafe-eval'; worker-src blob:; media-src 'self' data: blob: *.vk.com vk.com *.vk.ru vk.ru *.mradx.net *.okcdn.ru *.userapi.com; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com; img-src 'self' https: data: blob:; style-src 'self' 'unsafe-inline' 'unsafe-hashes' fonts.gstatic.com fonts.googleapis.com www.googletagmanager.com; frame-ancestors 'self' https:\/\/yclients.com https:\/\/web.max.ru https:\/\/senler.ru https:\/\/tilda.cc https:\/\/megagroup.ru https:\/\/www.retailcrm.ru https:\/\/marquiz.ru https:\/\/envybox.io https:\/\/www.unisender.com https:\/\/robokassa.com https:\/\/salid.ru https:\/\/www.reg.ru https:\/\/admin.getuds.app; report-uri \/csp\/csp-violation-report?project=vkads-portal","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-HkyfQZmFkA_wzztzM6jNBQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" connect-src 'self' https:\/\/checkoutshopper-live.adyen.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleoptimize.com https:\/\/*.hotjar.com https:\/\/*.mparticle.com https:\/\/beacon.krxd.net https:\/\/*.tre.se https:\/\/vercel.live https:\/\/api.usabilla.com https:\/\/dc.services.visualstudio.com https:\/\/stats.g.doubleclick.net https:\/\/www.google-analytics.com https:\/\/api.customersaas.com https:\/\/vc.hotjar.io wss:\/\/ws.hotjar.com https:\/\/cdn.linkedin.oribi.io https:\/\/adservice.google.com https:\/\/fonts.gstatic.com https:\/\/content.hotjar.io https:\/\/*.optimizely.com https:\/\/region1.google-analytics.com wss:\/\/ws-us3.pusher.com; default-src 'self' https:\/\/*.tre.se; font-src 'self' data: https:\/\/static.customersaas.com https:\/\/vercel.live https:\/\/assets.vercel.com; frame-src 'self' https:\/\/checkoutshopper-live.adyen.com https:\/\/6142836.fls.doubleclick.net https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/widget.trustpilot.com https:\/\/d6tizftlrpuof.cloudfront.net https:\/\/vercel.live https:\/\/www.youtube.com https:\/\/cdn.krxd.net https:\/\/cloud.epost.tre.se https:\/\/coverage.tre.se https:\/\/cdn.jobylon.com\/ https:\/\/tre.workbuster.com https:\/\/vars.hotjar.com https:\/\/td.doubleclick.net; img-src 'self' data: https:\/\/checkoutshopper-live.adyen.com https:\/\/6142836.fls.doubleclick.net https:\/\/www.facebook.com https:\/\/clients1.google.com https:\/\/www.google.com https:\/\/googleads.g.doubleclick.net https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com https:\/\/beacon.krxd.net https:\/\/*.tre.se https:\/\/d6tizftlrpuof.cloudfront.net https:\/\/vercel.live http:\/\/images.ctfassets.net https:\/\/images.ctfassets.net https:\/\/jslog.krxd.net\/ https:\/\/t.co https:\/\/w.usabilla.com https:\/\/www.google-analytics.com\/collect https:\/\/www.google.se https:\/\/www.google.dk https:\/\/i.ytimg.com https:\/\/img.youtube.com https:\/\/new-collect.albacross.com https:\/\/d35v9wsdymy32b.cloudfront.net https:\/\/px.ads.linkedin.com https:\/\/ad.doubleclick.net https:\/\/vercel.com blob:; manifest-src 'self'; media-src 'self' https:\/\/videos.ctfassets.net; object-src 'none'; report-uri https:\/\/www.tre.se\/logger\/csp-report; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/static.customersaas.com https:\/\/clients1.google.com https:\/\/www.googleoptimize.com https:\/\/www.google.com https:\/\/googleads.g.doubleclick.net https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com https:\/\/*.hotjar.com https:\/\/*.mparticle.com https:\/\/widget.trustpilot.com https:\/\/d6tizftlrpuof.cloudfront.net https:\/\/vercel.live https:\/\/www.youtube.com https:\/\/*.adtr.io https:\/\/*.krxd.net https:\/\/adtr.io https:\/\/analytics.twitter.com https:\/\/api.usabilla.com https:\/\/az416426.vo.msecnd.net\/scripts\/a\/ai.0.js https:\/\/bat.bing.com https:\/\/cdn.bannerflow.com https:\/\/cdn.tre.se https:\/\/cdnn.tre.se https:\/\/connect.facebook.net https:\/\/cse.google.com https:\/\/gtm.adt313.net\/jsTag  https:\/\/hi3gscriptbucket.blob.core.windows.net https:\/\/rules.quantcount.com https:\/\/s.ytimg.com https:\/\/secure.quantserve.com https:\/\/ssl.google-analytics.com https:\/\/static.ads-twitter.com https:\/\/tagmanager.google.com https:\/\/w.usabilla.com\/ https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/serve.albacross.com https:\/\/tre.workbuster.com https:\/\/region1.analytics.google.com https:\/\/cdn.amplitude.com https:\/\/treva.boost.ai; style-src 'report-sample' 'self' 'unsafe-inline' https:\/\/static.customersaas.com https:\/\/www.google.com https:\/\/d6tizftlrpuof.cloudfront.net https:\/\/vercel.live https:\/\/d1r5etm691cejh.cloudfront.net;","count":1},{"content-security-policy-report-only":" default-src https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com; script-src https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com 'unsafe-inline' 'unsafe-eval'; style-src https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com 'unsafe-inline'; report-uri \/1\/batch\/2\/OE\/mid=ATVPDKIKX0DER:sid=134-4888560-8245631:rid=5E4RX5ZV8R4X2TZQ26GE:sn=kdp.amazon.com","count":1},{"content-security-policy-report-only":" script-src 'nonce-rqOXtGmNTIKlFrWVc6T6mTYu' 'strict-dynamic' 'unsafe-eval'; base-uri 'self'; object-src 'none';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/*.flybreeze.com https:\/\/googleads.g.doubleclick.net https:\/\/connect.facebook.net https:\/\/growthbook-production.flybreeze.com https:\/\/dx.mountain.com https:\/\/gs.mountain.com https:\/\/px.mountain.com https:\/\/www.googletagmanager.com https:\/\/cdn.gladly.com https:\/\/pixel.mathtag.com https:\/\/js.adsrvr.org https:\/\/cdn.uplift-platform.com https:\/\/tag.uplift.com https:\/\/cdn.uplift.com https:\/\/analytics.tiktok.com https:\/\/script.hotjar.com https:\/\/static.hotjar.com https:\/\/bat.bing.com https:\/\/pixel.byspotify.com https:\/\/s.pinimg.com https:\/\/ct.pinterest.com https:\/\/cdnjs.cloudflare.com https:\/\/www.gstatic.com https:\/\/ads.nextdoor.com https:\/\/www.redditstatic.com https:\/\/app.termly.io https:\/\/script.gethovr.com https:\/\/www.securitytrfx.com https:\/\/socialladder.rkiapps.com https:\/\/sentry.flybreeze.team https:\/\/challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https:\/\/cdnjs.cloudflare.com https:\/\/www.gstatic.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdnjs.cloudflare.com; connect-src 'self' https:\/\/*.flybreeze.com https:\/\/sentry.flybreeze.team https:\/\/graphql.contentful.com https:\/\/*.nr-data.net https:\/\/www.googletagmanager.com https:\/\/www.redditstatic.com https:\/\/cdn.gladly.com https:\/\/flybreeze.gladly.com https:\/\/socialladder.rkiapps.com https:\/\/challenges.cloudflare.com; img-src 'self' https:\/\/*.flybreeze.com https:\/\/images.ctfassets.net https:\/\/googleads.g.doubleclick.net https:\/\/connect.facebook.net https:\/\/www.gstatic.com https:\/\/cdn.gladly.com https:\/\/flybreeze.gladly.com https:\/\/www.redditstatic.com https:\/\/s.pinimg.com https:\/\/pixel.mathtag.com https:\/\/analytics.tiktok.com https:\/\/bat.bing.com https:\/\/pixel.byspotify.com https:\/\/ct.pinterest.com https:\/\/script.hotjar.com https:\/\/static.hotjar.com https:\/\/www.securitytrfx.com https:\/\/challenges.cloudflare.com; object-src 'none'; media-src 'self' https:\/\/videos.ctfassets.net; frame-src 'self' https:\/\/*.flybreeze.com https:\/\/www.googletagmanager.com https:\/\/www.redditstatic.com https:\/\/www.securitytrfx.com https:\/\/challenges.cloudflare.com; child-src 'self' https:\/\/challenges.cloudflare.com; frame-ancestors 'self' https:\/\/go.flybreeze.dev https:\/\/crewapp-staging.flybreeze.team https:\/\/clerk.docs.flybreeze.dev https:\/\/docs.flybreeze.dev https:\/\/flight-info.flybreeze.team; manifest-src 'self'; report-uri https:\/\/csp-flybreeze.domdog.io\/report-uri\/flybreeze.com\/1\/1-4; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; font-src 'self' https: data:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https:; report-to csp-endpoint; report-uri https:\/\/csp-report.goglobal.travel\/v1\/csp-report;","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.sandbox.my.site.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.google.com *.doubleclick.net *.facebook.com https:\/\/www.avanci.fr 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com https:\/\/*.pricespider.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.force.com *.my.salesforce.com *.salesforceliveagent.com *.my.salesforce-sites.com https:\/\/sbmlifescience.my.site.com https:\/\/www.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com display.ugc.bazaarvoice.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.salesforce.com *.force.com *.sandbox.my.site.com *.pricespider.com *.my.salesforce-sites.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.facebook.com *.facebook.net *.salesforce-scrt.com *.bazaarvoice.com *.pricespider.com *.my.salesforce-sites.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" frame-ancestors 'self' https:\/\/stage.lovdata.no https:\/\/smia.lovdata.no\/","count":1},{"content-security-policy-report-only":" : default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'unsafe-inline'; frame-ancestors 'self'; form-action 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; img-src *; style-src 'unsafe-inline'; script-src 'unsafe-inline' 'unsafe-eval'","count":1},{"content-security-policy-report-only":" default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http:\/\/*.files.wordpress.com wss:\/\/www.vibe.com; report-uri https:\/\/pmcuri.report-uri.com\/r\/d\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' 'report-sample' https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/d36hc0p18k1aoc.cloudfront.net https:\/\/unpkg.com; style-src 'self' 'report-sample' cdnjs.cloudflare.com https:\/\/cdnjs.cloudflare.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/consent.cookiebot.com https:\/\/privacy-analytics-proxy.cookiebot.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/js.hsforms.net https:\/\/js.hs-scripts.com https:\/\/js.hs-analytics.net https:\/\/js.hscollectedforms.net https:\/\/js.hs-banner.com https:\/\/cdn.dreamdata.cloud; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/*.hsforms.net https:\/\/*.hubspot.com; img-src 'self' data: https: blob:; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/consentcdn.cookiebot.com https:\/\/www.google-analytics.com https:\/\/api.hsforms.com https:\/\/forms.hsforms.com https:\/\/forms.hubspot.com https:\/\/*.hubspot.com https:\/\/*.hsforms.net https:\/\/boards-api.greenhouse.io https:\/\/cdn.dreamdata.cloud https:\/\/t.dreamdata.cloud; frame-src https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/*.hsforms.net https:\/\/*.hubspot.com https:\/\/*.hs-scripts.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:\/\/api.hsforms.com https:\/\/forms.hsforms.com","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/cdn.tagdeliver.com https:\/\/cdn.privacy-mgmt.com https:\/\/static.chartbeat.com https:\/\/www.npttech.com https:\/\/cdn.piano.io https:\/\/api-eu.piano.io https:\/\/cdn.cxense.com https:\/\/comcluster.cxense.com https:\/\/id.cxense.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/www.facebook.net https:\/\/staticxx.facebook.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/va.vercel-scripts.com https:\/\/securepubads.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/ep2.adtrafficquality.google https:\/\/apis.google.com https:\/\/snap.licdn.com https:\/\/sitepixel.blis.com https:\/\/berrythompson.innocraft.cloud https:\/\/www.youtube.com https:\/\/tpc.googlesyndication.com https:\/\/static2.chartbeat.com https:\/\/js.stripe.com https:\/\/tortoise.supportingcast.fm https:\/\/cdn2.amuselabs.com https:\/\/*.skimresources.com; connect-src 'self' https:\/\/*.googleapis.com https:\/\/*.firebaseio.com wss:\/\/*.firebaseio.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.google-analytics.com https:\/\/region1.analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/securepubads.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com https:\/\/ep1.adtrafficquality.google https:\/\/ep2.adtrafficquality.google https:\/\/www.google.com https:\/\/www.facebook.com https:\/\/www.facebook.net https:\/\/graph.facebook.com https:\/\/connect.facebook.net https:\/\/mpc2-prod-26-is5qnl632q-uc.a.run.app https:\/\/px.ads.linkedin.com https:\/\/content-api.slowdownwiseup.co.uk https:\/\/cdn.slowdownwiseup.co.uk https:\/\/cdn.privacy-mgmt.com https:\/\/cdn.tagdeliver.com https:\/\/log.tagdeliver.com https:\/\/uc.tagdeliver.com https:\/\/mab.chartbeat.com https:\/\/comcluster.cxense.com https:\/\/tr.blismedia.com https:\/\/berrythompson.innocraft.cloud https:\/\/api-eu.piano.io https:\/\/api-eu.piano.io https:\/\/c2-eu.piano.io https:\/\/ping.chartbeat.net https:\/\/ingress.pressreader.com https:\/\/vitals.vercel-insights.com https:\/\/ad.doubleclick.net https:\/\/*.gstatic.com https:\/\/api.rollbar.com https:\/\/www.googletagmanager.com https:\/\/apis.google.com https:\/\/s.prcdn.co https:\/\/media.supportingcast.fm https:\/\/*.skimresources.com https:\/\/sl-sentry.skimlinks.com; frame-src 'self' https:\/\/cdn.privacy-mgmt.com https:\/\/api-eu.piano.io https:\/\/api-eu.piano.io https:\/\/www.facebook.com https:\/\/the-observer-live.firebaseapp.com https:\/\/ep1.adtrafficquality.google https:\/\/ep2.adtrafficquality.google https:\/\/cm.g.doubleclick.net https:\/\/www.google.com https:\/\/cdn.cxense.com https:\/\/*.safeframe.googlesyndication.com https:\/\/flo.uri.sh https:\/\/content-api.slowdownwiseup.co.uk https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.googleadservices.com https:\/\/chartbeat.com https:\/\/static2.chartbeat.com https:\/\/cdn.slowdownwiseup.co.uk https:\/\/js.stripe.com https:\/\/cdn2.amuselabs.com https:\/\/pagead2.googlesyndication.com; img-src 'self' data: https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.google.co.uk https:\/\/www.google.fr https:\/\/www.google.ie https:\/\/www.google.com.au https:\/\/www.facebook.com https:\/\/www.facebook.net https:\/\/staticxx.facebook.com https:\/\/ping.chartbeat.net https:\/\/cdn.slowdownwiseup.co.uk https:\/\/pagead2.googlesyndication.com https:\/\/tpc.googlesyndication.com https:\/\/ep1.adtrafficquality.google https:\/\/cdn.privacy-mgmt.com https:\/\/px.ads.linkedin.com https:\/\/comcluster.cxense.com https:\/\/tr.blismedia.com https:\/\/i.prcdn.co https:\/\/t.prcdn.co https:\/\/ingress-cdn.pressreader.com https:\/\/googleads.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/connect.facebook.net https:\/\/mabping.chartbeat.net https:\/\/www.googleadservices.com https:\/\/i.ytimg.com blob: https:\/\/*.skimresources.com; media-src 'self' https:\/\/cdn.slowdownwiseup.co.uk https:\/\/the-observer-bucket.eu-central-1.linodeobjects.com https:\/\/open.acast.com https:\/\/stitcher2.acast.com https:\/\/shows.acast.com https:\/\/assets.pippa.io https:\/\/media.supportingcast.fm; style-src 'self' 'unsafe-inline' https:\/\/media.supportingcast.fm https:\/\/www.gstatic.com; font-src 'self' data: https:\/\/fonts.gstatic.com; worker-src 'self' blob:; report-uri \/api\/csp-report","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'nonce-110d7a49646af43bf6bf3e1771751501' *.fontawesome.com *.klaviyo.com connect.facebook.com analytics.tiktok.com www.youtube.com;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-PsOWJaoRUaklHZ_szK_jLw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-amMIybuoG0MMhVAHhTIe_A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.googleapis.com https:\/\/*.google.com https:\/\/google.com https:\/\/googleads.g.doubleclick.net https:\/\/*.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/region1.google-analytics.com https:\/\/region1.analytics.google.com https:\/\/*.hubspot.com https:\/\/app.hubspot.com https:\/\/api.hubspot.com https:\/\/*.hs-scripts.com https:\/\/js-na1.hs-scripts.com https:\/\/*.hs-banner.com https:\/\/js.hs-banner.com https:\/\/*.hscollectedforms.net https:\/\/forms.hscollectedforms.net https:\/\/*.hs-analytics.net https:\/\/*.hsadspixel.net https:\/\/*.website-files.com https:\/\/cdn.prod.website-files.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/assets.calendly.com https:\/\/*.linkedin.com https:\/\/get.geojs.io https:\/\/api.hubapi.com https:\/\/api.murf.ai https:\/\/login.murf.ai https:\/\/murf.ai https:\/\/d3e54v103j8qbb.cloudfront.net https:\/\/www.googletagmanager.com https:\/\/js.hscollectedforms.net https:\/\/js.hsadspixel.net https:\/\/js.hs-analytics.net https:\/\/js.usemessages.com https:\/\/snap.licdn.com https:\/\/tracking.g2crowd.com https:\/\/tracking-api.g2.com https:\/\/www.googleadservices.com https:\/\/pagead2.googlesyndication.com https:\/\/api.factors.ai https:\/\/app.factors.ai https:\/\/*.clarity.ms https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/www.google-analytics.com https:\/\/connect.facebook.net https:\/\/www.gstatic.com https:\/\/cdn.embedly.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/*.googleapis.com https:\/\/*.google.com https:\/\/google.com https:\/\/googleads.g.doubleclick.net https:\/\/*.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/region1.google-analytics.com https:\/\/region1.analytics.google.com https:\/\/*.hubspot.com https:\/\/app.hubspot.com https:\/\/*.hs-scripts.com https:\/\/js-na1.hs-scripts.com https:\/\/*.website-files.com https:\/\/cdn.prod.website-files.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/assets.calendly.com https:\/\/*.linkedin.com https:\/\/login.murf.ai https:\/\/d3e54v103j8qbb.cloudfront.net https:\/\/www.googletagmanager.com https:\/\/js.hscollectedforms.net https:\/\/js.hsadspixel.net https:\/\/js.hs-analytics.net https:\/\/js.hs-banner.com https:\/\/js.usemessages.com https:\/\/snap.licdn.com https:\/\/tracking.g2crowd.com https:\/\/www.googleadservices.com https:\/\/app.factors.ai https:\/\/*.clarity.ms https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/connect.facebook.net https:\/\/www.gstatic.com https:\/\/cdn.embedly.com; style-src 'self' 'unsafe-inline' https:\/\/*.googleapis.com https:\/\/*.google.com https:\/\/accounts.google.com https:\/\/*.website-files.com https:\/\/cdn.prod.website-files.com https:\/\/assets.calendly.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/www.gstatic.com https:\/\/cdn.embedly.com; font-src 'self' data: https:; img-src 'self' data: https: blob:; media-src 'self' data: blob: https:\/\/murf.ai; connect-src 'self' blob: data: https:\/\/*.googleapis.com https:\/\/*.google.com https:\/\/google.com https:\/\/stats.g.doubleclick.net https:\/\/region1.google-analytics.com https:\/\/region1.analytics.google.com https:\/\/*.hubspot.com https:\/\/app.hubspot.com https:\/\/api.hubspot.com https:\/\/*.hs-scripts.com https:\/\/*.hs-banner.com https:\/\/js.hs-banner.com https:\/\/*.hscollectedforms.net https:\/\/forms.hscollectedforms.net https:\/\/*.linkedin.com https:\/\/get.geojs.io https:\/\/api.hubapi.com https:\/\/api.murf.ai https:\/\/login.murf.ai https:\/\/murf.ai https:\/\/cdn.prod.website-files.com https:\/\/tracking-api.g2.com https:\/\/www.googleadservices.com https:\/\/pagead2.googlesyndication.com https:\/\/api.factors.ai https:\/\/*.clarity.ms https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/www.google-analytics.com https:\/\/connect.facebook.net https:\/\/cdn.embedly.com https:\/\/webflow.com; frame-src 'self' https:\/\/*.google.com https:\/\/www.googletagmanager.com https:\/\/googleads.g.doubleclick.net https:\/\/*.doubleclick.net https:\/\/*.hubspot.com https:\/\/app.hubspot.com https:\/\/assets.calendly.com https:\/\/calendly.com https:\/\/login.murf.ai https:\/\/cdn.embedly.com; report-uri https:\/\/o4504603155759104.ingest.us.sentry.io\/api\/4509798552305664\/security\/?sentry_key=05d6eb750229178df61a908e1a0ed8fd; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' https:\/\/www.google.com\/recaptcha\/api.js https:\/\/www.googletagmanager.com https:\/\/polyfill.io https:\/\/www.youtube.com https:\/\/iframe.dacast.com https:\/\/vimeo.com https:\/\/player.vimeo.com https:\/\/cdn.usefathom.com\/script.js https:\/\/cc.cdn.civiccomputing.com\/9\/cookieControl-9.x.min.js https:\/\/analytics.ahrefs.com\/analytics.js https:\/\/wttc.activehosted.com 'nonce-k6qzR3jXZ57WI7QsUT8kva9T1IU84iU12Ed7BbMXXjo='; img-src 'self' https:; connect-src 'self' https:; frame-src 'self' https:\/\/www.google.com https:\/\/www.youtube.com https:\/\/iframe.dacast.com https:\/\/vimeo.com https:\/\/player.vimeo.com https:\/\/gtm-knbshpt-zmy5y.uc.r.appspot.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com\/css2 https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/fonts.bunny.net; font-src 'self' https: data:","count":1},{"content-security-policy-report-only":" default-src * blob: data: https:; script-src blob: https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; report-uri \/veriff-csp-report","count":1},{"content-security-policy-report-only":" default-src 'self' dev-5847984.okta.com sso.app.elationemr.com *.oktacdn.com; connect-src 'self' dev-5847984.okta.com dev-5847984-admin.okta.com sso.app.elationemr.com *.oktacdn.com *.mixpanel.com *.mapbox.com dev-5847984.kerberos.okta.com https:\/\/oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' dev-5847984.okta.com sso.app.elationemr.com *.oktacdn.com; style-src 'unsafe-inline' 'self' 'report-sample' dev-5847984.okta.com sso.app.elationemr.com *.oktacdn.com; frame-src 'self' dev-5847984.okta.com dev-5847984-admin.okta.com sso.app.elationemr.com login.okta.com *.vidyard.com; img-src 'self' dev-5847984.okta.com sso.app.elationemr.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' dev-5847984.okta.com sso.app.elationemr.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self' https:\/\/elationemr.com","count":1},{"content-security-policy-report-only":" base-uri 'none'; connect-src 'self' https:\/\/region1.google-analytics.com https:\/\/pagead2.googlesyndication.com https:\/\/www.googletagmanager.com https:\/\/cdn-ukwest.onetrust.com https:\/\/privacyportal-uk.onetrust.com https:\/\/geolocation.onetrust.com; default-src 'none'; font-src 'self'; form-action 'none'; frame-ancestors 'none'; frame-src 'none'; img-src 'self' data: https:\/\/cdn-ukwest.onetrust.com https:\/\/www.googletagmanager.com https:\/\/pagead2.googlesyndication.com; media-src data: 'self'; object-src 'none'; report-to csp-report-endpoint; report-uri https:\/\/www.msc.org\/csp\/report; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn-ukwest.onetrust.com https:\/\/ajax.aspnetcdn.com https:\/\/www.google-analytics.com; style-src 'unsafe-inline' 'self' https:\/\/cdn-images.mailchimp.com; worker-src 'none'","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-gwXOlxIElHdPpykQGVEkxg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self';  base-uri 'self';  object-src 'none';  form-action 'self';  frame-ancestors 'self' https:\/\/app.contentstack.com https:\/\/*.contentstack.com;  script-src 'report-sample' 'self'    https:\/\/api.datasteam.io    https:\/\/bas.my.site.com    https:\/\/bat.bing.com    https:\/\/bigassfans.jotform.com    https:\/\/cdn-scripts.signifyd.com    https:\/\/cdn-widgetsrepository.yotpo.com    https:\/\/cdn.optimizely.com    https:\/\/cdn1.affirm.com    https:\/\/cdn11.bigcommerce.com    https:\/\/c.lytics.io    https:\/\/fast.wistia.com    https:\/\/googleads.g.doubleclick.net    https:\/\/h64.online-metrix.net    https:\/\/imgs.signifyd.com    https:\/\/js.adsrvr.org    https:\/\/maps.googleapis.com    https:\/\/schedule.zoominfo.com    https:\/\/static-tracking.klaviyo.com    https:\/\/static.klaviyo.com    https:\/\/static.zip.co    https:\/\/tags.clickagy.com    https:\/\/ws-assets.zoominfo.com    https:\/\/www.google.com    https:\/\/www.googletagmanager.com    https:\/\/www.gstatic.com;  style-src 'report-sample' 'self' 'unsafe-inline'    https:\/\/bas.my.site.com    https:\/\/fonts.googleapis.com    https:\/\/p.typekit.net    https:\/\/static.klaviyo.com    https:\/\/use.typekit.net;\tstyle-src-attr 'unsafe-inline';  img-src 'self' data:    https:\/\/d3k81ch9hvuctc.cloudfront.net    https:\/\/aorta.clickagy.com    https:\/\/arttrk.com    https:\/\/baf-components.vercel.app    https:\/\/bat.bing.com    https:\/\/bigassfans.widen.net    https:\/\/c.az.contentsquare.net    https:\/\/cdn-assets.affirm.com    https:\/\/cdn11.bigcommerce.com    https:\/\/cdnjs.cloudflare.com    https:\/\/fast.wistia.com    https:\/\/googleads.g.doubleclick.net    https:\/\/imgs.signifyd.com    https:\/\/insight.adsrvr.org    https:\/\/maps.gstatic.com    https:\/\/p.yotpoapi.com    https:\/\/w2txo5aay72edbfvk5vttw2iroublbcesxwkwjodcca70f743d31d725sac.d.aa.online-metrix.net    https:\/\/www.facebook.com    https:\/\/www.google.com    https:\/\/www.googletagmanager.com    https:\/\/www.gstatic.com;  connect-src 'self'    https:\/\/a.klaviyo.com    https:\/\/ad.doubleclick.net    https:\/\/analytics.google.com    https:\/\/aorta.clickagy.com    https:\/\/api-cdn.yotpo.com    https:\/\/bam.nr-data.net    https:\/\/bas.my.salesforce-scrt.com    https:\/\/bat.bing.com    https:\/\/c.az.contentsquare.net    https:\/\/cdn-assets.affirm.com    https:\/\/distillery.wistia.com    https:\/\/dp.signifyd.com    https:\/\/embed-cloudfront.wistia.com    https:\/\/fast.a.klaviyo.com    https:\/\/fast.wistia.com    https:\/\/featureassets.org    https:\/\/imgs.signifyd.com    https:\/\/insight.adsrvr.org    https:\/\/logx.optimizely.com    https:\/\/pay.google.com    https:\/\/pipedream.wistia.com    https:\/\/pixels.spotify.com    https:\/\/prodregistryv2.org    https:\/\/static-forms.klaviyo.com    https:\/\/statsigapi.net    https:\/\/ws.zoominfo.com    https:\/\/www.affirm.com    https:\/\/www.google.com    https:\/\/www.googleadservices.com    https:\/\/www.googletagmanager.com    https:\/\/www.google-analytics.com    https:\/\/www.paypal.com;  frame-src 'self'    https:\/\/a27947990225.cdn.optimizely.com    https:\/\/bas.my.site.com    https:\/\/h.online-metrix.net    https:\/\/imgs.signifyd.com    https:\/\/insight.adsrvr.org    https:\/\/match.adsrvr.org    https:\/\/www.affirm.com    https:\/\/www.facebook.com    https:\/\/www.google.com    https:\/\/www.googletagmanager.com    https:\/\/www.paypal.com    https:\/\/*.fls.doubleclick.net    https:\/\/*.doubleclick.net    https:\/\/bigassfans.widen.net;  font-src 'self' https:\/\/fonts.gstatic.com data: https:\/\/use.typekit.net;  media-src 'self'    https:\/\/bigassfans.widen.net;  manifest-src 'self';  worker-src 'self';  report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.narvar.com *.narvar.qa *.sitevibes.com sitevibes.com *.acquiadam.net *.acquiadamcdn.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.nosto.com *.nos.to *.sitevibes.com sitevibes.com 'self' 'unsafe-inline'; frame-ancestors www.google.com flexreceipts.go2cloud.org app.webeyez.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.adyen.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.nosto.com *.nos.to *.trustpilot.com *.sitevibes.com sitevibes.com *.acquiadam.net *.acquiadamcdn.net https:\/\/oc-cdn-ocprod.azureedge.net\/livechatwidget\/ https:\/\/community.511tactical.com\/ https:\/\/locator.511tactical.com\/ *.doubleclick.net *.liadm.com assets.bounceexchange.com flexreceipts.go2cloud.org https:\/\/tally.so\/ *.pinterest.com *.webeyez.com webeyez.blob.core.windows.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.adyen.com *.tiktok.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca https:\/\/s3.amazonaws.com\/idme\/ *.narvar.com *.narvar.qa *.nosto.com *.nos.to *.sitevibes.com sitevibes.com *.acquiadam.net *.acquiadamcdn.net *.dynamicyield.com *.riskified.com https:\/\/oc-cdn-ocprod.azureedge.net\/livechatwidget\/ *.511tactical.com *.usablenet.com *.cookielaw.org *.bing.com *.googlesyndication.com *.contextweb.com *.creativecdn.com *.bouncex.net *.pippio.com *.nextdoor.com *.linkedin.com *.twitter.com *.x.com t.co *.lightboxcdn.com *.cdnwidget.com *.attentivemobile.com tactical511.widen.net *.cartfulsolutions.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.adyen.com https:\/\/rum.hlx.page *.tiktok.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.attn.tv events.attentivemobile.com *.nosto.com *.nos.to *.trustpilot.com *.sitevibes.com sitevibes.com *.acquiadam.net *.acquiadamcdn.net *.dynamicyield.com *.riskified.com https:\/\/oc-cdn-ocprod.azureedge.net\/livechatwidget\/ *.googleapis.com https:\/\/unpkg.com *.cookielaw.org *.clarity.ms js-agent.newrelic.com bam.nr-data.net *.bing.com *.boomtrain.com *.bounceexchange.com *.rezync.com *.nextdoor.com *.pinterest.com s.pinimg.com *.liadm.com *.lightboxcdn.com *.usablenet.com *.wknd.ai *.webeyez.com webeyez.blob.core.windows.net *.cartfulsolutions.com https:\/\/www.511tactical.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.nosto.com *.nos.to *.trustpilot.com *.sitevibes.com sitevibes.com *.acquiadam.net *.acquiadamcdn.net https:\/\/oc-cdn-ocprod.azureedge.net\/livechatwidget\/ *.typekit.net *.googletagmanager.com https:\/\/tagmanager.google.com *.bounceexchange.com *.lightboxcdn.com *.cartfulsolutions.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.narvar.com *.narvar.qa *.acquiadam.net *.acquiadamcdn.net d3q7qtc29ejstr.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.adyen.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.tiktok.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.attn.tv events.attentivemobile.com *.nosto.com *.nos.to *.sitevibes.com sitevibes.com *.acquiadam.net *.acquiadamcdn.net *.dynamicyield.com *.riskified.com *.trustpilot.com *.googleapis.com *.cookielaw.org *.clarity.ms bam.nr-data.net *.bing.org *.bing.com *.boomtrain.com *.creativecdn.com *.attentivemobile.com *.tiktokw.us *.linkedin.com *.pinterest.com *.spotify.com *.webeyez.com webeyez.blob.core.windows.net *.cartfulsolutions.com 'self' 'unsafe-inline'; child-src flexreceipts.go2cloud.org http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/a4f7e632-ca01-49b1-9c8a-cdf130c36284.sansec.watch\/; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-j3_BIadspzViCLlFkx3-_g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/*.hs-scripts.com https:\/\/*.hs-analytics.net https:\/\/*.hs-banner.com https:\/\/*.hsforms.net https:\/\/*.hsforms.com https:\/\/*.hubspot.com https:\/\/*.hsadspixel.net https:\/\/*.usemessages.com https:\/\/*.hscollectedforms.net https:\/\/*.posthog.com https:\/\/va.vercel-scripts.com https:\/\/vercel.live https:\/\/challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https:\/\/*.hubspot.com https:\/\/*.hsforms.com; img-src 'self' https: data: blob:; font-src 'self' data: https:\/\/*.hubspot.com https:\/\/*.hsforms.com; connect-src 'self' https:\/\/5dcouzig.api.sanity.io https:\/\/5dcouzig.apicdn.sanity.io wss:\/\/5dcouzig.api.sanity.io https:\/\/cdn.sanity.io https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/*.hs-analytics.net https:\/\/*.hscollectedforms.net https:\/\/*.posthog.com https:\/\/vitals.vercel-insights.com https:\/\/va.vercel-scripts.com https:\/\/vercel.live https:\/\/challenges.cloudflare.com; media-src 'self' https:\/\/*.public.blob.vercel-storage.com; worker-src 'self' blob:; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/vercel.live https:\/\/challenges.cloudflare.com https:\/\/maps.google.com https:\/\/www.google.com; frame-ancestors 'self' https:\/\/*.sanity.studio https:\/\/lowyinstitute.sanity.studio; base-uri 'self'; form-action 'self' https:\/\/forms.hsforms.com https:\/\/*.hubspot.com; object-src 'none'; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" connect-src 'self' https:\/\/google.com https:\/\/*.vtex.com.br https:\/\/*.vtex.com https:\/\/*.myvtex.com https:\/\/*.vtexassets.com https:\/\/*.publitas.com https:\/\/adservice.google.com https:\/\/targetone-callback.chedraui.com.mx https:\/\/*.googleapis.com https:\/\/*.zdassets.com https:\/\/*.vtex.com https:\/\/splunk-heavyforwarder-public.vtex.com:8088 https:\/\/stable.vtexobservability.com https:\/\/*.doubleclick.net https:\/\/*.criteo.com https:\/\/analytics.tiktok.com https:\/\/*.tiktokw.us https:\/\/www.google.com https:\/\/www.google.com.mx https:\/\/www.google.com.co https:\/\/www.googleadservices.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/www.googletagmanager.com https:\/\/app.varify.io https:\/\/*.ingest-lr.com https:\/\/*.logr-in.com https:\/\/*.bing.com https:\/\/*.smct.io https:\/\/*.nizza.com https:\/\/*.creativecdn.com https:\/\/*.jewelml.io https:\/\/*.flixcar.com https:\/\/www.chedraui.com.mx https:\/\/chedraui-gtm-ss-878782491714.us-central1.run.app https:\/\/cognito-identity.eu-west-1.amazonaws.com https:\/\/api.kueskipay.com https:\/\/core.aplazo.mx wss:\/\/widget-mediator.zopim.com wss:\/\/*.vtex.com wss:\/\/*.myvtex.com; report-to csp-endpoint-group","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-cyWNR__Xl6fSPRZ2sSIhhw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src 'nonce-aLWfvEqfnPDyTRBXXlu5Mg==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https:\/\/events.mercadolibre.com\/csp\/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=f5e7c124-eebb-40fa-b3eb-718e610b233a; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https:\/\/http2.mlstatic.com\/ https:\/\/mlstaticquic-a.akamaihd.net\/; frame-ancestors 'self' https:\/\/*.mercadolibre.cl:* https:\/\/*.mercadolibre.com:* https:\/\/*.mercadolibre.com.ve:* https:\/\/*.mercadolibre.com.ar:* https:\/\/*.mercadolivre.com.br:* https:\/\/*.mercadolibre.com.co:* https:\/\/*.mercadolibre.com.ec:* https:\/\/*.mercadolibre.com.mx:* https:\/\/*.mercadolibre.com.pe:* https:\/\/*.mercadolibre.com.uy:* https:\/\/*.mercadopago.cl:* https:\/\/*.mercadopago.com.ar:* https:\/\/*.mercadopago.com.br:* https:\/\/*.mercadopago.com.co:* https:\/\/*.mercadopago.com.mx:* https:\/\/*.mercadopago.com.pe:* https:\/\/*.mercadopago.com.uy:* https:\/\/*.mercadopago.com.ve:* https:\/\/*.mercadopago.com:* https:\/\/*.adminml.com:* https:\/\/*.mercadolibre.co.cr:* https:\/\/*.mercadolibre.com.pa:* https:\/\/*.mercadolibre.com.do:* https:\/\/*.mercadolibre.com.bo:* https:\/\/*.mercadolibre.com.py:* https:\/\/*.mercadolibre.com.gt:* https:\/\/*.mercadolibre.com.hn:* https:\/\/*.mercadolibre.com.ni:* https:\/\/*.mercadolibre.com.sv:* https:\/\/*.mercadopago.com.ec:* https:\/\/*.portalinmobiliario.com:* https:\/\/*.mercadolivre.com:*","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-hoRBefFOgrCN5_QWqCPl9Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: 'self' data:; font-src https: 'self' data:;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/static.hotjar.com https:\/\/snap.licdn.com https:\/\/js.monitor.azure.com https:\/\/js.qualified.com https:\/\/cdn.hockeystack.com https:\/\/*.marketo.com https:\/\/*.bizible.com https:\/\/*.vwo.com https:\/\/*.drift.com https:\/\/*.demandbase.com https:\/\/*.conductor.com https:\/\/*.seismic.com; connect-src 'self' https:\/\/*.marketo.com https:\/\/*.bizible.com https:\/\/*.google-analytics.com https:\/\/*.hotjar.com https:\/\/*.qualified.com https:\/\/*.demandbase.com https:\/\/*.vwo.com https:\/\/*.hockeystack.com https:\/\/*.drift.com https:\/\/*.conductor.com https:\/\/*.seismic.com; img-src 'self' data: https:\/\/*.googleusercontent.com https:\/\/*.gravatar.com https:\/\/*.marketo.com https:\/\/*.bizible.com https:\/\/*.qualified.com https:\/\/*.hockeystack.com https:\/\/*.conductor.com https:\/\/*.seismic.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com; frame-ancestors 'self';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/cdn.userway.org https:\/\/www.googletagmanager.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/*.sitecorecloud.io https:\/\/cdn.userway.org; font-src 'self' https:\/\/fonts.gstatic.com; img-src 'self' data: https: http:\/\/bcorgwtrss01.broward.org; connect-src 'self' https:\/\/api.userway.org https:\/\/edge.sitecorecloud.io https:\/\/*.sitecorecloud.io https:\/\/*.sitecorecontenthub.cloud https:\/\/www.googletagmanager.com https:\/\/analytics.google.com https:\/\/api.communico.co https:\/\/api.open-meteo.com https:\/\/nominatim.openstreetmap.org https:\/\/api.vimeo.com https:\/\/open.spotify.com https:\/\/api.spotify.com https:\/\/api-partner.spotify.com https:\/\/spclient.wg.spotify.com https:\/\/gew-spclient.spotify.com https:\/\/apresolve.spotify.com https:\/\/broward.ent.sirsi.net http:\/\/tracker.flightview.com; frame-src https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/open.spotify.com https:\/\/www.google.com https:\/\/maps.google.com https:\/\/cdn.userway.org; frame-ancestors 'self' https:\/\/*.sitecorecloud.io; object-src 'none'; base-uri 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/widgets.wp.com https:\/\/c0.wp.com https:\/\/ajax.cloudflare.com https:\/\/stackpath.bootstrapcdn.com https:\/\/webdata.up.edu.ph https:\/\/s0.wp.com https:\/\/stats.wp.com https:\/\/pixel.wp.com https:\/\/cdn.jsdelivr.net https:\/\/apis.google.com; style-src 'self' 'unsafe-inline' https:\/\/widgets.wp.com https:\/\/fonts.googleapis.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/stackpath.bootstrapcdn.com https:\/\/use.typekit.net https:\/\/fonts-api.wp.com https:\/\/p.typekit.net https:\/\/s0.wp.com https:\/\/pixel.wp.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/up.edu.ph https:\/\/c0.wp.com; font-src 'self' data: https:\/\/fonts.wp.com https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/s0.wp.com https:\/\/c0.wp.com https:\/\/cdnjs.cloudflare.com https:\/\/*.wp.com; img-src 'self' data: blob: https:\/\/secure.gravatar.com https:\/\/scontent-xsp1-3.xx.fbcdn.net https:\/\/i0.wp.com https:\/\/i1.wp.com https:\/\/i2.wp.com https:\/\/pixel.wp.com https:\/\/public-api.wordpress.com https:\/\/*.wp.com https:\/\/up.edu.ph https:\/\/*.up.edu.ph; connect-src 'self' https:\/\/*.up.edu.ph https:\/\/cdn.jsdelivr.net https:\/\/elementor.com https:\/\/*.googleapis.com https:\/\/fontawesome.com https:\/\/stats.wp.com https:\/\/s0.wp.com https:\/\/c0.wp.com https:\/\/webdata.up.edu.ph https:\/\/pixel.wp.com https:\/\/stackpath.bootstrapcdn.com https:\/\/performance.typekit.net https:\/\/use.typekit.net; frame-src 'self' data: blob: https:\/\/www.youtube.com https:\/\/youtube.com https:\/\/www.youtube-nocookie.com https:\/\/googleusercontent.com https:\/\/www.google.com https:\/\/wordpress.com https:\/\/pixel.wp.com https:\/\/up.edu.ph https:\/\/*.up.edu.ph https:\/\/elementor.com https:\/\/*.elementor.com; object-src 'none'; worker-src 'self' blob:; upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-to https:\/\/up.edu.ph\/wp-json\/csp-logger\/v1\/report; report-uri https:\/\/up.edu.ph\/wp-json\/csp-logger\/v1\/report;","count":1},{"content-security-policy-report-only":" object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-sBfWfu6YQi9OI79YOEV2zg' 'unsafe-inline' 'unsafe-eval' https:\/\/*.msauth.net https:\/\/*.msftauth.net https:\/\/*.msftauthimages.net https:\/\/*.msauthimages.net https:\/\/*.msidentity.com https:\/\/*.microsoftonline-p.com https:\/\/*.microsoftazuread-sso.com https:\/\/*.azureedge.net https:\/\/*.outlook.com https:\/\/*.office.com https:\/\/*.office365.com https:\/\/*.microsoft.com https:\/\/*.bing.com 'report-sample'; report-uri https:\/\/csp.microsoft.com\/report\/ESTS-UX-All","count":1},{"content-security-policy-report-only":" script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' data: blob: gaoding.com *.gaoding.com *.dancf.com https:\/\/www.googletagmanager.com https:\/\/web.cdn.openinstall.io; frame-ancestors 'self' gaoding.com *.gaoding.com:* huaban.com *.huaban.com god-mgr.dancf.com; report-uri https:\/\/www.gaoding.com\/_csp-report?app=www&source=web&policy_id=www-csp-shrink-prod-20260425-r2","count":1},{"content-security-policy-report-only":" base-uri 'self'; block-all-mixed-content ; child-src 'self'; connect-src 'self' insights.algolia.io mss3l6x3wr-dsn.algolia.net maps.googleapis.com uwhealth.piwik.pro fast.wistia.net fast.wistia.com microservices.uwhealth.dev microservices.uwhealth.org images.ctfassets.net *.algolianet.com rfwqvtokul-dsn.algolia.net embed-cloudfront.wistia.com pnapi.invoca.net distillery.wistia.com 38294.global.siteimproveanalytics.io fg8vvsvnieiv3ej16jby.litix.io; default-src 'self'; font-src data: 'self' use.typekit.net fonts.gstatic.com fast.wistia.net fast.wistia.com; form-action 'self'; frame-ancestors 'self'; frame-src 'self' data: blob: uwhealth.formstack.com; img-src 'self' data: res.cloudinary.com images.ctfassets.net 38294.global.siteimproveanalytics.io embed-ssl.wistia.com maps.gstatic.com maps.googleapis.com fast.wistia.net fast.wistia.com; manifest-src 'self'; media-src 'self' blob: embed-ssl.wistia.com; object-src 'self'; script-src 'self' 'unsafe-inline' uwhealth.containers.piwik.pro siteimproveanalytics.com maps.googleapis.com uwhealth.piwik.pro browser.sentry-cdn.com www.formstack.com solutions.invocacdn.com fast.wistia.net fast.wistia.com connect.facebook.net; style-src 'self' 'unsafe-inline' p.typekit.net fonts.googleapis.com; worker-src 'self'; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/secure.perk0mean.com https:\/\/js.hs-scripts.com https:\/\/js.hubspot.com https:\/\/player.vimeo.com https:\/\/cdn.jsdelivr.net https:\/\/static.cloudflareinsights.com https:\/\/a.usbrowserspeed.com https:\/\/tag.demandbase.com https:\/\/cl.qualaroo.com; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data: https:\/\/secure.perk0mean.com; connect-src 'self' https:\/\/www.googletagmanager.com https:\/\/datapharmci.b2clogin.com https:\/\/idx.liadm.com https:\/\/region1.google-analytics.com https:\/\/api.company-target.com https:\/\/tag.demandbase.com; frame-src https:\/\/www.googletagmanager.com https:\/\/player.vimeo.com https:\/\/datapharmci.b2clogin.com https:\/\/dntcl.qualaroo.com; object-src 'none'; base-uri 'self';","count":1},{"content-security-policy-report-only":" default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http:\/\/*.files.wordpress.com wss:\/\/www.goldderby.com; report-uri https:\/\/pmcuri.report-uri.com\/r\/d\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" base-uri 'none'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-XjCYecdzVmQRSUeVomxEPg=='","count":1},{"content-security-policy-report-only":" default-src 'self';script-src 'self' 'nonce-m0ZMuNNBCicHbBv1DVABFw==' 'strict-dynamic' 'wasm-unsafe-eval' *.modelscope.cn *.modelscope.com *.modelscope.ai *.alicdn.com *.aliyun.com *.googletagmanager.com cdnjs.cloudflare.com res.wx.qq.com log.mmstat.com fourier.taobao.com hm.baidu.com unpkg.com cdn.jsdelivr.net;script-src-elem 'self' 'nonce-m0ZMuNNBCicHbBv1DVABFw==' 'strict-dynamic' *.modelscope.cn *.modelscope.com *.modelscope.ai *.alicdn.com *.aliyun.com *.googletagmanager.com cdnjs.cloudflare.com res.wx.qq.com log.mmstat.com fourier.taobao.com hm.baidu.com unpkg.com cdn.jsdelivr.net;script-src-attr 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline' *.modelscope.cn *.modelscope.com *.modelscope.ai *.alicdn.com fonts.googleapis.com *.googletagmanager.com tagmanager.google.com;style-src-elem 'self' 'unsafe-inline' *.modelscope.cn *.modelscope.com *.modelscope.ai *.alicdn.com fonts.googleapis.com *.googletagmanager.com tagmanager.google.com;img-src 'self' data: blob: https: http:;connect-src 'self' *.modelscope.cn *.modelscope.com *.modelscope.ai *.modelscope.net *.aliyuncs.com *.aliyun.com *.data.aliyun.com *.alicdn.com *.s5k.cn *.google-analytics.com *.analytics.google.com *.doubleclick.net *.google.com *.googlesyndication.com googleads.g.doubleclick.net *.googleadservices.com *.merchant-center-analytics.goog gm.mmstat.com www.googleadservices.com www.googletagmanager.com fourier.alibaba.com fourier.taobao.com log.mmstat.com hm.baidu.com translate.googleapis.com google.com rumt-zh.com px.wpk.quark.cn track.uc.cn alidocs.dingtalk.com;media-src 'self' data: blob: https: http:;frame-src 'self' *.modelscope.cn *.modelscope.com *.modelscope.ai *.alicdn.com *.s5k.cn *.ms.show *.ms.fun *.googletagmanager.com player.bilibili.com www.bilibili.com quark.alibaba.com;font-src 'self' data: https: http:;worker-src 'self' blob: *.alicdn.com;object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';report-uri \/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/canny.io https:\/\/*.datagrail.io https:\/\/solve-widget.forethought.ai; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:\/\/www.googletagmanager.com https:\/\/fonts.gstatic.com https:\/\/i.ytimg.com https:\/\/*.recraft.ai https:\/\/static.recraft.ai; font-src 'self' https:\/\/fonts.gstatic.com data: https:\/\/static.recraft.ai; media-src 'self' blob: data: https:\/\/*.recraft.ai https:\/\/static.recraft.ai https:\/\/reexternal.blob.core.windows.net; connect-src 'self' https:\/\/*.recraft.ai wss:\/\/*.recraft.ai https:\/\/*.ingest.sentry.io https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.amplitude.com https:\/\/api.canny.io https:\/\/fonts.gstatic.com https:\/\/static.recraft.ai https:\/\/solve-widget.forethought.ai https:\/\/reexternal.blob.core.windows.net; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/changelog-widget.canny.io https:\/\/solve-widget.forethought.ai; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; report-uri https:\/\/api.recraft.ai\/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self' *.antpedia.com v.antwebinar.com hmcdn.baidu.com hm.baidu.com m.baidu.com jspassport.ssl.qhimg.com *.google-analytics.com zz.bdstatic.com s.ssl.qhres.com sp0.baidu.com s.360.cn c.mipcdn.com wpa.qq.com res.wx.qq.com mp.weixin.qq.com msite.baidu.com ae.bdstatic.com share.baidu.com bdimg.share.baidu.com *.alicdn.com *.cn-hangzhou.log.aliyuncs.com *.dns-detect.alicdn.com browser.sentry-cdn.com push.zhanzhang.baidu.com po.srf.baidu.com toutong.baidu.com static.bshare.cn cdn.jsdelivr.net sentry.io *.googleapis.com *.cnzz.com api.map.baidu.com *.uc.cn uc.gre *.gstatic.com *.ucweb.com bshare.optimix.cn s2.pstatp.com *.googlesyndication.com *.googleadservices.com *.googletagmanager.com *.qhres2.com 'unsafe-inline' 'unsafe-eval'; img-src * data: ; frame-src https:\/\/*.qq.com https:\/\/*.antpedia.com https:\/\/*.g.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/*.google.com webcompt:; report-uri https:\/\/www.antpedia.com\/scp-report\/index.php;","count":1},{"content-security-policy-report-only":" style-src 'self' 'unsafe-inline' https:\/\/*.google.com; require-trusted-types-for 'script'; trusted-types sanitizer unsafe dompurify scriptHelper","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/cdn.segment.com https:\/\/snap.licdn.com https:\/\/plausible.io https:\/\/chat.cdn-plain.com; style-src 'self' 'unsafe-inline' https:\/\/use.typekit.net; font-src 'self' https:\/\/use.typekit.net https:\/\/p.typekit.net; img-src 'self' data: blob: https:\/\/cdn.sanity.io https:\/\/img.youtube.com https:\/\/manage.novu.co https:\/\/www.googletagmanager.com; frame-src https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/app.cal.com; connect-src 'self' https:\/\/api.github.com https:\/\/uptime.betterstack.com https:\/\/api.hsforms.com https:\/\/*.sanity.io https:\/\/cdn.sanity.io https:\/\/api.segment.io https:\/\/cdn.segment.com https:\/\/api.mixpanel.com https:\/\/snap.licdn.com https:\/\/plausible.io https:\/\/www.googletagmanager.com https:\/\/chat.cdn-plain.com; media-src 'self' https:\/\/cdn.sanity.io; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/api.hsforms.com; frame-ancestors 'none'","count":1},{"content-security-policy-report-only":" default-src https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cc.cdn.civiccomputing.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/connect.facebook.net https:\/\/reports.hrmdirect.com https:\/\/*.etcconnect.com;style-src 'self' 'unsafe-inline' https:\/\/hello.myfonts.net https:\/\/reports.hrmdirect.com https:\/\/www.highend.com https:\/\/fonts.googleapis.com https:\/\/*.etcconnect.com;object-src 'none';img-src 'self' data: https:\/\/www.google-analytics.com https:\/\/www.facebook.com https:\/\/*.etcconnect.com;report-uri \/Handlers\/CspReports.ashx?type=REPORTONLY;","count":1},{"content-security-policy-report-only":" default-src 'self' *.ctfassets.net *.trackjs.com *.demdex.net; font-src 'self' *.gstatic.com; img-src 'self' *.ctfassets.net *.trackjs.com costalimited.d3.sc.omtrdc.net *.gstatic.com data: *.onetrust.com cm.everesttech.net *.googleapis.com; connect-src 'self' *.go-mpulse.net cdn-ukwest.onetrust.com trial-eum-clientnsv4-s.akamaihd.net trial-eum-clienttons-s.akamaihd.net *.akstat.io *.demdex.net costalimited.d3.sc.omtrdc.net *.onetrust.io *.trackjs.com maps.googleapis.com; script-src 'self'; script-src-elem 'self' 'unsafe-inline' assets.adobedtm.com *.go-mpulse.net cdn-ukwest.onetrust.com maps.googleapis.com fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline'; style-src 'self'; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com; script-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self'; report-to https:\/\/costa.report-uri.com\/r\/t\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'nonce-TwJlOg4WwEYrPHVKWpb099D9mEjZbi44' 'strict-dynamic' 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/*.hubspot.com https:\/\/*.hubspot.net https:\/\/*.hs-scripts.com https:\/\/*.hs-analytics.net https:\/\/*.hs-banner.com https:\/\/*.hsforms.net https:\/\/*.usemessages.com https:\/\/*.hubspotfeedback.com https:\/\/*.hsadspixel.net https:\/\/*.hscollectedforms.net https:\/\/*.hsappstatic.net https:\/\/snap.licdn.com https:\/\/*.clarity.ms; style-src 'self' 'unsafe-inline' https:\/\/unpkg.com https:\/\/fonts.googleapis.com https:\/\/*.hubspot.com https:\/\/*.hsappstatic.net; img-src 'self' data: blob: https:\/\/cdn.sanity.io https:\/\/*.id.com.au https:\/\/*.hubspot.com https:\/\/*.hubspotusercontent.com https:\/\/*.hubspotusercontent-na1.net https:\/\/*.hubspotusercontent-ap1.net https:\/\/*.hubspotusercontent-eu1.net https:\/\/*.hsforms.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/www.google.com https:\/\/www.google.com.au https:\/\/*.doubleclick.net https:\/\/px.ads.linkedin.com https:\/\/*.tile.openstreetmap.org https:\/\/i.ytimg.com; connect-src 'self' https:\/\/*.api.sanity.io https:\/\/*.apicdn.sanity.io wss:\/\/*.api.sanity.io https:\/\/api.hsforms.com https:\/\/*.hubapi.com https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.doubleclick.net https:\/\/px.ads.linkedin.com https:\/\/*.clarity.ms; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/www.loom.com https:\/\/www.canva.com https:\/\/*.id.com.au https:\/\/*.hsforms.com https:\/\/*.hsforms.net https:\/\/*.hubspot.com https:\/\/*.hubspotusercontent-na1.net https:\/\/*.hubspotusercontent-ap1.net https:\/\/*.hubspotusercontent-eu1.net; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/*.hsappstatic.net; media-src 'self' data: blob: https:\/\/cdn.sanity.io https:\/\/*.id.com.au https:\/\/*.hubspotusercontent.com https:\/\/*.hubspotusercontent-na1.net https:\/\/*.hubspotusercontent-ap1.net https:\/\/*.hubspotusercontent-eu1.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self' https:\/\/*.hsforms.com; frame-ancestors 'self'; report-uri \/.netlify\/functions\/__csp-violations","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net cash-f.squarecdn.com https:\/\/*.gstatic.com *.googleapis.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com https:\/\/widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.adyen.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com api.bazaarvoice.com stg.api.bazaarvoice.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ * *.adyen.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com https:\/\/*.bambuser.com https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com https:\/\/www.googletagmanager.com\/ photos.pixlee.co 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io * https:\/\/*.gstatic.com *.adyen.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ *.webtrekk.net *.wt-eu02.net https:\/\/fbc.wcfbc.net https:\/\/*.flx1.com\/ https:\/\/dmp.adform.net\/ *.pixlee.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-datasolutions.com *.magento-ds.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https:\/\/rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.googleapis.com https:\/\/*.gstatic.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com https:\/\/*.bambuser.com https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/responder.wt-safetag.com https:\/\/*.flx1.com\/ https:\/\/www.googletagmanager.com *.pxlecdn.com *.pixlee.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.cash.app https:\/\/fonts.googleapis.com\/ unsafe-inline assets.braintreegateway.com display.ugc.bazaarvoice.com https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com * *.adyen.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com https:\/\/*.bambuser.com api.addressy.com https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ https:\/\/*.flx1.com\/ https:\/\/jamie.g.shortest-route.com https:\/\/inbound-analytics.pixlee.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/87a2b74d-7ec7-4aa0-9269-eab6629cdda1.sansec.watch\/; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https:; report-uri https:\/\/usercontent.mobileread.org\/csp-report","count":1},{"content-security-policy-report-only":"  frame-src https:\/\/www.google.com\/ https:\/\/*.paddle.com https:\/\/www.recaptcha.net\/; report-uri \/api\/v1\/reports; script-src 'unsafe-inline' 'unsafe-eval' 'self' https:\/\/docs.staticstream.org https:\/\/*.google-analytics.com https:\/\/google-analytics.com https:\/\/www.googletagmanager.com https:\/\/www.recaptcha.net https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/*.paddle.com https:\/\/*.zopim.com https:\/\/*.zdassets.com https:\/\/browser.sentry-cdn.com https:\/\/*.ingest.sentry.io https:\/\/cdn.jsdelivr.net https:\/\/code.jquery.com,; connect-src 'self' https:\/\/docs.staticstream.org https:\/\/*.google-analytics.com https:\/\/*.paddle.com https:\/\/browsec.zendesk.com wss:\/\/*.zopim.com https:\/\/*.zopim.com https:\/\/*.zdassets.com https:\/\/*.ingest.sentry.io https:\/\/bash.ws\/ https:\/\/*.bash.ws\/;","count":1},{"content-security-policy-report-only":" report-uri https:\/\/www.yelp.com\/csp_report_only?id=7868c0989c1620b3&page=csp_report_frame_directives%2Cfull_site_ssl_csp_report_directives&policy_hash=41d0c45536d2a082f11d1cd0e00fde7f&site=www&timestamp=1788495117; frame-ancestors 'self' https:\/\/*.yelp.com; default-src https:; img-src https: data: blob:; script-src https: data: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' data:; font-src data: https:; child-src https: yelp-webview:\/\/* yelp:\/\/* data:; object-src 'none'; worker-src blob: https:; base-uri 'self'; form-action https:","count":1},{"content-security-policy-report-only":" frame-ancestors 'self' https:\/\/app.datadoghq.com\/ https:\/\/app.contentful.com; report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pubce3f3f19a3c7fcb81c0e6b27dbde95e1&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Agrow-monolith-prod; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self' motul.com *.cdninstagram.com *.elfsightcdn.com; script-src 'self' 'unsafe-eval' *.axept.io *.elfsight.com https:\/\/*.googletagmanager.com *.hotjar.com *.facebook.net 'unsafe-inline' *.googleapis.com *.channelsight.com js.monitor.azure.com *.explorify.com *.elfsightcdn.com *.youtube.com; img-src 'self' staging-cms.motul.com axeptio.imgix.net www.google.com *.gstatic.com data: *.elfsight.com *.facebook.com *.elfsightcdn.com *.googleapis.com *.hotjar.com *.cdninstagram.com *.motul.com *.amazonaws.com *.channelsight.com cscoreproweustor.blob.core.windows.net motul.incony.de *.explorify.com https:\/\/i.ytimg.com\/ https:\/\/*.googleusercontent.com\/places https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com; child-src 'self' motul.com *.hotjar.com *.youtube.com https:\/\/*.googletagmanager.com *.youtube-nocookie.com;; style-src 'self' 'unsafe-inline' *.elfsight.com *.googleapis.com *.channelsight.com *.explorify.com; font-src 'self' *.gstatic.com *.hotjar.com *.channelsight.com *.explorify.com data:; report-uri \/api\/v2\/security-headers; connect-src 'self' *.axept.io axeptio.imgix.net *.spinque.com *.elfsight.com *.facebook.net https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com  https:\/\/*.googletagmanager.com https:\/\/*.google.com *.hotjar.com *.googleapis.com *.azurewebsites.net *.motul.com *.hotjar.io wss:\/\/ws4.hotjar.com *.channelsight.com https:\/\/cms.motul.com\/search\/api; frame-ancestors 'self' *.motul.com https:\/\/cms.motul.com","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: trends.revcontent.com *.optimizely.com www.google.co.id estore2-outage.s3.ap-southeast-2.amazonaws.com cdn.honey.io www.google.com.mx cm.adform.net ad.yieldlab.net i.liadm.com www.google.com.ph analytics.google.com cdn.jsdelivr.net www.google.ro criteo-partners.tremorhub.com client-analytics.braintreegateway.com www.priceline.com.au www.google.com.vn www.google.com.au adservice.google.com mon-va.tiktokv.com *.useinsider.com *.api.useinsider.com; frame-ancestors 'self' *.priceline.com.au; form-action *.pinterest.com *.facebook.com; connect-src 'self' analytics.google.com *.google.co.in vc.hotjar.io api.braintreegateway.com payments.braintree-api.com www.google-analytics.com *.doubleclick.net *.googleapis.com ct.pinterest.com *.hotjar.com  api.priceline.com.au api.cb55tqh30c-australia1-p1-public.model-t.cc.commerce.ondemand.com api.priceline.com.au analytics.tiktok.com wsp16.hotjar.com csmetrics.hotjar.com wsp14.hotjar.com content.hotjar.io *.clarity.ms bat.bing.com *.rest.iad-07.braze.com https:\/\/*.useinsider.com https:\/\/*.api.useinsider.com wss:\/\/*.useinsider.com; font-src 'self' data: saas-p2w.azurewebsites.net use.fontawesome.com fonts.gstatic.com *.useinsider.com *.api.useinsider.com; frame-src 'self' *.priceline.com.au checkout.paypal.com assets.braintreegateway.com open.spotify.com www.youtube.com www.facebook.com *.criteo.net ct.pinterest.com *.adsrvr.org *.criteo.com *.doubleclick.net www.googletagmanager.com *.useinsider.com *.api.useinsider.com; object-src *.priceline.com.au *.useinsider.com *.api.useinsider.com; img-src 'self' data: www.googletagmanager.com c.bing.com www.google.com www.google.co.in www.google-analytics.com *.googleapis.com maps.gstatic.com cdn.aralego.net ads.stickyadstv.com match.adsrvr.org sync.aralego.com e1.emxdgt.com sync-criteo.ads.yieldmo.com ade.clmbtech.com s.ad.smaato.net simage2.pubmatic.com sync.outbrain.com c.bing.co exchange.mediavine.com idsync.rlcdn.com ad.360yield.com cs.adingo.jp adx.dable.io tg.socdm.com adgen.socdm.com ups.analytics.yahoo.com eb2.3lift.com criteo-sync.teads.tv *.taboola.com match.sharethrough.com *.rubiconproject.com contextual.media.net secure.adnxs.com ib.adnxs.com *.doubleclick.net *.bidswitch.net *.casalemedia.com *.criteo.com *.smartadserver.com ct.pinterest.com www.facebook.com logs-01.loggly.com cm.adgrx.com um.simpli.fi match.deepintent.com api.priceline.com.au api.cb55tqh30c-australia1-p1-public.model-t.cc.commerce.ondemand.com px.ads.linkedin.com sync.1rx.io api.priceline.com.au tr.outbrain.com saas-p2w.azurewebsites.net i.ytimg.com 1f2e7.v.fwmrm.net pr-bh.ybp.yahoo.com fonts.gstatic.com bat.bing.com c.clarity.ms sp.analytics.yahoo.com *.useinsider.com *.api.useinsider.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.priceline.com.au saas-p2w.azurewebsites.net www.googletagmanager.com *.googleapis.com *.criteo.com d.impactradius-event.com *.tiktok.com js.adsrvr.org *.hotjar.com *.pinimg.com *.facebook.net www.google-analytics.com *.criteo.com bat.bing.com www.clarity.ms s.yimg.com *.useinsider.com *.api.useinsider.com; script-src-elem 'self' *.priceline.com.au *.useinsider.com *.api.useinsider.com; style-src 'self' 'unsafe-inline' saas-p2w.azurewebsites.net use.fontawesome.com *.googleapis.com www.googletagmanager.com *.useinsider.com *.api.useinsider.com; worker-src 'self' *.priceline.com.au *.useinsider.com *.api.useinsider.com","count":1},{"content-security-policy-report-only":" default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http:\/\/*.files.wordpress.com wss:\/\/www.sportico.com; report-uri https:\/\/pmcuri.report-uri.com\/r\/d\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/securepubads.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/tpc.googlesyndication.com https:\/\/*.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googletagservices.com https:\/\/platform.twitter.com https:\/\/www.instagram.com https:\/\/www.tiktok.com https:\/\/connect.facebook.net https:\/\/adtrafficquality.google; connect-src * ws: wss: https:; style-src 'self' 'unsafe-inline' https:; img-src * data: blob: https:; media-src * blob: https:; frame-src * https:; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-x0o_u9DirNWh9i9xbzFjzA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-scmrDMzAdLqa58W9m6zyFA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.lge.co.kr https:\/\/browser-intake-datadoghq.com https:\/\/*.browser-intake-datadoghq.com *.datadoghq-browser-agent.com *.googletagmanager.com *.doubleclick.net *.facebook.net *.criteo.com *.creativecdn.com *.naver.net *.pstatic.net *.daangn.com *.stclab.com *.google.com *.creativecdn.com *.google-analytics.com *.simpli.fi *.sauceflex.com *.facebook.com *.google.co.kr  *.widerplanet.com *.daumcdn.net *.useinsider.com *.attractt.com *.criteo.net; connect-src 'self' *.lge.co.kr https:\/\/browser-intake-datadoghq.com https:\/\/*.browser-intake-datadoghq.com *.datadoghq-browser-agent.com *.googletagmanager.com *.doubleclick.net *.facebook.net *.criteo.com *.creativecdn.com *.naver.net *.pstatic.net *.daangn.com *.stclab.com *.google.com *.creativecdn.com *.google-analytics.com *.simpli.fi *.sauceflex.com *.facebook.com *.google.co.kr *.widerplanet.com *.daumcdn.net *.useinsider.com *.attractt.com *.criteo.net;","count":1},{"content-security-policy-report-only":" report-uri https:\/\/www.yelp.com\/csp_report_only?id=876b7de6795ea65f&page=csp_report_frame_directives%2Cfull_site_ssl_csp_report_directives&policy_hash=41d0c45536d2a082f11d1cd0e00fde7f&site=www&timestamp=1788502081; frame-ancestors 'self' https:\/\/*.yelp.com; default-src https:; img-src https: data: blob:; script-src https: data: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' data:; font-src data: https:; child-src https: yelp-webview:\/\/* yelp:\/\/* data:; object-src 'none'; worker-src blob: https:; base-uri 'self'; form-action https:","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.prizepicks.com https:\/\/*.cloudflare.com https:\/\/*.cloudflareinsights.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:\/\/*.prizepicks.com https:\/\/*.google-analytics.com https:\/\/*.cloudflareinsights.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'","count":1},{"content-security-policy-report-only":" default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline' blob:; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; connect-src 'self' ws: https:\/\/suggestions.dadata.ru https:\/\/www.google.com; worker-src blob:; report-uri \/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self' 'report-sample'; connect-src 'self' https:\/\/matomo.psi.ch\/; font-src 'self' data: player.podigee-cdn.net assets.brevo.com; frame-src 'self' *.ddev.site *.psi.ch player.vimeo.com www.youtube-nocookie.com feeds.sirop.org maps.google.com www.jove.com player.podigee-cdn.net cdnapisec.kaltura.com www.google.com www.srf.ch www.youtube.com psi.mediaspace.cast.switch.ch; img-src 'self' data: gfa-status.web.psi.ch share.web.psi.ch webcam.switch.ch; media-src 'self' *.ethz.ch data:; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https:\/\/api.mapbox.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/maps.googleapis.com https:\/\/unpkg.com unpkg.com https:\/\/matomo.psi.ch\/; script-src-elem 'self' 'unsafe-inline' test-t6dnbai-3bjapdgtwdrsg.eu-2.platformsh.site www.gstatic.com *.psi.ch www.google.com player.podigee-cdn.net sibforms.com https:\/\/api.mapbox.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/maps.googleapis.com https:\/\/unpkg.com unpkg.com; style-src 'self' 'report-sample' 'unsafe-inline' www.gstatic.com player.podigee-cdn.net sibforms.com https:\/\/api.mapbox.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com unpkg.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self' www.google.com; frame-ancestors 'self'; report-uri https:\/\/www.psi.ch\/de\/log-report-uri\/reportOnly","count":1},{"content-security-policy-report-only":" style-src 'self' 'unsafe-inline' https:\/\/*.assets.post.at https:\/\/*.azureedge.net https:\/\/bpanel.streamdiver.com https:\/\/webcast.a1.net https:\/\/*.gstatic.com; report-to default;","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/youtube-marketing\/about_youtube","count":1},{"content-security-policy-report-only":" base-uri 'none'; font-src 'self' https: data:; form-action https:\/\/green.netcup.com https:\/\/red.netcup.com https:\/\/blue.netcup.com https:\/\/www.netcup.com https:\/\/www.facebook.com; frame-ancestors 'self'; img-src https:\/\/green.netcup.com https:\/\/red.netcup.com https:\/\/blue.netcup.com https:\/\/www.netcup.com https:\/\/ads-twitter.com https:\/\/ads-api.twitter.com https:\/\/analytics.twitter.com https:\/\/mautic.netcup.news https:\/\/px.ads.linkedin.com 'self' blob: data: https: https:\/\/www.captcha.eu; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https:\/\/www.captcha.eu; script-src https:\/\/green.netcup.com https:\/\/red.netcup.com https:\/\/blue.netcup.com https:\/\/www.netcup.com https:\/\/chat.netcup.com https:\/\/chat-dev-ui.netcup.net https:\/\/chat-ui.netcup.com https:\/\/cdn.cookielaw.org https:\/\/cookie-cdn.cookiepro.com https:\/\/*.onetrust.com https:\/\/measure.netcup.com https:\/\/www.googleadservices.com https:\/\/pagead2.googlesyndication.com https:\/\/widget.trustpilot.com https:\/\/cdn.brevo.com\/js\/sdk-loader.js https:\/\/www.captcha.eu 'self' 'wasm-unsafe-eval' 'nonce-gHWgXiOBNprtKnRYGutcoT1j'; child-src blob: https:\/\/td.doubleclick.net; connect-src https:\/\/green.netcup.com https:\/\/red.netcup.com https:\/\/blue.netcup.com https:\/\/www.netcup.com https:\/\/chat.netcup.com https:\/\/chat-dev-ui.netcup.net https:\/\/chat-ui.netcup.com https:\/\/ads-twitter.com https:\/\/ads-api.twitter.com https:\/\/analytics.twitter.com https:\/\/cdn.cookielaw.org https:\/\/cookie-cdn.cookiepro.com https:\/\/*.onetrust.com https:\/\/www.google.com https:\/\/in-automate.brevo.com https:\/\/measure.netcup.com https:\/\/google.com https:\/\/px.ads.linkedin.com https:\/\/*.clarity.ms\/ 'self' https:\/\/*.analytics.google.com https:\/\/*.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/www.captcha.eu https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/cdn.cookielaw.org https:\/\/adservice.google.com https:\/\/pagead2.googlesyndication.com https:\/\/www.redditstatic.com https:\/\/pixel-config.reddit.com https:\/\/analytics.tiktok.com https:\/\/ads.tiktok.com https:\/\/bat.bing.com https:\/\/widget.trustpilot.com; frame-src https:\/\/td.doubleclick.net https:\/\/www.facebook.com https:\/\/www.googletagmanager.com https:\/\/measure.netcup.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com\/ https:\/\/widget.trustpilot.com https:\/\/green.netcup.com https:\/\/red.netcup.com https:\/\/blue.netcup.com https:\/\/www.netcup.com https:\/\/chat.netcup.com https:\/\/chat-dev-ui.netcup.net https:\/\/chat-ui.netcup.com; script-src-elem https:\/\/green.netcup.com https:\/\/red.netcup.com https:\/\/blue.netcup.com https:\/\/www.netcup.com https:\/\/chat.netcup.com https:\/\/chat-dev-ui.netcup.net https:\/\/chat-ui.netcup.com https:\/\/cdn.brevo.com\/js\/sdk-loader.js https:\/\/sibautomation.com\/sa.js https:\/\/sibforms.com\/ https:\/\/www.googleadservices.com https:\/\/www.redditstatic.com 'self' 'unsafe-inline' https:\/\/*.googletagmanager.com https:\/\/static.ads-twitter.com https:\/\/snap.licdn.com https:\/\/bat.bing.com https:\/\/connect.facebook.net https:\/\/*.clarity.ms https:\/\/googleads.g.doubleclick.net https:\/\/cdn.cookielaw.org https:\/\/analytics.tiktok.com https:\/\/ads.tiktok.com https:\/\/measure.netcup.com https:\/\/www.youtube.com https:\/\/pagead2.googlesyndication.com https:\/\/widget.trustpilot.com; worker-src blob:; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:\/\/*.hsforms.com https:\/\/*.hubspot.com; script-src 'self' 'unsafe-inline' https:\/\/*.hs-scripts.com https:\/\/*.hs-analytics.net https:\/\/*.hsforms.net https:\/\/*.hsforms.com https:\/\/*.hscollectedforms.net https:\/\/*.hsadspixel.net https:\/\/*.hsleadflows.net https:\/\/*.usemessages.com https:\/\/*.hs-banner.com https:\/\/*.hsappstatic.net https:\/\/*.hubspot.com https:\/\/*.hubspot.net https:\/\/*.hubspotusercontent-na1.net https:\/\/*.hubspotusercontent-na2.net https:\/\/*.hubspotusercontent-eu1.net https:\/\/assets.apollo.io https:\/\/www.buzzsprout.com https:\/\/*.buzzsprout.com https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/*.google-analytics.com https:\/\/www.gstatic.com https:\/\/api.mapbox.com https:\/\/go.wi-fi.org; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/api.mapbox.com https:\/\/*.hsforms.net https:\/\/*.hsforms.com https:\/\/*.hsappstatic.net https:\/\/*.hubspot.com https:\/\/*.hubspotusercontent-na1.net https:\/\/*.hubspotusercontent-na2.net https:\/\/*.hubspotusercontent-eu1.net; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/*.hsappstatic.net https:\/\/*.hubspotusercontent-na1.net https:\/\/*.hubspotusercontent-na2.net https:\/\/*.hubspotusercontent-eu1.net; connect-src 'self' https:\/\/www.buzzsprout.com https:\/\/*.buzzsprout.com https:\/\/*.hubspot.com https:\/\/*.hubapi.com https:\/\/*.hubspotusercontent-na1.net https:\/\/*.hubspotusercontent-na2.net https:\/\/*.hubspotusercontent-eu1.net https:\/\/*.hsforms.com https:\/\/*.hsforms.net https:\/\/*.hs-analytics.net https:\/\/*.hscollectedforms.net https:\/\/*.apollo.io https:\/\/aplo-evnt.com https:\/\/*.aplo-evnt.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/www.google.com https:\/\/stats.g.doubleclick.net https:\/\/api.mapbox.com https:\/\/events.mapbox.com https:\/\/go.wi-fi.org https:\/\/pi.pardot.com https:\/\/prf.cert.wi-fi.org https:\/\/staging-prf.indigo.wi-fi.org; frame-src 'self' https:\/\/www.buzzsprout.com https:\/\/*.buzzsprout.com https:\/\/www.googletagmanager.com https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/*.hsforms.net https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/iframe.dacast.com https:\/\/*.dacast.com https:\/\/www.surveymonkey.com; media-src 'self' blob: https:\/\/www.buzzsprout.com https:\/\/*.buzzsprout.com https:\/\/*.dacast.com https:\/\/*.vimeo.com; worker-src 'self' blob:; manifest-src 'self'; report-uri \/csp-report; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self'; child-src 'self' blob:; connect-src 'self' *.thuisarts.nl *.readspeaker.com bynder.nhg.org *.cloudfront.net https:\/\/*.ingest.de.sentry.io *.contentsquare.net *.contentsquare.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com; font-src 'self' data: https:\/\/themes.googleusercontent.com; frame-src 'self' *.readspeaker.com https:\/\/consentcdn.cookiebot.com; img-src 'self' data: *.thuisarts.nl *.readspeaker.com https:\/\/bynder.nhg.org *.contentsquare.net; media-src 'self' *.thuisarts.nl *.readspeaker.com; script-src 'self' 'report-sample' *.readspeaker.com *.thuisarts.nl *.cloudfront.net *.contentsquare.net app.contentsquare.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com cdn-eu.readspeaker.com https:\/\/d8ejoa1fys2rk.cloudfront.net 'nonce-hD1YWYwf77iBNQU5cwTH9Q'; script-src-elem 'self' 'report-sample' *.readspeaker.com *.thuisarts.nl *.cloudfront.net *.contentsquare.net app.contentsquare.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com cdn-eu.readspeaker.com https:\/\/d8ejoa1fys2rk.cloudfront.net 'nonce-hD1YWYwf77iBNQU5cwTH9Q'; style-src * 'report-sample' 'nonce-hD1YWYwf77iBNQU5cwTH9Q'; base-uri 'self'; form-action 'self' *.thuisarts.nl https:\/\/staging--nhg-leefstijlkaart-ui.netlify.app; frame-ancestors 'self' *.asterisque.nl *.cnsconnect.nl *.crsinternet.nl *.curasoft.nl *.dataleaf.eu *.eposzilos.nl *.extenzo.nu *.healthconnected.nl *.omnihis.nl *.oscarecd.nl *.portavita.eu *.portavita.nl *.promedico-asp.aw *.promedico-asp.nl *.topicus-hap.nl *.prescriptor.nl *.digitalis.nl *.clinicalrules.nl *.caresharing.eu *.vandenhoogenhoff.com *.brickshuisarts.nl *.promedico-huisarts.nl brickshuisarts.nl","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.usercentrics.eu https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/static.payu.com https:\/\/connect.facebook.net https:\/\/maps.googleapis.com https:\/\/*.chat.getzowie.com https:\/\/*.salesmanago.pl https:\/\/pixel.wp.pl https:\/\/*.doubleclick.net https:\/\/*.googleadservices.com https:\/\/*.bing.com https:\/\/*.hotjar.com https:\/\/*.inpost.pl https:\/\/*.easypack24.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/*.usercentrics.eu https:\/\/*.inpost.pl https:\/\/*.easypack24.net; img-src * data: blob:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/*.payu.com; connect-src 'self' https:\/\/*.diag.pl https:\/\/*.ingest.sentry.io https:\/\/*.payu.com https:\/\/*.ingest.us.sentry.io https:\/\/*.usercentrics.eu https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/google.com https:\/\/*.google.com https:\/\/www.google.pl https:\/\/www.google.de https:\/\/www.google.fr https:\/\/www.google.it https:\/\/www.google.es https:\/\/www.google.nl https:\/\/www.google.be https:\/\/www.google.at https:\/\/www.google.pt https:\/\/www.google.ie https:\/\/www.google.se https:\/\/www.google.dk https:\/\/www.google.fi https:\/\/www.google.gr https:\/\/www.google.cz https:\/\/www.google.sk https:\/\/www.google.hu https:\/\/www.google.ro https:\/\/www.google.bg https:\/\/www.google.hr https:\/\/www.google.si https:\/\/www.google.lt https:\/\/www.google.lv https:\/\/www.google.ee https:\/\/www.google.lu https:\/\/www.google.com.mt https:\/\/www.google.com.cy https:\/\/www.google.co.uk https:\/\/www.google.ch https:\/\/www.google.no https:\/\/www.google.com.ua https:\/\/www.google.com.tr https:\/\/www.google.ca https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/*.googleadservices.com https:\/\/*.bing.com https:\/\/*.bing.net https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/*.chat.getzowie.com wss:\/\/*.chat.getzowie.com https:\/\/maps.googleapis.com https:\/\/*.salesmanago.pl https:\/\/*.inpost.pl https:\/\/*.easypack24.net https:\/\/www.facebook.com https:\/\/pixel.wp.pl; media-src 'self' https:\/\/*.chat.getzowie.com; worker-src 'self' blob:; frame-src 'self' https:\/\/www.google.com https:\/\/*.usercentrics.eu https:\/\/*.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/*.payu.com https:\/\/*.wp.pl https:\/\/*.chat.getzowie.com; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; report-uri https:\/\/o107039.ingest.us.sentry.io\/api\/4505510726008832\/security\/?sentry_key=050c1d0552a44968957df5d9c5d1e01b&sentry_environment=production; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self' 'report-sample' 'unsafe-inline' data: cdn.jsdelivr.net https:\/\/static.addtoany.com unpkg.com youtube.com www.youtube.com www.youtube-nocookie.com actionnetwork.org fonts.googleapis.com fonts.gstatic.com substack.com datawrapper.dwcdn.net google-analytics.com googletagmanager.com; connect-src 'self' 'report-sample' 'unsafe-inline' data: cdn.jsdelivr.net https:\/\/static.addtoany.com unpkg.com youtube.com www.youtube.com www.youtube-nocookie.com actionnetwork.org fonts.googleapis.com fonts.gstatic.com substack.com datawrapper.dwcdn.net google-analytics.com googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com; img-src 'self' 'report-sample' 'unsafe-inline' data: cdn.jsdelivr.net https:\/\/static.addtoany.com unpkg.com youtube.com www.youtube.com www.youtube-nocookie.com actionnetwork.org fonts.googleapis.com fonts.gstatic.com substack.com datawrapper.dwcdn.net google-analytics.com googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https:\/\/www.aft.org\/log-report-uri\/reportOnly","count":1},{"content-security-policy-report-only":" script-src 'self' *.adyen.com *.allsaints.com *.bing.com *.cquotient.com *.forter.com *.g.doubleclick.net *.global-e.com *.google-analytics.com *.google.com *.googleapis.com *.googlesyndication.com *.gstatic.com *.klarnaservices.com *.parcellab.com *.pcapredict.com *.scarabresearch.com *.squarecdn.com *.tribalfusion.com *.yotpo.com access.myunidays.com ajax.cloudflare.com allsaints.api.highstreetapp.com analytics.tiktok.com api.soreto.com appleid.cdn-apple.com assets.ntcacdn.net cdn-ukwest.onetrust.com cdn.jsdelivr.net cdn.optimizely.com cdnapisec.kaltura.com challenges.cloudflare.com chat.digitalgenius.com code.jquery.com connect.facebook.net ct.pinterest.com d.ratepay.com dnn0yrbagrg.cloudfront.net duvgq8bw.cloudfront.net edge.eu.fullstory.com js-agent.newrelic.com js.klarna.com lottingem.com platform.communicatorcorp.com player.vimeo.com rgneujpc.micpn-eu.com s.pinimg.com sc-static.net secured-pixel.com services.postcodeanywhere.co.uk static.cloudflareinsights.com statse.webtrendslive.com t.contentsquare.net tag.rmp.rakuten.com tags.creativecdn.com tr.snapchat.com tracker.marinsm.com unpkg.com widgets.trustedshops.com www.googletagmanager.com www.paypal.com www.recaptcha.net www.redditstatic.com x.klarnacdn.net; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=lIG0X.Zt8MCpJvv.PTLIvaiOovqAu3P.ibE_WQnHYWI-1788506124.771036-1.0.1.1-eCOliLTbE627o66viyAKZQxnaHn816yVEWMIeuBEx6ggANClaQPhjHYMFsrpiOAr0GP5jEndwmGTmSjKlCp7ig3Vt.0PMbJ4ExaOIvRMtXUofiabb_Z0bxMlRHZa3vM4ZPLMW0i5Mk7URZLPJyEMXXI3o3ssj3NymQhKgOMWK4H9LhwYX8GdC589C6X4g8fN0d1vNmdxtJSnEhwLemDtqQ; report-to cf-tdpmzfnoaabkplsr","count":1},{"content-security-policy-report-only":" frame-ancestors 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudflare.com cdn.us-east-1.prod.moon.dubai.aws.dev script.hotjar.com www.radioshack.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https:\/\/pinterest.com https:\/\/www.pinterest.com appleid.apple.com www.apptrian.com facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.amazon.com https:\/\/www.google.com https:\/\/www.youtube.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com s3-sa-east-1.amazonaws.com *.google.com.mx *.bing.com *.collect.igodigital.com https:\/\/static.elfsight.com https:\/\/tvspix.com https:\/\/t.co https:\/\/analytics.twitter.com https:\/\/www.google.com https:\/\/www.gstatic.com mcprod.radioshack.com amazon-omni-cdn.com www.ojrq.net c.clarity.ms cdn.smct.io www.radioshack.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com utt.impactcdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.equalweb.com *.sandbox.my.site.com\/ *.sandbox.my.salesforce-scrt.com\/ *.facebook.net *.tiktok.com\/ *.cardinalcommerce.com *.ccdc02.com unpkg.com cdn.jsdelivr.net *.g.doubleclick.net commerce.adobe.net magento-recs-sdk.adobe.net *.bolt.com *.commerce-quick-checkout.com localhost:8082 www.gstatic.com www.google.com *.sandbox.my.site.com *.sandbox.my.salesforce-scrt.com *.tiktok.com *.clarity.ms *.bing.com *.collect.igodigital.com *.amazon.com https:\/\/cdn.equalweb.com https:\/\/static.elfsight.com https:\/\/unicomer.my.site.com elfsightcdn.com https:\/\/cdn.popt.in https:\/\/core.service.elfsight.com https:\/\/static.ads-twitter.com https:\/\/static.hotjar.com https:\/\/cdnjs.cloudflare.com https:\/\/smct.co https:\/\/script.hotjar.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/assets.adobedtm.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com cdn.us-east-1.prod.moon.dubai.aws.dev js.smct.io unsafe-inline www.radioshack.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com assets.braintreegateway.com *.cloudflare.com *.sandbox.my.site.com\/ *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com unpkg.com cdn.jsdelivr.net commerce.adobedtm.com www.googleadservices.com www.google-analytics.com *.g.doubleclick.net analytics.google.com www.googletagmanager.com use.typekit.net *.adobe.io *.sentry.io *.sentry-cdn.com *.newrelic.com *.nr-data.net *.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com assets.adobedtm.com commerce.adobe.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com localhost:8082 www.gstatic.com www.google.com js.braintreegateway.com c.paypal.com pay.google.com *.braintreegateway.com *.equalweb.com *.sandbox.my.site.com *.sandbox.my.salesforce-scrt.com *.facebook.net *.tiktok.com *.clarity.ms https:\/\/unicomer.my.site.com cdn.us-east-1.prod.moon.dubai.aws.dev www.radioshack.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com www.radioshack.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.adobedc.net *.equalweb.com *.sandbox.my.salesforce-scrt.com\/ *.sandbox.my.site.com\/ *.tiktok.com\/ *.adobedtm.com *.adobe.com *.ccdc02.com unpkg.com cdn.jsdelivr.net commerce.adobedtm.com www.google-analytics.com *.g.doubleclick.net analytics.google.com use.typekit.net t.paypal.com assets.adobedtm.com commerce.adobe.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com localhost:8082 www.gstatic.com www.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com *.sandbox.my.site.com *.sandbox.my.salesforce-scrt.com *.facebook.net *.tiktok.com *.clarity.ms *.bing.com https:\/\/cdn.equalweb.com https:\/\/static.elfsight.com https:\/\/access.equalweb.com https:\/\/core.service.elfsight.com https:\/\/www.google.com.mx https:\/\/radioshackusallc.pxf.io https:\/\/cdn.popt.in https:\/\/script.hotjar.com https:\/\/vars.hotjar.com https:\/\/vc.hotjar.io https:\/\/display.popt.in https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/stats.g.doubleclick.net unicomer.my.salesforce-scrt.com cdn.elements.amazon order.buywithprime.amazon.com wss:\/\/ws.hotjar.com firehose.eu-west-1.amazonaws.com medley.prod.irtysh.dubai.aws.dev content.hotjar.io adobedc.demdex.net analytics-ipv6.tiktokw.us js.smct.io surveystats.hotjar.io pro.ip-api.com cognito-identity.eu-west-1.amazonaws.com www.radioshack.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com content.hotjar.io www.radioshack.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/analytics.tiktok.com https:\/\/bat.bing.com https:\/\/bzrcdn.openai.com https:\/\/cdn.segment.com https:\/\/connect.facebook.net https:\/\/*.doubleclick.net https:\/\/s.yimg.com https:\/\/script.hotjar.com https:\/\/scripts.clarity.ms https:\/\/static.ads-twitter.com https:\/\/static.hotjar.com https:\/\/websdk.appsflyer.com https:\/\/www.clarity.ms https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/www.redditstatic.com; img-src 'self' data: https:; connect-src 'self' https:\/\/analytics-ipv6.tiktokw.us https:\/\/analytics.tiktok.com https:\/\/api.segment.io https:\/\/bzr.openai.com https:\/\/cdn.segment.com https:\/\/*.doubleclick.net https:\/\/j.clarity.ms https:\/\/pixel-config.reddit.com https:\/\/region1.google-analytics.com https:\/\/s.yimg.com https:\/\/www.google-analytics.com https:\/\/www.google.com; font-src 'self' https:\/\/fonts.gstatic.com; frame-src 'self' https:\/\/*.doubleclick.net; report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub0fc53fca1ec699a0774b43bbb4d8ea6c&dd-evp-origin=content-security-policy&ddsource=csp-report","count":1},{"content-security-policy-report-only":" default-src 'self' www.youtube.com *.stripe.com *.addthis.com; script-src 'self' assets.sutori.com *.twitter.com *.twimg.com 'unsafe-inline' *.stripe.com apis.google.com 'unsafe-eval' maps.googleapis.com *.crisp.chat *.crisp.im www.youtube.com *.ytimg.com *.addthis.com *.addthisedge.com data: z.moatads.com *.pinterest.com *.iubenda.com cdn.thinglink.me http:\/\/ajax.googleapis.com\/ajax\/libs\/jquery\/1.11.3\/jquery.min.js https:\/\/www.thinglink.com *.instagram.com connect.facebook.net *.imgur.com *.flickr.com blob: cdn.headwayapp.co risk.clearbit.com teams.microsoft.com https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/lamejs\/1.2.0\/lame.min.js; script-src-elem assets.sutori.com *.twitter.com *.twimg.com 'unsafe-inline' *.googletagmanager.com *.stripe.com https:\/\/apis.google.com\/ accounts.google.com 'unsafe-eval' maps.googleapis.com *.crisp.chat *.crisp.im www.youtube.com *.ytimg.com *.addthis.com *.addthisedge.com data: z.moatads.com *.pinterest.com *.iubenda.com cdn.thinglink.me http:\/\/ajax.googleapis.com\/ajax\/libs\/jquery\/1.11.3\/jquery.min.js https:\/\/www.thinglink.com *.instagram.com connect.facebook.net *.imgur.com *.flickr.com blob: cdn.headwayapp.co risk.clearbit.com teams.microsoft.com play.vidyard.com challenges.cloudflare.com; worker-src blob: data:; font-src 'self' data: assets.sutori.com fonts.gstatic.com https:\/\/client.crisp.chat; connect-src 'self' https:\/\/www.googleapis.com wss:\/\/www.sutori.com assets.sutori.com s3.amazonaws.com\/assets.sutori.com *.google-analytics.com *.stripe.com accounts.google.com maps.googleapis.com api.amplitude.com wss:\/\/*.crisp.chat https:\/\/*.crisp.chat *.addthis.com https:\/\/syndication.twitter.com\/settings https:\/\/*.wikipedia.org geo.query.yahoo.com *.flickr.com risk.clearbit.com login.microsoftonline.com blob:; img-src 'self' data: * maps.googleapis.com https:\/\/maps.gstatic.com\/mapfiles\/api-3\/images\/ https:\/\/csi.gstatic.com\/ https:\/\/i.ytimg.com *.addthis.com *.pinterest.com *.iubenda.com; style-src 'self' assets.sutori.com platform.twitter.com 'unsafe-inline' accounts.google.com *.googleapis.com https:\/\/client.crisp.chat *.iubenda.com cdn.thinglink.me https:\/\/ton.twimg.com cdn.headwayapp.co; media-src 'self' assets.sutori.com https:\/\/client.crisp.chat blob:; child-src 'self' * https:\/\/www.sutori.com *.stripe.com https:\/\/www.google.com\/ https:\/\/www.youtube-nocookie.com\/embed\/ https:\/\/www.youtube.com\/embed\/ *.addthis.com *.pinterest.com blob:; manifest-src assets.sutori.com;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-7YtiS2SO4A7VfNva9Fc8Kw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' *.klarna.com *.klarnaservices.com *.paypal.com *.paypalobjects.com *.afterpay.com *.cash.app *.google.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.doubleclick.net *.amazon-adsystem.com *.bazaarvoice.com *.amplience.net cdn.cookielaw.org *.fullstory.com *.abtasty.com *.evergage.com *.sentry.io *.tiktok.com *.bing.com *.creativecdn.com *.mountain.com *.wisepops.com *.forter.com *.sitevibes.com *.thrive.today *.pbbl.co *.attn.tv *.ipredictive.com *.algolia.net *.algolianet.com *.onetrust.com *.pinterest.com *.adroll.com *.jsdelivr.net *.cloudfront.net *.typekit.net; script-src 'self' js.klarna.com x.klarnacdn.net *.paypal.com *.afterpay.com *.cash.app *.squarecdn.com *.google.com *.googletagmanager.com *.facebook.net 'unsafe-inline' cdn.cookielaw.org *.fullstory.com *.abtasty.com *.evergage.com *.googleapis.com storage.googleapis.com *.mountain.com loader.wisepops.com *.thrive.today *.pbbl.co *.attn.tv *.ipredictive.com *.jsdelivr.net *.cloudfront.net *.my.site.com www.gstatic.com apps.bazaarvoice.com *.forter.com *.clarity.ms *.adroll.com s.pinimg.com cdn.evgnet.com wisepops.net app.sitevibes.com analytics.tiktok.com bat.bing.com tags.creativecdn.com www.upsellit.com *.usablenet.com; connect-src 'self' *.afterpay.com *.cash.app api.lab.amplitude.com *.klarna.com *.paypal.com api.radar.io *.google-analytics.com *.googletagmanager.com *.fullstory.com cdn.cookielaw.org *.evergage.com *.sentry.io *.tiktok.com *.bing.com *.creativecdn.com *.mountain.com *.forter.com *.sitevibes.com *.google.com analytics.google.com *.abtasty.com api.cquotient.com *.thrive.today *.attn.tv *.ipredictive.com *.algolia.net *.algolianet.com *.onetrust.com *.my.salesforce-scrt.com *.my.site.com 1.1.1.1 shoecarnivalproduction.cdn.content.amplience.net cdn.media.amplience.net maps.googleapis.com apps.bazaarvoice.com ixfd-api.bc0a.com *.bc0a.com *.clarity.ms *.adroll.com stats.g.doubleclick.net pagead2.googlesyndication.com events.attentivemobile.com api.addressy.com www.facebook.com ad.doubleclick.net googleads.g.doubleclick.net ct.pinterest.com www.googleadservices.com analytics-ipv6.tiktokw.us cdn0.forter.com cdn3.forter.com d1rk8r7fwbocot.cloudfront.net d3banl4fzuxsjl.cloudfront.net d2o5idwacg3gyw.cloudfront.net edge.fullstory.com rs.fullstory.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' *.my.site.com d13vs86ckfnvoz.cloudfront.net cdn.jsdelivr.net app.sitevibes.com fonts.googleapis.com *.typekit.net use.typekit.net *.cash.app; frame-src 'self' *.afterpay.com *.cash.app *.pbbl.co tcapi.io *.pinterest.com creatives.attn.tv services.sheerid.com *.my.site.com www.google.com www.paypal.com www.googletagmanager.com www.facebook.com ad.ipredictive.com; frame-ancestors 'self'; img-src * data: blob:; font-src * data:; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=cF_oaKXlYPAX7F76JACeacZKvlRu1eMM_ELq0r2giUE-1788509803.344086-1.0.1.1-LrfvDxACGdmj4AgGI85KAKcDR_FrJQngdEshKS2GAsQPDrdR._Qs7kUD3EdZbwflCeMdSUWm9OPOAUqy2YVJiFvCB36RJuXr24COYFPSxKQDZa7pO3JAD.qpBw3N6I.3blVMJiUFnNNSYDRbBqIcoeBX3O9D46xb38f4X87uZzDpwhXjpXuWU0Dkp4Tsd6vKcw0uOAPieRKk7qCJataTmjPGGDGZv7h1tKeqxznG..qlm5Wab_jEpIgUYKu75Bps; report-to cf-lfvplljssrbavhxu","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/www.googletagmanager.com https:\/\/plausible.io; style-src 'self' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com; img-src 'self' data: https:\/\/dealroom.imgix.net https:\/\/sg-imgs.dealroom.co https:\/\/content.dealroom.co https:\/\/storage.googleapis.com https:\/\/image.thum.io; connect-src 'self' https:\/\/plausible.io https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com; frame-src 'self' https:\/\/app.dealroom.co https:\/\/jobs.dealroom.co; base-uri 'self'; form-action 'self' https:\/\/*.hsforms.com; object-src 'none'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-eval' 'wasm-unsafe-eval' *.bytescm.com *.bytetos.com *.ibytedapm.com *.zijieapi.com *.snssdk.com *.bytedance.com *.bytedance.net *.pstatp.com *.bytednsdoc.com *.bytegoofy.com *.byted-static.com *.yhgfb-cn-static.com data: blob: 'report-sample' 'nonce-51c1b3e8173d2fc5c71265d4938b2233-argus' 'strict-dynamic'; connect-src 'self' *.idouyinvod.com:* *.volcsiriusbd.com:* *.volcsirius.com:* *.tt.x.bsgslb.cn:* *.dy.zzcdnx.com:* *.qc.bsccdn.net:* *.smtcdns.com:* *.ugslb.com:* *.livehwc3.cn:* *.smtcdns.net:* *.bytefcdnrd.com:* *.ksyungslb.com:* *.ksyungslb2.com:* *.ourdvsss.com:* *.tbcache.com:* *.jomodns.com:* *.douyincdn.com:* *.ixigua.com:* *.bdxigualive.com:* *.pstatp.com:* *.douyinliving.com:* *.picovr.com:* *.huoshanlive.com:* *.ihuoshanlive.com:* *.volccdn.com:* *.bestv.com.cn:* *.bytefcdn.com:* *.douyinvod.com:* *.qnqcdn.net:* *.weilayun.com:* *.saxysec.com:* *.saxyit.com:* *.saxydc.com:* *.sjxysec.com:* *.sjxydc.com:* *.hiecheimaetu.com:* *.ppio.cloud:* *.vegslb.com:* *.xsj.wasu.tv:* *.zebracdn.com:* *.volctranscdn.com:* *.hizhecheng.com:* *.sealaly.net:* *.souajki.net:* *.souajki.com:* *.souajki.cn:* *.siomxity.cn:* *.siomxity.com:* *.siomxity.net:* *.uochly.cn:* *.smogfly.cloud:* *.smogfly.club:* *.iquaveizeeru.com:* *.ietheivaicai.com:* *.bytescm.com *.bytetos.com *.ibytedapm.com *.zijieapi.com *.snssdk.com *.bytedance.com *.bytedance.net *.pstatp.com *.bytednsdoc.com *.bytegoofy.com *.byted-static.com *.yhgfb-cn-static.com; frame-ancestors 'self'; upgrade-insecure-requests ;","count":1},{"content-security-policy-report-only":" default-src https: 'self' *.facebook.net *.googletagmanager.com *.bizibly.com *.doubleclick.net https:\/\/*.intercomcdn.com https:\/\/*.datadoghq-browser-agent.com; font-src 'self' https:\/\/*.intercomcdn.com *.fontawesome.com data:; base-uri 'none'; object-src data: 'unsafe-eval'; img-src 'self' data: * ; script-src https: 'self' 'unsafe-eval' 'unsafe-inline' http:\/\/*.google-analytics.com http:\/\/*.gstatic.com http:\/\/*.bing.com http:\/\/*.googleadservices.com http:\/\/*.hs-scripts.com http:\/\/*.bizible.com *.facebook.net *.googletagmanager.com http:\/\/*.fontawesome.com http:\/\/*.outbrain.com blob:; style-src https: 'self' *.fontawesome.com 'unsafe-inline'; report-to \/rest\/trackers\/csp;","count":1},{"content-security-policy-report-only":" font-src *.gstatic.com *.fontawesome.com * *.googleapis.com https:\/\/www.google.com https:\/\/www.gstatic.com maxcdn.bootstrapcdn.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors https:\/\/api.clerk.io https:\/\/cdn.clerk.io self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com *.sharethis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https:\/\/www.paypal.com https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.vimeo.com https:\/\/f.vimeocdn.com https:\/\/adyen.com https:\/\/checkoutshopper-test.adyen.com https:\/\/checkoutshopper-live.adyen.com https:\/\/pal-test.adyen.com https:\/\/pal-live.adyen.com https:\/\/amazon.com https:\/\/www.yotpo.com https:\/\/int-ecommerce.nexi.it *.kasanova.com * https:\/\/www.googletagmanager.com\/ www.google.com www.gstatic.com apis.google.com accounts.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.sharethis.com https:\/\/cdn.clerk.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com *.google.com *.gstatic.com https:\/\/www.vimeo.com https:\/\/f.vimeocdn.com *.googleapis.com *.ggpht https:\/\/ecommerce.nexi.it *.cloudfront.net *.kasanova.com * https:\/\/static.zdassets.com\/ http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https:\/\/www.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/rum.hlx.page *.sharethis.com https:\/\/api.clerk.io https:\/\/cdn.clerk.io *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.googleapis.com https:\/\/f.vimeocdn.com *.gstatic.com https:\/\/googleads.g.doubleclick.net *.clerk.io https:\/\/int-ecommerce.nexi.it *.kasanova.com https:\/\/assets.livestory.io https:\/\/js-agent.newrelic.com *.consentcdn.cookiebot.com\/ * http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ accounts.google.com cdn.jsdelivr.net *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com https:\/\/accounts.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sharethis.com https:\/\/api.clerk.io https:\/\/cdn.clerk.io *.googleapis.com * *.fontawesome.com *.google.com *.gstatic.com accounts.google.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https:\/\/static.zdassets.com\/ http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.sharethis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https:\/\/assets.livestory.io https:\/\/api.livestory.io https:\/\/www.google-analytics.com https:\/\/int-ecommerce.nexi.it *.kasanova.com *.googleapis.com * http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ http:\/\/dpm.demdex.net https:\/\/www.google.com https:\/\/www.gstatic.com accounts.google.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.gstatic.com t.elasticsuite.io *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" font-src *.googleapis.com *.gstatic.com 'unsafe-inline' data: https:\/\/www.googletagmanager.com maxcdn.bootstrapcdn.com apps.mypurecloud.com use.typekit.net *.silencershop.com *.klaviyo.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.credova.com *.authorize.net *.webeyez.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ www.google.com *.credova.com * *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com https:\/\/www.youtube.com https:\/\/c.paypal.com\/ https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ magefan.com cm.magefan.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.silencershop.com *.signifyd.com *.online-metrix.net\/ data.adxcel-ec2.com engine.gettopple.com trkn.us *.cloudfront.net *.klaviyo.com https:\/\/b.stats.paypal.com\/ https:\/\/slc.stats.paypal.com\/ https:\/\/c.paypal.com\/ https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.googleapis.com *.gstatic.com tagmanager.google.com https:\/\/www.googletagmanager.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.credova.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ cdn.jsdelivr.net *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.silencershop.com apps.usw2.pure.cloud *.signifyd.com delivery.gettopple.com *.online-metrix.net d14jnfavjicsbe.cloudfront.net sleeknotecustomerscripts.sleeknote.com sleeknotestaticcontent.sleeknote.com sec.webeyez.com widget.trustpilot.com *.klaviyo.com *.fontawesome.com *.google-analytics.com https:\/\/bam.nr-data.net https:\/\/bam-cell.nr-data.net https:\/\/c.paypal.com https:\/\/cdn-scripts.signifyd.com https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/www.googletagmanager.com tagmanager.google.com *.googleapis.com https:\/\/static.klaviyo.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com apps.mypurecloud.com use.typekit.net p.typekit.net *.silencershop.com *.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com *.credova.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ api.addressy.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.silencershop.com *.signifyd.com invitejs.trustpilot.com send.webeyez.com sec.webeyez.com *.klaviyo.com *.google-analytics.com https:\/\/bam.nr-data.net https:\/\/bam-cell.nr-data.net https:\/\/payments.sandbox.braintree-api.com\/ https:\/\/origin-analytics-sand.sandbox.braintree-api.com\/ https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/smartsolutions.report-uri.com\/r\/d\/csp\/reportOnly; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" font-src *.klevu.com *.ksearchnet.com *.fontawesome.com *.typekit.net https:\/\/widgets.trustedshops.com integrations.etrusted.com *.cloudflare.com *.twitter.com *.gstatic.com *.twimg.com *.trustedshops.com *.googleapis.com maxcdn.bootstrapcdn.com 'self' data: *.yotpo.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https:\/\/seo.mageplaza.com www.facebook.com *.copernica.com *.twitter.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com https:\/\/www.paypal.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com https:\/\/*.dpdconnect.nl *.dpdconnect.nl service2.loyaltyinabox.com *.pinterest.com www.facebook.com www.youtube.com view.publitas.com www.google.com www.google.nl www.google.de *.google.com maps.google.com chat.babypark.nl *.doubleclick.net td.doubleclick.net googleads.g.doubleclick.net widget.trustpilot.com *.cookiebot.com *.cookiebot.eu chatwidget-prod.web.app www.googletagmanager.com sst.babypark.nl sst.babypark.de sst.babydeals.be sst.baby-dump.nl folders.baby-dump.nl *.twitter.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com https:\/\/portal.payconiq.com https:\/\/static.buckaroo.nl https:\/\/www.paypalobjects.com *.klevu.com *.ksearchnet.com www.babypark.nl www.babypark.de www.babydeals.be dehoevebuitenleven.nl m2.babypark.mavendev.com m2.babypark-de.mavendev.com www.ikenik.nl m2.ikenik.mavendev.com m2.babydump.mavendev.com m2.babydump-de.mavendev.com www.google.com www.google.nl www.google.de www.google.com.ua www.facebook.com ct.pinterest.com www.googletagmanager.com www.zenaps.com www.awin1.com static.zdassets.com *.bing.com *.bing.net www.thuiswinkel.org i.ytimg.com img.youtube.com blob: lantern.roeye.com *.clarity.ms *.cookiebot.com *.cookiebot.eu integrations.etrusted.com stats.g.doubleclick.net sst.babypark.nl sst.babypark.de sst.babydeals.be sst.baby-dump.nl *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.google.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com https:\/\/widgets.trustedshops.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https:\/\/static.buckaroo.nl https:\/\/checkout.buckaroo.nl https:\/\/testcheckout.buckaroo.nl https:\/\/buckaroo.nl https:\/\/www.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com https:\/\/*.dpdconnect.nl js.klevu.com *.ksearchnet.com *.avada.io www.googletagmanager.com checkout.buckaroo.nl *.clarity.ms lantern.roeyecdn.com widgets.trustedshops.com web-sdk.smartlook.com www.dwin1.com s.pinimg.com connect.facebook.net static.buckaroo.nl view.publitas.com api.360productviewer.com googleads.g.doubleclick.net bat.bing.com bat.bing.net static.zdassets.com js-agent.newrelic.com *.livechatinc.com bam.eu01.nr-data.net chat.babypark.nl widget.trustpilot.com *.pinterest.com *.hotjar.com *.hotjar.io *.cookiebot.com *.cookiebot.eu integrations.etrusted.com chatwidget-prod.web.app *.cloudflare.com *.google.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com twitter.com platform.twitter.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com maps.googleapis.com https:\/\/widgets.trustedshops.com *.yotpo.com sst.babypark.nl https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com https:\/\/checkout.buckaroo.nl https:\/\/testcheckout.buckaroo.nl cdn.dnky.co webchat.dotdigital.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.typekit.net checkout.buckaroo.nl integrations.etrusted.com chatwidget-css.web.app *.cloudflare.com *.googleapis.com *.google.com *.twitter.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu maxcdn.bootstrapcdn.com unsafe-inline https:\/\/widgets.trustedshops.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src static.zdassets.com integrations.etrusted.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com wss:\/\/websocketservice-externalapi.prod.buckaroo.io https:\/\/static.buckaroo.nl wss:\/\/websockets.buckaroo.io\/ https:\/\/checkout.buckaroo.nl https:\/\/testcheckout.buckaroo.nl https:\/\/applepay.buckaroo.io *.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.klevu.com *.ksearchnet.com *.clarity.ms *.pinterest.com *.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net manager.eu.smartlook.cloud ekr.zdassets.com wss:\/\/widget-mediator.zopim.com api.360productviewer.com www.facebook.com livechat.fabulor.eu bam.eu01.nr-data.net region1.analytics.google.com *.google.com *.hotjar.com *.hotjar.io analytics.google.com bat.bing.com bat.bing.net *.cookiebot.com *.cookiebot.eu *.copernica.com integrations.etrusted.com api.ipify.org *.cloudflare.com *.twitter.com *.twimg.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.google-analytics.com *.trustedshops.com *.etrusted.com *.yotpo.com sst.babypark.nl https: 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.google.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/report-uri.com\/r\/d\/csp\/reportOnly; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self' blob:  https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; frame-src 'self' https:\/\/*.noxiaohao.com https:\/\/telegram.org https:\/\/*.bitget.com https:\/\/accounts.google.com https:\/\/oauth.telegram.org https:\/\/sgtm.btsgtm.com ; script-src 'self' 'nonce-th6FNVHu4Ob9LR+1CMdSjQ==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6\/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh\/v3RIRuG3kMikr5iha+7P\/0TN\/GNA=' https:\/\/*.noxiaohao.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com https:\/\/accounts.google.com https:\/\/www.googletagmanager.com https:\/\/fonts.googleapis.com https:\/\/play.google.com https:\/\/analytics.google.com https:\/\/fonts.gstatic.com https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/*.geetest.com https:\/\/*.geevisit.com https:\/\/sgtm.btsgtm.com; connect-src 'self' wss: https:\/\/stats.g.doubleclick.net https:\/\/analytics.google.com https:\/\/www.google.com wss:\/\/stream.bitget.cloud https:\/\/*.noxiaohao.com wss:\/\/*.noxiaohao.com wss:\/\/*.bitget.com https:\/\/www.turingfraud.net https:\/\/play.google.com https:\/\/accounts.google.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/sgtm.btsgtm.com ; worker-src 'self' blob:; img-src 'self' data: blob: https:\/\/www.googletagmanager.com https:\/\/img.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/img.bitgetimg.com https:\/\/img.gurenla.com https:\/\/*.bgbstatic.com https:\/\/lh3.googleusercontent.com https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/static-web.jjdsn.vip https:\/\/cdn.bitkeep.vip https:\/\/www.google.co.jp https:\/\/bin.wangsustatic.com https:\/\/sgtm.btsgtm.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/accounts.google.com https:\/\/fonts.googleapis.com https:\/\/static.bgbstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; font-src 'self' data: https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/fonts.gstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri \/v1\/buried\/log\/cspSecurity \/v1\/monitor\/csp?appId=d4b6df7d;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com https:\/\/mc.yandex.ru https:\/\/api-maps.yandex.ru; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; frame-src 'self' https:\/\/www.google.com https:\/\/www.youtube.com https:\/\/rutube.ru https:\/\/mc.yandex.ru https:\/\/open.ivideon.com https:\/\/peertube.wirenboard.com https:\/\/www.1tv.ru; connect-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleadservices.com *.googleapis.com static.quiq-cdn.com *.fontawesome.com *.rezync.com *.nothingbundtcakes.com tags-prod.nothingbundtcakes.com *.toasttab.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.google.com *.braintreegateway.com *.paypal.com google.com www.googletagmanager.com *.rezync.com static.quiq-cdn.com *.quiq-api.com *.googleadservices.com *.doubleclick.net *.vimeo.com *.facebook.com *.nothingbundtcakes.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleadservices.com *.google.com *.google.com.ca *.google.com.co *.googleapis.com *.vimeo.com *.cdn-apple.com *.cookielaw.org *.usablenet.com *.usablenet.dev *.doubleclick.net *.contentsquare.net *.nothingbundtcakes.com *.pmg.com *.pinimg.com *.adroll.com *.facebook.net *.bing.com *.redditstatic.com *.amazonaws.com *.cognitivlabs.com *.reddit.com *.facebook.com *.adnxs.com *.magentosite.cloud *.monetate.net *.rfihub.com *.eyeota.net *.rezync.com *.yimg.com *.boomtrain.com *.linkedin.com *.yahoo.com *.pubmatic.com *.openx.net *.media.net *.rtactivate.com *.casalemedia.com *.rlcdn.com *.addthis.com *.tremorhub.com *.bidswitch.net *.adsrvr.org *.prf.hn prf.hn *.taggrs.io taggrs.io *.ml314.com static.quiq-cdn.com *.quiq-api.com ml314.com *.tapad.com tapad.com tags-prod.nothingbundtcakes.com *.toasttab.com images.unsplash.com plus.unsplash.com *.cloudinary.com *.cloudfront.net *.imgix.net cdn.bfldr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.gstatic.com https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page *.googleadservices.com *.googleapis.com *.cookielaw.org *.usablenet.com static.quiq-cdn.com *.quiq-api.com *.usablenet.dev *.contentsquare.net *.nothingbundtcakes.com *.pmg.com *.pinimg.com *.adroll.com *.facebook.net *.bing.com *.redditstatic.com *.tiktok.com *.bttrack.com *.adsrvr.org *.pinterest.com *.facebook.com *.magentosite.cloud *.monetate.net *.appboycdn.com *.rfihub.com *.everesttech.net *.eyeota.net *.rezync.com *.yimg.com *.boomtrain.com *.yahoo.com *.kargo.com *.licdn.com *.inpwrd.net bttrack.com *.adnxs.com *.rfihub.net cdn.bttrack.com tags-prod.nothingbundtcakes.com *.toasttab.com https:\/\/gateway.moneris.com https:\/\/gatewayt.moneris.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.googleadservices.com *.googleapis.com *.fontawesome.com static.quiq-cdn.com *.usablenet.com *.usablenet.dev *.rezync.com *.nothingbundtcakes.com tags-prod.nothingbundtcakes.com *.toasttab.com https:\/\/gateway.moneris.com https:\/\/gatewayt.moneris.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleadservices.com *.googleapis.com *.vimeo.com static.quiq-cdn.com *.cdn-apple.com *.cookielaw.org *.onetrust.com *.usablenet.com *.usablenet.dev *.contentsquare.net *.doubleclick.net *.nothingbundtcakes.com *.pmg.com *.pinimg.com *.adroll.com *.facebook.net *.bing.com *.redditstatic.com *.tiktok.com *.bttrack.com *.adsrvr.org *.amazonaws.com *.cognitivlabs.com *.reddit.com *.pinterest.com *.facebook.com *.adnxs.com *.gstatic.com *.rlcdn.com *.magentosite.cloud *.monetate.net *.everesttech.net *.eyeota.net *.rezync.com *.yimg.com *.boomtrain.com *.yahoo.com *.kargo.com *.linkedin.com *.quiq-api.com tags-prod.nothingbundtcakes.com *.toasttab.com images.unsplash.com plus.unsplash.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" report-uri \/csp-log.php; report-to csp-log-endpoint; default-src 'none'; img-src 'self' data: https:\/\/werbung.leipzig.de\/ https:\/\/data.leipzig.de\/ https:\/\/static.leipzig.de\/ https:\/\/www.gstatic.com\/images\/; script-src 'self' 'unsafe-inline' https:\/\/cdn.captchafox.com\/ https:\/\/www.leipzig.de\/ https:\/\/static.leipzig.de\/ https:\/\/werbung.leipzig.de\/delivery\/ https:\/\/vrweb15.linguatec.org\/VoiceReaderWeb15User\/player20\/scripts\/ https:\/\/dev.lehst.de\/ https:\/\/static.conword.io\/; style-src 'self' 'unsafe-inline' https:\/\/cdn.captchafox.com\/ https:\/\/static.leipzig.de\/ https:\/\/vrweb15.linguatec.org\/VoiceReaderWeb15User\/player\/styles\/ https:\/\/dev.lehst.de\/; font-src 'self' https:\/\/static.leipzig.de\/ https:\/\/fonts.gstatic.com\/; media-src 'self' https:\/\/static.leipzig.de\/ https:\/\/vrweb15.linguatec.org\/VoiceReaderWeb15User\/player20\/scripts\/; connect-src 'self' https:\/\/api.captchafox.com\/ https:\/\/cdn.captchafox.com\/ https:\/\/vrweb15.linguatec.org\/VoiceReaderWeb15WebService\/ https:\/\/dev.lehst.de\/ https:\/\/www.leipzig.de\/; frame-src https:\/\/www.youtube-nocookie.com\/embed\/ https:\/\/tnv.leipzig.de https:\/\/s-leipzig.maps.arcgis.com https:\/\/geo.leipzig.de https:\/\/geoportal.leipzig.de https:\/\/www.blitzvideoserver.de https:\/\/tportal.toubiz.de https:\/\/kwis-web.leipzig.de; frame-ancestors 'self' https:\/\/*.leipzig.de\/;","count":1},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval'; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=pMeHfL8asmqYsq9BqwpB2VEck9Pf_NGspLkSaMN4Jk4-1788487531.3393257-1.0.1.1-G_J_f97SL4h2ZOVfP4j8tODu_BXUSxbsuIZfYRrku85JQk4rS5Z3qjFblPr66sahTpUcHH5eFMH1JZfwJxBYd4gF77GQMGFtGfoiEonVL.4CTx7_E5vKLcQGlM3HxXI7KGZ27FMPVNA.bhRBsvkhL6XHrVG1BVZZglsHKE4q1Mg; report-to cf-csp-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self' blob:  https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/*.gurenla.com  https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; frame-src 'self' https:\/\/*.noxiaohao.com https:\/\/telegram.org https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/accounts.google.com https:\/\/oauth.telegram.org https:\/\/sgtm.btsgtm.com  https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; script-src 'self' 'nonce-o9NvAUzyIFs8QOA6FvPUvQ==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6\/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh\/v3RIRuG3kMikr5iha+7P\/0TN\/GNA=' https:\/\/*.noxiaohao.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/*.gurenla.com https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/accounts.google.com https:\/\/www.googletagmanager.com https:\/\/fonts.googleapis.com https:\/\/play.google.com https:\/\/analytics.google.com https:\/\/fonts.gstatic.com https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/*.geetest.com https:\/\/*.geevisit.com https:\/\/sgtm.btsgtm.com https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; connect-src 'self' https:\/\/stats.g.doubleclick.net https:\/\/analytics.google.com https:\/\/*.noxiaohao.com wss:\/\/*.noxiaohao.com wss: https:\/\/www.turingfraud.net https:\/\/play.google.com https:\/\/accounts.google.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/*.gurenla.com https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/static.geetest.com https:\/\/static.geevisit.com wss:\/\/stream.bitget.cloud https:\/\/www.google.com https:\/\/sgtm.btsgtm.com  https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; worker-src 'self' blob:; img-src 'self' data: blob: https:\/\/img.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/img.bitgetimg.com https:\/\/img.gurenla.com https:\/\/*.bgbstatic.com https:\/\/lh3.googleusercontent.com https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/static-web.jjdsn.vip https:\/\/cdn.bitkeep.vip https:\/\/www.google.co.jp https:\/\/bin.wangsustatic.com https:\/\/sgtm.btsgtm.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net  https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; style-src 'self' 'unsafe-inline' https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/accounts.google.com https:\/\/fonts.googleapis.com https:\/\/static.bgbstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/*.gurenla.com  https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; font-src 'self' data: https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/fonts.gstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/*.gurenla.com  https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri \/v1\/buried\/log\/cspSecurity \/v1\/monitor\/csp?appId=d4b6df7d;","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval'; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=BrA8TIrr4VONaOGJhf_34lBMz1SdKGs5kGHxlLg_2Sw-1788488586.1594422-1.0.1.1-Ui.EZKF2qaBYH3bEJdtxC4yCHlPYfFSFqTaRR1wA3ZrI5eC6n4QXqWEfui9qu78CuEXORPjF8wuSVBBA8yZl0daKbevZ.V99JfpsAYMCrQKw1K5Zq3wPuEc3Yhn6gjXa61tNoivHCj3JWN6t3zRgza1jFOf_6PvEIzyrI6hSp1fKIRQ5NHTX0LegYWVU_iqc; report-to cf-rwaiofeeiqxnzzlk","count":1},{"content-security-policy-report-only":" report-uri https:\/\/endpoint2.collection.us2.sumologic.com\/receiver\/v1\/http\/ZaVnC4dhaV3VOE24ov0vchYgO3uoxKHdePxnKoFiICkeq1Vt2reRBEg4zYmpS2XL1UJS-0Ova9gUiV2PUH3EvuXcIOdrBPvAUgkIP-ZRbRMryNUY6YGqAQ== ; block-all-mixed-content ; default-src 'report-sample' 'self' https:\/\/*.videoask.com https:\/\/*.videoask.live ; script-src 'report-sample' 'self' 'unsafe-eval' https:\/\/*.videoask.com https:\/\/*.videoask.live 'unsafe-inline' https:\/\/js.stripe.com https:\/\/www.dropbox.com https:\/\/*.calendly.com https:\/\/*.oncehub.com https:\/\/cdn.amplitude.com https:\/\/cdn.cookielaw.org https:\/\/cdn.rollbar.com https:\/\/cdn.segment.com https:\/\/connect.facebook.net https:\/\/fast.wistia.com https:\/\/script.crazyegg.com https:\/\/snap.licdn.com https:\/\/snippet.growsumo.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/www.googleadservices.com https:\/\/cdn.optimizely.com https:\/\/js.partnerstack.com https:\/\/edge.fullstory.com https:\/\/a.quora.com https:\/\/static.ads-twitter.com https:\/\/analytics.tiktok.com https:\/\/tags.srv.stackadapt.com ; base-uri 'report-sample' 'self' ; img-src 'report-sample' 'self' data: blob: android-webview-video-poster: https: ; media-src 'report-sample' 'self' blob: data: https: ; connect-src 'report-sample' 'self' blob: https:\/\/*.videoask.com https:\/\/*.videoask.live wss:\/\/*.videoask.live wss:\/\/*.videoask.com https:\/\/videoask-media-dev.s3-accelerate.amazonaws.com https:\/\/videoask-media-prod.s3-accelerate.amazonaws.com https:\/\/videoask-uploads-dev.s3-accelerate.amazonaws.com https:\/\/videoask-uploads-prod.s3-accelerate.amazonaws.com https:\/\/videoask-uploads-dev.s3.amazonaws.com https:\/\/videoask-uploads-prod.s3.amazonaws.com https:\/\/videoask.eu.auth0.com https:\/\/dev-videoask.eu.auth0.com https:\/\/*.launchdarkly.com https:\/\/*.pexels.com https:\/\/*.wistia.com https:\/\/embedwistia-a.akamaihd.net https:\/\/api.rollbar.com https:\/\/api.segment.io https:\/\/api.amplitude.com https:\/\/*.g.doubleclick.net https:\/\/www.google-analytics.com https:\/\/*.crazyegg.com https:\/\/p.adsymptotic.com https:\/\/www.facebook.com https:\/\/track.segmetrics.io https:\/\/*.google.com https:\/\/rs.fullstory.com https:\/\/cdn.segment.com https:\/\/edge.fullstory.com https:\/\/js.partnerstack.com https:\/\/grsm.io https:\/\/cdn.cookielaw.org https:\/\/*.onetrust.com https:\/\/*.contentful.com https:\/\/videoask.zendesk.com https:\/\/*.optimizely.com https:\/\/region1.google-analytics.com https:\/\/analytics.tiktok.com https:\/\/partnerlinks.io ; style-src 'report-sample' 'self' https:\/\/font.typeform.com 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/tagmanager.google.com https:\/\/cdn.cookielaw.org https:\/\/cdn.quilljs.com ; font-src 'report-sample' 'self' data: https:\/\/font.typeform.com https:\/\/fonts.gstatic.com ; frame-src 'report-sample' 'self' https:\/\/*.videoask.com https:\/\/*.videoask.live https:\/\/calendly.com https:\/\/app.acuityscheduling.com https:\/\/*.oncehub.com https:\/\/js.stripe.com https:\/\/videoask.eu.auth0.com https:\/\/dev-videoask.eu.auth0.com https:\/\/*.wistia.com https:\/\/www.facebook.com https:\/\/*.doubleclick.net https:\/\/6g4qf7txd07m.statuspage.io https:\/\/*.optimizely.com ; frame-ancestors * ; object-src 'none' ;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-Qds02dESYfZw8l5NV-Mpag' 'strict-dynamic' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/recaptcha.google.com https:\/\/*.vwo.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.trustarc.com https:\/\/bat.bing.com https:\/\/googleads.g.doubleclick.net https:\/\/js.hs-analytics.net https:\/\/js.hs-banner.com https:\/\/js.hs-scripts.com https:\/\/js.hscollectedforms.net https:\/\/js.usemessages.com https:\/\/*.g2crowd.com; style-src 'self' 'unsafe-inline' https:\/\/*.vwo.com https:\/\/*.visualwebsiteoptimizer.com; font-src 'self' data: https:\/\/*.trustarc.com; img-src 'self' data: blob: https:\/\/*.mettl.pro https:\/\/*.mettl.xyz https:\/\/*.mettl.com https:\/\/*.mercermettl.com https:\/\/*.mercermettl.eu https:\/\/img.youtube.com https:\/\/i.ytimg.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.google.co.in https:\/\/www.gstatic.com https:\/\/f.hubspotusercontent10.net https:\/\/track.hubspot.com https:\/\/*.vwo.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.vwo.io https:\/\/ade.googlesyndication.com https:\/\/forms.hsforms.com https:\/\/*.trustarc.com https:\/\/*.clarity.ms https:\/\/*.bing.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.google.co.in https:\/\/pagead2.googlesyndication.com https:\/\/*.vwo.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/api.hsforms.com https:\/\/api.hubspot.com https:\/\/forms.hubspot.com https:\/\/forms.hscollectedforms.net https:\/\/*.clarity.ms https:\/\/*.trustarc.com https:\/\/bat.bing.com https:\/\/ad.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/*.g2.com https:\/\/*.g2crowd.com https:\/\/recaptcha.net https:\/\/static.hsappstatic.net; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.google.com https:\/\/*.trustarc.com https:\/\/*.doubleclick.net https:\/\/recaptcha.net https:\/\/app.hubspot.com https:\/\/app.wingify.com https:\/\/*.vwo.com https:\/\/*.visualwebsiteoptimizer.com; worker-src 'self' blob:; media-src 'self' blob: https:\/\/*.mettl.com https:\/\/*.mettl.pro https:\/\/*.mettl.xyz https:\/\/*.mercermettl.com https:\/\/*.mercermettl.eu; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/www.google.com; frame-ancestors 'self' https:\/\/app.vwo.com https:\/\/app.wingify.com; report-uri https:\/\/logs.mettl.com\/csp","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.modo.com.ar fonts.googleapis.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.gocuotas.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.mercadopago.com.ar mercadopago.com.ar *.getblue.io *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/mobbex.com *.gocuotas.com www.facebook.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.google.com.ar *.google.es *.google.com.uy *.mercadopago.com.ar *.modo.com.ar *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com *.gocuotas.com blob: *.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.woowup.com *.hotjar.com *.pageimprove.io pageimprove.io *.getblue.io *.adidas.com *.modo.com.ar *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com *.gocuotas.com cdn.ampproject.org www.gstatic.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms unpkg.com *.doubleclick.net https:\/\/merchants.playdigital.com.ar\/ https:\/\/merchants.preprod.playdigital.com.ar\/ https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com www.gstatic.com *.tagmanager.google.com *.googletagmanager.com https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.pangle-ads.com *.modo.com.ar *.google.com.ar *.google.com *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com *.gocuotas.com cdn.ampproject.org www.googleapis.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.clarity.ms *.doubleclick.net *.run.app https:\/\/merchants.playdigital.com.ar\/ https:\/\/merchants.preprod.playdigital.com.ar\/ https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" font-src *.typekit.net *.gstatic.com fonts.gstatic.com use.typekit.net *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.trustedshops.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com api.razorpay.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com p.typekit.net validator.swagger.io www.apptrian.com *.facebook.com *.cloudflare.com *.cdninstagram.com *.avada.io cdn.razorpay.com https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.commerce-payment-services.com *.typekit.net google.com *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.apptrian.com *.avada.io *.elfsight.com *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.fontawesome.com *.facebook.net *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.paypal.com *.paypalobjects.com *.vimeo.com checkout.razorpay.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.elfsight.com *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.fontawesome.com *.bootstrapcdn.com https:\/\/fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com google.com *.google.com *.adobe.io performance.typekit.net *.sentry.io www.apptrian.com https:\/\/get.geojs.io *.avada.io lumberjack.razorpay.com lumberjack-metrics.razorpay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com *.googleapis.com *.shopogen.ro *.gigya.com *.carrefour.ro carrefour.ro *.google.com www.googletagmanager.com *.googletagmanager.com facebook.com *.prefixbox.com *.tiktok.com *.jsdelivr.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.facebook.com *.instagram.com *.gigya.com *.carrefour.ro carrefour.ro facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.googletagmanager.com *.doubleclick.net *.facebook.com *.dotdigital-pages.com *.dotdigital.com *.cookiebot.com *.google.com *.gigya.com *.carrefour.ro carrefour.ro *.krxd.net *.hotjar.com *.jsdelivr.net *.btdirect.ro *.tiktok.com *.prefixbox.com facebook.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com 'self' data: *.googletagmanager.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.gstatic.com blob: *.3lift.com *.adnxs.com *.adsrvr.org *.bluekai.com *.casalemedia.com *.ck-ie.com *.contextweb.com *.cookielaw.org *.dotomi.com *.eyeota.net *.flavedo.io *.flix360.com *.flix360.io *.flixcar.com *.google.ro *.google-analytics.com *.googleadservices.com *.kargo.com *.lijit.com *.media.net *.mediaplex.com *.openx.net *.paypal.com *.pubmatic.com *.rlcdn.com *.rubiconproject.com servedbyadbutler.com *.sharethrough.com *.shopogen.ro *.stickyadstv.com *.streamtheworld.com *.tremorhub.com *.yahoo.com *.gigya.com 'unsafe-inline' data: *.carrefour.ro carrefour.ro facebook.com *.krxd.net *.google.com www.googletagmanager.com *.tiktok.com *.prefixbox.com *.jsdelivr.net *.newrelic.com bam.eu01.nr-data.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.cloudflare.com *.cookiebot.com *.dotomi.com *.flix360.com *.flix360.io *.flixcar.com *.flixfacts.com *.googleapis.com *.instagram.com *.jsdelivr.net *.newrelic.com *.paypal.com *.pingdom.net servedbyadbutler.com *.shopogen.ro *.gigya.com *.carrefour.ro carrefour.ro chimpstatic.com www.googletagmanager.com *.krxd.net *.prefixbox.com *.tiktok.com *.cookielaw.org *.hotjar.com facebook.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.fontawesome.com *.shopogen.ro *.twitter.com *.typekit.net *.gigya.com 'unsafe-inline' data: *.carrefour.ro carrefour.ro *.jsdelivr.net *.prefixbox.com *.tiktok.com maxcdn.bootstrapcdn.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.citrusad.com *.doubleclick.net *.flix360.io *.flixcar.com *.googleapis.com *.googlesyndication.com *.instagram.com *.onetrust.com *.paypal.com *.pingdom.net *.shopogen.ro *.gigya.com *.carrefour.ro carrefour.ro *.cookielaw.org *.krxd.net *.hotjar.com *.jsdelivr.net *.prefixbox.com *.newrelic.com bam.eu01.nr-data.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" img-src https: data:; connect-src https:; report-uri https:\/\/csp-reports.yesware.com\/new","count":1},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval'; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=KB.lBtAv.4wHT9EYz22_VMoyQTYUj1pN5HPja8FhLq8-1788491642.4281662-1.0.1.1-y1y0TCVA41o6Ie1lJE6WzxLqVZ0eOeweN4Zwj0vMVeISVId8GHpF1eslujHp3TNHd_fR7ty_OssQWGAivWZXqZK0.REAZtTOTtC7ICda7ehGKC2xIQTNOEn7iH0zeU2KAl4mdw02XZf_BiLHuYIYJ1FKvmYOC.qBEVw3afmXEcE; report-to cf-csp-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self' blob:  https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; frame-src 'self' https:\/\/*.noxiaohao.com https:\/\/telegram.org https:\/\/*.bitget.com https:\/\/accounts.google.com https:\/\/oauth.telegram.org https:\/\/sgtm.btsgtm.com ; script-src 'self' 'nonce-QHXAxWgpP3+Okj4Vepxz\/A==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6\/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh\/v3RIRuG3kMikr5iha+7P\/0TN\/GNA=' https:\/\/*.noxiaohao.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com https:\/\/accounts.google.com https:\/\/www.googletagmanager.com https:\/\/fonts.googleapis.com https:\/\/play.google.com https:\/\/analytics.google.com https:\/\/fonts.gstatic.com https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/*.geetest.com https:\/\/*.geevisit.com https:\/\/sgtm.btsgtm.com; connect-src 'self' wss: https:\/\/stats.g.doubleclick.net https:\/\/analytics.google.com https:\/\/www.google.com wss:\/\/stream.bitget.cloud https:\/\/*.noxiaohao.com wss:\/\/*.noxiaohao.com wss:\/\/*.bitget.com https:\/\/www.turingfraud.net https:\/\/play.google.com https:\/\/accounts.google.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/sgtm.btsgtm.com ; worker-src 'self' blob:; img-src 'self' data: blob: https:\/\/www.googletagmanager.com https:\/\/img.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/img.bitgetimg.com https:\/\/img.gurenla.com https:\/\/*.bgbstatic.com https:\/\/lh3.googleusercontent.com https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/static-web.jjdsn.vip https:\/\/cdn.bitkeep.vip https:\/\/www.google.co.jp https:\/\/bin.wangsustatic.com https:\/\/sgtm.btsgtm.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/accounts.google.com https:\/\/fonts.googleapis.com https:\/\/static.bgbstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; font-src 'self' data: https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/fonts.gstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri \/v1\/buried\/log\/cspSecurity \/v1\/monitor\/csp?appId=d4b6df7d;","count":1},{"content-security-policy-report-only":" default-src 'self' blob:; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:\/\/*.furnishedfinder.com https:\/\/*.facebook.com https:\/\/www.facebook.com https:\/\/*.steadilypartner.com https:\/\/*.steadily.com https:\/\/steadily.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:; script-src-attr 'unsafe-inline'; connect-src 'self' blob: data: https: wss:; img-src * data: blob:; font-src 'self' data: https:; frame-src 'self' blob: https:; style-src 'self' 'unsafe-inline' blob: https:; style-src-attr 'self' 'unsafe-inline'; worker-src 'self' blob:; child-src 'self' blob:; media-src 'self' data: blob: https:; object-src 'none'; manifest-src 'self' https:; report-uri https:\/\/o4507018827071488.ingest.us.sentry.io\/api\/4510343205421056\/security\/?sentry_key=1faef7d9a5760350ce11e10419c510e3&sentry_release=v0.1.12; report-to csp-endpoint-v2","count":1},{"content-security-policy-report-only":" default-src https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com; script-src https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com 'unsafe-inline' 'unsafe-eval'; style-src https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com 'unsafe-inline'; report-uri \/1\/batch\/2\/OE\/mid=AF2M0KC94RCEA:sid=144-7288172-4972035:rid=BNSHZVCX381R9T39TVGQ:sn=www.acx.com","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-IcP_mdICckEdLrH0mrRmUA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'none'; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=R1m52bIrQXZW_V5Js7orN1f0lsQrqB8fQQYV7Ud89sw-1788497016.266823-1.0.1.1-uiNDMQu.utgHyI9IKju4hgbINNoKsDjLUQAorC7X3Njw7qS7KRpPRxLlmWttwYR_vehm4TbyVdSajStEKtnE4IctUfBHOZW_o2QLq.KRXbA.gk2y0dvwOIuD_JKrON8fqpGdmbQW9I9XKnKkFtDp1vSMaxxNVrk1FxJoO4DuvzDF.jjQR88bypXioPFVZ5q0d48Kv4M95l05HQ4nRN4Mkg; report-to cf-iplpdvjfgwfmnodt","count":1},{"content-security-policy-report-only":" base-uri 'self';connect-src 'self' https:\/\/www.google-analytics.com https:\/\/*.googleapis.com https:\/\/api.rudderlabs.com https:\/\/hosted.rudderlabs.com https:\/\/rudderstack.taskade.cloud https:\/\/api.stripe.com https:\/\/checkout.stripe.com https:\/\/sentry.io wss: https:\/\/cn2bi8ujy8.execute-api.us-east-1.amazonaws.com https:\/\/taskade-files.s3.us-east-1.amazonaws.com https:\/\/files.taskade.com https:\/\/vimeo.com https:\/\/fast.wistia.com https:\/\/*.loom.com https:\/\/www2.profitwell.com https:\/\/api.canny.io https:\/\/pa.taskade.com https:\/\/companion.taskade.com;default-src 'self';form-action 'self';media-src 'self' https:\/\/files.taskade.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/ajax.cloudflare.com https:\/\/challenges.cloudflare.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/checkout.stripe.com https:\/\/js.stripe.com https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/fast.wistia.com https:\/\/r.wdfl.co https:\/\/public.profitwell.com https:\/\/cdn.firstpromoter.com https:\/\/canny.io https:\/\/pa.taskade.com https:\/\/unicorn.taskade.workers.dev https:\/\/static.cloudflareinsights.com;object-src 'none';img-src 'self' data: https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.stripe.com https:\/\/files.taskade.com https:\/\/unpkg.com https:\/\/i.ytimg.com https:\/\/*.sndcdn.com https:\/\/i.vimeocdn.com https:\/\/*.wistia.com https:\/\/cdn.loom.com https:\/\/*.figma.com https:\/\/images.typeform.com https:\/\/*.whimsical.com https:\/\/companion.taskade.com;style-src 'self' 'unsafe-inline' https:\/\/cdnjs.cloudflare.com https:\/\/fonts.googleapis.com;font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com;frame-src 'self' https:\/\/*.taskade.app https:\/\/checkout.stripe.com https:\/\/hooks.stripe.com https:\/\/js.stripe.com https:\/\/call.taskade.com https:\/\/docs.taskade.com https:\/\/www.taskade.com https:\/\/*.youtube.com https:\/\/*.soundcloud.com https:\/\/player.vimeo.com https:\/\/*.loom.com https:\/\/*.figma.com https:\/\/*.invisionapp.com https:\/\/*.typeform.com https:\/\/*.whimsical.com;report-uri \/webhooks\/csp-report;report-to \/webhooks\/csp-report;frame-ancestors 'self' https:\/\/www.taskade.com","count":1},{"content-security-policy-report-only":" object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-gcbvDcGbvHlunx1Gj_s57Q' 'unsafe-inline' 'unsafe-eval' https:\/\/*.msauth.net https:\/\/*.msftauth.net https:\/\/*.msftauthimages.net https:\/\/*.msauthimages.net https:\/\/*.msidentity.com https:\/\/*.microsoftonline-p.com https:\/\/*.microsoftazuread-sso.com https:\/\/*.azureedge.net https:\/\/*.outlook.com https:\/\/*.office.com https:\/\/*.office365.com https:\/\/*.microsoft.com https:\/\/*.bing.com 'report-sample'; report-uri https:\/\/csp.microsoft.com\/report\/ESTS-UX-All","count":1},{"content-security-policy-report-only":" object-src * ; report-uri https:\/\/www.sunlife.ca\/slfreporting\/reportUri","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; img-src 'self' data: blob: https:; connect-src 'self' https:; worker-src 'self' blob:; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/player.vimeo.com https:\/\/www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.google.com\/ https:\/\/cse.google.com\/ https:\/\/www.eventbrite.com\/ https:\/\/player.vimeo.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/www.gstatic.com https:\/\/fonts.googleapis.com\/ https:\/\/cdn.curator.io\/ https:\/\/www.juicer.io\/ https:\/\/www.google-analytics.com\/ https:\/\/js.hsforms.net\/ https:\/\/cdn.cookielaw.org\/ https:\/\/js.adsrvr.org\/ https:\/\/connect.facebook.net\/ https:\/\/analytics.tiktok.com\/ https:\/\/snap.licdn.com\/ cdnjs.cloudflare.com https:\/\/static.addtoany.com https:\/\/unpkg.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https:\/\/www.google.com\/ https:\/\/cse.google.com\/ https:\/\/www.eventbrite.com\/ https:\/\/player.vimeo.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/www.gstatic.com https:\/\/fonts.googleapis.com\/ https:\/\/cdn.curator.io\/ https:\/\/www.juicer.io\/ https:\/\/www.google-analytics.com\/ https:\/\/js.hsforms.net\/ https:\/\/cdn.cookielaw.org\/ https:\/\/js.adsrvr.org\/ https:\/\/connect.facebook.net\/ https:\/\/analytics.tiktok.com\/ https:\/\/snap.licdn.com\/ cdnjs.cloudflare.com https:\/\/static.addtoany.com https:\/\/unpkg.com; style-src 'self' 'unsafe-inline' https:\/\/www.google.com\/ https:\/\/cse.google.com\/ https:\/\/www.eventbrite.com\/ https:\/\/player.vimeo.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/www.gstatic.com https:\/\/fonts.googleapis.com\/ https:\/\/cdn.curator.io\/ https:\/\/www.juicer.io\/ https:\/\/www.google-analytics.com\/ https:\/\/js.hsforms.net\/ https:\/\/cdn.cookielaw.org\/ https:\/\/js.adsrvr.org\/ https:\/\/connect.facebook.net\/ https:\/\/analytics.tiktok.com\/ https:\/\/snap.licdn.com\/ cdnjs.cloudflare.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self' https:\/\/www.google.com\/ https:\/\/cse.google.com\/ https:\/\/www.eventbrite.com\/ https:\/\/player.vimeo.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/www.gstatic.com https:\/\/fonts.googleapis.com\/ https:\/\/cdn.curator.io\/ https:\/\/www.juicer.io\/ https:\/\/www.google-analytics.com\/ https:\/\/js.hsforms.net\/ https:\/\/cdn.cookielaw.org\/ https:\/\/js.adsrvr.org\/ https:\/\/connect.facebook.net\/ https:\/\/analytics.tiktok.com\/ https:\/\/snap.licdn.com\/","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net https:\/\/*.gstatic.com *.fontawesome.com fonts.googleapis.com *.oct8ne.com https:\/\/cdnjs.cloudflare.com *.gstatic.com https:\/\/sandbox.sequracdn.com\/ *.reskyt.com\/ https:\/\/cdn.doofinder.com\/* data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/plumrocket.com https:\/\/www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com *.adyen.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.oct8ne.com https:\/\/plumrocket.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.trustpilot.com *.paypalobjects.com\/ *.flyde.io\/ *.redintelligence.net\/ *.reskyt.com\/ *.sequrapi.com\/ *.klarnacdn.net\/ *.doubleclick.net\/ *.google.com\/ https:\/\/www.facebook.com *.amazonaws.com\/* https:\/\/myadsplatform-prod.s3.eu-central-1.amazonaws.com\/ https:\/\/static.criteo.net https:\/\/gum.criteo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net p.typekit.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.adyen.com https:\/\/*.gstatic.com cdn.doofinder.com magefan.com cm.magefan.com *.disqus.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com *.oct8ne.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.padelnuestro.com https:\/\/www.google.ie *.googleapis.com *.gstatic.com https:\/\/www.google.es\/ads\/ *.googletagmanager.com\/ https:\/\/www.emjcd.com\/ https:\/\/cj.dotomi.com\/ *.cloudfront.net *.bing.com\/ *.adform.net\/ *.facebook.com\/ *.reskyt.com\/ *.connectif.cloud\/ *.doubleclick.net\/ *.google.com\/ *.placeholder.com https:\/\/grwapi.net *.google-analytics.com *.tile.openstreetmap.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.sandbox.paypal.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-ds.com www.googletagmanager.com *.adyen.com cdn.doofinder.com *.disqus.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.oct8ne.com https:\/\/cdnjs.cloudflare.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.trustpilot.com https:\/\/sdk.privacy-center.org https:\/\/js-agent.newrelic.com https:\/\/bam.nr-data.net *.googleapis.com *.gstatic.com https:\/\/www.mczbf.com\/ https:\/\/cdn.connectif.cloud\/ *.cloudfront.net https:\/\/commerce.adobedtm.com\/ *.bing.com\/ *.adform.net\/ *.jsdelivr.net\/ *.flyde.io\/ *.facebook.net\/ *.tiktok.com\/ *.klarnacdn.net\/ *.reskyt.com\/ *.quantummetric.com\/ blob *.klarna.com\/ *.sequrapi.com\/ *.clarity.ms\/ *.google.com\/ https:\/\/grwapi.net https:\/\/unpkg.com https:\/\/eu1-config.doofinder.com\/* *.doofinder.com\/* https:\/\/eu1-config.doofinder.com\/2.x\/d0f0ef47-8a08-4c9c-9f1f-3c43a3aa757c.js *.usermaven.com\/* *.creativecdn.com\/* *.woopra.com\/* https:\/\/static.woopra.com\/ https:\/\/www.woopra.com\/ https:\/\/tags.creativecdn.com\/ https:\/\/ams.creativecdn.com\/ https:\/\/f.creativecdn.com\/ https:\/\/sync.outbrain.com\/ *.googletagmanager.com *.google-analytics.com cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/fonts.googleapis.com\/ *.doofinder.com *.fontawesome.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com *.trustpilot.com *.googletagmanager.com\/ *.reskyt.com\/ *.googleapis.com https:\/\/grwapi.net *.doofinder.com\/* https:\/\/cdn.doofinder.com\/* https:\/\/cdn.doofinder.com\/livelayer\/1\/css\/2\/common.css cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io qa-api.magedevteam.com *.sentry.io *.adyen.com *.doofinder.com wss:\/\/*.doofinder.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com *.oct8ne.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com https:\/\/pre.wayletlabs.com\/* https:\/\/pro.waylet.es\/* https:\/\/region1.google-analytics.com https:\/\/api.privacy-center.org *.doubleclick.net https:\/\/bam.nr-data.net *.googleapis.com *.gstatic.com *.google.com https:\/\/www.mczbf.com\/ *.connectif.cloud\/ *.flyde.io\/ *.tiktok.com\/ *.facebook.com\/ *.reskyt.com\/ *.quantummetric.com\/ *.googlesyndication.com\/ *.klarna.com\/ *.klarnacdn.net\/ *.clarity.ms https:\/\/grwapi.net https:\/\/track.adform.net https:\/\/google.com *.woopra.com\/ *.googletagmanager.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/securepubads.g.doubleclick.net https:\/\/*.opti-digital.com https:\/\/static.chartbeat.com https:\/\/connect.facebook.net https:\/\/www.qiota.com https:\/\/beta.qiota.com https:\/\/interactive.valeursactuelles.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/*.immanens.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdnjs.cloudflare.com; img-src 'self' data: https: https:\/\/*.immanens.com; connect-src 'self' https: https:\/\/*.immanens.com; frame-src 'self' https:\/\/securepubads.g.doubleclick.net https:\/\/www.facebook.com https:\/\/interactive.valeursactuelles.com https:\/\/*.opti-digital.com https:\/\/www.youtube-nocookie.com https:\/\/www.youtube.com https:\/\/*.immanens.com; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/apis.google.com https:\/\/va.vercel-scripts.com https:\/\/vercel.live https:\/\/betterstack.net https:\/\/*.betterstack.net https:\/\/*.betterstack.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/www.gstatic.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/use.typekit.net; connect-src 'self' https: wss: data:; frame-src 'self' https:\/\/*.firebaseapp.com https:\/\/accounts.google.com https:\/\/myaccount.google.com https:\/\/www.google.com https:\/\/apis.google.com https:\/\/vercel.live https:\/\/status.paxhistoria.co; worker-src 'self' blob:; manifest-src 'self'; media-src 'self' blob: https: data:; frame-ancestors 'self'; form-action 'self' https:\/\/*.firebaseapp.com https:\/\/accounts.google.com; base-uri 'none'; object-src 'none'; report-uri \/api\/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/js.hsforms.net https:\/\/forms-na1.hsforms.com https:\/\/js.hs-scripts.com https:\/\/js.hs-analytics.net https:\/\/js.hs-banner.com https:\/\/js.hscollectedforms.net https:\/\/js.storylane.io https:\/\/www.youtube.com https:\/\/s.ytimg.com https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/www.redditstatic.com https:\/\/static.ads-twitter.com https:\/\/analytics.twitter.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/cdn.omniconvert.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' data:; connect-src 'self' https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/*.hsforms.com https:\/\/*.hsforms.net https:\/\/*.hubapi.com https:\/\/track.hubspot.com https:\/\/forms.hscollectedforms.net https:\/\/*.storylane.io https:\/\/ipinfo.io https:\/\/www.facebook.com https:\/\/px.ads.linkedin.com https:\/\/*.reddit.com https:\/\/analytics.twitter.com https:\/\/*.doubleclick.net https:\/\/www.googleadservices.com https:\/\/*.omniconvert.com; frame-src https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/app.storylane.io https:\/\/*.hsforms.com https:\/\/www.facebook.com https:\/\/px.ads.linkedin.com https:\/\/*.doubleclick.net; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/*.hsforms.com https:\/\/www.facebook.com; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' *.adobedtm.com *.amazon-adsystem.com *.appdemostore.com *.atdmt.com *.avocet.io *.blubrry.com *.clicktale.net *.craftyclicks.co.uk *.chatcora.natwest.com  *.doubleclick.net *.everesttech.net *.facebook.com *.facebook.net *.fca.org.uk *.google.co.uk *.google.com *.googleadservices.com *.jwpcdn.com *.liveperson.net *.linkedin.com *.lpsnmedia.net *.neolane.net *.omguk.com *.omtrdc.net *.pinimg.com *.pinterest.com *.raptmedia.com *.rbos.com *.rbs.co.uk *.rbs.com *.rbsdigital.com *.supportcentre-rbs.co.uk *.snapchat.com *.userzoom.com *.youtube.com *.ytimg.com analytics.twitter.com api.swiftype.com dcs.demdex.net dpm.demdex.net fast.demdex.net fast.rbs.demdex.net jwpltx.com rbs.demdex.net sc-static.net search-rbs.co.uk static.ads-twitter.com t.co www.brightedge.com *.everesttech.net *.everestjs.net cdn.cookielaw.org; upgrade-insecure-requests; report-uri https:\/\/rbspersonal.report-uri.com\/r\/t\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" default-src 'self' *.acadiau.ca; img-src 'self' *.acadiau.ca *.index.digital *.sitescout.com *.gstatic.com *.bc0a.com *.fontawesome.com *.picsum.photos picsum.photos *.twimg.com *.facebook.com *.twitter.com *.google.ca *.google.com www.google-analytics.com wl-pixel.index.digital pixel.sitescout.com s3.amazonaws.com *.b0e8.com *.siteimproveanalytics.io; font-src 'self' *.fontawesome.com *.bootstrapcdn.com *.cloudflare.com *.googleapis.com *.gstatic.com cdn.jsdelivr.net; style-src 'self' *.bootstrapcdn.com *.cloudflare.com *.jsdelivr.net *.fontawesome.com *.twimg.com *.twitter.com *.googleapis.com widget.alongside.com 'unsafe-inline'; script-src 'self' *.acadiau.ca *.google.com *.googleapis.com *.fontawesome.com acuityplatform.com *.jquery.com *.bootstrapcdn.com *.cloudflare.com *.jsdelivr.net *.facebook.net *.google-analytics.com *.technolutions.net *.twitter.com *.twimg.com widget.alongside.com *.instagram.com *.cloudflare.com e.issuu.com *.pixel.ad *.hotjar.com *.bc0a.com *.b0e8.com theta360.com *.tiktok.com *.googletagmanager.com siteimproveanalytics.com 'unsafe-inline'; connect-src 'self' *.hotjar.com *.doubleclick.net www.google-analytics.com *.doubleclick.com *.sitescout.com *.doubleclick.n ka-p.fontawesome.com; frame-src 'self' *.livestream.com *.hotjar.com *.youtube.com *.vimeo.com *.twitter.com *.issuu.com *.facebook.com *.instagram.com *.sitescout.com theta360.com; frame-ancestors 'self';","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' api.42chat.com *.api.42chat.com ads.aae.org *.ads.aae.org www.actox.org *.www.actox.org adobedtm.com *.adobedtm.com adroll.com *.adroll.com ads-twitter.com *.ads-twitter.com adtrafficquality.google *.adtrafficquality.google ajax.googleapis.com *.ajax.googleapis.com chatbase.co *.chatbase.co clarity.ms *.clarity.ms doubleclick.net *.doubleclick.net cookiebot.com *.cookiebot.com eventscribe.net *.eventscribe.net facebook.net *.facebook.net feathr.co *.feathr.co google-analytics.com *.google-analytics.com google.com *.google.com googleadservices.com *.googleadservices.com googlesyndication.com *.googlesyndication.com googletagmanager.com *.googletagmanager.com hotjar.com *.hotjar.com licdn.com *.licdn.com logwork.com *.logwork.com magnetmail.net *.magnetmail.net marketo.net *.marketo.net mycadmium.com *.mycadmium.com osano.com *.osano.com realmagnet.land *.realmagnet.land revive-adserver.net *.revive-adserver.net scriptcdn.net *.scriptcdn.net snapengage.com *.snapengage.com snoball.it *.snoball.it stackadapt.com *.stackadapt.com storage.googleapis.com *.storage.googleapis.com pages.thenationalcouncil.org *.pages.thenationalcouncil.org www.tickcounter.com *.www.tickcounter.com translate.googleapis.com *.translate.googleapis.com twitter.com *.twitter.com unpkg.com *.unpkg.com vimeo.com *.vimeo.com youtube.com *.youtube.com zdassets.com *.zdassets.com; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=O9AE8tP1EnytK6hB.SJfzgX0eKJvVtIsN.DprGQ7GRI-1788504282.5838063-1.0.1.1-_dmXBEtum4FhCd9nYj5q6Hn5Zgk2FfBKMiSLj0Mf.qu0.Air4RDO9PTHy0BcJSddXW_ATG.WGSvyI1WOYL_Wxxdipc48gyAZvHSUeJtJT7iHbeyGqeJzNooHeJlxTCaodx3sEW6gmqU8i8N0sNdZSee5RNf5icZV.e0Y1JwfYzFUckSfBZZU.9uv6ABB6ChydCDt10.n8DQV6j9MT1_0FQ; report-to cf-utxbodsyygiyjooe","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.vimeo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.wp.com *.adtrafficquality.google payments.blackbaud.com cdn-cookieyes.com sky.blackbaudcdn.net *.blackbaud.com  *.blackbaudcdn.net  www.clarity.ms *.cloudflare.com control.resi.io *.ctctcdn.com *.doubleclick.net adp.eab.com *.emerson.edu start.emersoncollege.org connect.facebook.net *.facebook.net connect.facebook.net *.google.ar *.google.at *.google.au *.google.ca *.google.ch *.google.cl *.google.cn *.google.cz *.google.de *.google.fr *.google.ie *.google.in *.google.it *.google.gh *.google.gr *.google.jp *.google.nl *.google.nz *.google.se *.google.sp *.google.tw *.google.uk *.google.com cse.google.com https:\/\/www.google.com\/pagead googleads.g.doubleclick.net https:\/\/partner.googleadservices.com partner.googleadservices.com www.googleadservices.com www.googletagmanager.com *.google-analytics.com *.gstatic.com *.intercom.io *.intercomcdn.com cdn.jsdelivr.net *.licdn.com localhost:53388 *.meritpages.com js-agent.newrelic.com qvdt3feo.com secured-pixel.com signup.e2ma.net *.silktide.com sky.blackbaudcdn.net *.stackadapt.com tags.srv.stackadapt.com https:\/\/tags.srv.stackadapt.com *.technolutions.net unpkg.com www.paypal.com www.paypalobjects.com platform.instagram.com www.instagram.com *.vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net www.googletagservices.com *.googlesyndication.com *.googleadservices.com googleads.g.doubleclick.net adservice.google.com adservice.google.ae adservice.google.al adservice.google.at adservice.google.be adservice.google.bg adservice.google.bs adservice.google.ca adservice.google.ch adservice.google.ci adservice.google.cl adservice.google.co.bw adservice.google.co.cr adservice.google.co.id adservice.google.co.il adservice.google.co.in adservice.google.co.jp adservice.google.co.ke adservice.google.co.kr adservice.google.co.mz adservice.google.co.nz adservice.google.co.th adservice.google.co.tz adservice.google.co.uk adservice.google.co.uz adservice.google.co.ve adservice.google.co.za adservice.google.co.zm adservice.google.co.zw adservice.google.com.ai adservice.google.com.ar adservice.google.com.au adservice.google.com.bd adservice.google.com.bh adservice.google.com.bn adservice.google.com.bo adservice.google.com.br adservice.google.com.co adservice.google.com.cy adservice.google.com.ec adservice.google.com.eg adservice.google.com.et adservice.google.com.fj adservice.google.com.gh adservice.google.com.gi adservice.google.com.gt adservice.google.com.hk adservice.google.com.jm adservice.google.com.kh adservice.google.com.kw adservice.google.com.lb adservice.google.com.mm adservice.google.com.mt adservice.google.com.mx adservice.google.com.my adservice.google.com.ng adservice.google.com.ni adservice.google.com.np adservice.google.com.om adservice.google.com.pa adservice.google.com.pe adservice.google.com.ph adservice.google.com.pk adservice.google.com.pr adservice.google.com.py adservice.google.com.qa adservice.google.com.sa adservice.google.com.sg adservice.google.com.sv adservice.google.com.tr adservice.google.com.tw adservice.google.com.ua adservice.google.com.uy adservice.google.com.vn adservice.google.cz adservice.google.de adservice.google.dk adservice.google.dz adservice.google.ee adservice.google.es adservice.google.fi adservice.google.fr adservice.google.ge adservice.google.gr adservice.google.gy adservice.google.hn adservice.google.hr adservice.google.hu adservice.google.ie adservice.google.im adservice.google.iq adservice.google.is adservice.google.it adservice.google.jo adservice.google.kz adservice.google.li adservice.google.lk adservice.google.lt adservice.google.lu adservice.google.lv adservice.google.md adservice.google.mk adservice.google.mu adservice.google.nl adservice.google.no adservice.google.pl adservice.google.pt adservice.google.ro adservice.google.rs adservice.google.ru adservice.google.se adservice.google.si adservice.google.sk adservice.google.so adservice.google.sr adservice.google.tl adservice.google.tn adservice.google.tt google-analytics.com www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net ajax.googleapis.com maps.googleapis.com maps.google.com translate.googleapis.com translate.google.com www.googletagmanager.com googletagmanager.com tagmanager.google.com; style-src 'self' 'unsafe-inline' data: https:\/\/*.wp.com *.amazonaws.com payments.blackbaud.com *.jquery.com *.cloudflare.com *.ctctcdn.com *.emerson.edu *.e2ma.net cdn.fonts.net *.google.com www.gstatic.com fonts.googleapis.com https:\/\/cdn.jsdelivr.net *.stackadapt.com *.technolutions.net unpkg.com *.vimeocdn.com fonts.googleapis.com 'unsafe-inline' maps.googleapis.com maps.google.com translate.googleapis.com www.googletagmanager.com tagmanager.google.com; img-src 'self' data: https:\/\/*.wp.com https:\/\/*.wordpress.com cdn-cookieyes.com https:\/\/insight.adsrvr.org https:\/\/insight.adsrvr.org\/track\/pxl insight.adsrvr.org *.baidu.com cdn-icons-png.flaticon.com blob: data: https:\/\/c.clarity.ms *.ctctcdn.com *.demdex.net *.doubleclick.net https:\/\/googleads.g.doubleclick.net *.doubleclick.net *.emerson.edu start.emersoncollege.org *.gstatic.com www.facebook.com connect.facebook.net *.google-analytics.com *.google.ar *.google.at *.google.au *.google.ca *.google.ch *.google.cl *.google.cn *.google.cz *.google.de *.google.fr *.google.ie *.google.in *.google.it *.google.gh *.google.gr *.google.jp *.google.co.jp *.google.nl *.google.nz www.google.ru *.google.se *.google.sp *.google.tw *.google.uk www.google www.google.com www.google.com\/ccm\/collect *.google.com www.googleadservices.com googleads.g.doubleclick.net www.google.bs\/pagead\/1p-user-list *.googletagmanager.com ci3.googleusercontent.com insight.adsrvr.org https:\/\/px.ads.linkedin.com https:\/\/px.ads.linkedin.com\/attribution_trigger *.linkedin.com queue.simpleanalyticscdn.com images-na.ssl-images-amazon.com target.scene7.com trkn.us i.vimeocdn.com *.ytimg.com s.w.org ps.w.org ts.w.org secure.gravatar.com www.gravatar.com data: www.paypalobjects.com *.paypal.com *.googlesyndication.com stats.g.doubleclick.net blob: google-analytics.com www.google-analytics.com ssl.google-analytics.com www.google.com *.googleapis.com maps.google.com maps.gstatic.com www.gstatic.com *.ggpht.com translate.googleapis.com translate.google.com i.ytimg.com www.googletagmanager.com; connect-src 'self' https:\/\/*.wordpress.com https:\/\/*.wp.com ad.doubleclick.net *.adsfight.com *.cookieyes.com https:\/\/cdn-cookieyes.com *.ctctcdn.com *.doubleclick.net payments.blackbaud.com data: https:\/\/b.clarity.ms cdnjs.cloudflare.com *.constantcontact.com stats.g.doubleclick.net *.adtrafficquality.google *.emerson.edu start.emersoncollege.org *.facebook.com connect.facebook.net *.getrave.com *.goole.com *.google.com.sv *.google.ar *.google.at *.google.au *.google.ca *.google.ch *.google.cl *.google.cn *.google.cz *.google.de *.google.es *.google.fr *.google.ie *.google.in *.google.it *.google.gh *.google.gr *.google.jp *.google.nl *.google.nz *.google.se *.google.sp *.google.tw *.google.uk *.analytics.google.com analytics.google.com www.google www.google.com https:\/\/www.google.com googleads.g.doubleclick.net googleads.g.doubleclick.net\/pagead\/viewthroughconversion https:\/\/www.google.com\/pagead www.google.com\/pagead\/1p-conversion googleads.g.doubleclick.net *.google-analytics.com *.googleadservices.com translate.googleapis.com www.googletagmanager.com *.googletagmanager.com api-iam.intercom.io wss:\/\/nexus-websocket-a.intercom.io *.intercom.io px.ads.linkedin.com localhost:53388 *.silktide.com *.stackadapt.com *.technolutions.net download-video-ak.vimeocdn.com www.paypalobjects.com *.paypal.com *.vimeo.com *.googlesyndication.com googleads.g.doubleclick.net stats.g.doubleclick.net www.google-analytics.com ampcid.google.com analytics.google.com about: maps.googleapis.com maps.google.com translate.googleapis.com www.googletagmanager.com; font-src 'self' data: data: data https:\/\/*.wp.com at.alicdn.com *.amazonaws.com *.gstatic.com pro.fontawesome.com *.intercomcdn.com *.emerson.edu https:\/\/emerson.edu cdn.scite.ai use.typekit.net data: fonts.gstatic.com fonts.googleapis.com; frame-src 'self' https:\/\/127.0.0.1:0 https:\/\/*.wp.com https:\/\/wordpress.com *.blackbaud.com *.doubleclick.net *.emerson.edu static.deledao.com *.facebook.com connect.facebook.net *.google.com *.googletagmanager.com safe.menlosecurity.com *.meritpages.com *.id.opendns.com *.panopto.com recapd.com  signup.e2ma.net *.soundcloud.com *.spreaker.com syndicatedsearch.goog *.vimeo.com *.youtube.com www.paypalobjects.com *.paypal.com www.instagram.com *.vimeo.com *.vimeocdn.com *.googlesyndication.com googleads.g.doubleclick.net maps.googleapis.com maps.google.com www.youtube.com www.googletagmanager.com; manifest-src 'self' ; child-src 'self' www.paypalobjects.com *.paypal.com *.vimeo.com *.vimeocdn.com www.youtube.com www.googletagmanager.com; base-uri 'self' ; report-uri https:\/\/emerson.edu?gdsih-csp-report;","count":1},{"content-security-policy-report-only":" default-src 'self' https:; connect-src 'self' https: wss:\/\/push.soccer.ru wss:\/\/mc.yandex.ru; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/mc.yandex.ru https:\/\/www.google-analytics.com https:\/\/vk.com https:\/\/yastatic.net https:\/\/push.soccer.ru https:\/\/top-fwz1.mail.ru https:\/\/websdk.appsflyersdk.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; report-uri \/.well-known\/csp-report","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' 'report-sample' 'unsafe-eval' www.youtube.com vimeo.com cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/player.vimeo.com https:\/\/unpkg.com; style-src 'self' 'report-sample' 'unsafe-inline' https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com; worker-src 'self'; base-uri 'self'; form-action 'self' https:\/\/login.microsoftonline.com; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self' blob: https:\/\/data.stbuttons.click\/data https:\/\/challenges.cloudflare.com https:\/\/vod-progressive-ak.vimeocdn.com https:\/\/cdn.simplecast.com https:\/\/cdn.cookielaw.org https:\/\/geolocation.onetrust.com https:\/\/apps.sitecore.net https:\/\/stackpath.bootstrapcdn.com https:\/\/cdnjs.cloudflare.com https:\/\/code.jquery.com http:\/\/ajax.googleapis.com https:\/\/maps.googleapis.com https:\/\/geoip-js.com https:\/\/www.google-analytics.com https:\/\/cdn.siteimprove.net https:\/\/player.simplecast.com https:\/\/cdnjs.cloudflare.com https:\/\/my2.siteimprove.com https:\/\/id.siteimprove.com https:\/\/unpkg.com https:\/\/platform-api.sharethis.com https:\/\/l.sharethis.com\/ https:\/\/player.vimeo.com https:\/\/extend.vimeocdn.com https:\/\/vod-progressive.akamaized.net https:\/\/download-video.akamaized.net https:\/\/cdn.yoshki.com https:\/\/download-video-ak.vimeocdn.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https:\/\/cdn.cookielaw.org https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/61281927.global.siteimproveanalytics.io\/ https:\/\/cdn.yoshki.com https:\/\/61281927.global.siteimproveanalytics.io\/ https:\/\/l.sharethis.com; style-src 'self' https:\/\/fonts.googleapis.com https:\/\/stackpath.bootstrapcdn.com https:\/\/cdn.jsdelivr.net https:\/\/unpkg.com 'unsafe-inline'; font-src 'self' data: https:\/\/fonts.gstatic.com 'unsafe-inline'; block-all-mixed-content; script-src 'self' https:\/\/buttons-config.sharethis.com https:\/\/challenges.cloudflare.com https:\/\/cdn.cookielaw.org https:\/\/www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/js.maxmind.com https:\/\/cdnjs.cloudflare.com\/polyfill\/ https:\/\/siteimproveanalytics.com https:\/\/www.google-analytics.com https:\/\/platform-api.sharethis.com https:\/\/extend.vimeocdn.com https:\/\/cdn.siteimprove.net http:\/\/ajax.googleapis.com https:\/\/code.jquery.com https:\/\/cdn.jsdelivr.net https:\/\/unpkg.com https:\/\/stackpath.bootstrapcdn.com https:\/\/cdnjs.cloudflare.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https:\/\/cdn.cookielaw.org https:\/\/l.sharethis.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/data.stbuttons.click\/data https:\/\/region1.google-analytics.com\/g\/collect https:\/\/www.googletagmanager.com\/td; frame-ancestors 'self' https:\/\/www.independentsector.org; report-uri https:\/\/233122823c47f119af0143cbea7853d6.report-uri.com\/r\/d\/csp\/reportOnly;","count":1},{"content-security-policy-report-only":" frame-ancestors 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* *.google.com *.cybersource.com up.cybersource.com;         frame-src 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* *.googletagmanager.com *.google.com *.signifyd.com *.cookiebot.com *.online-metrix.net *.paypal.com *.facebook.com *.fls.doubleclick.net *.clinch.co *.cloudflare.com *.xanderdev.com showmetheparts.com *.showmetheparts.com www.youtube.com *.jasonindustrial.com *.listrak.com *.quantummetric.com *.tractorsupply.com *.countingdownto.com *.cybersource.com *.optimizely.com https:\/\/a5294740418068480.cdn.optimizely.com https:\/\/a5294740418068480.cdn-pci.optimizely.com;         default-src 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* blob: *.google.com um.simpli.fi d.adroll.com www.ruralking.com *.ruralking.com *.quantummetric.com *.cybersource.com;         child-src 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* *.google.com *.quantummetric.com blob:;         script-src 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* 'unsafe-inline' 'unsafe-eval' 'self' *.cnstrc.com cnstrc.com *.sezzle.com *.bazaarvoice.com *.signifyd.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.quantummetric.com *.cookiebot.com *.listrakbi.com *.flippenterprise. *.smg.com *.gleamjs.io *.curalate.com polyfill-fastly.net *.polyfill-fastly.net *.lt02.net *.listrak.com *.online-metrix.netnet analytics.freespee.com beacon.krxd.net cm.g.doubleclick.net dpm.demdex.net in.treasuredata.com io.narrative.io lex.33across.com ml314.com pixel.tapad.com s-cs.send.microad.jp stags.bluekai.com us-u.openx.net barracuda.com *.adroll.com d.adroll.mgr.consensu.org dsum-sec.casalemedia.com eb2.3lift.com googleads.g.doubleclick.net p.adsymptotic.com *.ads.linkedin.com pixel.advertising.com pixel.rubiconproject.com *.pubmatic.com snap.licdn.com sync.outbrain.com *.taboola.com ads.yahoo.com ups.analytics.yahoo.com www.facebook.com connect.facebook.net idsync.rlcdn.com ib.adnxs.com x.bidswitch.net *.cloudflareinsights.com *.online-metrix.net *.paypal.com *.bing.com *.hotjar.com *.google.com *.simpli.fi *.amplitude.com *.zdassets.com *.clinch.co *.googlesyndication.com *.clarity.ms *.gleam.io *.cloudflare.com blob: *.flippenterprise.net *.adnxs.com *.certcapture.com *.ruralking.com gleam.io www.ruralking.com *.zendesk.com *.kyc.red *.jquery.com *.cloudfront.net *.bootstrapcdn.com *.tiles.mapbox.com *.cybersource.com testup.cybersource.com cdn.optimizely.com *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com *.seel.com cdn.seel.com;         connect-src 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* 'unsafe-inline' 'unsafe-eval' *.cnstrc.com cnstrc.com *.sezzle.com *.bazaarvoice.com *.signifyd.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.quantummetric.com *.cookiebot.com *.listrakbi.com *.smg.com *.gleamjs.io *.curalate.com polyfill-fastly.net *.polyfill-fastly.net *.lt02.net *.listrak.com *.online-metrix.netnet analytics.freespee.com beacon.krxd.net cm.g.doubleclick.net dpm.demdex.net in.treasuredata.com io.narrative.io lex.33across.com ml314.com pixel.tapad.com s-cs.send.microad.jp stags.bluekai.com us-u.openx.net barracuda.com *.adroll.com d.adroll.mgr.consensu.org dsum-sec.casalemedia.com eb2.3lift.com googleads.g.doubleclick.net p.adsymptotic.com *.ads.linkedin.com pixel.advertising.com pixel.rubiconproject.com *.pubmatic.com snap.licdn.com sync.outbrain.com *.taboola.com ads.yahoo.com ups.analytics.yahoo.com www.facebook.com connect.facebook.net idsync.rlcdn.com ib.adnxs.com x.bidswitch.net *.cloudflareinsights.com *.online-metrix.net *.paypal.com *.bing.com *.hotjar.com *.google.com *.simpli.fi *.amplitude.com *.zdassets.com *.clinch.co *.googlesyndication.com *.clarity.ms *.gleam.io *.cloudflare.com blob: *.flippenterprise.net *.adnxs.com *.certcapture.com *.ruralking.com *.googleadservices.com *.zendesk.com *.bf.dynatrace.com *.doubleclick.net *.bing.net *.hotjar.io *.flippback.com *.flipp.com www.ruralking.com um.simpli.fi wss:\/\/*.hotjar.com wss:\/\/pod-13-sunco-ws.zendesk.com wss:\/\/*.zendesk.com *.cloudfront.net *.mapbox.com *.optimizely.com logx.optimizely.com wss:\/\/*.optimizely.com;         style-src 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* *.googleapis.com *.googletagmanager.com 'unsafe-inline' *.cdnfonts.com *.listrakbi.com *.gleam.io *.flippenterprise.net *.quantummetric.com app.certcapture.com *.cloudfront.net *.jsdelivr.net *.tiles.mapbox.com *.optimizely.com 'unsafe-inline';         font-src 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* *.gstatic.com *.cdnfonts.com *.smg.com *.bazaarvoice.com *.cloudflare.com *.walmartimages.com *.amazonaws.com *.espssl.com data: *.cloudfront.net *.jsdelivr.net *.optimizely.com;         img-src 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* https: data:;","count":1},{"content-security-policy-report-only":" connect-src analytics.tiktok.com *.google-analytics.com 'self' 'unsafe-inline' wss:;default-src 'self' 'unsafe-inline' wss:;form-action 'self' 'unsafe-inline' wss:;frame-src *.soundcloud.com 'self' 'unsafe-inline' 'unsafe-eval' *.cookiebot.com *.wearekura.com *.google-analytics.com;img-src *.siteimproveanalytics.io analytics.tiktok.com *.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval' *.cookiebot.com *.wearekura.com *.google-analytics.com;object-src 'none';script-src *.googletagmanager.com siteimproveanalytics.com analytics.tiktok.com 'self' 'unsafe-inline' 'unsafe-eval' *.cookiebot.com *.wearekura.com *.google-analytics.com;style-src 'self' 'unsafe-inline' 'unsafe-eval' *.cookiebot.com *.wearekura.com *.google-analytics.com 'self' 'unsafe-inline' wss:","count":1},{"content-security-policy-report-only":" default-src https:\/\/www.honeybadger.io; connect-src 'self' data: https:\/\/*.savvycal.com\/ https:\/\/*.frontapp.com\/ https:\/\/*.fontawesome.com\/ https:\/\/*.typekit.net\/ https:\/\/*.honeybadger.io https:\/\/*.convertkit.com\/ https:\/\/*.convertexperiments.com\/ https:\/\/*.profitwell.com https:\/\/*.usefathom.com\/ https:\/\/*.wistia.com\/ https:\/\/fg8vvsvnieiv3ej16jby.litix.io https:\/\/pipedream.wistia.com\/mput https:\/\/embedwistia-a.akamaihd.net\/ https:\/\/cdnjs.cloudflare.com; font-src 'self' data: https:\/\/use.typekit.net https:\/\/cdnjs.cloudflare.com https:\/\/*.fontawesome.com; frame-src https:\/\/savvycal.com\/ https:\/\/player.vimeo.com https:\/\/platform.twitter.com https:\/\/syndication.twitter.com https:\/\/fast.wistia.com; img-src 'self' data: https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/*.gstatic.com\/ https:\/\/*.savvycal.com\/ https:\/\/*.frontapp.com\/ https:\/\/*.fontawesome.com\/ https:\/\/*.typekit.net\/ https:\/\/*.profitwell.com https:\/\/*.usefathom.com\/ https:\/\/*.honeybadger.io\/ https:\/\/*.convertkit.com\/ https:\/\/*.convertexperiments.com\/ https:\/\/gist.github.com https:\/\/*.wistia.com https:\/\/cdn.syndication.twimg.com https:\/\/platform.twitter.com https:\/\/fast.wistia.com\/ https:\/\/identity.netlify.com\/v1\/netlify-identity-widget.js https:\/\/cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' blob: https:\/\/*.gstatic.com\/ https:\/\/*.fontawesome.com https:\/\/*.typekit.net https:\/\/github.githubassets.com\/ https:\/\/platform.twitter.com https:\/\/ton.twimg.com https:\/\/cdnjs.cloudflare.com; media-src 'self' data: https:\/\/embedwistia-a.akamaihd.net https:\/\/*.wistia.com; manifest-src https:\/\/www.honeybadger.io ; report-uri https:\/\/api.honeybadger.io\/v1\/browser\/csp?api_key=c2f13350&report_only=true&env=production","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'report-sample' 'nonce-48SlKfY0gFFyegtdfz6WMw=='; frame-src demo.arcade.software; frame-ancestors 'none'; font-src 'self' data:; base-uri 'none'; media-src *; img-src blob: data: *; object-src 'none'; style-src 'unsafe-inline' *; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io browser.sentry-cdn.com; default-src 'none'; worker-src 'none'","count":1},{"content-security-policy-report-only":" base-uri 'self'; child-src https:\/\/share.intercom.io https:\/\/intercom-sheets.com https:\/\/www.intercom-reporting.com https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/fast.wistia.net; connect-src 'self' https:\/\/*.cliniko.com https:\/\/stats.g.doubleclick.net https:\/\/www.google-analytics.com https:\/\/api.honeybadger.io https:\/\/*.intercom.io wss:\/\/*.intercom.io https:\/\/uploads.intercomcdn.com https:\/\/uploads.intercomusercontent.com; default-src 'self'; font-src 'self' data: https:\/\/*.cloudfront.net https:\/\/js.intercomcdn.com; form-action 'self' https:\/\/intercom.help https:\/\/api-iam.intercom.io; frame-ancestors 'none'; img-src 'self' data: https:; manifest-src 'self'; media-src https:\/\/js.intercomcdn.com; script-src 'self' 'report-sample' 'unsafe-eval' 'unsafe-inline' https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/app.intercom.io https:\/\/widget.intercom.io https:\/\/js.intercomcdn.com https:\/\/www.google.com\/recaptcha\/api.js https:\/\/www.gstatic.com; style-src 'self' 'report-sample' 'unsafe-inline'; report-uri https:\/\/fa4a51a09d12751e5d532cfce80751aa.report-uri.com\/r\/d\/csp\/reportOnly;","count":1},{"content-security-policy-report-only":" frame-ancestors 'self'; upgrade-insecure-requests; report-uri https:\/\/5b99b19026a35ad04db5bcf778a03938.report-uri.com\/r\/d\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-51g5i4o-4FxxatuI1cdnNg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' blob:; \t\t\t\tscript-src 'unsafe-inline' 'report-sample' blob: 'self' *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.google.com googleads.g.doubleclick.net px.airpr.com bat.bing.com api8436.d41.co cdn-0.d41.co app.enzuzo.com connect.facebook.net tracking.g2crowd.com *.hotjar.com static.ads-twitter.com *.zoominfo.com *.clearbitjs.com *.clearbit.com *.clearbitscripts.com assets.adobedtm.com *.youtube-nocookie.com *.youtube.com *.ytimg.com *.appian.com ecf.d41.co snap.licdn.com *.metadata.io cdn.jsdelivr.net cdn.vidstack.io *.adobe.com *.gstatic.com tags.srv.stackadapt.com *.g2.com *.mktoweb.com *.marketo.net js.zi-scripts.com *.mouseflow.com *.cvent.com *.cvent.cloud *.adsrvr.org *.uidapi.com *.rlcdn.com; \t\t\t\tstyle-src 'unsafe-inline' 'report-sample' 'self' *.appian.com cdn.jsdelivr.net fonts.googleapis.com *.googletagmanager.com tagmanager.google.com *.hotjar.com cdn.vidstack.io *.adobe.com tags.srv.stackadapt.com *.mktoweb.com *.marketo.net *.cvent.com *.cvent.cloud; \t\t\t\tobject-src 'none'; \t\t\t\tbase-uri 'self'; \t\t\t\tframe-ancestors 'self'; \t\t\t\tconnect-src 'self' *.googleadservices.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.google.com *.doubleclick.net bat.bing.com api8436.d41.co app.enzuzo.com tracking.g2crowd.com *.hotjar.com *.hotjar.io wss:\/\/*.hotjar.com *.zoominfo.com js.zi-scripts.com *.omtrdc.net *.googlesyndication.com *.linkedin.com *.metadata.io api.ipify.org *.ytimg.com *.adobe.io *.appian.com tags.srv.stackadapt.com *.g2.com *.googleapis.com *.vidstack.io *.d41.co *.mktoweb.com *.marketo.net *.mktoresp.com *.mouseflow.com *.cvent.com *.cvent.cloud *.amazonaws.com *.adsrvr.org *.uidapi.com *.rlcdn.com; \t\t\t\tfont-src 'self' data: cdn.jsdelivr.net fonts.gstatic.com *.hotjar.com *.mouseflow.com *.cvent.com *.cvent.cloud; \t\t\t\tframe-src 'self' *.googletagmanager.com *.doubleclick.net *.youtube.com *.youtube-nocookie.com *.appian.com *.amazonaws.com *.adobe.com *.google.com *.mktoweb.com *.marketo.net *.mouseflow.com *.cvent.com *.cvent.cloud *.appiancloud.com *.adsrvr.org; \t\t\t\tform-action 'self' *.marketo.com *.mktoweb.com *.appian.com; \t\t\t\tmedia-src 'self' blob:; \t\t\t\tworker-src 'self' blob:; \t\t\t\timg-src 'self' blob: data: *.appian.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.gstatic.com *.google.com *.googlesyndication.com www.facebook.com *.linkedin.com segment.prod.bidr.io *.zoominfo.com *.ytimg.com *.youtube.com bat.bing.com analytics.twitter.com t.co *.omtrdc.net dpx.airpr.com *.hotjar.com *.vidstack.io *.mouseflow.com *.cvent.com *.cvent.cloud *.marketo.org *.adsrvr.org *.rlcdn.com; \t\t\t\treport-uri https:\/\/dujjyxdxaujq2swvhj3shultuy0upafr.lambda-url.us-east-1.on.aws\/","count":1},{"content-security-policy-report-only":" default-src 'self'; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=7vC0beUHY8jIwSKcnynjnL9zQsEoUAwZ4DZua7H1OtI-1788489282.0613704-1.0.1.1-CiMKAi_4vgEpkN2Y8SVEGiUIQVFAJ5mF_phMFqalb2kWan2grELai7IeHReOO0ntxwmEYNXRv39HFZOjzWAaiUyRo3fh7zsAyFm3K3EDJexRyAJkn5ge6t20mczuaBGNn5ADS8x2hB9Tsoy5M5oP9oVkooG0m35VKohFxs_4Tc9ENh68qSz1ZjrklFSu8EP9vjk05dcnTvamybT3J871qQ; report-to cf-wkuntizeebgesvim","count":1},{"content-security-policy-report-only":" child-src 'none';connect-src 'self' *.e78.co.uk *.civiccomputing.com *.azure.com *.msecnd.net *.vo.msecnd.net *.gstatic.com *.googletagmanager.com *.googleadservices.com *.google.com *.googlesyndication.com *.search.windows.net *.googleapis.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com *.google-analytics.com *.services.visualstudio.com *.hotjar.com *.hotjar.io wss:\/\/*.hotjar.com *.kustomerapp.com;default-src 'self' stackpath.bootstrapcdn.com *.hotjar.com *.hotjar.io *.googleapis.com *.gstatic.com *.vo.msecnd.net *.services.visualstudio.com *.kustomerapp.com;font-src 'self' use.typekit.net www.google.com google.com ajax.googleapis.com fonts.googleapis.com fonts.gstatic.com stackpath.bootstrapcdn.com;form-action 'self';frame-ancestors 'self';frame-src 'self' *.youtube-nocookie.com *.amazon-adsystem.com *.google.com *.youtube.com *.hotjar.com *.hotjar.io vimeo.com *.vimeo.com *.trustpilot.com www.facebook.com *.publitas.com givp.nl *.kustomerapp.com;img-src 'self' e78-bp-dev-cdn-e4bdb8gjgsgdfqbq.z01.azurefd.net i.ytimg.com online.swagger.io *.google-analytics.com *.google.com *.gstatic.com *.kustomerapp.com;manifest-src 'self';media-src 'self' e78-bp-dev-cdn-e4bdb8gjgsgdfqbq.z01.azurefd.net;object-src 'unsafe-eval';script-src 'self' *.e78.co.uk e78-bp-dev-cdn-e4bdb8gjgsgdfqbq.z01.azurefd.net *.doubleclick.net *.googleadservices.com *.googletagmanager.com *.google.com *.hotjar.com *.hotjar.io *.google-analytics.com *.vo.msecnd.net *.msecnd.net *.services.visualstudio.com cdn.jsdelivr.net *.googleapis.com *.trustpilot.com connect.facebook.net *.azure.com *.gstatic.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com 'unsafe-inline' 'unsafe-eval' *.kustomerapp.com;style-src 'self' e78-bp-dev-cdn-e4bdb8gjgsgdfqbq.z01.azurefd.net p.typekit.net use.typekit.net www.google.com google.com ajax.googleapis.com cdnjs.cloudflare.com fonts.googleapis.com stackpath.bootstrapcdn.com 'unsafe-inline' *.kustomerapp.com;block-all-mixed-content;upgrade-insecure-requests;","count":1},{"content-security-policy-report-only":" script-src 'nonce-xuMa0npngA739KbhYL5B8A==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri \/_\/csp-report","count":1},{"content-security-policy-report-only":" object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-9CONdFAZQr4DYcnk_SIIjQ' 'unsafe-inline' 'unsafe-eval' https:\/\/*.msauth.net https:\/\/*.msftauth.net https:\/\/*.msftauthimages.net https:\/\/*.msauthimages.net https:\/\/*.msidentity.com https:\/\/*.microsoftonline-p.com https:\/\/*.microsoftazuread-sso.com https:\/\/*.azureedge.net https:\/\/*.outlook.com https:\/\/*.office.com https:\/\/*.office365.com https:\/\/*.microsoft.com https:\/\/*.bing.com 'report-sample'; report-uri https:\/\/csp.microsoft.com\/report\/ESTS-UX-All","count":1},{"content-security-policy-report-only":" default-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/se.monetate.net https:\/\/c.lytics.io https:\/\/img03.en25.com https:\/\/tracking.pella.com https:\/\/cdn.speedcurve.com https:\/\/ob.sd6544.pella.com https:\/\/obs.sd6544.pella.com https:\/\/api.s10h.io https:\/\/*.bc0a.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/cdn.livechatinc.com https:\/\/cdn.jsdelivr.net https:\/\/www.paypal.com https:\/\/www.paypalobjects.com https:\/\/fonts.googleapis.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/cdn.cookielaw.org https:\/\/analytics.pella.com https:\/\/www.pella.com https:\/\/googleads.g.doubleclick.net https:\/\/edge.fullstory.com https:\/\/rs.fullstory.com https:\/\/scripts.clarity.ms https:\/\/www.clarity.ms https:\/\/snap.licdn.com https:\/\/connect.facebook.net https:\/\/www.redditstatic.com https:\/\/bat.bing.com https:\/\/s.pinimg.com https:\/\/ct.pinterest.com https:\/\/ads.nextdoor.com https:\/\/cdn.attn.tv https:\/\/cdn.callrail.com https:\/\/*.tvsquared.com https:\/\/s.adroll.com https:\/\/cdn01.basis.net https:\/\/js.adsrvr.org https:\/\/cdn.resonate.com https:\/\/c.amazon-adsystem.com https:\/\/tags-cdn.clarivoy.com https:\/\/tags.srv.stackadapt.com https:\/\/px.mountain.com https:\/\/gs.mountain.com https:\/\/js.ipredictive.com https:\/\/px.premion.com https:\/\/pm.geniusmonkey.com https:\/\/r.turn.com https:\/\/d.turn.com https:\/\/trkn.us https:\/\/arttrk.com https:\/\/ads.undertone.com https:\/\/secure.insightexpressai.com https:\/\/p.veritone-ce.com https:\/\/static.elfsight.com https:\/\/universe-static.elfsightcdn.com https:\/\/static.quiq-cdn.com https:\/\/hover.to https:\/\/web-react.hover.to https:\/\/www.instagram.com https:\/\/www.usehatchapp.com https:\/\/unpkg.com https:\/\/sa.getroster.com https:\/\/*.pixeltracker.co https:\/\/safevisit.online https:\/\/*.safevisit.online https:\/\/track.securedvisit.com https:\/\/d-code.liadm.com https:\/\/*.rkdms.com https:\/\/aa.agkn.com https:\/\/dx.mountain.com https:\/\/d.adroll.com https:\/\/cdn.mgln.ai https:\/\/px.octillion.tv https:\/\/img.en25.com https:\/\/pella.quiq-api.com https:\/\/live.rezync.com https:\/\/tag.simpli.fi https:\/\/tag.brandcdn.com https:\/\/insiderdata360online.com https:\/\/ftlaunchpad.ai https:\/\/dot.dm-io.com https:\/\/capi-automation.s3.us-east-2.amazonaws.com https:\/\/d.monetate.net https:\/\/sb.monetate.net https:\/\/www.youtube.com https:\/\/api.livechatinc.com https:\/\/beta.usehatchapp.com https:\/\/build.1pdata.app https:\/\/cdn.boomtrain.com https:\/\/c1.rfihub.net https:\/\/adservices.brandcdn.com https:\/\/admin.mobilewallet.cards https:\/\/s.swiftypecdn.com https:\/\/cdn.rlets.com https:\/\/dash-widgets.localiq.com; connect-src 'self' https: wss: data:; worker-src 'self' blob:; media-src 'self' https:\/\/assets.contentstack.io; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/www.gstatic.com https:\/\/static.quiq-cdn.com https:\/\/*.bamboohr.com https:\/\/tags.srv.stackadapt.com https:\/\/c.lytics.io; font-src 'self' data: https:\/\/fonts.gstatic.com; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.facebook.com https:\/\/obs.sd6544.pella.com https:\/\/www.google.com https:\/\/www.livechatinc.com https:\/\/secure.livechatinc.com https:\/\/www.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/*.doubleclick.net https:\/\/*.fls.doubleclick.net https:\/\/analytics.pella.com https:\/\/ad.ipredictive.com https:\/\/ct.pinterest.com https:\/\/www.youtube.com https:\/\/apply.getroster.com https:\/\/hover.to https:\/\/e.issuu.com https:\/\/insight.adsrvr.org https:\/\/match.adsrvr.org https:\/\/*.rfihub.com https:\/\/*.rlets.com https:\/\/pixel-sync.sitescout.com https:\/\/adservices.brandcdn.com https:\/\/d1eoo1tco6rr5e.cloudfront.net https:\/\/pella.quiq-api.com https:\/\/recruitingbypaycor.com; frame-ancestors 'self' *.pellawi.com pellawi.com *.pellaomaha.com rest-preview.contentstack.com app.contentstack.com app.unbounce.com unbouncepages.com preview-share-ui.contentstack.com; report-uri \/api\/csp-report\/","count":1},{"content-security-policy-report-only":" script-src 'self' https:\/\/tl.karlsruhe.de; object-src 'none'; base-uri 'self'","count":1},{"content-security-policy-report-only":" report-uri https:\/\/events.mercadolibre.com\/csp\/reports?identifier=0Y02WhisiNU725ZBluFmP7kljwOsFZCd0x4qSYi1pEYuWxJ1zVGTK8Llqgqqs-XrlS4=&policy_id=71&user_id=&request_id=b73d447a-e1c0-400c-ac28-bfa291bbab0b; report-to csp-endpoint-ywhisinuzblufmpkljwosfzcdxqsyipeyuwxjzvgtkllqgqqsxrls; frame-ancestors 'none'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https:\/\/webcachex-eu.datareporter.eu https:\/\/liwestat.containers.piwik.pro; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https:\/\/*.openstreetmap.org blob: https:\/\/youtube.com https:\/\/*.youtube.com https:\/\/liwest.at\/ https:\/\/*.liwest.at\/ https:\/\/*.hubspot.com https:\/\/www.facebook.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/px.ads.linkedin.com *.px.ads.linkedin.com https:\/\/*.hsforms.com https:\/\/alb.reddit.com bat.bing.com https:\/\/www.google.at https:\/\/www.google.de https:\/\/www.googletagmanager.com https:\/\/maps.wien.gv.at https:\/\/fonts.gstatic.com https:\/\/webcache-eu.datareporter.eu https:\/\/webcachex-eu.datareporter.eu https:\/\/maps.googleapis.com https:\/\/*.econda-monitor.de; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https:\/\/*.frcapi.com\/ https:\/\/*.liwest.at\/ https:\/\/liwest-penalty-shootout.supernice.games https:\/\/liwest-gscheit-digital.supernice.games https:\/\/liwest-gscheit-digital-2.supernice.games https:\/\/liwest-gscheit-digital-3.supernice.games https:\/\/liwest-qots.web.app https:\/\/liwest-tron.web.app https:\/\/*.google.com https:\/\/liwest-spendenaktion.web.app https:\/\/www.googletagmanager.com https:\/\/liwest.speedtestcustom.com https:\/\/forms-eu1.hsforms.com https:\/\/aax-eu.amazon-adsystem.com https:\/\/js.stripe.com; connect-src 'self' data: https:\/\/*.openstreetmap.org https:\/\/st.liwest.at\/ https:\/\/*.friendlycaptcha.eu https:\/\/*.datareporter.eu https:\/\/swarmcrawler.datareporter.eu https:\/\/*.hsforms.com https:\/\/hubspot-forms-static-embed-eu1.s3.amazonaws.com https:\/\/*.econda-monitor.de https:\/\/px.ads.linkedin.com https:\/\/analytics.tiktok.com https:\/\/*.hubapi.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/*.hubspot.com https:\/\/pixel-config.reddit.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/pixels.spotify.com https:\/\/*.etracker.com https:\/\/*.etracker.de https:\/\/analytics-ipv6.tiktokw.us https:\/\/www.google.com https:\/\/www.google.at https:\/\/l.ecn-ldr.de https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/maps.wien.gv.at https:\/\/api.opendkm.at https:\/\/static.hsappstatic.net https:\/\/www.googletagmanager.com https:\/\/api.ipgeolocation.io https:\/\/srv.doris.at https:\/\/maps.googleapis.com https:\/\/c.amazon-adsystem.com https:\/\/aax-eu.amazon-adsystem.com https:\/\/ara.paa-reporting-advertising.amazon https:\/\/ad.doubleclick.net https:\/\/signalcheck-api.staging.liwest.at https:\/\/liwestat.containers.piwik.pro https:\/\/liwestat.piwik.pro; script-src-elem 'self' 'report-sample' 'unsafe-inline' inline https:\/\/youtube.com https:\/\/*.youtube.com https:\/\/*.datareporter.eu https:\/\/*.webcachex-eu.datareporter.eu https:\/\/cdnjs.cloudflare.com https:\/\/*.googletagmanager.com https:\/\/*.hsforms.net https:\/\/*.vimeo.com https:\/\/liwestat.containers.piwik.pro https:\/\/tracknet.twyn.com https:\/\/l.ecn-ldr.de https:\/\/api.ipify.org https:\/\/connect.facebook.net https:\/\/bat.bing.com https:\/\/analytics.tiktok.com https:\/\/js-eu1.hsadspixel.net https:\/\/googleads.g.doubleclick.net https:\/\/*.etracker.com https:\/\/*.etracker.de https:\/\/pixel.byspotify.com https:\/\/js-eu1.hs-scripts.com https:\/\/js-eu1.hs-banner.com https:\/\/static.hsappstatic.net https:\/\/js-eu1.hs-analytics.net https:\/\/js-eu1.hs-banner.net https:\/\/js-eu1.hubspot.com https:\/\/snap.licdn.com https:\/\/www.redditstatic.com https:\/\/maps.googleapis.com https:\/\/*.econda-monitor.de https:\/\/c.amazon-adsystem.com https:\/\/capi-automation.s3.us-east-2.amazonaws.com https:\/\/stapecdn.com; style-src 'self' 'report-sample' https:\/\/*.datareporter.eu; worker-src blob: 'report-sample'; font-src 'self' data: https:\/\/fonts.gstatic.com; style-src-elem 'self' 'report-sample' 'unsafe-inline' inline https:\/\/webcache.datareporter.eu https:\/\/webcache-eu.datareporter.eu https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/www.googletagmanager.com; report-uri https:\/\/www.liwest.at\/@http-reporting?csp=report&requestTime=1788492296792218&requestHash=ee383ab6413a5bc006eb0d0ccea697cee7768258","count":1},{"content-security-policy-report-only":" default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' blob: https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.posthog.com https:\/\/*.i.posthog.com https:\/\/posthog.spartan.com; connect-src 'self' https:\/\/*.posthog.com https:\/\/*.i.posthog.com https:\/\/*.spartan.com; worker-src 'self' blob: data:;","count":1},{"content-security-policy-report-only":" script-src 'unsafe-eval' 'unsafe-inline' https: 'nonce-c41df6465411c2fd73a5ae83' 'strict-dynamic' 'report-sample'  https:\/\/*.criteo.com https:\/\/static.criteo.net  https:\/\/*.facebook.com https:\/\/connect.facebook.net  https:\/\/*.hotjar.com js.braintreegateway.com assets.braintreegateway.com www.paypalobjects.com *.paypal.com songbird.cardinalcommerce.com *.googletagmanager.com ; worker-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri https:\/\/csp.tourradar.com","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' *.bing.com *.taboola.com *.fullstory.com *.geocomply.com *.kameleoon.eu *.ads-twitter.com *.google-analytics.com *.kaizengaming.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.sportradarserving.com *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co *.app.delivery *.betano.co *.betgenius.com *.cloudflare.com *.cloudflareinsights.com *.cookielaw.org *.creativecdn.com *.facebook.net *.gmlinteractive.com *.googletagmanager.com *.kameleoon.io *.lgrckt-in.com *.optimove.net *.sportradar.com *.tostarsbuilding.com *.betano.pt *.datadome.co d32tdr35c4icxo.cloudfront.net *.adform.net; worker-src 'self' blob:; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=CgAG2lW1scKdloJmwXBxjdDCk3xZg8nKNEBU1YDE8Tw-1788493210.698937-1.0.1.1-x2ry.F8k2Dp2_lmr5sbHhIXT7pVgvkPY_0uN3VnSXNp43IYEvc0xGsFI.pIVKfOftqFtYNg4TyIeOBIipk5YVOIbrg1SvZ6S8dI2jQcoE6_S0Cm3Uawc4P5ZIBGY61ld9xAR64hSldRSvgU_u6hNvYj7iNdFXSSBoksAKUR1CQXNiArw8xESc2V9LIwwwG6F; report-to cf-yaaxajntlxqvjaby","count":1},{"content-security-policy-report-only":" report-uri https:\/\/www.yelp.com\/csp_report_only?id=24eab42b12195cb0&page=csp_report_frame_directives%2Cfull_site_ssl_csp_report_directives&policy_hash=41d0c45536d2a082f11d1cd0e00fde7f&site=www&timestamp=1788494106; frame-ancestors 'self' https:\/\/*.yelp.com; default-src https:; img-src https: data: blob:; script-src https: data: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' data:; font-src data: https:; child-src https: yelp-webview:\/\/* yelp:\/\/* data:; object-src 'none'; worker-src blob: https:; base-uri 'self'; form-action https:","count":1},{"content-security-policy-report-only":" default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-n3n3zG5ShFnSQFcg2KRF4g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src https: wss: 'unsafe-inline' 'unsafe-eval'; img-src https: data: blob:; worker-src blob: 'self'; font-src https: data: 'unsafe-inline' 'unsafe-eval'; media-src https: wss: blob: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors https:\/\/*.sephora.demandware.net;","count":1},{"content-security-policy-report-only":" default-src 'none'; connect-src 'self' https:\/\/*.mediaflow.com https:\/\/mfstatic.com https:\/\/matomo.malmo.se https:\/\/edge.api.brightcove.com https:\/\/manifest.prod.boltdns.net https:\/\/house-fastly-signed-eu-west-1-prod.brightcovecdn.com; font-src 'self' data: https:\/\/mfstatic.com; frame-src 'self' https:\/\/stadsatlas.malmo.se https:\/\/*.mediaflow.com https:\/\/www.youtube.com; img-src 'self' data: https:\/\/devenemang.malmo.se https:\/\/test-devenemang.malmo.se https:\/\/assets.malmo.se https:\/\/malmo.se https:\/\/metrics.brightcove.com https:\/\/*.prod.boltdns.net https:\/\/assets.mediaflowpro.com https:\/\/*.brightcovecdn.com https:\/\/*.inviewer.se https:\/\/i.ytimg.com; media-src 'self' https:\/\/*.brightcovecdn.com https:\/\/*.mediaflow.com blob:; script-src 'self' 'nonce-c778fd80-a819-11f1-97bc-7567264bdd64' https:\/\/matomo.malmo.se https:\/\/players.brightcove.net 'strict-dynamic' 'unsafe-eval'; script-src-elem 'self' 'nonce-c778fd80-a819-11f1-97bc-7567264bdd64' https:\/\/matomo.malmo.se https:\/\/www.google.com\/recaptcha https:\/\/players.brightcove.net https:\/\/mfstatic.com https:\/\/www.youtube.com; style-src 'self' https:\/\/malmo.se https:\/\/mfstatic.com 'unsafe-inline' data:;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:\/\/*.topendsports.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/app.termly.io https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/*.sportradar.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https: https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/static.cloudflareinsights.com; media-src 'self' blob:; frame-src * blob:; frame-ancestors 'self'; base-uri 'self'; form-action 'self';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com *.googleapis.com static.cloudflareinsights.com unpkg.com translate.googleapis.com; object-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com unpkg.com; img-src 'self' data: www.google-analytics.com www.googletagmanager.com v1.sahistory.org.za http:\/\/v1.sahistory.org.za http:\/\/www.v1.sahistory.org.za https:\/\/v1.sahistory.org.za *.tile.openstreetmap.org unpkg.com http:\/\/www.sahistory.org.za http:\/\/sahistory.org.za https:\/\/www.sahistory.org.za translate.google.com translate.googleapis.com fonts.gstatic.com https:\/\/shop.sahistory.org.za https:; media-src 'self'; frame-src 'self' www.youtube.com youtube.com https:\/\/www.google.com https:\/\/maps.google.com https:\/\/maps.google.co.za https:\/\/translate.google.com; frame-ancestors 'self'; child-src 'self'; font-src 'self' fonts.gstatic.com data: https:; connect-src 'self' *.google-analytics.com www.google-analytics.com www.googletagmanager.com translate.googleapis.com; report-uri \/report-csp-violation; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" report-uri \/upload\/csp\/csp.php; report-to csp-endpoints","count":1},{"content-security-policy-report-only":" default-src 'self'; style-src 'self'; script-src 'self' https:\/\/maps.googleapis.com https:\/\/googletagmanager.com https:\/\/munchkin.marketo.net https:\/\/script.crazyegg.com https:\/\/www.influ2.com https:\/\/bat.bing.com https:\/\/ws.zoominfo.com https:\/\/www.clickcease.com https:\/\/tracking.g2crowd.com https:\/\/go.qgenda.com https:\/\/cdn.bizible.com https:\/\/j.6sc.co https:\/\/googleads.g.doubleclick.net; connect-src 'self' https:\/\/maps.googleapis.com https:\/\/script.crazyegg.com https:\/\/761-yjz-981.mktoresp.com https:\/\/www.google-analytics.com https:\/\/t.influ2.com https:\/\/c.6sc.co https:\/\/ipv6.6sc.co https:\/\/stats.g.doubleclick.net  https:\/\/tracking.g2crowd.com https:\/\/ws.zoominfo.com https:\/\/realtime.ramblechat.com;  img-src 'self'  https:\/\/www.google.com https:\/\/bat.bing.com;  font-src 'self'  https:\/\/fonts.gstatic.com;  frame-src 'self' https:\/\/td.doubleclick.net;  object-src 'self'; upgrade-insecure-requests;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/securepubads.g.doubleclick.net https:\/\/js.stripe.com https:\/\/*.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/cdn.jsdelivr.net https:\/\/cdn.ampproject.org https:\/\/platform.twitter.com https:\/\/www.instagram.com https:\/\/telegram.org https:\/\/d3js.org https:\/\/code.jquery.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:\/\/img.novayagazeta.eu https:\/\/imagedelivery.net https:\/\/placehold.co https:\/\/www.google-analytics.com https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/api.stripe.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/js.stripe.com https:\/\/www.google.com https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/t.me https:\/\/*.vk.com https:\/\/vk.com https:\/\/platform.twitter.com https:\/\/www.instagram.com https:\/\/player.vimeo.com https:\/\/w.soundcloud.com https:\/\/rutube.ru https:\/\/datawrapper.dwcdn.net https:\/\/*.dwcdn.net https:\/\/*.flourish.studio https:\/\/flo.uri.sh https:\/\/www.facebook.com; font-src 'self' data:; object-src 'none'; base-uri 'self'; form-action 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/cdnjs.cloudflare.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/s7.addthis.com https:\/\/googleads.g.doubleclick.net 'unsafe-inline' 'unsafe-eval'; style-src 'self' https:\/\/fonts.googleapis.com https:\/\/cdn.jsdelivr.net 'unsafe-inline'; img-src 'self' data: https:\/\/www.google.com https:\/\/widgets.guidestar.org https:\/\/googleads.g.doubleclick.net https:\/\/www.googletagmanager.com; font-src 'self' https:\/\/fonts.gstatic.com https:\/\/cdn.jsdelivr.net; connect-src 'self' https:\/\/www.google.com; object-src 'none'; frame-src https:\/\/www.googletagmanager.com https:\/\/googleads.g.doubleclick.net; base-uri 'self';","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' googleads.g.doubleclick.net connect.facebook.net www.googletagmanager.com s.pinimg.com bat.bing.com p.cquotient.com cdn.cquotient.com *.cottontraders.com *.klarna.com *.bazaarvoice.com *.stylitics.com *.googleapis.com *.gstatic.com *.pinimg.com *.dynamicyield.com *.poq.io *.facebook.net *.sovendus.com *.hotjar.com *.co.uk *.iesnare.com *.wistia.com *.creativecdn.com *.onetrust.com *.digicert.com *.attn.tv *.trustpilot.com *.doubleclick.net *.googletagmanager.com *.cloudflare.com *.jsdelivr.net *.jquery.com *.klarnacdn.net *.globalpay.com *.google.com *.sentry-cdn.com *.github.io *.pcapredict.com *.cquotient.com *.evri.com *.norton.com *.bing.com *.scarabresearch.com *.adalyser.com *.pinterest.com *.dotomi.com *.yieldify.com *.teads.tv *.ahrefs.com; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=lyzHRnlKyf7T7CLfKUflLC487a6NfFtQpu.KajS5w1w-1788502332.5758684-1.0.1.1-7HR.fl6VKzta.1g3ELwv0._BnRizrG6mlxEYG_YZdwiaQJ8geWaDdVmJ8fXdHwMpY.KNobntxjCSc14qOr3GPDy792BlBMBu5F2jez8_Jh3N2UjdrW1V6xf2QTchbfCydJu9rLM_Ex_iKxezerQJgXu41gqORO2Dmmy4tv4oxxrZ0_9HCOKfR59dJmX5WLMWjDQnZ6P5T0e2kgB0XPfmXA; report-to cf-ornsjqlbbvkxhxuw","count":1},{"content-security-policy-report-only":" frame-ancestors 'self' https:\/\/www.bing.com https:\/\/www.google.at https:\/\/www.google.de https:\/\/*.search.yahoo.com; report-uri https:\/\/tudorwatch.com\/csp-reports\/?req_id=dd14f483","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' adform.net *.adform.net *.bing.com *.taboola.com *.fullstory.com *.geocomply.com *.kameleoon.eu *.ads-twitter.com *.google-analytics.com *.kaizengaming.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.sportradarserving.com *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co *.app.delivery *.betano.co *.betgenius.com *.cloudflare.com *.cloudflareinsights.com *.cookielaw.org *.creativecdn.com *.facebook.net *.gmlinteractive.com *.googletagmanager.com *.kameleoon.io *.lgrckt-in.com *.optimove.net *.sportradar.com *.tostarsbuilding.com *.betano.de *.datadome.co d32tdr35c4icxo.cloudfront.net logr-in.com *.logr-in.com; worker-src 'self' blob:; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=vOzgdjQttybFRcPlfrhs2eVm19sLgdoJA4RKatvRSgo-1788503649.3847883-1.0.1.1-vpBWSKglNBiV1nVVUM6b6aQvKLKRt5y30daJWOXg1cVmmq.HNjlc011BiCKHTEjpKmGgM3iCkwhmY61ubJFUNjCJihoYs5eVUbO3VRyvDpAZ0I0bAev_LbsgvjYwrhnfF.mha0x.JryGpBzi1.26TpNwBlT_6OC58L16BprGEP0KFADfkGiJVOK6qgnBAqUH; report-to cf-duexvjfpfnqqvgtp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-ij6W_FdpDHWn6q7VFdURzQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-5UHW9wkFoG1QedCYWvMDKA' cdn.jsdelivr.net; style-src-elem 'self' 'nonce-5UHW9wkFoG1QedCYWvMDKA' cdn.jsdelivr.net; style-src-attr 'unsafe-inline'; font-src 'self' cdn.jsdelivr.net; img-src 'self' data:; frame-ancestors 'self'; form-action 'self'","count":1},{"content-security-policy-report-only":" default-src woobox.com https:\/\/glgefieuo4.execute-api.us-east-2.amazonaws.com\/babylock\/top-of-the-line-form-submissions player.vimeo.com https:\/\/t5nizayt41.execute-api.us-east-2.amazonaws.com\/production\/bl_validateEmailOnWebForm81ForWebForm84 hcaptcha.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri sewactivate.phc.brother woobox.com paypal.com vimeo.com facebook.com *.vimeocdn.com player.vimeo.com 'self' 'unsafe-inline'; frame-src sewactivate.phc.brother vimeo.com *.vimeocdn.com player.vimeo.com fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca https:\/\/www.googletagmanager.com\/ https:\/\/*.google.com newassets.hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; media-src *.us-east-1.amazonaws.com *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; style-src *.fontawesome.com *.googletagmanager.com fonts.googleapis.com *.adobe.com https:\/\/static.klaviyo.com https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; img-src *.bing.com *.bttrack.com *.d3k81ch9hvuctc.cloudfront.net *.cookielaw.org *.clarity.ms *.simpli.fi *.doubleclick.net *.cloudflare.com *.amazonaws.com https:\/\/bttrack.com\/Pixel\/Retarget\/2864 shareasale.com bttrack.com *.cloudfront.net img.babylock.com *.reddit.com s3.amazonaws.com google.com data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net *.paypal.com *.typekit.net *.gstatic.com *.googleapis.com https:\/\/*.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca s3.us-east-1.amazonaws.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com *.hsforms.net *.hsforms.com 'self' data: https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net data: 'self' 'unsafe-inline'; script-src *.bing.com *.clarity.ms *.bttrack.com *.vibe.co *.loggly.com *.cookielaw.org *.referralcandy.com *.online-metrix.net *.simpli.fi https:\/\/bttrack.com\/engagement\/js shareasale-analytics.com bttrack.com *.execute-api.us-east-2.amazonaws.com *.us-east-1.amazonaws.com https:\/\/api-gateway.scriptintel.io\/service\/visitorintel\/visitorTag\/277188\/script.js *.redditstatic.com https:\/\/www.dwin1.com\/60357.js *.fullstory.com *.klaviyo.com cdn.cookielaw.org sewactivate.phc.brother woobox.com vimeo.com *.vimeocdn.com player.vimeo.com assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.googleapis.com https:\/\/*.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.hsforms.net *.hsforms.com *.gstatic.com https:\/\/cdn-scripts.signifyd.com https:\/\/cdn-scripts.signifyd.com\/api\/script-tag.js https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; font-src *.klaviyo.com *.fontawesome.com www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; connect-src *.bttrack.com *.cookielaw.org *.clarity.ms *.vibe.co *.loggly.com *.bing.com *.datadome.co bttrack.com *.execute-api.us-east-2.amazonaws.com https:\/\/api-gateway.scriptintel.io\/service\/visitorintel\/visitorTag\/277188\/script.js *.sentry-cdn.com *.prodregistryv2.org *.reddit.com *.fullstory.com *.klaviyo.com cdn.cookielaw.org google.com sewactivate.phc.brother woobox.com https:\/\/glgefieuo4.execute-api.us-east-2.amazonaws.com\/babylock\/top-of-the-line-form-submissions https:\/\/t5nizayt41.execute-api.us-east-2.amazonaws.com\/production\/bl_validateEmailOnWebForm81ForWebForm84 *.googlesyndication.com player.vimeo.com dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com t.elasticsuite.io *.hsforms.net *.hsforms.com https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com google.com *.intercomcdn.com *.intercom.io *.zdassets.com *.tiktok.com *.bing.com *.jsdelivr.net *.scarabresearch.com *.facebook.net *.storyblok.com *.vercel-scripts.com *.vercel.app *.ggmgastro.com *.ggmgastro.cz *.ggmgastro.xyz *.ggmgastro.fyi *.ggmgastro.dev *.vercel.com *.vercel.live vercel.live vercel.app *.cookiefirst.com *.beslist.nl *.pinterest.com *.smarketer.de *.doubleclick.net *.googleapis.com *.kk-resources.com *.pinimg.com *.clarity.ms googletagmanager.com *.googletagmanager.com *.google-analytics.com *.paypal.com *.adyen.com unpkg.com *.unpkg.com *.hotjar.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.cookiefirst.com *.adyen.com *.google-analytics.com googletagmanager.com *.googletagmanager.com *.google.com google.com *.googleadservices.com; object-src 'none'; base-uri 'self'; connect-src 'self' *.google.com google.com *.googleadservices.com *.doubleclick.net wss:\/\/*.intercom.io *.intercom.io *.zdassets.com *.tiktok.com *.tiktokw.us *.ggmgastro.com *.ggmgastro.cz *.ggmgastro.xyz *.ggmgastro.fyi *.ggmgastro.dev *.adyen.com *.cookiefirst.com *.beslist.nl *.pinterest.com *.algolia.net *.algolia.io *.bing.net *.smarketer.de *.googleapis.com *.clarity.ms *.scarabresearch.com *.googlesyndication.com *.google.com *.google.de *.google-analytics.com *.analytics.google.com googletagmanager.com *.googletagmanager.com *.paypal.com *.bing.com *.kelkoogroup.net *.facebook.com *.emarsys.net; font-src 'self' 'unsafe-inline' data:; frame-src 'self' *; img-src 'self' data: *.ggmgastro.com *.ggmgastro.cz *.ggmgastro.xyz *.ggmgastro.fyi *.ggmgastro.dev *.intercomcdn.com *.intercomassets.com *.zendesk.com *.cookiefirst.com *.adyen.com *.bynder.com ggm.bynder.com *.orbitvu.co *.youtube.com *.ytimg.com *.twgdns.com *.gstatic.com *.bing.net *.facebook.com *.facebook.net *.google.com google.com *.google.de *.paypalobjects.com *.storyblok.com *.doubleclick.net googletagmanager.com *.googletagmanager.com *.bing.com; manifest-src 'self'; media-src 'self'; worker-src 'self'; frame-ancestors 'self' https:\/\/app.storyblok.com","count":1},{"content-security-policy-report-only":" default-src 'self' https: data: streamable.com; www.youtube.com; script-src 'none' 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https: www.googletagmanager.com; www.youtube.com;; style-src-elem 'self' 'unsafe-inline' https: cdn.lineicons.com; fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline' https:; img-src 'self' https: data: cmefnbespa.cloudimg.io; forms-eu1.hsforms.com;; connect-src 'self' 'none' https: data: www.google.com; forms-eu1.hsforms.com; forms-eu1.hscollectedforms.net; text\/plain; media-src 'self' https: www.youtube.com; frame-src 'self' https: www.youtube.com; streamable.com; www.google.com; sandbox allow-same-origin","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdn.jsdelivr.net; font-src 'self' https:\/\/fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com; frame-src 'self' https:\/\/www.google.com https:\/\/maps.google.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self';","count":1},{"content-security-policy-report-only":" base-uri 'self'; default-src data: *.youtube.com *.youtu.be *.vimeo.com *.google.com *.google-analytics.com *.googletagmanager.com cdn.alireviews.io cdn.jsdelivr.net *.alicdn.com *.weaverse.io *.shopify.com *.myshopify.com 'self' https:\/\/cdn.shopify.com https:\/\/shopify.com 'nonce-c780147e07e439aa8e95539b66a89de5'; frame-ancestors 'none'; style-src *.weaverse.io *.shopify.com *.myshopify.com 'self' 'unsafe-inline' https:\/\/cdn.shopify.com; connect-src vimeo.com *.google-analytics.com *.weaverse.io *.shopify.com *.myshopify.com 'self' https:\/\/cdn.shopify.com\/ https:\/\/monorail-edge.shopifysvc.com https:\/\/checkout.westside.com https:\/\/my-westside.myshopify.com","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/*.fontawesome.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googletagmanager.com https:\/\/*.googleapis.com; style-src 'self' 'unsafe-inline'; font-src 'self' https:\/\/*.fontawesome.com\/; img-src 'self' https:\/\/*.googletagmanager.com data:; frame-src 'self' https:\/\/*.youtube.com; connect-src 'self' https:\/\/*.fontawesome.com\/ https:\/\/*.googleapis.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com;","count":1},{"content-security-policy-report-only":" report-uri https:\/\/www.yelp.com\/csp_report_only?id=7c761cb0b9782ea5&page=csp_report_frame_directives%2Cfull_site_ssl_csp_report_directives&policy_hash=41d0c45536d2a082f11d1cd0e00fde7f&site=www&timestamp=1788509372; frame-ancestors 'self' https:\/\/*.yelp.com; default-src https:; img-src https: data: blob:; script-src https: data: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' data:; font-src data: https:; child-src https: yelp-webview:\/\/* yelp:\/\/* data:; object-src 'none'; worker-src blob: https:; base-uri 'self'; form-action https:","count":1},{"content-security-policy-report-only":" base-uri 'self'; default-src data: *.youtube.com *.youtu.be *.vimeo.com *.google.com *.google-analytics.com *.googletagmanager.com cdn.alireviews.io cdn.jsdelivr.net *.alicdn.com *.weaverse.io *.shopify.com *.myshopify.com 'self' 'nonce-a5140ce9a0588504ba3f50f3283abfab' https:\/\/cdn.shopify.com https:\/\/shopify.com; frame-ancestors 'none'; style-src *.weaverse.io *.shopify.com *.myshopify.com 'self' 'unsafe-inline' https:\/\/cdn.shopify.com; connect-src vimeo.com *.shopifysvc.com https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/www.googletagmanager.com https:\/\/tagassistant.google.com https:\/\/websdk.appsflyersdk.com https:\/\/banner.appsflyersdk.com https:\/\/creatives-cdn.appsflyersdk.com https:\/\/cnstrc.com https:\/\/*.cnstrc.com *.weaverse.io *.shopify.com *.myshopify.com 'self' https:\/\/cdn.shopify.com\/ https:\/\/monorail-edge.shopifysvc.com https:\/\/theoutnet-checkout.weaverse.dev https:\/\/wcacjh-wq.myshopify.com; script-src https:\/\/cdn.shopify.com https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/cct.google https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/websdk.appsflyersdk.com https:\/\/cnstrc.com https:\/\/*.cnstrc.com https:\/\/cdn.tapcart.com 'nonce-a5140ce9a0588504ba3f50f3283abfab'; img-src 'self' data: blob: https:\/\/cdn.shopify.com https:\/\/shopify.com https:\/\/*.shopify.com https:\/\/*.myshopify.com cdn.alireviews.io cdn.jsdelivr.net *.alicdn.com https:\/\/cnstrc.com https:\/\/*.cnstrc.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/impressions.onelink.me *.weaverse.io *.shopify.com *.myshopify.com; font-src 'self' data: https:\/\/cdn.shopify.com https:\/\/cdn.appsflyer.com; frame-src *.youtube.com *.youtu.be *.vimeo.com https:\/\/www.googletagmanager.com https:\/\/maps.google.com *.weaverse.io *.shopify.com *.myshopify.com","count":1},{"content-security-policy-report-only":" default-src 'self' *.rgi.net *.rgfi.net; script-src 'self' *.rgi.net *.rgfi.net 'unsafe-inline'; img-src 'self' *.rgi.net *.rgfi.net; frame-src 'self' *.rgi.net www.youtube.com www.youtube-nocookie.com; frame-ancestors 'self' *.data-line.de *.rgi.net; object-src 'none'; report-uri https:\/\/gindat.report-uri.com\/r\/d\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/*.raydium.io https:\/\/static.moonpay.com https:\/\/www.googletagmanager.com https:\/\/static.cloudflareinsights.com; img-src 'self' data: https:\/\/*.raydium.io https:\/\/wsrv.nl; connect-src 'self' https:\/\/*.raydium.io wss:\/\/raydium-frontend.rpcpool.com https:\/\/*.jup.ag https:\/\/api.moonpay.com https:\/\/tiplink.io wss:\/\/*.walletconnect.com https:\/\/www.google-analytics.com http:\/\/*.solana.com https:\/\/*.rpcpool.com; frame-ancestors 'none'; frame-src 'self' https:\/\/*.walletconnect.org https:\/\/*.walletconnect.com https:\/\/v2.moongate.one https:\/\/buy.moonpay.com; report-uri \/api\/csp-report\/","count":1},{"content-security-policy-report-only":" default-src *.kuajingmaihuo.com *.cdnfe.com wss:\/\/seller.kuajingmaihuo.com *.jumio.ai blob: data: 'unsafe-eval' 'unsafe-inline'; report-uri \/api\/sec-csp\/110000010\/report","count":1},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/www.vogue.com.au\/csp-reports","count":1},{"content-security-policy-report-only":" connect-src 'self' https:\/\/catalog.union.edu https:\/\/ep1.adtrafficquality.google https:\/\/25livepub.collegenet.com\/; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/use.fontawesome.com https:\/\/use.typekit.net; frame-src 'self' https:\/\/player.vimeo.com https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com; img-src 'self' data: https:\/\/cedimages.blob.core.windows.net https:\/\/www.google.com https:\/\/25livepub.collegenet.com\/; object-src 'none'; script-src 'self' 'report-sample' addtocalendar.com https:\/\/catalog.union.edu https:\/\/cdnjs.cloudflare.com https:\/\/code.jquery.com https:\/\/cse.google.com https:\/\/www.google.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/platform-api.sharethis.com https:\/\/player.vimeo.com https:\/\/use.fontawesome.com https:\/\/www.googletagmanager.com https:\/\/ep2.adtrafficquality.google\/ https:\/\/cdn.jsdelivr.net https:\/\/polyfill-fastly.io https:\/\/unpkg.com https:\/\/ws.sharethis.com; script-src-elem 'self' 'report-sample' addtocalendar.com https:\/\/catalog.union.edu https:\/\/cdnjs.cloudflare.com https:\/\/code.jquery.com https:\/\/cse.google.com https:\/\/www.google.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/platform-api.sharethis.com https:\/\/player.vimeo.com https:\/\/use.fontawesome.com https:\/\/www.googletagmanager.com https:\/\/ep2.adtrafficquality.google\/ https:\/\/cdn.jsdelivr.net https:\/\/polyfill-fastly.io https:\/\/unpkg.com https:\/\/ws.sharethis.com; style-src 'self' 'report-sample' 'unsafe-inline' addtocalendar.com https:\/\/catalog.union.edu https:\/\/fonts.googleapis.com https:\/\/use.fontawesome.com https:\/\/use.typekit.net https:\/\/www.google.com https:\/\/www.google.com\/cse\/static\/ https:\/\/cdn.jsdelivr.net; style-src-elem 'self' 'report-sample' https:\/\/www.google.com\/cse\/static\/ addtocalendar.com https:\/\/catalog.union.edu https:\/\/cdn.jsdelivr.net https:\/\/fonts.googleapis.com https:\/\/use.fontawesome.com https:\/\/use.typekit.net; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: data: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.danskespil.dk https:\/\/www.googletagmanager.com https:\/\/app.varify.io https:\/\/sc-static.net https:\/\/1984danskespil.boost.ai; frame-ancestors 'self'; report-uri \/dli\/scapi\/danskespil\/security\/csp\/testreport; report-to csp-ro-endpoint","count":1},{"content-security-policy-report-only":" default-src *; script-src 'self' 'nonce-ZmYyOTIxc3htU1d2VnFtVVMxN0pFQ2FWWHN1STI3ZFFhMWo0RHVVT1Fy'; object-src *; style-src 'self' 'nonce-ZmYyOTIxc3htU1d2VnFtVVMxN0pFQ2FWWHN1STI3ZFFhMWo0RHVVT1Fy' 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.pubnub.com www.googletagmanager.com cdn.sift.com scripts.clarity.ms www.clarity.ms unpkg.com *.clarity.ms googleads.g.doubleclick.net www.gstatic.com ssljscdn.airbrake.io www.google.com cdn.debugbear.com cdn.jsdelivr.net\/npm\/tinymce@5.4.1\/ static.ads-twitter.com bat.bing.com maps.googleapis.com code.jquery.com\/jquery-1.9.1.min.js landing-assets.niteflirt.com netdna.bootstrapcdn.com us1.clevertap-prod.com d2r1yp2w7bby2u.cloudfront.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com womp.me www.gstatic.com cdn.jsdelivr.net netdna.bootstrapcdn.com landing-assets.niteflirt.com; img-src * 'self' data: blob:; font-src 'self' data: fonts.gstatic.com wompme.blob.core.windows.net netdna.bootstrapcdn.com use.typekit.net img1.wsimg.com; connect-src 'self' analytics.google.com clarity.ms *.clarity.ms www.google.com pndsn.com *.pndsn.com www.googletagmanager.com region1.analytics.google.com stats.g.doubleclick.net fu-tango.niteflirt.com www.google-analytics.com forum.niteflirt.com files.niteflirt.com api.airbrake.io www.google.ca www.google.co.uk data.debugbear.com fu-sierra.niteflirt.com maps.googleapis.com ps1.pndsn.com y.clarity.ms analytics.twitter.com t.co nf-prod-3yf9blsl.livekit.cloud bat.bing.com bat.bing.net notifier-configs.airbrake.io *.doubleclick.net www.googleadservices.com; media-src * 'self'; frame-src 'self' www.googletagmanager.com platphorm.zendesk.com support.niteflirt.com t.niteflirt.com www.google.com j3lme1u30b.execute-api.us-west-2.amazonaws.com www.youtube.com; worker-src 'self' blob:; report-uri https:\/\/siteuri.report-uri.com\/r\/t\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" base-uri 'self'; connect-src 'self' https:\/\/*.clarity.ms\/collect https:\/\/*.google-analytics.com\/g\/collect https:\/\/*.launchdarkly.com https:\/\/ad.doubleclick.net https:\/\/amplify.outbrain.com https:\/\/analytics.google.com https:\/\/analytics.tiktok.com https:\/\/api.segment.io https:\/\/aplo-evnt.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/browser-intake-datadoghq.eu https:\/\/cdn.segment.com https:\/\/content.hotjar.io https:\/\/conversions-config.reddit.com https:\/\/cookie-cdn.cookiepro.com https:\/\/geolocation.onetrust.com https:\/\/graphql.contentful.com https:\/\/id.sage.com https:\/\/ingress.eu2.rum-ingress-coralogix.com\/browser\/v1beta\/logs https:\/\/maps.googleapis.com https:\/\/pagead2.googlesyndication.com https:\/\/pagesense-collect.zoho.in https:\/\/pixel-config.reddit.com https:\/\/pixel.quantserve.com https:\/\/pixels.spotify.com https:\/\/postcodes.io https:\/\/privacyportal.cookiepro.com https:\/\/px.ads.linkedin.com https:\/\/rum-http-intake.logs.datadoghq.eu https:\/\/stats.g.doubleclick.net https:\/\/tide.api.kustomerapp.com https:\/\/tr.outbrain.com https:\/\/widget.trustpilot.com https:\/\/www.cloudflare.com https:\/\/www.facebook.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/www.redditstatic.com https:\/\/z.clarity.ms; default-src 'none'; font-src 'self' https:\/\/cdn.kustomerapp.com https:\/\/fonts.gstatic.com https:\/\/web-assets.tide.co; frame-ancestors 'self' https:\/\/uniclient-demo.web.app; frame-src 'self' https:\/\/14663405.fls.doubleclick.net https:\/\/forms.zohopublic.in https:\/\/widget.trustpilot.com https:\/\/www.googletagmanager.com https:\/\/www.youtube.com; img-src 'self' https:\/\/ade.googlesyndication.com https:\/\/bat.bing.net https:\/\/c.clarity.ms https:\/\/cdn.prod2.kustomerhostedcontent.com https:\/\/downloads.ctfassets.net https:\/\/heapanalytics.com https:\/\/images.ctfassets.net https:\/\/impressions.onelink.me https:\/\/px.ads.linkedin.com\/collect https:\/\/q.quora.com https:\/\/web-assets.tide.co https:\/\/www.facebook.com https:\/\/www.google.co.in https:\/\/www.google.com; manifest-src 'self'; media-src 'self' https:\/\/videos.ctfassets.net; object-src 'none'; report-to csp-reporting-endpoint; report-uri https:\/\/himeuxl4lvthe4qjotq57poewi0ykgih.lambda-url.eu-west-2.on.aws\/; script-src 'self' 'unsafe-inline' https:\/\/a.quora.com https:\/\/amplify.outbrain.com https:\/\/analytics.tiktok.com\/ https:\/\/assets.apollo.io\/ https:\/\/bat.bing.com https:\/\/cdn-in.pagesense.io https:\/\/cdn.datatables.net https:\/\/cdn.heapanalytics.com https:\/\/cdn.jsdelivr.net https:\/\/cdn.kustomerapp.com https:\/\/cdn.rum-ingress-coralogix.com https:\/\/cdn.segment.com\/ https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/ https:\/\/code.jquery.com https:\/\/connect.facebook.net\/ https:\/\/cookie-cdn.cookiepro.com\/ https:\/\/d34r8q7sht0t9k.cloudfront.net https:\/\/d38xvr37kwwhcm.cloudfront.net https:\/\/geotargetly-api-2.com https:\/\/googleads.g.doubleclick.net https:\/\/googleusercontent.com https:\/\/js.stripe.com https:\/\/kit.fontawesome.com https:\/\/payments.tide.co https:\/\/pixel.byspotify.com\/ https:\/\/rules.quantcount.com https:\/\/script.hotjar.com https:\/\/scripts.clarity.ms https:\/\/scripts.clarity.ms\/ https:\/\/secure.quantserve.com https:\/\/snap.licdn.com https:\/\/stackpath.bootstrapcdn.com https:\/\/static.ads-twitter.com https:\/\/static.hotjar.com https:\/\/tr.outbrain.com https:\/\/wave.outbrain.com https:\/\/web-assets.tide.co\/ https:\/\/widget.trustpilot.com\/ https:\/\/www.clarity.ms https:\/\/www.datadoghq-browser-agent.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com\/ https:\/\/www.gstatic.com https:\/\/www.redditstatic.com; style-src 'self' 'unsafe-inline' https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com\/ajax\/libs https:\/\/fonts.googleapis.com\/css https:\/\/stackpath.bootstrapcdn.com https:\/\/use.typekit.net; worker-src 'self'","count":1},{"content-security-policy-report-only":" connect-src 'self' https:\/\/analytics.tiktok.com https:\/\/api.hubspot.com https:\/\/cdn.cookielaw.org https:\/\/cdn.dreamdata.cloud https:\/\/content.hotjar.io https:\/\/cta-service-cms2.hubspot.com https:\/\/forms.hsforms.com https:\/\/px.ads.linkedin.com https:\/\/script.crazyegg.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/edge.api.brightcove.com https:\/\/bat.bing.com\/ https:\/\/manifest.prod.boltdns.net https:\/\/sdl.brightcovecdn.com https:\/\/logx.optimizely.com https:\/\/*.optimizely.com; default-src 'self'; font-src 'self' data: https:\/\/use.typekit.net https:\/\/*.optimizely.com; frame-ancestors 'none'; frame-src https:\/\/www.googletagmanager.com https:\/\/googleads.g.doubleclick.net https:\/\/cm.g.doubleclick.net https:\/\/www.facebook.com https:\/\/calendly.com https:\/\/forms.hsforms.com https:\/\/a5098497884553216.cdn.optimizely.com https:\/\/a5098497884553216.cdn-pci.optimizely.com; img-src 'self' data: https:\/\/bat.bing.com https:\/\/forms-na1.hsforms.com https:\/\/ib.adnxs.com https:\/\/perf-na1.hsforms.com https:\/\/px.ads.linkedin.com https:\/\/secure.adnxs.com https:\/\/track.accountinsight.cloud https:\/\/track.hubspot.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.google.com.ua https:\/\/metrics.brightcove.com https:\/\/www.googletagmanager.com https:\/\/cf-images.us-east-1.prod.boltdns.net https:\/\/cdn.optimizely.com https:\/\/app.optimizely.com; media-src 'self' blob:; script-src 'self' 'nonce-54P1yNPRj5sgBiZ9EITZvw==' https:\/\/a.dpmsrv.com https:\/\/analytics.tiktok.com https:\/\/bat.bing.com https:\/\/cdn.cookielaw.org https:\/\/cdn.dreamdata.cloud https:\/\/cm.g.doubleclick.net https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net https:\/\/ib.adnxs.com https:\/\/js.hs-analytics.net https:\/\/js.hs-banner.com https:\/\/js.hs-scripts.com https:\/\/js.hsforms.net https:\/\/js.hubspot.com https:\/\/js.usemessages.com https:\/\/s.dpmsrv.com https:\/\/script.crazyegg.com https:\/\/script.hotjar.com https:\/\/serve.nrich.ai https:\/\/snap.licdn.com https:\/\/st.getsitecontrol.com https:\/\/static.hotjar.com https:\/\/widgets.getsitecontrol.com https:\/\/www.googletagmanager.com https:\/\/assets.calendly.com https:\/\/static.hsappstatic.net https:\/\/48752163.fs1.hubspotusercontent-na1.net https:\/\/cdnjs.cloudflare.com https:\/\/players.brightcove.net wss:\/\/ws.hotjar.com\/ https:\/\/*.optimizely.com https:\/\/optimizely.s3.amazonaws.com https:\/\/cdn-assets-prod.s3.amazonaws.com 'unsafe-eval'; style-src 'self' 'unsafe-inline' https:\/\/*.typekit.net https:\/\/assets.calendly.com https:\/\/*.optimizely.com https:\/\/app.optimizely.com; worker-src 'self' blob:;","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/gfiber-static-marketing-jt-team","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-LBIFkNVYCpbz5KnE6GIydQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/insight.adsrvr.org https:\/\/match.adsrvr.org https:\/\/www.youtube.com https:\/\/deloitte.zoom.us https:\/\/player.youku.com https:\/\/www2.mindray.com https:\/\/mindrayna.my.salesforce.com; report-uri https:\/\/www.mindray.com\/bin\/csp-report","count":1},{"content-security-policy-report-only":" connect-src 'self' https:\/\/www.google-analytics.com https:\/\/muneer.cx https:\/\/www.googletagmanager.com; base-uri 'self' *.mindrocketsapis.com cdn.mindrocketsapis.com","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval' 'report-sample' https:\/\/www.googletagmanager.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/static.claydar.com https:\/\/assets.calendly.com https:\/\/*.clarity.ms https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/js.zi-scripts.com https:\/\/cdn.livechatinc.com https:\/\/api.livechatinc.com 'sha256-0chmwFk0zaA528yFfGV7J9ppIpdfTPPULncDF3WG7Zs=' 'sha256-0kcUUdwBUXGRalfzKhiOWFpcywPUYqxKhgAqmAAsR2I=' 'sha256-1ujEHdU+duOxDSSkqurqjLhNxDNp67+yiyl740\/2EFs=' 'sha256-2Y0871auOwzodqWsksyi+E73X041g5BMKV472XtEQEQ=' 'sha256-99Bo+njfzUGSaYgK28XTOB8fpcW3gi4N2foXNqKsHI8=' 'sha256-BF0290pkb3jxQsE7z00xR8Imp8X34FLC88L0lkMnrGw=' 'sha256-D05nszH6qU1m17MPatblfE18sEw2jlLwPNww8VCTFvg=' 'sha256-E7eW+lx4eE0Qnt0n8j2IgNBl0oPAY4G4TZ2M8JMPAxM=' 'sha256-FZNAaz7XqqRaalCeZhh+IT7lG+ec\/M6Nc3uGdVNatQY=' 'sha256-FedFtFhzaL3d88QW74h8I8FTqXA7TUeDKdq9x3n2MoE=' 'sha256-GJvAV9TSPVOvgUi\/HSPIuI7JG3HnB3ADFF+AKhMEK68=' 'sha256-JTOtibrtli572u0zd4ObGPdbBiTKIV5Hwh81MMxKfCI=' 'sha256-LVECawnM4sgmFIhi+XZhwVvWkDknBrsJXa10abW2KQ8=' 'sha256-NFtl0GgK40snZ0eJy52afHo9A\/h76SfVFP9rM1mpP1A=' 'sha256-Q2BPg90ZMplYY+FSdApNErhpWafg2hcRRbndmvxuL\/Q=' 'sha256-QuRd1mHvALmeXEIIh0jbFKVumeoHZlkUTeDYOaI0Q+o=' 'sha256-QxkqaGLGOPe0cwlo8vxHE\/r\/AMl0\/JBQk3JRxAkc2Ss=' 'sha256-QzWFZi+FLIx23tnm9SBU4aEgx4x8DsuASP07mfqol\/c=' 'sha256-R8z+6AS8rjLxTyNLaJnZAKNHxoOP\/KRXQc+0ZYuhWXo=' 'sha256-RMxgFAIXZnsb6tfQ0py7Ar7j8Hs8gMJfCbmEZ9ykNRU=' 'sha256-UWyKU4HKg6hQ0SHaMnCe3cyamXhQAAp+BJXCIOn6Ua0=' 'sha256-VOEd8AZ89\/O\/VoRtZYLCM0+558I3OO5tXt\/6FRwjNPI=' 'sha256-Ya0pUYrC7nM5Cn\/056TyVuEiz6dFGrzmkWzgON0pF0U=' 'sha256-ZkO\/fPKEfThsaMyZme9hXxBGae889IevzbHd8crvoSM=' 'sha256-eIXWvAmxkr251LJZkjniEK5LcPF3NkapbJepohwYRIc=' 'sha256-epk+3\/vOEXeMNdT8o2rDvQVUxfdsG7hrZ6WCzhs7wLI=' 'sha256-gpzPlppGSdBRLHtgwHt13O6yfLbHM1Un9grOT3K7YkQ=' 'sha256-h0t8\/ReVm191540dtQOdjBMMhJasSTJeeHzU2GrsMXM=' 'sha256-hokQeCh0qrVE3rmBF66ajwHcmB1N2uTm2IqkaixNw98=' 'sha256-i7vu8\/tSHHUB+0u+P1xDY+RTQwUq4pV5nV49yh9Hrcs=' 'sha256-j+EAPJI6iBewX3bHyxhwF22YJmQQ83ZB6gGWr9CfWHA=' 'sha256-kY3n27VOjXu4PKdB0SuwGF3spqKJpDBgQU95UPz03Sg=' 'sha256-lgLgRE1vUz0I2f1H7nbFV7YVpnVd5bXxp2YaLj3u2wY=' 'sha256-mCAqmHmXYaLPLvDoHjf1cJvQERgS+3QojAiHjRQquS8=' 'sha256-o\/ESuWREqp6JWqCQ30AL3sOz9U\/tbkweeomv9aX6viI=' 'sha256-qLi7rvIgHLq6rmRGPwP667p4h0KPzdAk14n7+uCIuzk=' 'sha256-rCsG2Kc0cu0W0qGiiucg1wdtU+CX9AYaHX5g8mHgYRQ=' 'sha256-wClgBu+zVvecI+mWxRA39jV\/gXf5JP6DRbEa1GQ8HRs=' 'sha256-yIJFD61EySVvhRy0yHBN\/uyryipna78WMSu3rb3lLaE='; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https:; style-src-attr 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; worker-src 'self' blob:; form-action 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'none'; report-uri https:\/\/o35289.ingest.us.sentry.io\/api\/4510697743777792\/security\/?sentry_key=7f3e790b6aa23ae85f085f3af68d1684&sentry_environment=production","count":1},{"content-security-policy-report-only":" frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/*.serpstat.com https:\/\/www.facebook.com https:\/\/www.paypal.com https:\/\/www.sandbox.paypal.com; report-uri \/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/fonts.googleapis.com;        script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/js.stripe.com https:\/\/ connect.facebook.net\/ https:\/\/www.google-analytics.com\/analytics.js https:\/\/www.googletagmanager.com\/gtag\/js https:\/\/api.sardine.ai https:\/\/static.zdassets.com\/ https:\/\/ekr.zdassets https:\/\/ekr.zendesk.com https:\/\/*.zopim.com wss:\/\/demonifty.zendesk.com wss:\/\/*.zopim.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/edge.fullstory.com\/s\/ https:\/\/static.ads-twitter.com\/uwt.js https:\/\/sc-static.net\/ https:\/\/googleads.g.doubleclick.net\/ https:\/\/tr.snapchat.com;        style-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https:\/\/fonts.googleapis.com *.live-video.net;        script-src-elem 'self' 'unsafe-inline' https:\/\/js.stripe.com https:\/\/api.dev.sardine.ai https:\/\/edge.fullstory.com https:\/\/www.googletagmanager.com\/gtag\/js https:\/\/connect.facebook.net https:\/\/static.ads-twitter.com\/uwt.js https:\/\/sc-static.net\/scevent.min.js https:\/\/www.google.com\/recaptcha\/ https:\/\/static.zdassets.com\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/tr.snapchat.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/api.sardine.ai https:\/\/unpkg.com\/@google\/model-viewer\/dist\/model-viewer.min.js https:\/\/www.youtube.com https:\/\/www.googleoptimize.com https:\/\/www.clarity.ms *.live-video.net;        img-src https: blob: data:;        connect-src https:\/\/browser-intake-datadoghq.com https:\/\/www.niftygateway.com https:\/\/niftygateway.com https:\/\/analytics.google.com https:\/\/*.clarity.ms https:\/\/niftygateway.zendesk.com https:\/\/api.niftygateway.com https:\/\/odysseymarket.niftygateway.com https:\/\/api.sandbox.niftygateway.com https:\/\/stats.g.doubleclick.net https:\/\/www.facebook.com\/tr\/ https:\/\/www.google-analytics.com https:\/\/www.clarity.ms wss:\/\/widget-mediator.zopim.com https:\/\/nifty-qa100.service.aws-qa.sd.gem.link https:\/\/demonifty.zendesk.com https:\/\/ekr.zdassets.com https:\/\/encrypted-tbn0.gstatic.com\/images https:\/\/lh3.googleusercontent.com https:\/\/tr.snapchat.com https:\/\/eth-goerli.alchemyapi.io https:\/\/search-api-staging.s-niftygateway-001-use1.svc.gem.link https:\/\/search-api.niftygateway.com https:\/\/search-api-dev.d-niftygateway-001-use1.svc.gem.link https:\/\/ipfs.io https:\/\/rs.fullstory.com https:\/\/session-replay.browser-intake-datadoghq.com https:\/\/eth-mainnet.alchemyapi.io https:\/\/api.cloudinary.com\/v1_1\/nifty_gateway\/auto\/upload https:\/\/openseauserdata.com https:\/\/rum.browser-intake-datadoghq.com https:\/\/api.x.immutable.com https:\/\/i.seadn.io https:\/\/cdn.optimizely.com https:\/\/img.seadn.io https:\/\/storage.opensea.io https:\/\/api.opensea.io https:\/\/sdk.iad-03.braze.com *.live-video.net ;        font-src https:\/\/fonts.gstatic.com https:\/\/use.typekit.net\/ 'self';        object-src 'self';        media-src https:\/\/media.niftygateway.com https:\/\/static.zdassets.com https:\/\/openseauserdata.com https:\/\/storage.opensea.io https:\/\/res.cloudinary.com blob:;        frame-src https:\/\/js.stripe.com https:\/\/www.google.com https:\/\/api.sardine.ai https:\/\/api.dev.sardine.ai https:\/\/tr.snapchat.com\/ https:\/\/www.youtube.com https:\/\/webusprd01.ihsmtaxsolutions.com\/Nifty\/ https:\/\/td.doubleclick.net\/;        frame-ancestors 'self';        worker-src blob:;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-bqNafwI0aiWeQrIy9QWdag' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' https:\/\/*.adriver.ru https:\/\/app.uiscom.ru https:\/\/banner.appsflyersdk.com https:\/\/kinescope.io https:\/\/kinescopecdn.net https:\/\/*.kinescopecdn.net https:\/\/leadgen-prod-api.uiscom.ru https:\/\/privacy-cs.mail.ru https:\/\/ruprod.strmerce.live https:\/\/telegram.org https:\/\/top-fwz1.mail.ru https:\/\/tracker.comagic.ru https:\/\/uis-prod-msk-omni-widget-server.uiscom.ru https:\/\/www.googletagmanager.com wss:\/\/mc.yandex.com wss:\/\/mc.yandex.ru https:\/\/mc.yandex.by https:\/\/mc.yandex.com https:\/\/yandex.ru https:\/\/*.yandex.ru https:\/\/yandex.net https:\/\/*.yandex.net https:\/\/yandexcloud.net https:\/\/*.yandexcloud.net https:\/\/yastatic.net https:\/\/*.yastatic.net; font-src 'self' data: https:\/\/app.uiscom.ru https:\/\/ru.streamerce.live https:\/\/streamerce.ru; frame-src 'self' https:\/\/*.adriver.ru https:\/\/mc.yandex.ru https:\/\/rutube.ru https:\/\/smartcaptcha.yandexcloud.net https:\/\/www.googletagmanager.com; img-src 'self' data: https:\/\/*.adriver.ru https:\/\/leadgen-minio.uiscom.ru https:\/\/mc.yandex.com https:\/\/medsi.ru https:\/\/medsi2.ru https:\/\/prod-msk-leadgen-minio.uiscom.ru https:\/\/ru.streamerce.live https:\/\/ruprod.strmerce.live https:\/\/streamerce.ru https:\/\/top-fwz1.mail.ru https:\/\/uis-prod-msk-leadgen-minio.uiscom.ru https:\/\/vk.com https:\/\/www.googletagmanager.com https:\/\/yandex.ru https:\/\/*.yandex.ru https:\/\/yandex.net https:\/\/*.yandex.net https:\/\/yandexcloud.net https:\/\/*.yandexcloud.net https:\/\/yastatic.net https:\/\/*.yastatic.net; media-src 'self' blob:; script-src 'self' 'unsafe-eval'; script-src-attr 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https:\/\/*.adriver.ru https:\/\/app.uiscom.ru https:\/\/mc.yandex.com https:\/\/medsi.ru https:\/\/privacy-cs.mail.ru https:\/\/ru.streamerce.live https:\/\/smartcallback.ru https:\/\/streamerce.ru https:\/\/telegram.org https:\/\/top-fwz1.mail.ru https:\/\/vk.com https:\/\/websdk.appsflyer.com https:\/\/www.googletagmanager.com https:\/\/yandex.ru https:\/\/*.yandex.ru https:\/\/yandex.net https:\/\/*.yandex.net https:\/\/yandexcloud.net https:\/\/*.yandexcloud.net https:\/\/yastatic.net https:\/\/*.yastatic.net; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https:\/\/app.uiscom.ru https:\/\/ru.streamerce.live https:\/\/streamerce.ru https:\/\/yandex.ru https:\/\/*.yandex.ru https:\/\/yandex.net https:\/\/*.yandex.net https:\/\/yandexcloud.net https:\/\/*.yandexcloud.net https:\/\/yastatic.net https:\/\/*.yastatic.net; worker-src 'self' blob: https:\/\/smartcaptcha.yandexcloud.net; report-uri \/csp-report;","count":1},{"content-security-policy-report-only":" default-src 'self' http: https: wss: data: blob: 'unsafe-inline'; connect-src 'self' *.mypurecloud.com.au lifeline.payments2us.com *.typeform.com stockist.co *.youtube.com *.spotify.com *.vimeo.com vimeo.com cdn.usefathom.com *.hotjar.com *.clarity.ms *.google.com *.googletagmanager.com *.googleapis.com *.google-analytics.com *.gstatic.com connect.facebook.net lifeline.serviceseeker.com.au us-central1-stockist-prod.cloudfunctions.net *.bugherd.com; report-uri \/report-csp-violation","count":1},{"content-security-policy-report-only":" default-src * 'self' data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' cactusvpn.com www.cactusvpn.com billing.cactusvpn.com; report-uri https:\/\/75943a29954faa0d1b365a52c248c905.report-uri.com\/r\/d\/csp\/reportOnly;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.amplitude.com https:\/\/*.hs-scripts.com https:\/\/*.hs-analytics.net https:\/\/*.hsforms.net https:\/\/*.hubspot.com https:\/\/js.hs-scripts.com https:\/\/*.intercom.io https:\/\/*.intercomcdn.com https:\/\/*.sentry.io https:\/\/*.ingest.sentry.io https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/*.vercel-insights.com https:\/\/va.vercel-scripts.com https:\/\/cdn.cookielaw.org https:\/\/connect.facebook.net https:\/\/*.facebook.com https:\/\/snap.licdn.com https:\/\/static.ads-twitter.com https:\/\/*.twitter.com https:\/\/bat.bing.com https:\/\/c.amazon-adsystem.com https:\/\/www.redditstatic.com https:\/\/pixel.byspotify.com https:\/\/analytics.tiktok.com https:\/\/*.tiktok.com https:\/\/widget.trustpilot.com https:\/\/fast.wistia.com https:\/\/fast.wistia.net https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/www.instagram.com https:\/\/holded.chilipiper.com https:\/\/app.holded.com https:\/\/accounts.google.com https:\/\/*.doubleclick.net https:\/\/js.hs-banner.com https:\/\/browser.sentry-cdn.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/vercel.live https:\/\/*.clarity.ms https:\/\/sdks.shopifycdn.com; style-src 'self' 'unsafe-inline' https:\/\/*.googleapis.com https:\/\/*.intercomcdn.com https:\/\/widget.trustpilot.com https:\/\/cdn.cookielaw.org https:\/\/fast.wistia.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/*.intercomcdn.com https:\/\/cdn.cookielaw.org https:\/\/*.wistia.com https:\/\/*.wistia.net; img-src 'self' data: blob: https:\/\/cdn.prod.website-files.com https:\/\/lh3.googleusercontent.com https:\/\/*.googleusercontent.com https:\/\/api.holded.com https:\/\/i.imgur.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/*.intercomcdn.com https:\/\/*.intercom-attachments-1.com https:\/\/*.trustpilot.com https:\/\/*.facebook.com https:\/\/www.facebook.com https:\/\/px.ads.linkedin.com https:\/\/*.tiktok.com https:\/\/bat.bing.com https:\/\/*.amazon-adsystem.com https:\/\/t.co https:\/\/cdn.cookielaw.org https:\/\/*.wistia.com https:\/\/*.wistia.net https:\/\/*.twitter.com https:\/\/www.google.com https:\/\/www.google.ad https:\/\/www.google.ae https:\/\/www.google.com.af https:\/\/www.google.com.ag https:\/\/www.google.com.ai https:\/\/www.google.al https:\/\/www.google.am https:\/\/www.google.co.ao https:\/\/www.google.com.ar https:\/\/www.google.at https:\/\/www.google.com.au https:\/\/www.google.az https:\/\/www.google.ba https:\/\/www.google.com.bd https:\/\/www.google.be https:\/\/www.google.bf https:\/\/www.google.bg https:\/\/www.google.com.bh https:\/\/www.google.bj https:\/\/www.google.com.bn https:\/\/www.google.com.bo https:\/\/www.google.com.br https:\/\/www.google.bs https:\/\/www.google.co.bw https:\/\/www.google.by https:\/\/www.google.com.bz https:\/\/www.google.ca https:\/\/www.google.cd https:\/\/www.google.cg https:\/\/www.google.ch https:\/\/www.google.ci https:\/\/www.google.cl https:\/\/www.google.cm https:\/\/www.google.com.co https:\/\/www.google.co.cr https:\/\/www.google.com.cu https:\/\/www.google.cv https:\/\/www.google.com.cy https:\/\/www.google.cz https:\/\/www.google.de https:\/\/www.google.dj https:\/\/www.google.dk https:\/\/www.google.dm https:\/\/www.google.com.do https:\/\/www.google.dz https:\/\/www.google.com.ec https:\/\/www.google.ee https:\/\/www.google.com.eg https:\/\/www.google.es https:\/\/www.google.com.et https:\/\/www.google.fi https:\/\/www.google.com.fj https:\/\/www.google.fr https:\/\/www.google.ga https:\/\/www.google.ge https:\/\/www.google.gg https:\/\/www.google.com.gh https:\/\/www.google.com.gi https:\/\/www.google.gl https:\/\/www.google.gm https:\/\/www.google.gr https:\/\/www.google.com.gt https:\/\/www.google.gy https:\/\/www.google.com.hk https:\/\/www.google.hn https:\/\/www.google.hr https:\/\/www.google.ht https:\/\/www.google.hu https:\/\/www.google.co.id https:\/\/www.google.ie https:\/\/www.google.co.il https:\/\/www.google.im https:\/\/www.google.co.in https:\/\/www.google.iq https:\/\/www.google.is https:\/\/www.google.it https:\/\/www.google.je https:\/\/www.google.com.jm https:\/\/www.google.jo https:\/\/www.google.co.jp https:\/\/www.google.co.ke https:\/\/www.google.com.kh https:\/\/www.google.kg https:\/\/www.google.co.kr https:\/\/www.google.com.kw https:\/\/www.google.kz https:\/\/www.google.la https:\/\/www.google.com.lb https:\/\/www.google.li https:\/\/www.google.lk https:\/\/www.google.co.ls https:\/\/www.google.lt https:\/\/www.google.lu https:\/\/www.google.lv https:\/\/www.google.com.ly https:\/\/www.google.co.ma https:\/\/www.google.md https:\/\/www.google.me https:\/\/www.google.mg https:\/\/www.google.mk https:\/\/www.google.ml https:\/\/www.google.com.mm https:\/\/www.google.mn https:\/\/www.google.ms https:\/\/www.google.com.mt https:\/\/www.google.mu https:\/\/www.google.mv https:\/\/www.google.mw https:\/\/www.google.com.mx https:\/\/www.google.com.my https:\/\/www.google.co.mz https:\/\/www.google.com.na https:\/\/www.google.com.ng https:\/\/www.google.com.ni https:\/\/www.google.ne https:\/\/www.google.nl https:\/\/www.google.no https:\/\/www.google.com.np https:\/\/www.google.nr https:\/\/www.google.nu https:\/\/www.google.co.nz https:\/\/www.google.com.om https:\/\/www.google.com.pa https:\/\/www.google.com.pe https:\/\/www.google.com.pg https:\/\/www.google.com.ph https:\/\/www.google.com.pk https:\/\/www.google.pl https:\/\/www.google.com.pr https:\/\/www.google.ps https:\/\/www.google.pt https:\/\/www.google.com.py https:\/\/www.google.com.qa https:\/\/www.google.ro https:\/\/www.google.ru https:\/\/www.google.rw https:\/\/www.google.com.sa https:\/\/www.google.com.sb https:\/\/www.google.sc https:\/\/www.google.se https:\/\/www.google.com.sg https:\/\/www.google.sh https:\/\/www.google.si https:\/\/www.google.sk https:\/\/www.google.com.sl https:\/\/www.google.sn https:\/\/www.google.so https:\/\/www.google.sm https:\/\/www.google.sr https:\/\/www.google.st https:\/\/www.google.com.sv https:\/\/www.google.td https:\/\/www.google.tg https:\/\/www.google.co.th https:\/\/www.google.com.tj https:\/\/www.google.tl https:\/\/www.google.tm https:\/\/www.google.tn https:\/\/www.google.to https:\/\/www.google.com.tr https:\/\/www.google.tt https:\/\/www.google.com.tw https:\/\/www.google.co.tz https:\/\/www.google.com.ua https:\/\/www.google.co.ug https:\/\/www.google.co.uk https:\/\/www.google.com.uy https:\/\/www.google.co.uz https:\/\/www.google.com.vc https:\/\/www.google.co.ve https:\/\/www.google.com.vn https:\/\/www.google.vu https:\/\/www.google.ws https:\/\/www.google.rs https:\/\/www.google.co.za https:\/\/www.google.co.zm https:\/\/www.google.co.zw https:\/\/www.google.cat https:\/\/i.ytimg.com https:\/\/static.intercomassets.com https:\/\/avatars.githubusercontent.com https:\/\/connect.facebook.net https:\/\/www.googleadservices.com https:\/\/*.reddit.com https:\/\/*.doubleclick.net https:\/\/*.clarity.ms https:\/\/cdn.shopify.com; connect-src 'self' https:\/\/*.amplitude.com https:\/\/api.eu.amplitude.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/www.google.com https:\/\/www.google.ad https:\/\/www.google.ae https:\/\/www.google.com.af https:\/\/www.google.com.ag https:\/\/www.google.com.ai https:\/\/www.google.al https:\/\/www.google.am https:\/\/www.google.co.ao https:\/\/www.google.com.ar https:\/\/www.google.at https:\/\/www.google.com.au https:\/\/www.google.az https:\/\/www.google.ba https:\/\/www.google.com.bd https:\/\/www.google.be https:\/\/www.google.bf https:\/\/www.google.bg https:\/\/www.google.com.bh https:\/\/www.google.bj https:\/\/www.google.com.bn https:\/\/www.google.com.bo https:\/\/www.google.com.br https:\/\/www.google.bs https:\/\/www.google.co.bw https:\/\/www.google.by https:\/\/www.google.com.bz https:\/\/www.google.ca https:\/\/www.google.cd https:\/\/www.google.cg https:\/\/www.google.ch https:\/\/www.google.ci https:\/\/www.google.cl https:\/\/www.google.cm https:\/\/www.google.com.co https:\/\/www.google.co.cr https:\/\/www.google.com.cu https:\/\/www.google.cv https:\/\/www.google.com.cy https:\/\/www.google.cz https:\/\/www.google.de https:\/\/www.google.dj https:\/\/www.google.dk https:\/\/www.google.dm https:\/\/www.google.com.do https:\/\/www.google.dz https:\/\/www.google.com.ec https:\/\/www.google.ee https:\/\/www.google.com.eg https:\/\/www.google.es https:\/\/www.google.com.et https:\/\/www.google.fi https:\/\/www.google.com.fj https:\/\/www.google.fr https:\/\/www.google.ga https:\/\/www.google.ge https:\/\/www.google.gg https:\/\/www.google.com.gh https:\/\/www.google.com.gi https:\/\/www.google.gl https:\/\/www.google.gm https:\/\/www.google.gr https:\/\/www.google.com.gt https:\/\/www.google.gy https:\/\/www.google.com.hk https:\/\/www.google.hn https:\/\/www.google.hr https:\/\/www.google.ht https:\/\/www.google.hu https:\/\/www.google.co.id https:\/\/www.google.ie https:\/\/www.google.co.il https:\/\/www.google.im https:\/\/www.google.co.in https:\/\/www.google.iq https:\/\/www.google.is https:\/\/www.google.it https:\/\/www.google.je https:\/\/www.google.com.jm https:\/\/www.google.jo https:\/\/www.google.co.jp https:\/\/www.google.co.ke https:\/\/www.google.com.kh https:\/\/www.google.kg https:\/\/www.google.co.kr https:\/\/www.google.com.kw https:\/\/www.google.kz https:\/\/www.google.la https:\/\/www.google.com.lb https:\/\/www.google.li https:\/\/www.google.lk https:\/\/www.google.co.ls https:\/\/www.google.lt https:\/\/www.google.lu https:\/\/www.google.lv https:\/\/www.google.com.ly https:\/\/www.google.co.ma https:\/\/www.google.md https:\/\/www.google.me https:\/\/www.google.mg https:\/\/www.google.mk https:\/\/www.google.ml https:\/\/www.google.com.mm https:\/\/www.google.mn https:\/\/www.google.ms https:\/\/www.google.com.mt https:\/\/www.google.mu https:\/\/www.google.mv https:\/\/www.google.mw https:\/\/www.google.com.mx https:\/\/www.google.com.my https:\/\/www.google.co.mz https:\/\/www.google.com.na https:\/\/www.google.com.ng https:\/\/www.google.com.ni https:\/\/www.google.ne https:\/\/www.google.nl https:\/\/www.google.no https:\/\/www.google.com.np https:\/\/www.google.nr https:\/\/www.google.nu https:\/\/www.google.co.nz https:\/\/www.google.com.om https:\/\/www.google.com.pa https:\/\/www.google.com.pe https:\/\/www.google.com.pg https:\/\/www.google.com.ph https:\/\/www.google.com.pk https:\/\/www.google.pl https:\/\/www.google.com.pr https:\/\/www.google.ps https:\/\/www.google.pt https:\/\/www.google.com.py https:\/\/www.google.com.qa https:\/\/www.google.ro https:\/\/www.google.ru https:\/\/www.google.rw https:\/\/www.google.com.sa https:\/\/www.google.com.sb https:\/\/www.google.sc https:\/\/www.google.se https:\/\/www.google.com.sg https:\/\/www.google.sh https:\/\/www.google.si https:\/\/www.google.sk https:\/\/www.google.com.sl https:\/\/www.google.sn https:\/\/www.google.so https:\/\/www.google.sm https:\/\/www.google.sr https:\/\/www.google.st https:\/\/www.google.com.sv https:\/\/www.google.td https:\/\/www.google.tg https:\/\/www.google.co.th https:\/\/www.google.com.tj https:\/\/www.google.tl https:\/\/www.google.tm https:\/\/www.google.tn https:\/\/www.google.to https:\/\/www.google.com.tr https:\/\/www.google.tt https:\/\/www.google.com.tw https:\/\/www.google.co.tz https:\/\/www.google.com.ua https:\/\/www.google.co.ug https:\/\/www.google.co.uk https:\/\/www.google.com.uy https:\/\/www.google.co.uz https:\/\/www.google.com.vc https:\/\/www.google.co.ve https:\/\/www.google.com.vn https:\/\/www.google.vu https:\/\/www.google.ws https:\/\/www.google.rs https:\/\/www.google.co.za https:\/\/www.google.co.zm https:\/\/www.google.co.zw https:\/\/www.google.cat https:\/\/www.googleadservices.com https:\/\/t.co https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/*.onetrust.com https:\/\/*.litix.io https:\/\/pixels.spotify.com https:\/\/*.reddit.com https:\/\/*.tiktokw.us blob: https:\/\/*.hubspot.com https:\/\/*.hs-analytics.net https:\/\/*.hsforms.net https:\/\/*.hsforms.com https:\/\/api.hubapi.com https:\/\/*.intercom.io wss:\/\/*.intercom.io https:\/\/*.sentry.io https:\/\/*.ingest.sentry.io https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/*.cookielaw.org https:\/\/*.facebook.com https:\/\/px.ads.linkedin.com https:\/\/*.tiktok.com https:\/\/analytics.tiktok.com https:\/\/bat.bing.com https:\/\/*.amazon-adsystem.com https:\/\/*.twitter.com https:\/\/app.holded.com https:\/\/api.holded.com https:\/\/api.supersonik.ai https:\/\/latest.currency-api.pages.dev https:\/\/*.wistia.com https:\/\/*.wistia.net https:\/\/*.clarity.ms https:\/\/*.myshopify.com; frame-src 'self' https:\/\/*.youtube.com https:\/\/*.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/*.hsforms.net https:\/\/*.intercom.io https:\/\/www.intercom-reporting.com https:\/\/aax-eu.amazon-adsystem.com https:\/\/app.supersonik.ai https:\/\/accounts.google.com https:\/\/holded.chilipiper.com https:\/\/app.livestorm.co https:\/\/*.wistia.com https:\/\/*.wistia.net https:\/\/www.instagram.com https:\/\/www.tiktok.com https:\/\/*.doubleclick.net https:\/\/www.facebook.com https:\/\/*.facebook.com https:\/\/www.google.com https:\/\/vercel.live https:\/\/*.myshopify.com https:\/\/*.shopify.com https:\/\/shop.app; media-src 'self' blob: data: https:\/\/*.youtube.com https:\/\/player.vimeo.com https:\/\/*.wistia.com https:\/\/*.wistia.net; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/forms.hsforms.com https:\/\/app.holded.com https:\/\/www.facebook.com; frame-ancestors 'none'; report-uri https:\/\/o448960.ingest.us.sentry.io\/api\/4511387690205184\/security\/?sentry_key=6867907cf3e65f0e365d418527f14341&sentry_environment=production; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self'; img-src data: blob: *; script-src-elem 'self' 'strict-dynamic' assets.ubuntu.com www.google-analytics.com www.googletagmanager.com www.youtube.com asciinema.org player.vimeo.com script.crazyegg.com www.googleadservices.com js.zi-scripts.com *.g.doubleclick.net www.google.com www.gstatic.com www.brighttalk.com snap.licdn.com connect.facebook.net maps.googleapis.com www.redditstatic.com munchkin.marketo.net *.googlesyndication.com cdn.jsdelivr.net https:\/\/esm.sh https:\/\/cdn.jsdelivr.net buttons.github.io cdn.livechatinc.com api.livechatinc.com secure.livechatinc.com www.tfaforms.com 'nonce-VJfLO90ftQn2acp4bKrLJA'; font-src 'self' assets.ubuntu.com fonts.google.com cdn.livechatinc.com secure.livechatinc.com; script-src 'self' blob: 'wasm-unsafe-eval' 'nonce-VJfLO90ftQn2acp4bKrLJA'; connect-src 'self' ubuntu.com analytics.google.com www.googletagmanager.com o4510662863749120.ingest.de.sentry.io www.google-analytics.com *.crazyegg.com *.g.doubleclick.net ad.doubleclick.net *.clarity.ms bat.bing.com bat.bing.net www.googleadservices.com js.zi-scripts.com *.google-analytics.com px.ads.linkedin.com ws.zoominfo.com youtube.com google.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cat www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws fonts.google.com maps.googleapis.com pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com https:\/\/esm.sh https:\/\/lottie.host https:\/\/cdn.jsdelivr.net *.analytics.google.com www.facebook.com *.googlesyndication.com *.mktoresp.com assets.ubuntu.com api.github.com raw.githubusercontent.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com web.facebook.com www.tfaforms.com unpkg.com; frame-src 'self' assets.ubuntu.com *.doubleclick.net *.crazyegg.com www.youtube.com\/ asciinema.org player.vimeo.com www.googletagmanager.com www.google.com www.brighttalk.com cdn.livechatinc.com secure.livechatinc.com cdn.livechat-static.com; style-src 'self' cdn.jsdelivr.net www.tfaforms.com 'unsafe-inline'; media-src 'self' res.cloudinary.com assets.ubuntu.com; child-src 'self' blob: youtube.com google.com fonts.google.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com; form-action 'self' https:\/\/pages.ubuntu.com https:\/\/ubuntu.com https:\/\/www.tfaforms.com; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; report-uri \/csp-report;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-lGnbxdiUB94GyczO7oClHw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" script-src 'strict-dynamic' 'self' https: 'nonce-5e1fd2aee5546453fd4df8830b94b81e89b344a5f585b566'; script-src-elem 'self' 'nonce-5e1fd2aee5546453fd4df8830b94b81e89b344a5f585b566'; object-src 'none'; base-uri 'none'; report-to csp-report","count":1},{"content-security-policy-report-only":" object-src 'none'; worker-src * blob: 'self'; script-src * data: blob: wasm-eval: 'self' 'unsafe-eval' 'unsafe-inline' 'report-sample'; child-src * blob:; connect-src * 'self' blob: data: properties:; form-action * 'self'; style-src * 'unsafe-inline' 'self' data:; default-src *; upgrade-insecure-requests; font-src * data: 'self'; img-src * blob: data: 'self'; frame-src * 'self'; report-uri https:\/\/o166208.ingest.sentry.io\/api\/1238795\/security\/?sentry_key=eebe259ebaa846d39aaae0e3404505ab&sentry_environment=production","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' https:\/\/basiliskcaptcha.com https:\/\/cdn.cpx-research.com https:\/\/support.faucetpay.io; style-src 'self' 'unsafe-inline' https:\/\/support.faucetpay.io https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/support.faucetpay.io https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/basiliskcaptcha.com wss:\/\/socket.faucetpay.io https:\/\/offers.cpx-research.com https:\/\/support.faucetpay.io wss:\/\/support.faucetpay.io https:\/\/api.fpshield.com; frame-src 'self' https:\/\/basiliskcaptcha.com https:; worker-src 'self' blob:","count":1},{"content-security-policy-report-only":" default-src 'self' *.usgs.gov 'unsafe-inline' *.amazonaws.com *.arcgis.com 'unsafe-eval'  *.arcgisonline.com *.hotjar.io *.google-analytics.com; script-src 'self' *.usgs.gov 'unsafe-inline' *.googletagmanager.com *.addtoany.com *.jsdelivr.net *.hotjar.com *.cfigroup.com *.cloud.gov *.gov *.youtube.com *.ytimg.com www.youtube.com s.ytimg.com  *.google-analytics.com *.google-analytics.com connect.facebook.net *.youtube.com\/iframe_api 'unsafe-eval' *.jquery.com *.cloudflare.com *.arcgis.com *.datatables.net *.dashjs.org *.googleapis.com; object-src noop.style; style-src 'self' *.usgs.gov 'unsafe-inline'  *.fontawesome.com *.cloudflare.com *.arcgis.com *.datatables.net *.gstatic.com; img-src 'self' 'unsafe-inline' *.alaska.edu *.amazonaws.com *.arcgis.com *.arcgisonline.com *.cfigroup.com *.cloud.gov *.cloudflare.com *.fontawesome.com *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gov *.gstatic.com *.nationalmap.gov *.nationsonline.org *.opengeo.org *.openstreetmap.org *.pixelcaster.com *.staticflickr.com *.ucweb.com *.usgs.gov *.ytimg.com avo.alaska.edu cdnjs.cloudflare.com data: *.openstreetmap.org ; media-src 'self' *.usgs.gov 'unsafe-inline' *.gstatic.com *.google.pn *.amazonaws.com; frame-src 'self' 'unsafe-inline' *.addtoany.com *.googletagmanager.com *.prismaaccess.com *.saasprotection.com *.trendmicro.com *.trendmicro.jp *.usgs.gov safe.menlosecurity.com *.youtube.com www.youtube.com; font-src 'self' 'unsafe-inline' *.alicdn.com *.amazonaws.com *.arcgis.com *.fontawesome.com *.gstatic.com *.jsdelivr.net *.mustcheck.com *.simplycodes.com *.slant.co *.typekit.net *.usgs.gov cdn.goin.cloud cdn.scite.ai data:; connect-src 'self' 'unsafe-inline' *.amazonaws.com *.arcgis.com *.arcgisonline.com *.cloud.gov *.cloudfront.net *.fontawesome.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gov *.gstatic.com *.hotjar.com *.hotjar.io *.jsdelivr.net *.usgs.gov cdn.jsdelivr.net wss:\/\/ws.hotjar.com","count":1},{"content-security-policy-report-only":" default-src 'self'; child-src 'self'; connect-src 'self' cdnjs.cloudflare.com *.algolia.net *.algolianet.com *.flickr.com *.googleapis.com *.google-analytics.com *.gstatic-cache.com *.typekit.com *.typekit.net https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/o15468.ingest.sentry.io\/api\/6068037\/envelope\/; font-src 'self' cdnjs.cloudflare.com *.typekit.net fonts.gstatic.com app.everviz.com\/static\/fonts\/; frame-src 'self' maps.google.com *.typekit.net player.vimeo.com translate.googleapis.com *.twitter.com www.google.com www.googletagmanager.com *.youtube.com; img-src 'self' data: cdnjs.cloudflare.com *.staticflickr.com *.twitter.com *.typekit.net *.googletagmanager.com fonts.gstatic.com translate.google.com comsec-web-static.s3.eu-west-1.amazonaws.com staging-new-commonwealth-files.s3.eu-west-2.amazonaws.com testing-new-commonwealth-files.s3.eu-west-2.amazonaws.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com; media-src 'self' comsec-web-static.s3.eu-west-1.amazonaws.com staging-new-commonwealth-files.s3.eu-west-2.amazonaws.com testing-new-commonwealth-files.s3.eu-west-2.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com code.highcharts.com connect.facebook.net embedr.flickr.com player.vimeo.com unpkg.com www.googletagmanager.com www.gstatic.com app.everviz.com\/resources\/js\/ app.everviz.com\/inject cdn.jsdelivr.net cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/nomoredirectory.org https:\/\/unpkg.com; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' *.googletagmanager.com player.vimeo.com cdn.jsdelivr.net cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/nomoredirectory.org https:\/\/unpkg.com; style-src 'self' 'unsafe-inline' code.highcharts.com *.typekit.net *.googleapis.com unpkg.com www.gstatic.com app.everviz.com\/static\/fonts\/ app.everviz.com\/resources\/css\/ cdn.jsdelivr.net cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/nomoredirectory.org https:\/\/unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' *.typekit.net cdn.jsdelivr.net cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/nomoredirectory.org https:\/\/unpkg.com; frame-ancestors 'self'; report-uri https:\/\/thecommonwealth.org\/log-report-uri\/reportOnly","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl\/families_google","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval'; connect-src 'self'; img-src 'self' data: www.pkobp.pl; style-src 'self' 'unsafe-inline'; font-src 'self'; report-uri \/ikd_img\/skins\/ipko\/grcv;","count":1},{"content-security-policy-report-only":" default-src 'self';  script-src 'self' 'unsafe-inline' 'unsafe-eval'    cdn.jsdelivr.net    js.stripe.com    *.criteo.com    *.simonsignal.com    www.facebook.com    connect.facebook.net    bat.bing.com    *.clarity.ms    *.vibe.co    www.google-analytics.com    cdn.cookielaw.org    *.optimizely.com    cdnjs.cloudflare.com    cdn.debugbear.com    googleads.g.doubleclick.net    d229tanlyij0i7.cloudfront.net    d3cv1fywnihry0.cloudfront.net      a61aa9fd029d.cdn4.forter.com    js-agent.newrelic.com    ui.powerreviews.com    payment.searshomeservices.com    tags.fullcontact.com    www.googletagmanager.com    www.paypal.com    cdn.id5-sync.com    mpsnare.iesnare.com    d-code.liadm.com    8quntm5h1h.execute-api.us-east-1.amazonaws.com;  frame-src 'self'    js.stripe.com    payment.searshomeservices.com    offers.searshomeservices.com    www.googletagmanager.com    i.liadm.com    gum.criteo.com    gumi.criteo.com    www.paypal.com    c.searspartsdirect.com    www.facebook.com    connect.facebook.net    a25563730275.cdn.optimizely.com;  connect-src * data: blob: 'unsafe-inline';  img-src * data: blob: 'unsafe-inline';  media-src * data: blob: 'unsafe-inline';  style-src * data: blob: 'unsafe-inline';  font-src * data: blob: 'unsafe-inline';  worker-src * data: blob: 'unsafe-inline';  base-uri 'self';  form-action 'self'    www.facebook.com;  frame-ancestors 'self';  report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self' blob:  https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/*.gurenla.com  https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; frame-src 'self' https:\/\/*.noxiaohao.com https:\/\/telegram.org https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/accounts.google.com https:\/\/oauth.telegram.org https:\/\/sgtm.btsgtm.com  https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; script-src 'self' 'nonce-VrsI5LgwH7hzCKQIUAgGMA==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6\/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh\/v3RIRuG3kMikr5iha+7P\/0TN\/GNA=' https:\/\/*.noxiaohao.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/*.gurenla.com https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/accounts.google.com https:\/\/www.googletagmanager.com https:\/\/fonts.googleapis.com https:\/\/play.google.com https:\/\/analytics.google.com https:\/\/fonts.gstatic.com https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/*.geetest.com https:\/\/*.geevisit.com https:\/\/sgtm.btsgtm.com https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; connect-src 'self' https:\/\/stats.g.doubleclick.net https:\/\/analytics.google.com https:\/\/*.noxiaohao.com wss:\/\/*.noxiaohao.com wss: https:\/\/www.turingfraud.net https:\/\/play.google.com https:\/\/accounts.google.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/*.gurenla.com https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/static.geetest.com https:\/\/static.geevisit.com wss:\/\/stream.bitget.cloud https:\/\/www.google.com https:\/\/sgtm.btsgtm.com  https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; worker-src 'self' blob:; img-src 'self' data: blob: https:\/\/img.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/img.bitgetimg.com https:\/\/img.gurenla.com https:\/\/*.bgbstatic.com https:\/\/lh3.googleusercontent.com https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/static-web.jjdsn.vip https:\/\/cdn.bitkeep.vip https:\/\/www.google.co.jp https:\/\/bin.wangsustatic.com https:\/\/sgtm.btsgtm.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net  https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; style-src 'self' 'unsafe-inline' https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/accounts.google.com https:\/\/fonts.googleapis.com https:\/\/static.bgbstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/*.gurenla.com  https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; font-src 'self' data: https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/fonts.gstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/*.gurenla.com  https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri \/v1\/buried\/log\/cspSecurity \/v1\/monitor\/csp?appId=d4b6df7d;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: blob: *.allopneus.com *.gstatic.com *.youtube.com *.ytimg.com *.google.com google.com www.google.com *.google.fr google.fr www.google.fr *.google.be google.be www.google.be *.googleapis.com *.facebook.com *.doubleclick.net *.g.doubleclick.net googleads.g.doubleclick.net *.googlesyndication.com pagead2.googlesyndication.com www.googleadservices.com images.driverreviews.com bat.bing.com bat.bing.net analytics.optimalpeople.fr tr.cloud-media.fr marker.np6.com *.zoho.eu *.zohopublic.eu *.googletagmanager.com cdn.cookielaw.org *.apple.com *.checkout.com *.dalenys.com *.pushaddict.com *.avis-verifies.com *.oney.io *.payline.com *.paypal.com gethatch.com gjigle.com; font-src 'self' data: *.allopneus.com *.gstatic.com fonts.googleapis.com use.typekit.net p.typekit.net *.zohocdn.com applepay.cdn-apple.com *.payline.com maxcdn.bootstrapcdn.com *.oney.io; connect-src 'self' *.allopneus.com *.apple.com browser-intake-datadoghq.eu *.datadome.co *.captcha-delivery.com *.kameleoon.eu cdn.cookielaw.org *.onetrust.com *.zohopublic.eu *.zoho.eu notifpush.com *.notifadz.com data.thank-you.io ping.thank-you.io *.google.com www.google.com google.com analytics.optimalpeople.fr pagead2.googlesyndication.com www.googleadservices.com *.doubleclick.net *.g.doubleclick.net googleads.g.doubleclick.net bat.bing.com bat.bing.net connect.facebook.net www.googletagmanager.com *.facebook.com marker.np6.com widget.driverreviews.com js.checkout.com gethatch.com *.cloudflare.com *.cloudflareinsights.com tagmanager.pirelli.com a.imgstatics.com gjigle.com *.googleapis.com *.oney.io *.payline.com *.paypal.com www.datadoghq-browser-agent.com *.avis-verifies.com; frame-src 'self' *.allopneus.com accounts.google.com *.facebook.com *.zohopublic.eu cdn-eu.pagesense.io *.captcha-delivery.com www.youtube.com *.apple.com *.checkout.com *.tradedoubler.com tradedoubler.com *.dalenys.com *.clic2buy.com gjigle.com *.paypal.com *.payline.com *.oney.io *.avis-verifies.com applepay.cdn-apple.com; script-src-attr 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' *.allopneus.com fonts.googleapis.com *.gstatic.com use.typekit.net p.typekit.net *.zohocdn.com cdn-eu.pagesense.io accounts.google.com *.dalenys.com *.payline.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: *.allopneus.com www.googletagmanager.com cdn.cookielaw.org *.onetrust.com cookie-cdn.cookiepro.com js.datadome.co *.captcha-delivery.com *.kameleoon.eu notifpush.com *.notifadz.com cdn.np6.com cdnjs.cloudflare.com connect.facebook.net pagead2.googlesyndication.com www.googleadservices.com *.zohocdn.com *.zohostatic.eu *.zohopublic.eu *.zoho.eu maillist-manage.eu cdn-eu.pagesense.io analytics.optimalpeople.fr widget.driverreviews.com data.thank-you.io bat.bing.com *.google.com accounts.google.com appleid.cdn-apple.com applepay.cdn-apple.com *.dalenys.com cdn.checkout.com js.checkout.com *.tradedoubler.com *.clic2buy.com gethatch.com *.cloudflare.com *.cloudflareinsights.com tagmanager.pirelli.com www.youtube.com *.googleapis.com *.avis-verifies.com *.oney.io *.payline.com *.paypal.com www.datadoghq-browser-agent.com maxcdn.bootstrapcdn.com; media-src 'self' data: blob:; worker-src 'self' blob:; child-src 'self' blob:; report-to csp-reports; report-uri https:\/\/browser-intake-datadoghq.eu\/api\/v2\/logs?dd-api-key=pub252bc361e6eaa27a32ccc4135ddcc93f&dd-evp-origin=content-security-policy&ddsource=csp-report","count":1},{"content-security-policy-report-only":" object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-Rrq45G094vqKUaiKK4HLqw' 'unsafe-inline' 'unsafe-eval' https:\/\/*.msauth.net https:\/\/*.msftauth.net https:\/\/*.msftauthimages.net https:\/\/*.msauthimages.net https:\/\/*.msidentity.com https:\/\/*.microsoftonline-p.com https:\/\/*.microsoftazuread-sso.com https:\/\/*.azureedge.net https:\/\/*.outlook.com https:\/\/*.office.com https:\/\/*.office365.com https:\/\/*.microsoft.com https:\/\/*.bing.com 'report-sample'; report-uri https:\/\/csp.microsoft.com\/report\/ESTS-UX-All","count":1},{"content-security-policy-report-only":" font-src *.gstatic.com *.stape.io *.fontawesome.com https:\/\/fonts.gstatic.com https:\/\/www.google.com https:\/\/www.gstatic.com data: https:\/\/widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.google.com\/ *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io www.google.com www.gstatic.com apis.google.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com *.weltpixel.com https:\/\/secure.pay1.de\/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/www.google.com\/ https:\/\/www.google.de\/ https:\/\/www.trustedshops.de\/ magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.doubleclick.net *.googletagmanager.com *.stape.io https:\/\/www.magezon.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com d.ratepay.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.etrusted.com https:\/\/app.usercentrics.eu\/ https:\/\/legal-images.trustedshops.com\/ https:\/\/maps.googleapis.com\/ https:\/\/maps.gstatic.com\/ https:\/\/www.trustedshops.com\/ https:\/\/integrations.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ http:\/\/widgets.trustedshops.com\/ https:\/\/widgets.trustedshops.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ https:\/\/www.gstatic.com\/ *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io *.googleapis.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com www.jsctool.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/web.cmp.usercentrics.eu https:\/\/privacy-proxy.usercentrics.eu https:\/\/app.usercentrics.eu\/ https:\/\/secure.pay1.de\/ https:\/\/www.googletagmanager.com\/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com *.google.com *.gstatic.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/payments.amazon.de\/ http:\/\/widgets.trustedshops.com\/ https:\/\/widgets.trustedshops.com\/ https:\/\/www.google-analytics.com\/ https:\/\/stats.g.doubleclick.net\/ *.google-analytics.com *.google.com *.doubleclick.net *.googlesyndication.com https:\/\/www.merchant-center-analytics.goog *.stape.io http:\/\/dpm.demdex.net https:\/\/www.google.com https:\/\/www.gstatic.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com www.jsctool.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site https:\/\/privacy-proxy.usercentrics.eu https:\/\/v1.api.service.cmp.usercentrics.eu https:\/\/consent-api.service.consent.usercentrics.eu https:\/\/aggregator.service.usercentrics.eu\/ https:\/\/api.usercentrics.eu\/ https:\/\/graphql.usercentrics.eu\/ https:\/\/maps.googleapis.com\/ https:\/\/region1.google-analytics.com\/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src api.adyenpaylink.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" object-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'; report-to csp-violation-endpoint; report-uri \/cgi-bin\/report_csp_violation.py","count":1},{"content-security-policy-report-only":" default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.paddle.com connect.facebook.net mc.yandex.com mc.yandex.ru quantcast.mgr.consensu.org rules.quantcount.com secure.quantserve.com ssl.google-analytics.com translate.google.com translate.googleapis.com translate-pa.googleapis.com www.google-analytics.com www.googletagmanager.com cmp.auslogics.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.paddle.com use.fontawesome.com www.iubenda.com translate.googleapis.com; img-src 'self' data: cms.quantserve.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.fr mc.yandex.kz mc.yandex.ru mc.yandex.ua mc.yandex.uz pixel.quantcount.com pixel.quantserve.com ssl.google-analytics.com ssl.gstatic.com translate.google.com translate.googleapis.com www.facebook.com *.google.ae *.google.al *.google.am *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bj *.google.bs *.google.by *.google.ca *.google.cd *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.gh *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sg *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dk *.google.dz *.google.ee *.google.es *.google.fi *.google.fr *.google.ge *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.jo *.google.kg *.google.kz *.google.la *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.mn *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.pl *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.se *.google.si *.google.sk *.google.sm *.google.sn *.google.sr *.google.tn *.google.tt *.google.td *.google.je *.google.ws *.google.rw *.google.co.mz *.google.sc *.google.tm *.google.ga *.google.tg *.google.com.ag *.google.co.in *.google.ad *.google.ml *.google.cg www.google-analytics.com www.googletagmanager.com www.gstatic.com yastatic.net; connect-src 'self' audit-tcfv2.quantcast.mgr.consensu.org code.jquery.com mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.fr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.ua mc.yandex.uz quantcast.mgr.consensu.org translate.googleapis.com www.google-analytics.com stats.g.doubleclick.net est.quantcast.mgr.consensu.org *.google.ae *.google.al *.google.am *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bj *.google.bs *.google.by *.google.ca *.google.cd *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.gh *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sg *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dk *.google.dz *.google.ee *.google.es *.google.fi *.google.fr *.google.ge *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.jo *.google.kg *.google.kz *.google.la *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.mn *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.pl *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.se *.google.si *.google.sk *.google.sm *.google.sn *.google.sr *.google.tn *.google.tt *.google.td *.google.je *.google.ws *.google.rw *.google.co.mz *.google.sc *.google.tm *.google.ga *.google.tg *.google.com.ag *.google.co.in *.google.ad *.google.ml *.google.cg cmp.auslogics.com; font-src 'self' fonts.gstatic.com use.fontawesome.com; object-src 'self'; media-src 'self'; form-action 'self'; frame-src 'self' m.youtube.com mc.yandex.com web.facebook.com www.facebook.com *.google.com www.googletagmanager.com www.youtube.com youtube.com; child-src 'self' www.facebook.com; worker-src 'self'; manifest-src 'self'; report-uri \/secure-headers\/report\/r\/d\/csp\/enforce; block-all-mixed-content; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self';","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:\/\/*.marketo.com https:\/\/*.marketo.net https:\/\/*.mktoresp.com; upgrade-insecure-requests; img-src 'self' data: blob: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.marketo.net https:\/\/*.marketo.com https:\/\/*.mktoresp.com; connect-src 'self' https: https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/*.marketo.net https:\/\/*.marketo.com https:\/\/*.mktoresp.com","count":1},{"content-security-policy-report-only":" report-uri \/csp-report.php;","count":1},{"content-security-policy-report-only":" default-src 'self' aipoweredmarketer.okta.com login.goacoustic.com *.oktacdn.com www.acoustic.com app.goacoustic.com consent.trustarc.com; connect-src 'self' aipoweredmarketer.okta.com aipoweredmarketer-admin.okta.com login.goacoustic.com *.oktacdn.com *.mixpanel.com *.mapbox.com aipoweredmarketer.kerberos.okta.com aipoweredmarketer.mtls.okta.com https:\/\/oinmanager.okta.com data: www.acoustic.com app.goacoustic.com consent.trustarc.com *.ingest.sentry.io; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' aipoweredmarketer.okta.com login.goacoustic.com *.oktacdn.com www.acoustic.com app.goacoustic.com consent.trustarc.com; style-src 'unsafe-inline' 'self' 'report-sample' aipoweredmarketer.okta.com login.goacoustic.com *.oktacdn.com www.acoustic.com app.goacoustic.com consent.trustarc.com; frame-src 'self' aipoweredmarketer.okta.com aipoweredmarketer-admin.okta.com login.goacoustic.com login.okta.com *.vidyard.com www.acoustic.com app.goacoustic.com consent.trustarc.com; img-src 'self' aipoweredmarketer.okta.com login.goacoustic.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: www.acoustic.com app.goacoustic.com consent.trustarc.com blob:; font-src 'self' aipoweredmarketer.okta.com login.goacoustic.com data: *.oktacdn.com fonts.gstatic.com www.acoustic.com app.goacoustic.com consent.trustarc.com; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: https:\/\/*.stripe.com; object-src 'none'; script-src 'self' https: https:\/\/connect-js.stripe.com https:\/\/js.stripe.com https:\/\/*.js.stripe.com https:\/\/maps.googleapis.com 'nonce-vr9jCWAZP8awny+TjWirEA=='; style-src 'self' https: 'nonce-vr9jCWAZP8awny+TjWirEA=='; style-src-attr 'unsafe-inline'; frame-src 'self' https:\/\/connect-js.stripe.com https:\/\/js.stripe.com https:\/\/*.js.stripe.com https:\/\/hooks.stripe.com; connect-src 'self' https:\/\/api.stripe.com https:\/\/maps.googleapis.com; report-uri \/systems\/csp_report","count":1},{"content-security-policy-report-only":" img-src 'self' data: https:\/\/www.facebook.com  https:\/\/secure.gravatar.com https:\/\/ts.w.org https:\/\/s.w.org https:\/\/ps.w.org; default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googleadservices.com  https:\/\/www.google.com  https:\/\/www.gstatic.com  https:\/\/googleads.g.doubleclick.net  https:\/\/www.youtube.com  'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https:\/\/www.googleadservices.com  https:\/\/www.google.com  https:\/\/www.gstatic.com  https:\/\/googleads.g.doubleclick.net  https:\/\/www.youtube.com ; style-src 'self' 'unsafe-inline' https:\/\/cdn.materialdesignicons.com  https:\/\/fonts.googleapis.com ; style-src-elem 'self' 'unsafe-inline' https:\/\/cdn.materialdesignicons.com  https:\/\/fonts.googleapis.com ; font-src 'self' https:\/\/fonts.gstatic.com  data:; frame-src 'self' https:\/\/www.youtube.com  blob:; connect-src 'self' https:\/\/stats.g.doubleclick.net  https:\/\/www.google.com  https:\/\/analytics.google.com;  report-uri https:\/\/www.studentclearinghouse.org\/wp-json\/really-simple-security\/v1\/csp?rsssl_apitoken=587938375;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-cyyblaLki-RAWJJeA6amRQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.google.com *.googletagmanager.com *.googleapis.com *.shareasale.com *.shareasale-analytics.com shareasale.com shareasale-analytics.com *.amazonaws.com *.shop.pe shop.pe *.juicer.io *.cloudfront.net v2.zopim.com data: *.bootstrapcdn.com *.yotpo.com *.kaltura.com *.nytrng.com nytrng.com *.dynamicyield.com https:\/\/*.gladly.com https:\/\/*.smooch.io https:\/\/d1fc8wv8zag5ca.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.google.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.shareasale.com *.shareasale-analytics.com shareasale.com shareasale-analytics.com www.facebook.com *.amazonaws.com *.juicer.io shop.pe *.yotpo.com *.kaltura.com *.nytrng.com nytrng.com https:\/\/*.gladly.com https:\/\/*.smooch.io https:\/\/d1fc8wv8zag5ca.cloudfront.net *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com *.certcapture.com www.google.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.shareasale.com *.shareasale-analytics.com shareasale.com shareasale-analytics.com *.amazonaws.com *.juicer.io *.shop.pe shop.pe *.criteo.com assets.bounceexchange.com vars.hotjar.com www.facebook.com imgs.signifyd.com h.online-metrix.net vendor1.leasestation.com amc.demdex.net nsg.symantec.com *.paypalobjects.com *.yotpo.com *.kaltura.com *.nytrng.com nytrng.com *.pinterest.com https:\/\/nl.fatquartershop.com *.dynamicyield.com https:\/\/*.gladly.com https:\/\/*.smooch.io https:\/\/d1fc8wv8zag5ca.cloudfront.net webchat.dotdigital.com webchat.staging.dotdigital.com *.authorize.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.trackedlink.net *.ddlnk.net *.certcapture.com *.google.com *.googletagmanager.com *.googleapis.com *.shareasale.com *.shareasale-analytics.com shareasale.com shareasale-analytics.com *.amazonaws.com *.juicer.io *.shop.pe shop.pe *.fatquartershop.com pixel.voltn.com v2.zopim.com www.google.co.in *.pinterest.com www.facebook.com *.cdnwidget.com u.cdnwidget.com bat.bing.com nsg.symantec.com events.bouncex.net pippio.com p.brsrvr.com connect.facebook.net imgs.signifyd.com events.cdnwidget.com api.bounceexchange.com amc.demdex.net *.e.aa.online-metrix.net match.adsrvr.org yotpo-editor-production.s3.amazonaws.com *.cdninstagram.com *.yotpo.com *.kaltura.com *.nytrng.com nytrng.com *.clarity.ms *.rqtrk.eu *.dynamicyield.com https:\/\/chat-assets.cdn.gladly.com https:\/\/chat-assets.cdn.gladly.qa maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.certcapture.com https:\/\/cnstrc.com\/js\/cust\/fat-quarter-shop_Orxy5R.js www.google.com *.googletagmanager.com *.googleapis.com www.gstatic.com *.shareasale.com *.shareasale-analytics.com shareasale.com shareasale-analytics.com addshoppers.s3.amazonaws.com *.juicer.io *.traversedlp.com *.pinimg.com v2.zopim.com *.shop.pe shop.pe *.criteo.net *.criteo.com *.zdassets.com\/ loader.wisepops.com *.cloudfront.net fatquartershop-com-dev.ecomm-nav.com connect.facebook.net vendor1.quickspark.com nsg.symantec.com script.crazyegg.com bat.bing.com tag.bounceexchange.com assets.bounceexchange.com cdn.brcdn.com imgs.signifyd.com cdns.brsrvr.com bam.nr-data.net js-agent.newrelic.com mc.s10.exacttarget.com *.hotjar.com bam-cell.nr-data.net *.yotpo.com *.kaltura.com *.nytrng.com nytrng.com *.staticw2.yotpo.com https:\/\/nl.fatquartershop.com *.rqtrk.eu *.clarity.ms *.dynamicyield.com *.zendesk.com https:\/\/cnstrc.com https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/Swiper\/4.4.6\/js\/swiper.js https:\/\/*.gladly.com https:\/\/*.smooch.io https:\/\/d1fc8wv8zag5ca.cloudfront.net https:\/\/cdnjs.cloudflare.com https:\/\/chat-sdk.cdn.gladly.com https:\/\/chat-sdk.cdn.gladly.qa d2mjzob2nc713b.cloudfront.net fatquartershop.cdn1.safeopt.com webchat.dotdigital.com webchat.staging.dotdigital.com *.authorize.net maps.googleapis.com https:\/\/www.fatquartershop.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.google.com *.googletagmanager.com *.gstatic.com *.shareasale.com *.shareasale-analytics.com shareasale.com shareasale-analytics.com *.amazonaws.com *.juicer.io *.shop.pe shop.pe events.bouncex.net stats.g.doubleclick.net www.google-analytics.com *.cloudfront.net *.addshoppers.com *.bootstrapcdn.com *.yotpo.com *.kaltura.com *.nytrng.com nytrng.com *.staticw2.yotpo.com *.dynamicyield.com https:\/\/*.gladly.com https:\/\/*.smooch.io https:\/\/d1fc8wv8zag5ca.cloudfront.net https:\/\/chat-sdk.cdn.gladly.com https:\/\/chat-sdk.cdn.gladly.qa webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'unsafe-inline' data: 'unsafe-inline' blob: *.yotpo.com *.kaltura.com *.nytrng.com nytrng.com *.dynamicyield.com *.zdassets.com\/ https:\/\/chat-sdk.cdn.gladly.com https:\/\/chat-sdk.cdn.gladly.qa 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.certcapture.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.shareasale.com *.shareasale-analytics.com shareasale.com shareasale-analytics.com bat.bing.com *.amazonaws.com *.juicer.io *.shop.pe shop.pe ekr.zdassets.com script.crazyegg.com *.pinterest.com stats.g.doubleclick.net wss: www.google-analytics.com manager.eu.smartlook.cloud in.hotjar.com staging-core.dxpapi.com core.dxpapi.com imgs.signifyd.com bt.signifyd.com:11103 data.cdnbasket.net ids.cdnwidget.com pd.cdnwidget.com page.cdnbasket.net\/ view.cdnbasket.net bam.nr-data.net vc.hotjar.io bam-cell.nr-data.net api.traversedlp.com *.yotpo.com *.kaltura.com *.nytrng.com nytrng.com *.clarity.ms *.dynamicyield.com *.zendesk.com zendesk-eu.my.sentry.io *.cnstrc.com https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/Swiper\/4.4.6\/js\/swiper.js https:\/\/*.gladly.com https:\/\/*.smooch.io https:\/\/d1fc8wv8zag5ca.cloudfront.net https:\/\/api.us-1.gladly.chat wss:\/\/ws.us-1.gladly.chat https:\/\/chat-assets.cdn.gladly.com https:\/\/chat-sdk.cdn.gladly.com https:\/\/api.us-uat.gladly.chat wss:\/\/ws.us-uat.gladly.chat https:\/\/chat-assets.cdn.gladly.qa https:\/\/chat-sdk.cdn.gladly.qa webchat.dotdigital.com webchat.staging.dotdigital.com *.authorize.net maps.googleapis.com places.googleapis.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https:\/\/app.storyblok.com; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https:\/\/st.anyip.io https:\/\/af.anyip.io https:\/\/script.tapfiliate.com https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.doubleclick.net https:\/\/*.googleadservices.com https:\/\/*.hs-scripts.com https:\/\/*.hs-analytics.net https:\/\/*.hs-banner.com https:\/\/ph.anyip.io https:\/\/widget.intercom.io https:\/\/js.intercomcdn.com https:\/\/connect.facebook.net https:\/\/www.redditstatic.com https:\/\/valley-intent.nyc3.digitaloceanspaces.com https:\/\/d-code.liadm.com https:\/\/*.clarity.ms https:\/\/bat.bing.com https:\/\/static.cloudflareinsights.com https:\/\/snap.licdn.com https:\/\/static.ads-twitter.com https:\/\/app.factors.ai https:\/\/code.upscope.io https:\/\/js.upscope.io https:\/\/widget.trustpilot.com https:\/\/ddwl4m2hdecbv.cloudfront.net https:\/\/sc.lfeeder.com https:\/\/t.rightmessage.com https:\/\/app.storyblok.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/fonts.intercomcdn.com; media-src 'self' https:\/\/js.intercomcdn.com; connect-src 'self' https: wss:; frame-src 'self' https:\/\/st.anyip.io https:\/\/*.googletagmanager.com https:\/\/*.google.com https:\/\/*.recaptcha.net https:\/\/*.intercom.io https:\/\/*.liadm.com https:\/\/widget.trustpilot.com https:\/\/*.trustpilot.com; form-action 'self'; worker-src 'self' blob:; report-uri \/api\/csp-report","count":1},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/ordermygear.report-uri.com\/r\/t\/csp\/wizard","count":1},{"content-security-policy-report-only":" default-src 'self'; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=YJOB1B7iGrlGfewlwl5ZQSgNrys2aMOVNd6S65hK9dU-1788489956.6826394-1.0.1.1-99io.oyNSJk9Hn2xzF7HLqGMI4HvVstLriv0cDmYTdl_NAL4KCZVoCqpZdmaAjnnMkuqCRMVZFHDXhBgEXa99axsgotZbsnlJqSEdT8V9dviNGlhZYRe_LR8J.OiEzxr6nrLJZEKX1Osz8aISzlP_EfjhKcdE2DalLE1DeDsEctjtEjFWz.Li1cQytemIHcI; report-to cf-kgqmgbvygduumpij","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:\/\/aau.edu.jo https:\/\/*.aau.edu.jo *.googleusercontent.com *.jsdelivr.net *.gstatic.com *.bootstrapcdn.com *.googleapis.com *.google.com; report-uri \/\/report-csp-violation","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-NBM9q25CkSsy5UR58WiXIA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'none'; connect-src 'self' forms.hsforms.com www.google.com px.ads.linkedin.com region1.analytics.google.com stats.g.doubleclick.net bat.bing.net cta-service-cms2.hubspot.com api.hubapi.com forms.hscollectedforms.net pulse.clickguard.com; form-action 'none'; frame-ancestors 'none'; frame-src https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net; img-src 'self' data: forms-na1.hsforms.com px.ads.linkedin.com www.google.es bat.bing.net www.google.com forms.hsforms.com perf-na1.hsforms.com track.hubspot.com; font-src 'self' data:; media-src 'none'; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.hsforms.net www.googletagmanager.com bat.bing.com static.hotjar.com snap.licdn.com js.hs-scripts.com www.clarity.ms tracking-api.g2.com pulse.clickguard.com script.hotjar.com js.hscollectedforms.net js.hs-analytics.net js.hsadspixel.net js.hubspot.com js.hs-banner.com googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none'; report-uri https:\/\/gydk4ua5.uriports.com\/reports\/report; report-to default","count":1},{"content-security-policy-report-only":" default-src 'self' *.addgene.org; connect-src 'self' *.nr-data.net https:\/\/ekr.zdassets.com https:\/\/*.googletagmanager.com cloudflareinsights.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/sandbox.usaepay.com *.addgene.org https:\/\/zendesk-eu.my.sentry.io https:\/\/*.g.doubleclick.net https:\/\/addgene.zendesk.com https:\/\/www.usaepay.com https:\/\/*.google.com; font-src 'self' *.addgene.org data: https:\/\/fonts.gstatic.com http:\/\/static-assets:8080; style-src 'self' https:\/\/tagmanager.google.com 'unsafe-inline' *.addgene.org https:\/\/fonts.googleapis.com https:\/\/googletagmanager.com http:\/\/static-assets:8080; img-src 'self' https:\/\/*.googletagmanager.com https:\/\/www.google.com *.addgene.org.s3.amazonaws.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com *.addgene.org data: https:\/\/googletagmanager.com https:\/\/ssl.gstatic.com https:\/\/www.gstatic.com https:\/\/google.com https:\/\/*.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/i.ytimg.com http:\/\/static-assets:8080 https:\/\/*.google.com; script-src 'self' https:\/\/tagmanager.google.com 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/assets.zendesk.com https:\/\/ajax.googleapis.com https:\/\/*.googletagmanager.com static.cloudflareinsights.com https:\/\/js-agent.newrelic.com https:\/\/googleads.g.doubleclick.net https:\/\/www.google.com https:\/\/sandbox.usaepay.com https:\/\/www.usaepay.com https:\/\/challenges.cloudflare.com https:\/\/static.zdassets.com *.addgene.org https:\/\/googletagmanager.com https:\/\/www.googleadservices.com https:\/\/widget.surveymonkey.com http:\/\/static-assets:8080; frame-src 'self' https:\/\/challenges.cloudflare.com https:\/\/bid.g.doubleclick.net https:\/\/sandbox.usaepay.com *.addgene.org https:\/\/td.doubleclick.net https:\/\/www.youtube.com https:\/\/www.surveymonkey.com https:\/\/www.usaepay.com https:\/\/www.googletagmanager.com; report-uri \/csp-reporting\/","count":1},{"content-security-policy-report-only":" frame-src viz.tools.investis.com irs.tools.investis.com www.youtube.com www.youtube-nocookie.com www.youtu.be; report-uri \/report-csp-violation","count":1},{"content-security-policy-report-only":" default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: blob: *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io assets.traveljoy.com; object-src 'none'; style-src 'self' https: 'unsafe-inline' *.visualwebsiteoptimizer.com app.vwo.com fonts.googleapis.com; base-uri 'self'; worker-src 'self' blob:; connect-src 'self' *.visualwebsiteoptimizer.com app.vwo.com fonts.googleapis.com assets.traveljoy.com bam.nr-data.net sandbox-assets.tjoy.io api.us.nylas.com maps.googleapis.com placehold.co hare-media-cdn.tripadvisor.com s3-dev.traveljoy.com s3-assets.traveljoy.com api.unlayer.com canny.io www.recaptcha.net 'self' wss:\/\/nexus-websocket-a.intercom.io\/ https:\/\/ekr.zdassets.com\/ https:\/\/global.ketchcdn.com\/ https:\/\/traveljoy.zendesk.com\/ wss:\/\/traveljoy.zendesk.com\/ https:\/\/api-js.mixpanel.com\/ https:\/\/bam.nr-data.net\/ https:\/\/api-iam.intercom.io\/ https:\/\/www.google-analytics.com\/ https:\/\/api.smooch.io wss:\/\/api.smooch.io https:\/\/edge.fullstory.com\/ https:\/\/rs.fullstory.com\/; script-src 'self' 'unsafe-inline' 'unsafe-eval' js.stripe.com checkout.stripe.com connect-js.stripe.com cdn.plaid.com js-agent.newrelic.com www.recaptcha.net www.gstatic.com www.googletagmanager.com global.ketchcdn.com edge.fullstory.com cdn.mxpnl.com widget.intercom.io static.zdassets.com connect.facebook.net *.visualwebsiteoptimizer.com app.vwo.com canny.io cdnjs.cloudflare.com assets.traveljoy.com calendly.com cdn.zapier.com editor.unlayer.com htp.tokenex.com; frame-src js.stripe.com connect-js.stripe.com *.visualwebsiteoptimizer.com app.vwo.com cdn.plaid.com checkout.stripe.com *.youtube.com *.youtu.be *.recaptcha.net editor.unlayer.com canny.io htp.tokenex.com","count":1},{"content-security-policy-report-only":" frame-ancestors *.sbazar.cz 'self' *.seznam.cz *.sdn.cz https:\/\/pay.google.com https:\/\/connect-js.stripe.com https:\/\/js.stripe.com; script-src *.sbazar.cz 'self' 'unsafe-inline' *.seznam.cz *.sdn.cz *.szn.cz *.pszn.cz *.im.cz *.mapy.cz *.mapy.com https:\/\/gacz.hit.gemius.pl https:\/\/scz.hit.gemius.pl https:\/\/ls.hit.gemius.pl https:\/\/login.seznam.cz https:\/\/notifikace.seznam.cz https:\/\/www.googletagmanager.com https:\/\/region1.google-analytics.com https:\/\/www.google-analytics.com https:\/\/connect.facebook.net https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/widget.packeta.com https:\/\/connect-js.stripe.com https:\/\/js.stripe.com *.adform.net *.adnxs.com *.adnxs-simple.com *.adsafeprotected.com *.consensu.org *.doubleclick.net *.doubleverify.com *.googlesyndication.com *.googletagservices.com *.imedia.cz *.imedia.dev.dszn.cz *.pliing.com *.pubmatic.com *.sbeta.cz *.sdn.szn.cz *.serving-sys.com *.sklik.cz ads.celtra.com *.2mdn.net ams.creativecdn.com cdn.id5-sync.com tags.crwdcntrl.net id5-sync.com\/gm\/v3 dis.criteo.com tracker.adnami.io script.adnami.io macro.adnami.io assets.adnami.io functions.adnami.io directive.adnami.io rmb.adnami.io https:\/\/www.sbazar.cz https:\/\/c.imedia.cz https:\/\/im.cz https:\/\/chat.sbazar.cz *.seznam.dev.dszn.cz *.seznam.test.dszn.cz; report-uri https:\/\/sentry.pszn.cz\/api\/232\/security\/?sentry_key=c74f7db661ae4cad8d94282c184d08f9","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/www.gstatic.com https:\/\/pi.pardot.com https:\/\/cdn.pardot.com https:\/\/snap.licdn.com https:\/\/connect.facebook.net https:\/\/widget.instabot.io https:\/\/widgetapi.instabot.io https:\/\/addevent.com https:\/\/cdn.addevent.com https:\/\/cookie-cdn.cookiepro.com https:\/\/kit.fontawesome.com https:\/\/cdn.jsdelivr.net https:\/\/cdn.evgnet.com https:\/\/d2i34c80a0ftze.cloudfront.net https:\/\/d2iiunr5ws5ch1.cloudfront.net https:\/\/d2wy8f7a9ursnm.cloudfront.net https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/tag.demandbase.com https:\/\/amd.sellingsimplified.net https:\/\/explore.parexel.com https:\/\/lottie.host https:\/\/assets2.lottiefiles.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/www.clarity.ms https:\/\/clarity.ms https:\/\/bat.bing.com https:\/\/sidebar.bugherd.com https:\/\/www.bugherd.com https:\/\/static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' 'report-sample' https:\/\/fonts.googleapis.com https:\/\/translate.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/code.jquery.com https:\/\/d2iiunr5ws5ch1.cloudfront.net https:\/\/form.asana.com https:\/\/lottie.host https:\/\/assets2.lottiefiles.com; img-src 'self' data: blob: https:\/\/*.google.com https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.gstatic.com https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/*.linkedin.com https:\/\/*.licdn.com https:\/\/*.facebook.com https:\/\/*.fbcdn.net https:\/\/*.ytimg.com https:\/\/*.youtube.com https:\/\/*.twitter.com https:\/\/*.twimg.com https:\/\/cookie-cdn.cookiepro.com https:\/\/static.instabot.io https:\/\/tag.demandbase.com https:\/\/*.demandbase.com https:\/\/lottie.host https:\/\/*.lottiefiles.com https:\/\/d2iiunr5ws5ch1.cloudfront.net https:\/\/*.bugherd.com https:\/\/*.amazonaws.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/ka-p.fontawesome.com https:\/\/cdnjs.cloudflare.com https:\/\/d2iiunr5ws5ch1.cloudfront.net https:\/\/at.alicdn.com; connect-src 'self' https:\/\/analytics.google.com https:\/\/www.google-analytics.com https:\/\/region1.analytics.google.com https:\/\/region1.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/ad.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/adservice.google.com https:\/\/pagead2.googlesyndication.com https:\/\/www.google.com https:\/\/*.google.com https:\/\/*.google.co.uk https:\/\/*.google.de https:\/\/*.google.fr https:\/\/*.google.es https:\/\/*.google.it https:\/\/*.google.nl https:\/\/*.google.co.jp https:\/\/*.google.com.au https:\/\/px.ads.linkedin.com https:\/\/cdn.linkedin.oribi.io https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/ws.hotjar.com https:\/\/widget.instabot.io https:\/\/widgetapi.instabot.io https:\/\/static.instabot.io https:\/\/chat.instabot.io https:\/\/livechat.instabot.io wss:\/\/chat.instabot.io https:\/\/cookie-cdn.cookiepro.com https:\/\/geolocation.onetrust.com https:\/\/privacyportal.cookiepro.com https:\/\/tag.demandbase.com https:\/\/tag-logger.demandbase.com https:\/\/segments.company-target.com https:\/\/api.company-target.com https:\/\/amd.sellingsimplified.net https:\/\/st.fullcircleinsights.com https:\/\/*.clarity.ms https:\/\/ipinfo.io https:\/\/geodata.solutions https:\/\/maps.googleapis.com https:\/\/sessions.bugsnag.com https:\/\/notify.bugsnag.com https:\/\/www.bugherd.com wss:\/\/ws-mt1.pusher.com wss:\/\/ws.pusherapp.com https:\/\/lottie.host https:\/\/assets2.lottiefiles.com https:\/\/cdn.jsdelivr.net https:\/\/ka-p.fontawesome.com https:\/\/cloudflareinsights.com https:\/\/static.cloudflareinsights.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/insight.adsrvr.org https:\/\/td.doubleclick.net https:\/\/s.company-target.com https:\/\/vars.hotjar.com https:\/\/www.podbean.com https:\/\/player.simplecast.com https:\/\/form.asana.com https:\/\/content.cdntwrk.com https:\/\/explore.parexel.com https:\/\/lottie.host https:\/\/sidebar.bugherd.com https:\/\/d1eoo1tc6rr5e.cloudfront.net https:\/\/hackerone.com; media-src 'self' https:\/\/download-video.akamaized.net https:\/\/player.vimeo.com https:\/\/mcdn.podbean.com https:\/\/www.youtube.com https:\/\/lottie.host https:\/\/assets2.lottiefiles.com; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:\/\/pi.pardot.com https:\/\/explore.parexel.com; base-uri 'self'; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; report-uri \/api\/csp-report-logger;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-zYU1zhYRkOXGpHQcoZUl5A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-7_F3R-R1u_BPi0EdaMDjCw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' data: *.wroclaw.pl *.cookiebot.com *.google.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.facebook.com *.fbcdn.net *.googleusercontent.com fonts.gstatic.com https:\/\/unpkg.com *.curator.io https:\/\/curator-assets.b-cdn.net *.amazonaws.com https:\/\/api.mapbox.com https:\/\/callme360.com *.doubleclick.net https:\/\/cdn.jsdelivr.net *.googlesyndication.com *.openstreetmap.org *.cloudflare.com https:\/\/cdn.gravitec.net *.crazyegg.com *.gemius.pl *.criteo.com *.criteo.net *.optad360.net *.google.pl *.cloudflareinsights.com *.clarity.ms *.newrelic.com *.gravitec.media *.crwdcntrl.net *.openxcdn.net *.nr-data.net *.optad360-video.com optad360-video.com *.adtrafficquality.google *.googleadservices.com *.2mdn.net *.facebook.net *.slideshare.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.wroclaw.pl *.googleapis.com *.cookiebot.com *.google.com *.googletagmanager.com *.google-analytics.com *.youtube.com *.ytimg.com *.facebook.net https:\/\/unpkg.com *.juicer.io *.curator.io https:\/\/api.mapbox.com *.jsdelivr.net *.cloudflare.com *.highcharts.com *.statsforads.com *.optad360.io *.doubleclick.net https:\/\/callme360.com *.gstatic.com https:\/\/cdn.gravitec.net *.crazyegg.com *.gemius.pl *.criteo.com *.criteo.net *.cloudflareinsights.com *.clarity.ms *.newrelic.com *.gravitec.media *.crwdcntrl.net *.openxcdn.net *.nr-data.net *.adtrafficquality.google *.googleadservices.com *.googlesyndication.com *.2mdn.net; style-src 'self' 'unsafe-inline' *.wroclaw.pl *.googleapis.com *.google.com https:\/\/unpkg.com *.curator.io https:\/\/api.mapbox.com https:\/\/callme360.com *.cloudflare.com *.jsdelivr.net https:\/\/cdn.jsdelivr.net;","count":1},{"content-security-policy-report-only":" default-src 'self' primericaonline.okta.com login.primericaonline.com *.oktacdn.com *.primerica.com *.primericaonline.com cdn.cookielaw.org kit.fontawesome.com *.contentstack.io; connect-src 'self' primericaonline.okta.com primericaonline-admin.okta.com login.primericaonline.com *.oktacdn.com *.mixpanel.com *.mapbox.com primericaonline.kerberos.okta.com primericaonline.mtls.okta.com *.authenticatorlocalprod.com:8769 http:\/\/localhost:8769 http:\/\/127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http:\/\/localhost:65111 http:\/\/127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http:\/\/localhost:65121 http:\/\/127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http:\/\/localhost:65131 http:\/\/127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http:\/\/localhost:65141 http:\/\/127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http:\/\/localhost:65151 http:\/\/127.0.0.1:65151 https:\/\/oinmanager.okta.com data: *.primerica.com *.primericaonline.com cdn.cookielaw.org kit.fontawesome.com *.contentstack.io *.ingest.sentry.io; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' primericaonline.okta.com login.primericaonline.com *.oktacdn.com *.primerica.com *.primericaonline.com cdn.cookielaw.org kit.fontawesome.com *.contentstack.io; style-src 'unsafe-inline' 'self' 'report-sample' primericaonline.okta.com login.primericaonline.com *.oktacdn.com *.primerica.com *.primericaonline.com cdn.cookielaw.org kit.fontawesome.com *.contentstack.io; frame-src 'self' primericaonline.okta.com primericaonline-admin.okta.com login.primericaonline.com login.okta.com *.vidyard.com com-okta-authenticator: *.primerica.com *.primericaonline.com cdn.cookielaw.org kit.fontawesome.com *.contentstack.io; img-src 'self' primericaonline.okta.com login.primericaonline.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: *.primerica.com *.primericaonline.com cdn.cookielaw.org kit.fontawesome.com *.contentstack.io blob:; font-src 'self' primericaonline.okta.com login.primericaonline.com data: *.oktacdn.com fonts.gstatic.com *.primerica.com *.primericaonline.com cdn.cookielaw.org kit.fontawesome.com *.contentstack.io; frame-ancestors 'self' https:\/\/mob.primericaonline.com https:\/\/*.primericaonline.com","count":1},{"content-security-policy-report-only":" default-src 'self' *.devfolio.co data:; script-src 'self' *.devfolio.co 'unsafe-eval' 'unsafe-inline' https:\/\/cdn.segment.com\/ https:\/\/maps.googleapis.com\/ https:\/\/cdnjs.cloudflare.com\/ https:\/\/cdn.jsdelivr.net\/ https:\/\/cdnmd.global-cache.online\/ https:\/\/static.cloudflareinsights.com\/ https:\/\/www.youtube.com\/ https:\/\/checkout.razorpay.com\/ https:\/\/apis.google.com\/ https:\/\/gstatic.com\/ https:\/\/ssl.gstatic.com\/ https:\/\/player.vimeo.com\/ https:\/\/connect.facebook.net\/ https:\/\/google.com\/ https:\/\/accounts.google.com\/gsi\/client https:\/\/ssl.google-analytics.com\/ https:\/\/translate.googleapis.com\/ https:\/\/unpkg.com\/ https:\/\/www.pagespeed-mod.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.gstatic.com\/ http:\/\/www.google.com\/ *.cloudfront.net\/ https:\/\/polyfill.io\/ https:\/\/sessions.bugsnag.com\/ https:\/\/d2wy8f7a9ursnm.cloudfront.net\/v7\/bugsnag.min.js https:\/\/cdn.tokenproof.xyz\/js\/tokenproof-oa-widget-v1.0.js https:\/\/us-assets.i.posthog.com\/ blob:; connect-src 'self' *.devfolio.co https:\/\/sessions.bugsnag.com\/ https:\/\/maps.googleapis.com\/ https:\/\/api.segment.io\/ https:\/\/cdn.segment.com\/ https:\/\/autocomplete.clearbit.com\/ wss:\/\/*.devfolio.co\/ https:\/\/lh3.googleusercontent.com\/ https:\/\/sentry.io\/ https:\/\/vimeo.com\/ wss:\/\/*.bridge.walletconnect.org\/ https:\/\/mainnet.infura.io wss:\/\/mainnet.infura.io https:\/\/arbitrum-mainnet.infura.io wss:\/\/eth-mainnet.ws.alchemyapi.io\/ https:\/\/eth-mainnet.alchemyapi.io\/ https:\/\/arb-mainnet.g.alchemy.com\/ wss:\/\/arb-mainnet.g.alchemy.com\/ wss:\/\/www.walletlink.org\/ https:\/\/api.wallet.coinbase.com https:\/\/dns.google.com\/ https:\/\/api.giphy.com\/ https:\/\/registry.walletconnect.org\/ https:\/\/api.segment.io\/ https:\/\/www.google-analytics.com\/ https:\/\/devfolio-prod.s3.ap-south-1.amazonaws.com\/ https:\/\/explorer-api.walletconnect.com\/ wss:\/\/relay.walletconnect.com\/ https:\/\/sockjs-us2.pusher.com\/ https:\/\/cloudflare-eth.com\/ https:\/\/anon-aadhaar-artifacts.s3.eu-central-1.amazonaws.com\/ https:\/\/us-assets.i.posthog.com\/ https:\/\/us.i.posthog.com\/ https:\/\/app.posthog.com\/ data:; style-src 'self' https:\/\/api.devfolio.co\/api\/hotfix\/css\/all.css https:\/\/fonts.googleapis.com\/ https:\/\/translate.googleapis.com\/ 'unsafe-inline' data:; img-src 'self' * *.devfolio.co\/ data: blob:; frame-src https:\/\/www.loom.com\/ https:\/\/www.youtube.com\/ https:\/\/drive.google.com\/ https:\/\/m.youtube.com\/ https:\/\/www.dailymotion.com\/  https:\/\/vimeo.com\/ https:\/\/api.razorpay.com\/ https:\/\/accounts.google.com\/ https:\/\/www.google.com\/ https:\/\/player.vimeo.com\/ https:\/\/loom.com\/ https:\/\/www.drive.google.com\/ https:\/\/razorpay.com\/ *.razorpay.com\/ https:\/\/mozbar.moz.com\/; font-src 'self' https:\/\/fonts.gstatic.com\/ https:\/\/devfolio-prod.s3.ap-south-1.amazonaws.com\/ https:\/\/o91302.ingest.sentry.io\/  https:\/\/mozbar.moz.com https:\/\/cdn.tokenproof.xyz\/fonts\/ data:; frame-ancestors 'self'; media-src 'self' *.devfolio.co\/ *.githubusercontent.com\/ https:\/\/www.youtube.com\/ https:\/\/m.youtube.com\/ https:\/\/youtu.be\/ https:\/\/youtube.com\/ https:\/\/drive.google.com\/ https:\/\/www.drive.google.com\/ data: blob:; report-uri https:\/\/o91302.ingest.sentry.io\/api\/1193563\/security\/?sentry_key=66b59c332abd4ee9902ba11631dc07c6","count":1},{"content-security-policy-report-only":" prefetch-src *.bing.com *.cdn-apple.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https:\/\/*.gstatic.com applepay.cdn-apple.com *.fontawesome.com *.alicdn.com *.bootstrapcdn.com *.cdnfonts.com *.googleapis.com *.rockler.com *.slant.co data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de *.cordialdev.com *.cordial.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.adyen.com pay.google.com *.certcapture.com *.cordialdev.com *.cordial.com *.cordial.io applepay.cdn-apple.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * photos.pixlee.co https:\/\/photos.pixlee.co landofcoder.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com https:\/\/*.gstatic.com *.certcapture.com applepay.cdn-apple.com https:\/\/scontent-bom1-1.cdninstagram.com\/ https:\/\/scontent-bom2-2.xx.fbcdn.net https:\/\/scontent-bom1-2.cdninstagram.com https:\/\/scontent-bom1-2 ftcdn.net https:\/\/scontent-bom1-2.xx.fbcdn.net\/ *.cdninstagram.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.disqus.com https:\/\/img.youtube.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com wac.edgecastcdn.net *.lightboxcdn.com https:\/\/hello.zonos.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.1rx.io *.360yield.com *.3lift.com *.adnxs.com *.ad-stir.com *.alicdn.com *.amazon-adsystem.com *.attentivemobile.com *.attn.tv *.bidr.io *.bing.com *.bing.net *.casalemedia.com *.clarity.ms *.cookiebot.com *.cordial.com *.crazyegg.com *.creativecdn.com d3cgm8py10hi0z.cloudfront.net *.facebook.net *.ggpht.com *.googleadservices.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws google.com *.googlesyndication.com *.gumgum.com *.inmobi.com *.liadm.com *.lijit.com *.media.net *.mountain.com *.nexx360.io *.openx.net *.opera.com *.outbrain.com *.pinimg.com *.pinterest.com *.pubmatic.com *.rakuten.com rockler.com *.rockler.com *.rubiconproject.com *.searchspring.io *.searchspring.net *.sharethrough.com *.shop.pe shop.pe *.smaato.net *.smartadserver.com *.sonobi.com *.taboola.com *.teads.tv *.turnto.com yastatic.net *.yieldmo.com *.ytimg.com *.zonos.com user-sync.fwmrm.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.attn.tv events.attentivemobile.com *.certcapture.com *.cordialdev.com *.cordial.com track.cordial.io *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com utt.impactcdn.com *.disqus.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.googleapis.com https:\/\/cdn.searchspring.net *.turnto.com https:\/\/checkoutshopper-test.adyen.com *.lightboxcdn.com *.news.rockler.com https:\/\/hello.zonos.com cdn.searchspring.net https:\/\/widgets.turnto.com we.turnto.com landofcoder.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net addshoppers.s3.amazonaws.com *.bing.com *.blackfire.io *.clarity.ms *.cookiebot.com *.crazyegg.com *.creativecdn.com d2mjzob2nc713b.cloudfront.net *.googlesyndication.com *.gstatic.com *.impactcdn.com *.liadm.com *.mountain.com *.pinimg.com *.pinterest.com *.rockler.com *.searchspring.io *.searchspring.net *.shop.pe shop.pe *.tiktokcdn-us.com *.vimeo.com *.zonos.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com https:\/\/fonts.googleapis.com\/ *.certcapture.com *.gstatic.com *.googleapis.com *.fontawesome.com assets.braintreegateway.com *.turnto.com cdn.searchspring.net https:\/\/widgets.turnto.com *.tagmanager.google.com *.googletagmanager.com *.attn.tv *.bootstrapcdn.com *.crazyegg.com *.lightboxcdn.com *.rockler.com *.searchspring.net *.tiktokcdn-us.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com https:\/\/scontent-bom1-2.cdninstagram.com\/ *.cdninstagram.com *.googleapis.com *.google.com *.gstatic.com *.mountain.com *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adyen.com payments-eu.amazon.com *.attn.tv events.attentivemobile.com *.certcapture.com *.cordialdev.com *.cordial.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.turnto.com apay-us.amazon.com *.google-analytics.com https:\/\/hello.zonos.com https:\/\/*.a.searchspring.io https:\/\/cdn-ws.turnto.com landofcoder.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.rockler.com 100.20.58.101 18.210.229.244 *.1rx.io 3.212.39.155 34.215.155.61 35.160.46.251 44.212.189.233 44.228.85.26 44.238.122.172 52.22.50.55 52.71.121.170 54.156.2.105 *.adnxs.com *.alicdn.com *.attentivemobile.com *.bing.com *.bing.net *.clarity.ms *.cookiebot.com *.crazyegg.com *.creativecdn.com *.facebook.com *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sn www.google.so www.google.sr www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu *.googlesyndication.com *.gstatic.com *.gumgum.com *.inmobi.com *.liadm.com *.lightboxcdn.com *.lijit.com *.mountain.com *.nexx360.io *.opera.com *.pinterest.com *.pubmatic.com *.rakuten.com *.rubiconproject.com *.safeopt.com *.searchspring.io *.searchspring.net *.sharethrough.com *.shop.pe shop.pe *.smaato.net *.sonobi.com *.zonos.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri rockler.com *.rockler.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https:\/\/a5cc4e91-2050-4411-835a-70713844fbf7.sansec.watch\/; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/trusted-scripts.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:\/\/trusted-images.com; font-src 'self'; frame-src 'self' https:\/\/forms.office.com; object-src 'none'; base-uri 'self'; form-action 'self';","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-IDnLFnPz9coBBKu2Pe17Bw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" base-uri 'self'; connect-src 'self' https:\/\/*.fontawesome.com\/ https:\/\/*.formassembly.com\/ https:\/\/*.promedica.app\/ https:\/\/*.vercel-storage.com\/ https:\/\/*.vercel.app\/ https:\/\/analytics.google.com\/ https:\/\/api.stadiamaps.com\/ https:\/\/cdn.cookielaw.org\/ https:\/\/cm.pmdt-jss.localhost\/ https:\/\/maps.googleapis.com\/ https:\/\/mc-3f4459e6-26cc-45d7-95b4-1637-cd.azurewebsites.net\/ https:\/\/mc-d506a988-cc64-4e20-af8c-4606-afd.azurefd.net\/ https:\/\/pagead2.googlesyndication.com\/ https:\/\/pcl-staging.promedica.org\/ https:\/\/pcl.promedica.org\/ https:\/\/promedica.matomo.cloud\/ https:\/\/siteintercept.qualtrics.com\/ https:\/\/stats.g.doubleclick.net\/ https:\/\/www.google-analytics.com\/; default-src 'self' https:\/\/*.promedica.app\/ https:\/\/*.vercel.app\/; font-src 'self' data: https:\/\/*.fontawesome.com\/ https:\/\/*.promedica.app\/ https:\/\/*.vercel.app\/ https:\/\/fonts.gstatic.com\/ https:\/\/use.typekit.net\/; frame-src 'self' https:\/\/td.doubleclick.net\/ https:\/\/www.google.com\/ https:\/\/www.youtube.com\/; img-src 'self' data: http:\/\/dummyimage.com https:\/\/*.promedica.app https:\/\/*.qualtrics.com https:\/\/*.vercel.app https:\/\/cdn.cookielaw.org https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/mc-3f4459e6-26cc-45d7-95b4-1637-cd.azurewebsites.net https:\/\/mc-d506a988-cc64-4e20-af8c-4606-afd.azurefd.net https:\/\/pcl-staging.promedica.org https:\/\/pcl.promedica.org https:\/\/www.google-analytics.com https:\/\/www.google.com.ec https:\/\/www.google.com https:\/\/www.googletagmanager.com; manifest-src 'self'; media-src 'self' data: https:\/\/pcl.promedica.org\/ https:\/\/pcl-staging.promedica.org\/; object-src 'none'; report-uri https:\/\/6480f3f9bf4bdd8c5cde6f2b.endpoint.csper.io\/?v=1; script-src 'unsafe-inline' 'unsafe-eval' 'report-sample' 'self' https:\/\/*.promedica.app\/ https:\/\/*.vercel.app\/ https:\/\/cdn.cookielaw.org\/ https:\/\/cdn.matomo.cloud\/ https:\/\/cdn.mouseflow.com\/ https:\/\/googleads.g.doubleclick.net\/ https:\/\/kit.fontawesome.com\/ https:\/\/maps.googleapis.com\/ https:\/\/promedica.tfaforms.net\/ https:\/\/siteintercept.qualtrics.com\/ https:\/\/unpkg.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/www.googletagmanager.com\/ https:\/\/www.gstatic.com\/ https:\/\/www.youtube.com\/ https:\/\/zn86cv25rplysllsr-promedica.siteintercept.qualtrics.com\/SIE\/; style-src 'report-sample' 'unsafe-inline' 'self' https:\/\/*.promedica.app\/ https:\/\/*.vercel.app\/ https:\/\/fonts.googleapis.com\/ https:\/\/promedica.tfaforms.net\/; worker-src 'self' blob:","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https:\/\/fonts.bunny.net *.hotjar.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com *.authorize.net challenges.cloudflare.com data: *.hotjar.com *.gstatic.com *.doubleclick.net *.facebook.com *.brand-display.com *.sitescout.com *.addthis.com *.metalocator.com *.googletagmanager.com *.medallia.com *.adsrvr.org *.ipredictive.com *.spotify.com *.byspotify.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com magefan.com cm.magefan.com *.disqus.com https:\/\/firebasestorage.googleapis.com *.magentocommerce.com *.facebook.com *.doubleclick.net *.google.com *.brand-display.com *.sitescout.com *.googletagmanager.com *.googleapis.com *.analytics.yahoo.com *.ktxlytics.io *.adnxs.com *.metalocator.com *.scooterscoffee.com *.kampyle.com *.ipredictive.com *.spotify.com *.byspotify.com *.cdninstagram.com *.fbcdn.net *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.certcapture.com *.disqus.com *.avada.io *.shopify.com *.authorize.net challenges.cloudflare.com *.bluecore.com *.facebook.net *.googleapis.com *.hotjar.com *.googletagmanager.com *.doubleclick.net *.gstatic.com *.brand-display.com *.cloudflare.com *.sitescout.com up.pixel.ad *.xg4ken.com *.usersnap.com chimpstatic.com data: *.ktxlytics.io *.app-us1.com *.amazonaws.com *.addthis.com *.addthisedge.com trackcmp.net *.moatads.com *.metalocator.com *.jsdelivr.net *.medallia.com *.snapchat.com *.trackedweb.net *.appboycdn.com sc-static.net *.adsrvr.org *.ipredictive.com *.spotify.com *.byspotify.com *.adroll.com *.tiktokw.us *.redditstatic.com *.braze.com *.instagram.com *.googleadservices.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.fontawesome.com https:\/\/fonts.bunny.net *.googleapis.com *.mailchimp.com *.typekit.net *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com https:\/\/get.geojs.io *.avada.io *.authorize.net *.bluecore.com *.googleapis.com *.hotjar.com *.hotjar.io *.doubleclick.net *.ktxlytics.io *.medallia.com *.snapchat.com *.trackedweb.net *.appboycdn.com sc-static.net *.kampyle.com *.ipredictive.com *.spotify.com *.byspotify.com *.adroll.com *.tiktokw.us *.redditstatic.com *.adsrvr.org *.braze.com *.instagram.com *.googleusercontent.com *.facebook.net *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.run.app 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/scooterscoffee.com\/; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.dukascopy.com https:\/\/www.dukascopy.com ; script-src 'self' 'nonce-q_bMwZlLO4W0FwuKZVDXsg' 'unsafe-eval' https:\/\/*.cloudflare.com https:\/\/www.dukascopy.com https:\/\/*.hotjar.com https:\/\/*.google.com https:\/\/*.g.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/static.cloudflareinsights.com https:\/\/*.googletagmanager.com ; script-src-elem 'self' 'nonce-q_bMwZlLO4W0FwuKZVDXsg' https:\/\/*.googlesyndication.com https:\/\/static.cloudflareinsights.com https:\/\/*.cloudflare.com https:\/\/*.dukascopy.com https:\/\/www.dukascopy.com https:\/\/*.telefision.com https:\/\/*.jsdelivr.net https:\/\/*.hotjar.com https:\/\/*.google.com https:\/\/*.trustpilot.com https:\/\/*.gstatic.com https:\/\/*.g.doubleclick.net https:\/\/*.redditstatic.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/www.googleadservices.com https:\/\/freeserv-static.dukascopy.com https:\/\/freeserv.dukascopy.com ; style-src 'self' 'unsafe-inline' https:\/\/*.dukascopy.com https:\/\/www.dukascopy.com https:\/\/*.jsdelivr.net https:\/\/*.telefision.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.dukascopy.jp ; object-src 'none' ; frame-ancestors 'self' ; form-action 'self' https:\/\/trustpilot.com https:\/\/*.trustpilot.com ; frame-src 'self' data: blob: https:\/\/*.cloudflare.com https:\/\/*.dukascopy.jp https:\/\/*.dukascopy.com https:\/\/www.dukascopy.com https:\/\/*.trustpilot.com https:\/\/www.youtube.com https:\/\/*.google.com https:\/\/*.googletagmanager.com https:\/\/*.doubleclick.net ; img-src 'self' https:\/\/*.dukascopy.com https:\/\/www.dukascopy.com https:\/\/*.dukascopy.jp https:\/\/*.google.com https:\/\/*.googleadservices.com https:\/\/*.googlesyndication.com https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googleapis.com https:\/\/*.g.doubleclick.net https:\/\/*.doubleclick.net https:\/\/*.google.us https:\/\/*.google.co.us https:\/\/*.google.com.us https:\/\/*.reddit.com https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.trustpilot.com https:\/\/*.g.doubleclick.net https:\/\/*.ytimg.com https:\/\/*.gstatic.com https:\/\/*.hotjar.com data: blob:; font-src 'self' https:\/\/freeserv-static.dukascopy.com https:\/\/*.dukascopy.com https:\/\/www.dukascopy.com https:\/\/*.telefision.com https:\/\/fonts.gstatic.com https:\/\/*.hotjar.com data:; media-src 'self' https:\/\/*.dukascopy.com https:\/\/www.dukascopy.com https:\/\/*.dukascopy.jp https:\/\/*.telefision.com data: blob:; connect-src 'self' https:\/\/*.dukascopy.com https:\/\/www.dukascopy.com https:\/\/*.dukascopy.online https:\/\/cloudflareinsights.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/www.googletagmanager.com https:\/\/*.google.com https:\/\/*.googleadservices.com https:\/\/*.googlesyndication.com https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googleapis.com https:\/\/*.g.doubleclick.net https:\/\/*.doubleclick.net https:\/\/*.google.us https:\/\/*.google.co.us https:\/\/*.google.com.us wss:\/\/*.hotjar.com https:\/\/*.reddit.com wss:\/\/*.dukascopy.com wss:\/\/*.telefision.com https:\/\/*.telefision.com https:\/\/*.g.doubleclick.net https:\/\/*.trustpilot.com https:\/\/*.google-analytics.com https:\/\/*.googlesyndication.com https:\/\/*.google.com https:\/\/*.analytics.google.com ; report-uri \/api\/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/*.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/connect.facebook.net https:\/\/www.clarity.ms https:\/\/c.clarity.ms https:\/\/strava-embeds.com https:\/\/d335luupugsy2.cloudfront.net https:\/\/challenges.cloudflare.com https:\/\/vercel.live https:\/\/static.zdassets.com https:\/\/static.hotjar.com https:\/\/cdn.mouseflow.com https:\/\/www.googleadservices.com https:\/\/static.cloudflareinsights.com https:\/\/posthog.ingresse.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/googletagmanager.com https:\/\/tagmanager.google.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/api.ticketsports.com.br https:\/\/api-beta.ticketsports.com.br https:\/\/accounts.ticketsports.com.br https:\/\/*.googletagmanager.com https:\/\/app.posthog.com https:\/\/us.i.posthog.com https:\/\/nominatim.openstreetmap.org https:\/\/www.google.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/www.facebook.com https:\/\/c.clarity.ms https:\/\/e.clarity.ms https:\/\/app.rdstation.com.br https:\/\/api.rd.services https:\/\/challenges.cloudflare.com https:\/\/www.strava.com https:\/\/vars.hotjar.com https:\/\/mouseflow.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/ekr.zdassets.com https:\/\/posthog.ingresse.com https:\/\/capiq.datah04.com; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/googletagmanager.com https:\/\/tagmanager.google.com https:\/\/challenges.cloudflare.com https:\/\/td.doubleclick.net https:\/\/www.strava.com https:\/\/strava-embeds.com https:\/\/vercel.live https:\/\/vars.hotjar.com; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" base-uri 'self'; connect-src 'self' https:\/\/*.kadaster.nl https:\/\/hetkadaster.bbvms.com https:\/\/api.mypurecloud.de https:\/\/api-cdn.mypurecloud.de https:\/\/kadasterbv.containers.piwik.pro https:\/\/kadasterbv.piwik.pro https:\/\/api.pdok.nl https:\/\/service.pdok.nl https:\/\/bat.bing.net https:\/\/cdn.bluebillywig.com wss:\/\/webmessaging.mypurecloud.de\/v1; default-src 'self'; font-src 'self' https:\/\/kadasterbv.containers.piwik.pro https:\/\/*.kadaster.nl; frame-ancestors 'self'; frame-src 'self' https:\/\/apps.mypurecloud.de; img-src 'self' data: blob: https:\/\/*.kadaster.nl https:\/\/hetkadaster.bbvms.com https:\/\/stats.bluebillywig.com https:\/\/kadasterbv.containers.piwik.pro https:\/\/kadasterbv.piwik.pro https:\/\/service.pdok.nl https:\/\/www.toegankelijkheidsverklaring.nl https:\/\/6052693.global.siteimproveanalytics.io; media-src 'self' data: blob: https:\/\/*.kadaster.nl https:\/\/cdn.bluebillywig.com https:\/\/hetkadaster.bbvms.com https:\/\/d17w22xdcwd6zx.cloudfront.net\/hetkadaster\/; report-to report-uri-com; report-uri https:\/\/kadasternl.report-uri.com\/r\/t\/csp\/reportOnly; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.kadaster.nl https:\/\/cdn.bluebillywig.com https:\/\/apps.mypurecloud.de https:\/\/hetkadaster.bbvms.com https:\/\/kadasterbv.piwik.pro\/ppms.js https:\/\/kadasterbv.containers.piwik.pro https:\/\/siteimproveanalytics.com https:\/\/bat.bing.com https:\/\/www.googleadservices.com; style-src 'self' 'unsafe-inline' https:\/\/*.kadaster.nl;","count":1},{"content-security-policy-report-only":" base-uri 'none'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: blob: https:\/\/img.stakely.io https:\/\/dev-img.stakely.io; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'strict-dynamic' 'nonce-kxlZsLA3quk\/yOHosPvzAyzB'; upgrade-insecure-requests;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-V9KhOlZCdiziCAO3k6lNXg==' 'strict-dynamic' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:\/\/files.any.run; media-src 'self' blob: https:\/\/files.any.run; font-src 'self' data:; connect-src 'self' https:\/\/analytics.any.run https:\/\/sentry.any.run https:\/\/api-gb.any.run; frame-src 'self' https:\/\/challenges.cloudflare.com; frame-ancestors 'self'; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; manifest-src 'self' https:\/\/files.any.run; upgrade-insecure-requests; report-uri \/api\/csp-report\/create","count":1},{"content-security-policy-report-only":" font-src *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com https:\/\/fonts.gstatic.com 'self' data: *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.google.com *.youtube.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.twitter.com *.google.com *.youtube.com maps.googleapis.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.facebook.com *.facebook.net www.googletagmanager.com https:\/\/player.vimeo.com https:\/\/www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.twitter.com *.google.com maps.googleapis.com lightwidget.com *.maps.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com quickchart.io img.youtube.com https:\/\/updates.themepunch.tools http:\/\/updates.themepunch.tools https:\/\/updates.themepunch-ext-a.tools http:\/\/updates.themepunch-ext-a.tools https:\/\/updates.themepunch-ext-b.tools http:\/\/updates.themepunch-ext-b.tools https:\/\/dev.sliderrevolution.com https:\/\/revolution.themepunch.com http:\/\/revolution5.themepunch.com http:\/\/pbs.twimg.com https:\/\/pbs.twimg.com http:\/\/scontent.cdninstagram.com https:\/\/img.youtube.com http:\/\/live.staticflickr.com https:\/\/live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.klarna.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.youtube.com maps.googleapis.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.googleapis.com *.placeholder.com *.maps.gstatic.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.facebook.com *.facebook.net *.avada.io cdn.jsdelivr.net connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com https:\/\/player.vimeo.com https:\/\/www.youtube.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com *.youtube.com maps.googleapis.com cdn.lightwidget.com *.instagram.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.googleapis.com *.placeholder.com *.maps.gstatic.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net fonts.gstatic.com fonts.googleapis.com https:\/\/fonts.googleapis.com http:\/\/fonts.googleapis.com unsafe-inline *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.youtube.com maps.googleapis.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.placeholder.com *.maps.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.facebook.com *.facebook.net https:\/\/get.geojs.io *.avada.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com www.nif.pt *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.google.com *.youtube.com maps.googleapis.com facebook.net *.maps.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self' *.nku.edu; base-uri 'self'; connect-src 'self' *.acalog.com *.adtrafficquality.google *.analytics.google.com *.bugherd.com *.bugsnag.com *.clarity.ms *.cloudfront.net *.cookieyes.com *.ctctcdn.com *.dubbot.com *.ebsco.com *.elink.io *.fontawesome.com *.google-analytics.com *.googletagmanager.com *.ivy.ai *.kaltura.com *.libanswers.com *.libapps.com *.mailchimp.com *.nku.edu *.padlet.com*.pusher.com *.qualtrics.com *.technolutions.net *.tockify.com analytics.google.com analytics.tiktok.com cdn-cookieyes.com connect.facebook.net insight.adsrvr.org log.cookieyes.com stats.g.doubleclick.net tr.snapchat.com tr6.snapchat.com wss:\/\/*.pusher.com www.clarity.ms www.facebook.com www.google.com; font-src 'self' *.cloudfront.net *.fontawesome.com *.ivy.ai *.nku.edu data: fonts.gstatic.com ka-f.fontawesome.com use.fontawesome.com use.typekit.net; form-action 'self' *.cookieyes.com *.libanswers.com *.list-manage.com *.mailchimp.com *.nku.edu *.qualtrics.com *.technolutions.net; frame-ancestors 'self' *.nku.edu; frame-src 'self' *.acalog.com *.adtrafficquality.google *.bugherd.com *.buzzsprout.com *.candidcareer.com *.collegesource.com *.ebsco.com *.elink.io *.eventbrite.com *.facebook.com *.google.com *.ivy.ai *.kaltura.com *.knightlab.com *.libanswers.com *.libapps.com *.mailchimp.com *.matchinggifts.com *.nku.edu *.padlet.com *.powerbi.com *.qualtrics.com *.spotify.com *.technolutions.net *.tockify.com *.transistor.fm calendar.google.com elink.io *.padlet.com *.syndicatedsearch.goog *.whova.com insight.adsrvr.org maps.google.com player.vimeo.com tockify.com www.google.com www.youtube-nocookie.com www.youtube.com; img-src 'self' *.acalog.com *.adtrafficquality.google *.analytics.google.com *.bing.com *.bugherd.com *.clarity.ms *.cloudfront.net *.ctctcdn.com *.ebsco.com *.fontawesome.com *.google-analytics.com *.google.com *.googleapis.com *.googleusercontent.com *.gstatic.com *.ivy-cdn.com *.ivy.ai *.kaltura.com *.libanswers.com *.libapps.com *.mailchimp.com *.nku.edu *.padlet.com *.qualtrics.com *.technolutions.net *.vimeocdn.com *.youtube.com *.ytimg.com blob: bugherd-attachments.s3.us-west-2.amazonaws.com cdn-cookieyes.com data: *.padlet.net *.whova.com i.ytimg.com tr.snapchat.com tr6.snapchat.com www.facebook.com www.google.com www.googletagmanager.com; manifest-src 'self'; media-src 'self' *.cloudfront.net *.googlevideo.com *.kaltura.com *.nku.edu *.vimeocdn.com *.youtube.com blob: data: player.vimeo.com; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.acalog.com *.analytics.google.com *.bugherd.com *.clarity.ms *.cloudfront.net *.cookieyes.com *.ctctcdn.com *.dubbot.com *.ebsco.com *.elink.io *.fontawesome.com *.google-analytics.com *.googleapis.com *.gstatic.com *.ivy.ai *.kaltura.com *.libanswers.com *.libapps.com *.mailchimp.com *.nku.edu *.padlet.com *.qualtrics.com *.technolutions.net *.tockify.com analytics.tiktok.com cdn-cookieyes.com cdnapisec.kaltura.com chimpstatic.com connect.facebook.net cse.google.com elink.io googleads.g.doubleclick.net js.adsrvr.org kit.fontawesome.com player.vimeo.com s.ytimg.com sc-static.net static.ctctcdn.com tockify.com tr.snapchat.com unpkg.com use.fontawesome.com www.bugherd.com www.clarity.ms www.dubbot.com www.google.com www.googletagmanager.com www.youtube-nocookie.com www.youtube.com *.cloudflare.com *.jquery.com *.amazonaws.com *.youtube.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' *.acalog.com *.adtrafficquality.google *.amazonaws.com *.analytics.google.com *.bugherd.com *.buzzsprout.com *.clarity.ms *.cloudflare.com *.cloudflareinsights.com *.cloudfront.net *.cookieyes.com *.ctctcdn.com *.doubleclick.net *.dubbot.com *.ebsco.com *.ebscohost.com *.elink.io *.eventbrite.com *.flockler.com *.fontawesome.com *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.gstatic.com *.ivy.ai *.jquery.com *.kaltura.com *.libanswers.com *.libapps.com *.mailchimp.com *.nku.edu *.padlet.com *.qualtrics.com *.rawgit.com *.technolutions.net *.tockify.com *.youtube.com analytics.tiktok.com cdn-cookieyes.com cdnapisec.kaltura.com chimpstatic.com connect.facebook.net cse.google.com elink.io googleads.g.doubleclick.net *.whova.com js.adsrvr.org kit.fontawesome.com player.vimeo.com s.ytimg.com sc-static.net static.ctctcdn.com tockify.com tr.snapchat.com unpkg.com use.fontawesome.com www.bugherd.com www.clarity.ms www.dubbot.com www.google.com www.googletagmanager.com www.youtube-nocookie.com www.youtube.com; style-src 'self' 'unsafe-inline' *.mailchimp.com *.cloudfront.net *.fontawesome.com *.ivy.ai *.kaltura.com *.nku.edu *.qualtrics.com *.technolutions.net cdn-cookieyes.com fonts.googleapis.com p.typekit.net unpkg.com use.typekit.net www.google.com; style-src-elem 'self' 'unsafe-inline' *.cloudfront.net *.fontawesome.com *.ivy.ai *.kaltura.com *.mailchimp.com *.nku.edu *.qualtrics.com *.technolutions.net cdn-cookieyes.com fonts.googleapis.com p.typekit.net unpkg.com use.typekit.net www.google.com; worker-src 'self' blob:; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src  'self' blob: data: 'unsafe-inline' 'unsafe-eval' fonts.gstatic.com embed.geckochat.io fonts.geckoform.com api.geckochat.io app.geckoform.com www.google.com analytics.google.com www.googletagmanager.com *.doubleclick.net *.6sc.co *.6sense.com *.crazyegg.com *.wistia.com *.vimeo.com *.youtube.com youtube.com ytimg.com *.ytimg.com youtube-nocookie.com *.youtube-nocookie.com *.widen.net widencdn.net *.widencdn.net *.jsdelivr.net *.facebook.net facebook.net *.facebook.com *.linkedin.com *.adsymptotic.com *.nr-data.net *.adnxs.com *.fullcircleinsights.com *.lightwidget.com lightwidget.com *.bing.com *.unibuddy.co *.visualwebsiteoptimizer.com app.vwo.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' blob: www.youtube.com www.googletagmanager.com embed.geckochat.io cdn.jsdelivr.net cdn.unibuddy.co *.doubleclick.net *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com; style-src  'unsafe-inline' 'self' fonts.googleapis.com fonts.geckoform.com embed.geckochat.io *.visualwebsiteoptimizer.com cdn.pushcrew.com; img-src  'unsafe-inline' 'unsafe-eval' 'self' data: humbercollege.widen.net www.google.com www.google.ca www.googletagmanager.com widget-assets.geckochat.io *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io cdn.pushcrew.com; font-src 'self' data: fonts.gstatic.com embed.geckochat.io fonts.geckoform.com;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/cdn.cookielaw.org https:\/\/tracker.dataiku.com https:\/\/js.hsforms.net https:\/\/js.hs-scripts.com https:\/\/js.hs-analytics.net https:\/\/js.hscollectedforms.net https:\/\/play.vidyard.com https:\/\/dnf20ypvrc856.cloudfront.net https:\/\/*.goldcast.io https:\/\/www.gartner.com https:\/\/snap.licdn.com https:\/\/connect.facebook.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdn.cookielaw.org https:\/\/www.gartner.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdn.cookielaw.org; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/cdn.cookielaw.org https:\/\/geolocation.onetrust.com https:\/\/tracker.dataiku.com https:\/\/forms.hsforms.com https:\/\/forms.hubspot.com https:\/\/api.hubspot.com https:\/\/*.hs-analytics.net https:\/\/*.hscollectedforms.net https:\/\/backend.goldcast.io https:\/\/*.goldcast.io https:\/\/play.vidyard.com https:\/\/*.vidyard.com https:\/\/images.ctfassets.net https:\/\/videos.ctfassets.net https:\/\/px.ads.linkedin.com; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net https:\/\/play.vidyard.com https:\/\/player.vimeo.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/open.spotify.com https:\/\/podcasts.apple.com https:\/\/embed.podcasts.apple.com https:\/\/*.goldcast.io https:\/\/*.hsforms.net https:\/\/*.hsforms.com https:\/\/*.hubspot.com https:\/\/www.gartner.com https:\/\/www.facebook.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/forms.hsforms.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com https:\/\/*.goldcast.io; worker-src 'self' blob:; manifest-src 'self'; report-uri \/api\/csp-report","count":1},{"content-security-policy-report-only":" connect-src 'none'; font-src 'self'; frame-src 'none'; img-src 'self'; media-src 'none'; object-src 'none'; report-uri https:\/\/browser-intake-us3-datadoghq.com\/api\/v2\/logs?dd-api-key=pub073cc344e99148d91a146b4cfdfbd3e9&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Atrac-jobs-website%2Cenv%3Aprod%2Cversion%3A2026.2; script-src 'self' https:\/\/ajax.googleapis.com\/; style-src 'self'; worker-src 'none'","count":1},{"content-security-policy-report-only":" default-src 'self' *.ctfassets.net *.trackjs.com *.demdex.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.googletagmanager.com *.onetrust.com assets.adobedtm.com script.hotjar.com *.googleapis.com; script-src-elem 'self' 'unsafe-inline' *.hotjar.com assets.adobedtm.com *.go-mpulse.net cdn-ukwest.onetrust.com maps.googleapis.com fonts.googleapis.com static.hotjar.com *.googletagmanager.com; script-src-attr 'self' 'unsafe-inline'; style-src 'self' *.googleapis.com; style-src-elem 'self' 'unsafe-inline' cdn.honey.io *.googleapis.com *.googletagmanager.com; style-src-attr 'self' 'unsafe-inline'; img-src 'self' data: mdm-assets.integration.costacoffee.com *.demdex.net *.ctfassets.net *.trackjs.com costalimited.d3.sc.omtrdc.net *.gstatic.com *.onetrust.com cm.everesttech.net *.googleapis.com; font-src 'self' *.gstatic.com; connect-src 'self' web.costa-loyalty-platform.com ws:\/\/ws27.hotjar.com *.hotjar.com *.hotjar.io *.onetrust.com *.go-mpulse.net trial-eum-clientnsv4-s.akamaihd.net trial-eum-clienttons-s.akamaihd.net *.akstat.io *.demdex.net costalimited.d3.sc.omtrdc.net costalimited.tt.omtrdc.net *.onetrust.io *.trackjs.com maps.googleapis.com *.techlab-cdn.com login.costa.co.uk *.google-analytics.com wss:\/\/ws.hotjar.com; frame-ancestors 'self'; frame-src costalimited.demdex.net *.hotjar.com; report-uri https:\/\/costa.report-uri.com\/r\/t\/csp\/reportonly; report-to default","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-5a127493126957f7294dad47cc2cbec6' *.yandex.ru *.facebook.net *.google-analytics.com *.google.com *.gstatic.com *.googletagmanager.com *.mail.ru dota2.net *.trustpilot.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss: https:\/\/mysentry.io; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri https:\/\/mysentry.io\/api\/148\/security\/?sentry_key=a616d2c34afed96d13185a20f54a6732","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:; style-src 'self' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self'; form-action 'self' https:; base-uri 'self'; object-src 'none'","count":1},{"content-security-policy-report-only":" default-src 'self' *.scorito.com; frame-ancestors 'self' *.scorito.com; form-action 'self' *.scorito.com betalen.rabobank.nl *.wlp-acs.com *.arcot.com *.americanexpress.com *.paypal.com; script-src-elem 'unsafe-inline' blob: *.scorito.com *.cdn.adyen.com static.cloudflareinsights.com cdnjs.cloudflare.com *.g.doubleclick.net www.google-analytics.com www.googletagmanager.com https:\/\/*.googlesyndication.com apis.google.com ajax.googleapis.com *.adtrafficquality.google script.hotjar.com static.hotjar.com *.lfeeder.com https:\/\/cdn.leadinfo.net snap.licdn.com js-agent.newrelic.com bam-cell.nr-data.net bam.nr-data.net live.steam.eu.com app.termly.io sdk.privacy-center.org platform.twitter.com https:\/\/www.youtube.com; script-src 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' *.scorito.com static.cloudflareinsights.com cdnjs.cloudflare.com https:\/\/*.gleap.io www.googletagmanager.com *.g.doubleclick.net www.google-analytics.com *.adtrafficquality.google https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/cdn.leadinfo.net snap.licdn.com *.nr-data.net https:\/\/js-agent.newrelic.com app.termly.io; img-src data: blob: *.scorito.com *.scorito-sports.com https:\/\/*.cdn.adyen.com 'self' https:\/\/*.gleap.io https:\/\/www.googletagmanager.com https:\/\/www.google.com www.google.nl www.googleadservices.com *.g.doubleclick.net https:\/\/*.googlesyndication.com *.adtrafficquality.google onts.gstatic.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/survey-images.hotjar.com https:\/\/collector.leadinfo.net *.lfeeder.com *.ads.linkedin.com https:\/\/assets.morrizz.com *.nr-data.net *.podbean.com *.steam.eu.com https:\/\/app.termly.io https:\/\/syndication.twitter.com https:\/\/i.ytimg.com; style-src 'unsafe-inline' 'unsafe-hashes' *.scorito.com 'self' https:\/\/static.hotjar.com https:\/\/script.hotjar.com snap.licdn.com https:\/\/app.termly.io; style-src-elem 'unsafe-inline' *.scorito.com *.cdn.adyen.com fonts.googleapis.com live.steam.eu.com; connect-src data: *.scorito.com *.scorito-sports.com live-signalr.service.signalr.net wss:\/\/live-signalr.service.signalr.net *.adyen.com *.paypal.com static.cloudflareinsights.com 'self' https:\/\/*.gleap.io wss:\/\/ws.gleap.io www.googletagmanager.com www.google.com *.googlesyndication.com *.google-analytics.com *.gstatic.com www.googleadservices.com *.analytics.google.com analytics.google.com *.g.doubleclick.net *.adtrafficquality.google https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/api.leadinfo.com https:\/\/*.leadinfo.net *.ads.linkedin.com login.microsoftonline.com *.nr-data.net js-agent.newrelic.com feed.podbean.com live.steam.eu.com *.termly.io platform.twitter.com; font-src data: *.scorito.com fonts.gstatic.com https:\/\/script.hotjar.com; manifest-src *.scorito.com; media-src data: *.scorito.com 'self' https:\/\/*.gleap.io live.steam.eu.com; frame-src *.scorito.com *.cdn.adyen.com checkoutshopper-live.adyen.com *.wlp-acs.com betalen.rabobank.nl *.arcot.com *.americanexpress.com *.paypal.com https:\/\/*.gleap.io *.googletagmanager.com *.safeframe.googlesyndication.com cm.g.doubleclick.net *.adtrafficquality.google login.microsoft.com login.microsoftonline.com platform.twitter.com syndication.twitter.com youtube.com *.youtube.com; worker-src blob: *.scorito.com; report-uri https:\/\/cspviolations.scorito.com\/report; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" upgrade-insecure-requests;default-src 'self' blob: *.senado.gov.br *.senado.leg.br;script-src 'self' 'unsafe-eval' 'unsafe-inline' *.senado.gov.br *.senado.leg.br *.youtube.com *.google-analytics.com www.googletagmanager.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ vlibras.gov.br ajax.googleapis.com www.gstatic.com;img-src 'self' data: blob: *.senado.gov.br *.senado.leg.br *.ytimg.com *.google-analytics.com www.googletagmanager.com *.youtube.com *.gstatic.com vlibras.gov.br;connect-src 'self' *.senado.gov.br *.senado.leg.br vlibras.gov.br *.vlibras.gov.br *.google-analytics.com *.analytics.google.com www.googletagmanager.com www.google.com www.google.com\/recaptcha\/;font-src 'self' data: vlibras.gov.br cdnjs.cloudflare.com fonts.gstatic.com;style-src 'self' 'unsafe-inline' *.senado.gov.br *.senado.leg.br cdnjs.cloudflare.com fonts.googleapis.com;worker-src blob: *.senado.leg.br *.senado.gov.br;object-src 'none';frame-src 'self' *.senado.gov.br *.senado.leg.br *.youtube.com www.youtube-nocookie.com www.google.com\/recaptcha\/ recaptcha.google.com\/recaptcha\/;base-uri 'self';frame-ancestors 'self' *.senado.gov.br *.senado.leg.br;report-uri https:\/\/www12.senado.leg.br\/crisp\/report","count":1},{"content-security-policy-report-only":" default-src 'self'; connect-src *; img-src * data:; script-src 'nonce-sIJ1HlXvJBeRfTj6D\/qLoh1eOTj7fiqY' 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' 'self' https: http: 'self' cdn.bizible.com; style-src 'self' 'unsafe-inline' https:\/\/404-tpa-276.mktoweb.com\/ https:\/\/*.qualified.com; font-src 'self' kit.fontawesome.com ka-p.fontawesome.com https:\/\/fast.wistia.com\/ https:\/\/fast.wistia.net\/ data:; form-action 'self'; object-src 'none'; media-src 'self' blob: mediastream: https:\/\/*.qualified.com; frame-src https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net\/ https:\/\/gtm.lawpay.com\/ https:\/\/gtm.mycase.com\/ https:\/\/insight.adsrvr.org\/ https:\/\/app.netlify.com\/ https:\/\/404-tpa-276.mktoweb.com\/ https:\/\/*.qualified.com; child-src https:\/\/*.qualified.com; frame-ancestors demo.affinipay.com ka-p.fontawesome.com; upgrade-insecure-requests; block-all-mixed-content; report-uri \/.netlify\/functions\/__csp-violations","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-GA3m4SU_20omr42B_YJZrA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" report-uri https:\/\/www.yelp.com\/csp_report_only?id=696aff425c8a348d&page=csp_report_frame_directives%2Cfull_site_ssl_csp_report_directives&policy_hash=41d0c45536d2a082f11d1cd0e00fde7f&site=www&timestamp=1788493633; frame-ancestors 'self' https:\/\/*.yelp.com; default-src https:; img-src https: data: blob:; script-src https: data: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' data:; font-src data: https:; child-src https: yelp-webview:\/\/* yelp:\/\/* data:; object-src 'none'; worker-src blob: https:; base-uri 'self'; form-action https:","count":1},{"content-security-policy-report-only":" default-src https: data: 'self' 'unsafe-inline' 'unsafe-eval'     *.googleapis.com      fonts.gstatic.com      *.fontawesome.com      *.aspnetcdn.com      *.jsdelivr.net      *.googletagmanager.com;     img-src * data: *.wistia.com;     frame-ancestors 'self';     object-src 'none';     form-action 'self' *.hsforms.com *.agencybloc.com *.spinutech.com https:\/\/www.facebook.com\/tr\/;     base-uri 'self';     media-src s3.amazonaws.com blob: *.wistia.com *.wistia.net;     report-uri \/csp\/;","count":1},{"content-security-policy-report-only":" frame-src https:\/\/accounts.google.com https:\/\/appleid.apple.com https:\/\/applepay.cdn-apple.com https:\/\/pay.apple.com https:\/\/auth0.polymarket.us https:\/\/auth0-dev.polymarket.us https:\/\/*.checkout.com https:\/\/*.js.stripe.com https:\/\/js.stripe.com https:\/\/hooks.stripe.com https:\/\/pay.google.com https:\/\/docs.google.com https:\/\/vercel.live https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.twitch.tv https:\/\/player.kick.com https:\/\/intercom-sheets.com https:\/\/www.intercom-reporting.com https:\/\/player.vimeo.com https:\/\/fast.wistia.net; img-src 'self' data: blob: https:\/\/pmugc.us https:\/\/polymarket-upload.s3.us-east-2.amazonaws.com https:\/\/azuswufclivepubstorstd.blob.core.windows.net https:\/\/static.polymarket.us https:\/\/static-staging.polymarket.us https:\/\/static-preprod.polymarket.us; media-src 'self' blob: https:\/\/*.beterstream.xyz https:\/\/*.b-cdn.net https:\/\/lc-live-ll-hls.akamaized.net https:\/\/*.geniuslive.geniussports.com https:\/\/js.intercomcdn.com https:\/\/downloads.intercomcdn.com; require-trusted-types-for 'script'; report-uri \/api\/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' https:\/\/www.googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/fast.wistia.com https:\/\/*.wistia.com https:\/\/js.hsforms.net https:\/\/statuspal.io https:\/\/connect.facebook.net https:\/\/bat.bing.com https:\/\/tracking.g2crowd.com https:\/\/www.redditstatic.com https:\/\/www.clarity.ms https:\/\/*.clarity.ms https:\/\/c.bing.com https:\/\/snap.licdn.com https:\/\/a.burly.io https:\/\/j.6sc.co https:\/\/cdn.stat-track.com https:\/\/*.zoominfo.com; style-src 'self' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com; frame-src https:\/\/fast.wistia.com https:\/\/*.wistia.com https:\/\/forms.hsforms.com https:\/\/statuspal.io; img-src 'self' https: data: https:\/\/www.facebook.com https:\/\/static.xx.fbcdn.net https:\/\/*.wistia.com https:\/\/www.googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/bat.bing.com; connect-src 'self' https:\/\/www.googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com https:\/\/pagead2.googlesyndication.com https:\/\/www.facebook.com https:\/\/bat.bing.com https:\/\/tracking.g2crowd.com https:\/\/forms.hsforms.com https:\/\/*.hubspot.com https:\/\/statuspal.io https:\/\/*.wistia.com https:\/\/www.clarity.ms https:\/\/*.clarity.ms https:\/\/c.bing.com https:\/\/px.ads.linkedin.com https:\/\/a.burly.io https:\/\/j.6sc.co https:\/\/cdn.stat-track.com https:\/\/*.zoominfo.com; media-src 'self' https:\/\/embedwistia-a.akamaihd.net https:\/\/*.wistia.com","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.googletagservices.com https:\/\/*.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/securepubads.g.doubleclick.net https:\/\/*.googleadservices.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/fundingchoicesmessages.google.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/insight.bljesak.info https:\/\/*.dotmetrics.net https:\/\/*.iprom.net https:\/\/*.ipromcloud.com https:\/\/platform.twitter.com https:\/\/www.youtube.com https:\/\/w.soundcloud.com https:\/\/connect.facebook.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' data: https:\/\/fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' https: blob:; connect-src 'self' https:\/\/*.bljesak.info https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/fundingchoicesmessages.google.com https:\/\/*.dotmetrics.net https:\/\/*.iprom.net https:\/\/*.ipromcloud.com; frame-src https:\/\/www.google.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/platform.twitter.com https:\/\/w.soundcloud.com https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/fundingchoicesmessages.google.com https:\/\/www.facebook.com https:\/\/*.instagram.com https:\/\/*.sofascore.com https:\/\/*.bljesak.photo https:\/\/strawpoll.com https:\/\/*.strawpoll.com; worker-src 'self' blob:; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:","count":1},{"content-security-policy-report-only":" default-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.tool.lu *.baidu.com *.bdstatic.com; object-src 'none'; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.tool.lu *.baidu.com; img-src 'self' data: *.tool.lu *.href.lu *.baidu.com; media-src 'none'; child-src 'self' *.tool.lu; font-src *.tool.lu *.alicdn.com; connect-src 'self' *.tool.lu *.baidu.com *.alicdn.com; report-uri \/\/a.tool.lu\/csp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/www.gstatic.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com; media-src 'self' data: blob: https:; connect-src 'self' https: wss:; frame-src 'self' blob: https:; worker-src 'self' blob: https:\/\/unpkg.com; child-src 'self' blob: https:; manifest-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/www.facebook.com; frame-ancestors 'self'; upgrade-insecure-requests; report-uri \/api\/security\/csp-report; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-eval' assets.sitescdn.net connect.cooper.edu https:\/\/cdnjs.cloudflare.com https:\/\/www.skynettechnologies.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' answers-embed.cooper.edu.pagescdn.com buttons-config.sharethis.com cdn.unibuddy.co chimpstatic.com mx.technolutions.net traffic-drivers.unibuddy.co www.google-analytics.com www.googletagmanager.com www.youvisit.com www.youtube.com cooper.us10.list-manage.com s3.amazonaws.com t.sharethis.com js-agent.newrelic.com www.skynettechnologies.com assets.sitescdn.net connect.cooper.edu https:\/\/cdnjs.cloudflare.com https:\/\/www.skynettechnologies.com; style-src 'self' fonts.googleapis.com https:\/\/assets.sitescdn.net https:\/\/cdnjs.cloudflare.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' cdn-images.mailchimp.com fonts.googleapis.com https:\/\/assets.sitescdn.net https:\/\/cdnjs.cloudflare.com; frame-ancestors 'self' cooper.edu; report-uri https:\/\/cooper.report-uri.com\/r\/d\/csp\/wizard","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' https:\/\/*.fontawesome.com https:\/\/*.googleapis.com https:\/\/accounts.google.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/*.sentry.io https:\/\/*.google-analytics.com https:\/\/*.gstatic.com https:\/\/google-analytics.com https:\/\/*.leadinfo.net https:\/\/*.leadinfo.com https:\/\/*.doubleclick.net https:\/\/*.hotjar.io https:\/\/*.hotjar.com https:\/\/*.googletagmanager.com https:\/\/unpkg.com https:\/\/*.google.com https:\/\/*.google.be https:\/\/*.google.de https:\/\/*.google.fr https:\/\/*.google.lu https:\/\/*.google.nl https:\/\/*.google.pl https:\/\/*.google.co.uk ; font-src 'self' 'unsafe-inline' https:\/\/*.fontawesome.com https:\/\/fonts.gstatic.com data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.googletagmanager.com https:\/\/www.google.com\/recaptcha\/api.js https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/maps.googleapis.com https:\/\/accounts.google.com\/gsi\/ https:\/\/*.google-analytics.com https:\/\/js.mollie.com https:\/\/cdn.leadinfo.net\/ ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.googletagmanager.com https:\/\/www.google.com\/recaptcha\/api.js https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/maps.googleapis.com https:\/\/accounts.google.com\/gsi\/ https:\/\/*.google-analytics.com https:\/\/js.mollie.com https:\/\/cdn.leadinfo.net\/ ; frame-src 'self' https:\/\/*.doubleclick.net\/ https:\/\/accounts.google.com\/ https:\/\/*.mollie.com https:\/\/*.googletagmanager.com https:\/\/*.google.com https:\/\/*.google.be https:\/\/*.google.de https:\/\/*.google.fr https:\/\/*.google.lu https:\/\/*.google.nl https:\/\/*.google.pl https:\/\/*.google.co.uk ; img-src 'self' https:\/\/*.googletagmanager.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.doubleclick.net blob: data: https:\/\/tile.openstreetmap.org https:\/\/*.tile.openstreetmap.org https:\/\/*.google.com https:\/\/*.google.be https:\/\/*.google.de https:\/\/*.google.fr https:\/\/*.google.lu https:\/\/*.google.nl https:\/\/*.google.pl https:\/\/*.google.co.uk ;  report-to csp-endpoint; report-uri  https:\/\/www.companyweb.be\/cspviolation","count":1},{"content-security-policy-report-only":" script-src 'nonce-ft05oBIFTKU31dUxRgKbHg==' 'strict-dynamic' https: 'unsafe-eval'; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com https:\/\/applepay.cdn-apple.com data:; connect-src https: wss:; form-action 'self'; base-uri 'none'; object-src 'none'; frame-ancestors 'self'; report-uri https:\/\/o4510362602373120.ingest.us.sentry.io\/api\/4510758972751874\/security\/?sentry_key=4ec6ab1391cb32106e853449cd1a1770&sentry_environment=prod&sentry_release=1-122-4; report-to csp","count":1},{"content-security-policy-report-only":" upgrade-insecure-requests; frame-ancestors 'self' https:\/\/*.sensibull.com https:\/\/kite.zerodha.com; report-uri https:\/\/7eae552da389ebb083bedadbd9428ed2.report-uri.com\/r\/d\/csp\/reportOnly","count":1},{"content-security-policy-report-only":" default-src https: wss: 'unsafe-inline' 'unsafe-eval'; img-src https: data: blob:; worker-src blob: 'self'; font-src https: data: 'unsafe-inline' 'unsafe-eval'; media-src https: wss: blob: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'none'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; upgrade-insecure-requests;","count":1},{"content-security-policy-report-only":" default-src 'self'; report-to csp-endpoint; report-uri https:\/\/csp.darwinapps.com\/api\/v1\/reports\/csp\/csp_oSrYzeL6BgHQ1qQrlDzImmMcCqm0km5yDyl9-798ejA;","count":1},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' *.engagement.coremedia.cloud *.byside.com wss:\/\/*.engagement.coremedia.cloud wss:\/\/*.byside.com; script-src 'self' *.engagement.coremedia.cloud 'unsafe-inline'; style-src 'self' *.engagement.coremedia.cloud 'unsafe-inline'; img-src 'self' *.engagement.coremedia.cloud data:;","count":1},{"content-security-policy-report-only":" default-src 'self'; connect-src *; img-src * data:; script-src 'nonce-tJ6EShwZwZTtrey8HV+VQdrHVg+qHQWH' 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' 'self' https: http: 'self' cdn.bizible.com; style-src 'self' 'unsafe-inline' https:\/\/404-tpa-276.mktoweb.com\/ https:\/\/*.qualified.com; font-src 'self' kit.fontawesome.com https:\/\/ka-p.fontawesome.com\/ https:\/\/fast.wistia.com\/ data:; form-action 'self'; object-src 'none'; media-src 'self' blob: mediastream: https:\/\/*.qualified.com; frame-src https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net\/ https:\/\/gtm.casepeer.com\/ https:\/\/gtm.mycase.com\/ https:\/\/insight.adsrvr.org\/ https:\/\/app.netlify.com\/ https:\/\/404-tpa-276.mktoweb.com\/ https:\/\/*.qualified.com; child-src https:\/\/*.qualified.com; frame-ancestors demo.affinipay.com ka-p.fontawesome.com; upgrade-insecure-requests; block-all-mixed-content; report-uri \/.netlify\/functions\/__csp-violations","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-0ZyYb0x5PjSMGTjMh02Ulg==' https:\/\/www.google-analytics.com https:\/\/widget.trustpilot.com http:\/\/widget.trustpilot.com https:\/\/*.sentry.io https:\/\/*.firebase.googleapis.com https:\/\/static.zdassets.com https:\/\/www.redditstatic.com\/ads\/pixel.js https:\/\/snap.licdn.com\/li.lms-analytics\/insight.min.js https:\/\/ai-widget.changenow.com; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' https:\/\/content-api.changenow.io https:\/\/widget.trustpilot.com https:\/\/changenow.io https:\/\/explorer-api.walletconnect.com https:\/\/alb.reddit.com\/rp.gifhttps:\/\/ai-widget.changenow.com; connect-src 'self' https:\/\/l.changenow.org https:\/\/*.zdassets.com https:\/\/www.google-analytics.com https:\/\/vip-api.changenow.io https:\/\/content-api.changenow.io https:\/\/changenow.io https:\/\/affiliate-backend.changenow.io https:\/\/api.changenow.io https:\/\/explorer-api.walletconnect.com https:\/\/verify.walletconnect.com https:\/\/changenow.zendesk.com https:\/\/px.ads.linkedin.com\/collect https:\/\/ai-widget.changenow.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; frame-src 'self' https:\/\/widget.trustpilot.com http:\/\/widget.trustpilot.com https:\/\/changenow.io https:\/\/youtube.com https:\/\/verify.walletconnect.com https:\/\/www.youtube.com https:\/\/ai-widget.changenow.com; report-uri https:\/\/l.changenow.org\/api\/3\/security\/?sentry_key=caf1b4c4d55fac9fb827b0fc4c20f664","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/recaptchaenterprise.googleapis.com; frame-src https:\/\/www.google.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none'","count":1},{"content-security-policy-report-only":" font-src *.gstatic.com data: fonts.googleapis.com fonts.gstatic.com *.fontawesome.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.gstatic.com *.googleapis.com maps.googleapis.com maps.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.googleapis.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.avada.io *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com https:\/\/get.geojs.io *.avada.io *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/managewp.com https:\/\/orion.managewp.com https:\/\/s42013.pcdn.co https:\/\/db0hcalplzljl.cloudfront.net\/ https:\/\/*.google.com api.w.org https:\/\/*.googleapis.com ogp.me https:\/\/www.facebook.com *.google-analytics.com api.w.org *.googletagmanager.com tags.tiqcdn.com use.typekit.net s.w.org https:\/\/secure.gravatar.com https:\/\/connect.facebook.net https:\/\/p.typekit.net https:\/\/www.googleadservices.com https:\/\/fonts.gstatic.com https:\/\/www.gstatic.com  https:\/\/*.g.doubleclick.net https:\/\/player.vimeo.com https:\/\/*.youtube.com https:\/\/*.youtube-nocookie.com https:\/\/*.googlevideo.com https:\/\/*.ytimg.com data:;  img-src * data:;  object-src 'none';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'sha256-JRkdqt1cSOaDn3OA7zKhmWAlg0Z26dXPz7KppbsvejY=' 'sha256-UehoJuk9H+B9\/h5VY8O3JwboWId4adF6jT1hk6YlxhA=' 'sha256-uImFbiFCJpQqBBJIgDGF7m83Xf8BwcQb9F\/FhVfPv4o=' 'sha256-wv9t8ovqnH4ayVaS46LraLM76HAxxF+W6+UxmHbZ6oI=' 'sha256-SIqkK\/O4RsftRsPcXqKMi6YMpk7InvujpqXh2XIhNmI=' 'sha256-U4TyUKjIOsaaHG0cbbmSKW8nz8kRRQHvw6A2MxNgQCA=' 'sha256-4SOk9xwBIzE6i4KmEPV8KXZ26hffSWEtIJbEZyYcmmM=' 'sha256-SMWADIfJArPgMtf2hxe3D9Sg21evfa0i12MS3EBG\/Lo=' 'sha256-LiQBZtRQqcX34cPP4uLT\/GFrLogXR4foSQ1laKt+mKE=' 'sha256-VzdTMA5GWCZnjY60v1Dqt3zoFqdfJUG571My5vrLpPk=' 'sha256-ZRALo3HByKbDT4kWAtY8\/BE2zUWLvV24+LyzJzLq59I=' https:\/\/bot.leadoo.com https:\/\/*.delivery.rocketcdn.me; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/bot.leadoo.com https:\/\/res.leadoo.com https:\/\/*.delivery.rocketcdn.me; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/use.typekit.net https:\/\/res.leadoo.com; img-src 'self' data: blob: https:\/\/leadoo-prod-uploads-1.s3.eu-north-1.amazonaws.com https:\/\/res.leadoo.com https:\/\/secure.gravatar.com https:\/\/*.delivery.rocketcdn.me https:\/\/i.ytimg.com; connect-src 'self' https:\/\/anl.leadoo.com https:\/\/bot.leadoo.com https:\/\/res.leadoo.com; frame-src 'self' blob: https:\/\/www.youtube.com; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests;","count":1},{"content-security-policy-report-only":" default-src https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com https:\/\/*.paa-reporting-advertising.amazon https:\/\/*.twitch.tv https:\/\/*.amazongamestudios.com https:\/\/*.amazongames.com https:\/\/*.awsstatic.com https:\/\/amazonwebservices.d2.sc.omtrdc.net https:\/\/amazongamestudios.d2.sc.omtrdc.net https:\/\/*.viddler.com https:\/\/*.ctfassets.net https:\/\/chat.amazon.eu https:\/\/chat.amazon.co.jp https:\/\/sentry.amazongames.com https:\/\/d13pe3bn1jpqwf.cloudfront.net; script-src 'nonce-691920c16a9346a1803c6e02821081df'  https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com https:\/\/*.paa-reporting-advertising.amazon https:\/\/*.twitch.tv https:\/\/*.amazongamestudios.com https:\/\/*.amazongames.com https:\/\/*.awsstatic.com https:\/\/amazonwebservices.d2.sc.omtrdc.net https:\/\/amazongamestudios.d2.sc.omtrdc.net https:\/\/*.viddler.com https:\/\/*.ctfassets.net https:\/\/chat.amazon.eu https:\/\/chat.amazon.co.jp https:\/\/sentry.amazongames.com https:\/\/d13pe3bn1jpqwf.cloudfront.net; style-src 'self' 'nonce-691920c16a9346a1803c6e02821081df'  https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com https:\/\/*.paa-reporting-advertising.amazon https:\/\/*.twitch.tv https:\/\/*.amazongamestudios.com https:\/\/*.amazongames.com https:\/\/*.awsstatic.com https:\/\/amazonwebservices.d2.sc.omtrdc.net https:\/\/amazongamestudios.d2.sc.omtrdc.net https:\/\/*.viddler.com https:\/\/*.ctfassets.net https:\/\/chat.amazon.eu https:\/\/chat.amazon.co.jp https:\/\/sentry.amazongames.com https:\/\/d13pe3bn1jpqwf.cloudfront.net; img-src 'self' data:  https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com https:\/\/*.paa-reporting-advertising.amazon https:\/\/*.twitch.tv https:\/\/*.amazongamestudios.com https:\/\/*.amazongames.com https:\/\/*.awsstatic.com https:\/\/amazonwebservices.d2.sc.omtrdc.net https:\/\/amazongamestudios.d2.sc.omtrdc.net https:\/\/*.viddler.com https:\/\/*.ctfassets.net https:\/\/chat.amazon.eu https:\/\/chat.amazon.co.jp https:\/\/sentry.amazongames.com https:\/\/d13pe3bn1jpqwf.cloudfront.net https:\/\/*.twimg.com https:\/\/player.twitch.tv\/ https:\/\/*.ytimg.com; media-src 'self' data:  https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com https:\/\/*.paa-reporting-advertising.amazon https:\/\/*.twitch.tv https:\/\/*.amazongamestudios.com https:\/\/*.amazongames.com https:\/\/*.awsstatic.com https:\/\/amazonwebservices.d2.sc.omtrdc.net https:\/\/amazongamestudios.d2.sc.omtrdc.net https:\/\/*.viddler.com https:\/\/*.ctfassets.net https:\/\/chat.amazon.eu https:\/\/chat.amazon.co.jp https:\/\/sentry.amazongames.com https:\/\/d13pe3bn1jpqwf.cloudfront.net https:\/\/*.twimg.com https:\/\/player.twitch.tv\/ https:\/\/www.youtube.com https:\/\/youtube.com https:\/\/*.googlevideo.com; frame-src https:\/\/www.youtube.com https:\/\/youtube.com https:\/\/*.googlevideo.com https:\/\/*.twimg.com https:\/\/player.twitch.tv\/  https:\/\/*.amazon.com https:\/\/*.media-amazon.com https:\/\/*.ssl-images-amazon.com https:\/\/*.amazon-adsystem.com https:\/\/*.paa-reporting-advertising.amazon https:\/\/*.twitch.tv https:\/\/*.amazongamestudios.com https:\/\/*.amazongames.com https:\/\/*.awsstatic.com https:\/\/amazonwebservices.d2.sc.omtrdc.net https:\/\/amazongamestudios.d2.sc.omtrdc.net https:\/\/*.viddler.com https:\/\/*.ctfassets.net https:\/\/chat.amazon.eu https:\/\/chat.amazon.co.jp https:\/\/sentry.amazongames.com https:\/\/d13pe3bn1jpqwf.cloudfront.net; report-uri https:\/\/www.amazon.com\/1\/batch\/2\/OE\/mid=ATVPDKIKX0DER:sid=137-1498005-7512306:rid=88218080283F4EAAB118:sn=www.amazongamestudios.com","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.googleapis.com\/ https:\/\/www.google-analytics.com https:\/\/telegram.org\/ https:\/\/yandex.ru\/ https:\/\/*.yandex.ru\/ http:\/\/*.yandex.ru\/ https:\/\/*.yandex.md\/ https:\/\/*.yandex.net\/ https:\/\/yastatic.net\/ https:\/\/*.mail.ru\/ https:\/\/*.marquiz.ru\/ https:\/\/cdnjs.cloudflare.com\/ https:\/\/*.clients-cdnnow.ru\/ http:\/\/*.websuccess-data.com\/ https:\/\/*.googletagmanager.com\/ wss:\/\/mc.yandex.ru\/ https:\/\/vk.com\/ https:\/\/*.vk.com\/ https:\/\/public-api.uxfeedback.ru\/ https:\/\/*.execute-api.us-east-1.amazonaws.com\/ https:\/\/unpkg.com\/ https:\/\/youtube.com\/ https:\/\/*.youtube.com\/ https:\/\/youtu.be\/ https:\/\/vkvideo.ru\/ https:\/\/*.vkvideon.ru\/ https:\/\/ibb.org.ru\/ https:\/\/aichatbot.rdtex.ru:8000\/ wss:\/\/aichatbot.rdtex.ru:8000\/ https:\/\/*.bpcontent.cloud\/ https:\/\/*.botpress.cloud\/ data:; font-src 'self' https:\/\/*.gstatic.com\/ data:; report-to rdtex-csp; report-uri https:\/\/ct-csp.rdtex.ru\/cgi-bin\/csp-notify;","count":1},{"content-security-policy-report-only":" default-src 'self';  font-src 'self'    https:\/\/static.sanitas.es    https:\/\/maxcdn.bootstrapcdn.com    https:\/\/s3.lightboxcdn.com    https:\/\/fonts.gstatic.com    https:\/\/sanitaspre.herokuapp.com;  style-src 'self' 'unsafe-inline'    https:\/\/static.sanitas.es    https:\/\/sanitaspre.herokuapp.com    https:\/\/forms.zetaglobal.net    https:\/\/fonts.googleapis.com    https:\/\/maxcdn.bootstrapcdn.com;  img-src 'self'    data:    https:\/\/www.sanitas.es    https:\/\/static.sanitas.es    https:\/\/www.bupa.pt    https:\/\/cdn.cookielaw.org    https:\/\/sanitassociedadanonimade.data.adobedc.net    https:\/\/www.googletagmanager.com    https:\/\/www.google.com    https:\/\/forms.zetaglobal.net    https:\/\/sanitaspre.herokuapp.com    https:\/\/maps.gstatic.com    https:\/\/maps.googleapis.com    https:\/\/lh3.googleusercontent.com    https:\/\/www.google.es;  script-src 'self' 'unsafe-inline' 'unsafe-eval'    https:\/\/static.sanitas.es    https:\/\/www.googletagmanager.com    https:\/\/x.empathy.co    https:\/\/sanitaspre.herokuapp.com    https:\/\/assets.adobedtm.com https:\/\/cdn.cookielaw.org    https:\/\/static.hotjar.com https:\/\/euhosted.live.rezync.com    https:\/\/googleads.g.doubleclick.net    https:\/\/cdnjs.cloudflare.com    https:\/\/www.lightboxcdn.com    https:\/\/script.hotjar.com    https:\/\/forms.zetaglobal.net    https:\/\/d30o4d63vvluug.cloudfront.net    https:\/\/maps.googleapis.com    https:\/\/assets.exatom.io    https:\/\/cdn.eu.zetaglobal.net;  connect-src 'self'    https:\/\/api.sanitas.es    https:\/\/sanitassociedad.tt.omtrdc.net    https:\/\/cdn.cookielaw.org    https:\/\/onsiterecs.api.eu.zetaglobal.net    https:\/\/sanitaspre.herokuapp.com    https:\/\/events.api.eu.zetaglobal.net    https:\/\/content.hotjar.io    https:\/\/people.api.eu.zetaglobal.net    https:\/\/api.eu.zetaglobal.net    https:\/\/jsonplaceholder.typicode.com    https:\/\/maps.googleapis.com    https:\/\/assets.exatom.io    https:\/\/dpm.demdex.net    https:\/\/ad.doubleclick.net    https:\/\/www.google.com    wss:\/\/sanitaspre.herokuapp.com    wss:\/\/ws.hotjar.com;  frame-src 'self'    https:\/\/sania.chat    https:\/\/www.sania.chat    https:\/\/8508277.fls.doubleclick.net    https:\/\/sanitassociedadanonimade.demdex.net;","count":1},{"content-security-policy-report-only":" default-src 'self' *.storedgefms.com https:\/\/enterprise.storedge.com https:\/\/talemonger.auth.storable.io https:\/\/cdn.talemonger.auth.storable.io https:\/\/portal.storable.io https:\/\/esign-service.polaris.storable.io *.payments.storable.io; script-src 'self' blob: 'unsafe-eval' 'unsafe-inline' 'unsafe-hashes' *.google-analytics.com https:\/\/ajax.googleapis.com https:\/\/cdn.hellosign.com https:\/\/code.jquery.com https:\/\/cdn.pendo.io https:\/\/static.zdassets.com https:\/\/edge.fullstory.com https:\/\/*.storage.googleapis.com https:\/\/data.pendo.io *.pusher.com *.storedgefms.com https:\/\/enterprise.storedge.com https:\/\/talemonger.auth.storable.io https:\/\/cdn.talemonger.auth.storable.io https:\/\/portal.storable.io https:\/\/esign-service.polaris.storable.io *.payments.storable.io; script-src-elem 'self' blob: *.googletagmanager.com *.cloudflare.com *.google-analytics.com 'unsafe-inline' 'unsafe-hashes' https:\/\/ajax.googleapis.com https:\/\/code.jquery.com https:\/\/cdn.hellosign.com https:\/\/cdn.pendo.io https:\/\/static.zdassets.com https:\/\/edge.fullstory.com https:\/\/*.storage.googleapis.com https:\/\/data.pendo.io *.pusher.com *.storedgefms.com https:\/\/enterprise.storedge.com https:\/\/talemonger.auth.storable.io https:\/\/cdn.talemonger.auth.storable.io https:\/\/portal.storable.io https:\/\/esign-service.polaris.storable.io *.payments.storable.io; img-src 'self' data: *.google-analytics.com *.googletagmanager.com https:\/\/*.storage.googleapis.com https:\/\/data.pendo.io *.storedgefms.com https:\/\/enterprise.storedge.com https:\/\/talemonger.auth.storable.io https:\/\/cdn.talemonger.auth.storable.io https:\/\/portal.storable.io https:\/\/esign-service.polaris.storable.io *.payments.storable.io; connect-src 'self' *.google-analytics.com wss:\/\/ws-ap2.pusher.com *.pusher.com https:\/\/app.hellosign.com https:\/\/*.zdassets.com wss:\/\/ws-mt1.pusher.com https:\/\/storedge.zendesk.com https:\/\/edge.fullstory.com https:\/\/rs.fullstory.com https:\/\/data.pendo.io https:\/\/*.storedge.com *.storedgefms.com https:\/\/enterprise.storedge.com https:\/\/talemonger.auth.storable.io https:\/\/cdn.talemonger.auth.storable.io https:\/\/portal.storable.io https:\/\/esign-service.polaris.storable.io *.payments.storable.io; frame-src 'self' https:\/\/app.hellosign.com https:\/\/esign-signing-ui.polaris.devable.io https:\/\/esign-signing-ui.polaris.stageable.io https:\/\/esign-signing-ui.polaris.storable.io *.storedgefms.com https:\/\/enterprise.storedge.com https:\/\/talemonger.auth.storable.io https:\/\/cdn.talemonger.auth.storable.io https:\/\/portal.storable.io https:\/\/esign-service.polaris.storable.io *.payments.storable.io https:\/\/astria-porta.access.devable.io\/ https:\/\/astria-porta.access.stageable.io\/ https:\/\/astria-porta.access.storable.io\/; style-src 'self' 'unsafe-inline' 'unsafe-hashes' fonts.googleapis.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/data.pendo.io https:\/\/*.storage.googleapis.com https:\/\/stackpath.bootstrapcdn.com *.storedgefms.com https:\/\/enterprise.storedge.com https:\/\/talemonger.auth.storable.io https:\/\/cdn.talemonger.auth.storable.io https:\/\/portal.storable.io https:\/\/esign-service.polaris.storable.io *.payments.storable.io; font-src 'self' fonts.gstatic.com; form-action 'self' *.storedgefms.com https:\/\/enterprise.storedge.com https:\/\/talemonger.auth.storable.io https:\/\/cdn.talemonger.auth.storable.io https:\/\/portal.storable.io https:\/\/esign-service.polaris.storable.io *.payments.storable.io; frame-ancestors 'self' *.storedgefms.com https:\/\/enterprise.storedge.com https:\/\/talemonger.auth.storable.io https:\/\/cdn.talemonger.auth.storable.io https:\/\/portal.storable.io https:\/\/esign-service.polaris.storable.io *.payments.storable.io; report-uri \/csp_report","count":1},{"content-security-policy-report-only":" default-src 'self'; img-src 'self' data: https:\/\/tile.openstreetmap.org; object-src 'none'; script-src 'self' 'nonce-a0h6WHB2QVpmSkVQaE9tc0JMekEwcw==' 'report-sample'; style-src 'self' 'unsafe-inline' 'report-sample'; report-to csp; report-uri \/csp-report?parent_request_id=0040ijokkkcvmngi29r0&parent_request_id_hmac=f2ada6863237d442c73313b4f6839a2d08494311","count":1},{"content-security-policy-report-only":" default-src 'self' https: 'unsafe-inline' data: 'unsafe-eval'; report-uri https:\/\/servix.idnes.cz\/log\/csp-report.aspx?w=emimino","count":1},{"content-security-policy-report-only":" default-src 'none'; base-uri 'self' about:; form-action 'self' https:\/\/checkoutshopper-test.adyen.com https:\/\/checkoutshopper-live.adyen.com https:\/\/*.adyen.com https:\/\/pay-staging.canneslions.com https:\/\/pay-staging.money2020.com https:\/\/yap-staging.ascential.com; object-src 'none'; script-src 'self' 'nonce-j1b5BeZK7aACUY3Dz35TNQ==' 'strict-dynamic' 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https:\/\/*.raygun.io https:\/\/transcend-cdn.com https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/*.cloudfront.net https:\/\/*.s3.amazonaws.com https:\/\/*.marketo.com https:\/\/*.intercom.io https:\/\/*.intercomcdn.com https:\/\/use.typekit.net https:\/\/ajax.googleapis.com https:\/\/maps.googleapis.com https:\/\/page.money2020.com https:\/\/page.ascential.com https:\/\/cdn.ingo.me https:\/\/checkoutshopper-test.adyen.com https:\/\/checkoutshopper-live.adyen.com https:\/\/*.adyen.com https:\/\/pay.google.com https:\/\/*.payments-amazon.com https:\/\/*.paypal.com https:\/\/*.ratepay.com https:\/\/*.cash.app https:\/\/cookie-cdn.cookiepro.com https:\/\/player.vimeo.com https:\/\/*.production.platform-team.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/www.google-analytics.com https:\/\/platform.twitter.com https:\/\/static.ads-twitter.com https:\/\/munchkin.marketo.net https:\/\/snap.licdn.com https:\/\/extend.vimeocdn.com https:\/\/connect.facebook.net https:\/\/www.everestjs.net https:\/\/*.taboola.com https:\/\/bat.bing.com https:\/\/*.adsrvr.org https:\/\/analytics.tiktok.com https:\/\/tags.srv.stackadapt.com https:\/\/*.doubleclick.net https:\/\/*.googleadservices.com https:\/\/*.livechatinc.com; connect-src 'self' https:\/\/*.raygun.io https:\/\/transcend-cdn.com https:\/\/telemetry.transcend.io https:\/\/in.hotjar.com https:\/\/*.hotjar.com wss:\/\/*.hotjar.com https:\/\/vc.hotjar.io https:\/\/*.hotjar.io https:\/\/www.google-analytics.com https:\/\/*.analytics.google.com https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/api.raygun.io https:\/\/images.ctfassets.net https:\/\/ascentialcdn.filespin.io https:\/\/cdn.filespin.io https:\/\/videocdn.filespin.io https:\/\/horizon-assets.production.platform-team.com https:\/\/*.production.platform-team.com https:\/\/*.auth0.com https:\/\/*.cloudfront.net https:\/\/*.s3.amazonaws.com https:\/\/*.marketo.com https:\/\/*.intercom.io https:\/\/cannes-integration.lionsfestivals.com https:\/\/dmsproxyapi.lionscreativity.com https:\/\/dmsproxyapi-integration.lionsfestivals.com https:\/\/dmsproxyapi-uat.lionsfestivals.com https:\/\/dmsproxyapi-staging.lionsfestivals.com https:\/\/page.money2020.com https:\/\/page.ascential.com https:\/\/www.linkedin.com https:\/\/*.facebook.com https:\/\/maps.googleapis.com https:\/\/cookie-cdn.cookiepro.com https:\/\/geolocation.onetrust.com https:\/\/checkoutshopper-test.adyen.com https:\/\/checkoutshopper-live.adyen.com https:\/\/*.adyen.com https:\/\/pay.google.com https:\/\/*.payments-amazon.com https:\/\/*.paypal.com https:\/\/*.ratepay.com https:\/\/*.cash.app https:\/\/vimeo.com https:\/\/www.google.com https:\/\/region1.google-analytics.com https:\/\/*.integration.platform-team.com https:\/\/*.taboola.com https:\/\/px.ads.linkedin.com https:\/\/privacyportal.cookiepro.com https:\/\/*.mktoresp.com https:\/\/bat.bing.com https:\/\/analytics.tiktok.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/*.adsrvr.org https:\/\/*.srv.stackadapt.com https:\/\/0jaku7mk0a.execute-api.eu-west-1.amazonaws.com; img-src 'self' data: blob: https:\/\/images.ctfassets.net https:\/\/ascentialcdn.filespin.io https:\/\/assets-jpeg.imgix.net https:\/\/cdn.filespin.io https:\/\/portal-assets.imgix.net https:\/\/videocdn.filespin.io https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/ssl.gstatic.com https:\/\/www.gstatic.com https:\/\/maps.gstatic.com https:\/\/horizon-assets.production.platform-team.com https:\/\/horizon-mfe-assets.production.platform-team.com https:\/\/*.adsrvr.org https:\/\/*.everesttech.net https:\/\/*.intercomcdn.com https:\/\/lions-shared.imgix.net https:\/\/checkoutshopper-test.adyen.com https:\/\/checkoutshopper-live.adyen.com https:\/\/checkoutshopper-test.cdn.adyen.com https:\/\/checkoutshopper-live.cdn.adyen.com https:\/\/s.gravatar.com https:\/\/cdn.auth0.com https:\/\/cookie-cdn.cookiepro.com https:\/\/*.ascential.com https:\/\/*.google.com https:\/\/*.google.co.uk https:\/\/*.doubleclick.net https:\/\/*.googleadservices.com https:\/\/*.facebook.com https:\/\/bat.bing.com https:\/\/*.bing.net https:\/\/page.money2020.com https:\/\/px.ads.linkedin.com https:\/\/*.ads.linkedin.com https:\/\/analytics.twitter.com https:\/\/t.co https:\/\/*.wp.com; style-src 'self' https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/*.cloudfront.net https:\/\/*.s3.amazonaws.com 'unsafe-inline' https:\/\/horizon-mfe-assets.production.platform-team.com https:\/\/checkoutshopper-test.adyen.com https:\/\/checkoutshopper-live.adyen.com https:\/\/*.cash.app https:\/\/transcend-cdn.com https:\/\/page.money2020.com https:\/\/page.ascential.com https:\/\/*.srv.stackadapt.com; style-src-elem 'self' https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/*.cloudfront.net https:\/\/*.s3.amazonaws.com 'unsafe-inline' https:\/\/horizon-mfe-assets.production.platform-team.com https:\/\/checkoutshopper-test.adyen.com https:\/\/checkoutshopper-live.adyen.com https:\/\/*.cash.app https:\/\/transcend-cdn.com https:\/\/page.money2020.com https:\/\/page.ascential.com https:\/\/*.srv.stackadapt.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com https:\/\/*.intercomcdn.com https:\/\/*.typekit.net https:\/\/cash-f.squarecdn.com; worker-src 'self' blob:; media-src 'self' blob: https:\/\/videos.ctfassets.net https:\/\/videocdn.filespin.io https:\/\/www.google-analytics.com https:\/\/*.intercomcdn.com; frame-src 'self' https:\/\/app.contentful.com https:\/\/www.googletagmanager.com https:\/\/vars.hotjar.com https:\/\/transcend-cdn.com https:\/\/*.auth0.com https:\/\/www.youtube.com https:\/\/youtube.com https:\/\/*.youtube.com https:\/\/player.vimeo.com https:\/\/vimeo.com https:\/\/*.vimeo.com https:\/\/*.marketo.com blob: https:\/\/page.money2020.com https:\/\/page.ascential.com https:\/\/www.linkedin.com https:\/\/checkoutshopper-test.adyen.com https:\/\/checkoutshopper-live.adyen.com https:\/\/pay.google.com https:\/\/*.payments-amazon.com https:\/\/*.paypal.com https:\/\/*.ratepay.com https:\/\/*.cash.app https:\/\/*.everestjs.net https:\/\/*.everesttech.net https:\/\/*.adsrvr.org https:\/\/*.livechatinc.com; frame-ancestors 'self' https:\/\/app.contentful.com; manifest-src 'self' https:\/\/*.integration.platform-team.com;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-R0w8x-x7-jxtJ3OyaiEvCw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" font-src *.fontawesome.com https:\/\/fonts.bunny.net *.cloudflare.com *.cookiebot.com fonts.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.feedaty.com https:\/\/firebasestorage.googleapis.com *.gumlet.io *.cookiebot.com *.google.it stileo.it *.adnxs.com *.sharethrough.com *.doubleclick.net *.bidswitch.net *.smartadserver.com *.taboola.com *.omnitagjs.com *.casalemedia.com *.criteo.com *.media.net *.mediavine. *.postrelease.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.teads.tv *.tremorhub.com *.ivitrack.com *.3lift.com *.yieldlab.net ad.360yield.com id5-sync.com sync.1rx.io sync-criteo.ads.yieldmo.com *.emxdgt.com *.servenobid.com *.unrulymedia.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.gstatic.com pay.google.com google.com\/pay ecomms2s.sella.it sandbox.gestpay.net img.riskified.com *.gstatic.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/unpkg.com *.feedaty.com *.avada.io *.shopify.com https:\/\/widget.feedaty.com https:\/\/insights.algolia.io *.cookiebot.com *.dwin1.com *.criteo.com glamipixel.com *.cookieless-data.com *.cloudfront.net *.datnova.com *.sddan.com fonts.googleapis.com consent.cookiebot.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.google.com www.gstatic.com beacon.riskified.com https:\/\/www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.feedaty.com *.fontawesome.com https:\/\/fonts.bunny.net https:\/\/widget.feedaty.com *.cloudflare.com *.cookiebot.com fonts.googleapis.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com insights.algolia.io *.feedaty.com https:\/\/get.geojs.io *.avada.io https:\/\/widget.feedaty.com *.cookiebot.com wss:\/\/ws.salecycle.com *.salecycle.com *.criteo.com *.doubleclick.net *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com www.google.com www.gstatic.com pay.google.com google.com\/pay ecomms2s.sella.it sandbox.gestpay.net c.riskified.com *.google-analytics.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com https:\/\/client.crisp.chat https:\/\/plugin-magento-ui.glopalservice.com *.fontawesome.com https:\/\/fonts.bunny.net *.cloudflare.com fonts.gstatic.com\/ maxcdn.bootstrapcdn.com https:\/\/cdnjs.cloudflare.com https:\/\/applepay.cdn-apple.com applepay.cdn-apple.com www.promessedefleurs.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https:\/\/pinterest.com https:\/\/www.pinterest.com appleid.apple.com p.monetico-services.com www.promessedefleurs.com 'self' 'unsafe-inline'; frame-ancestors www.promessedefleurs.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ * ct.pinterest.com *.payplug.com *.dalenys.com https:\/\/applepay.cdn-apple.com api-qa.payplug.com secure-qa.payplug.com www.promessedefleurs.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * https:\/\/images.unsplash.com https:\/\/image.crisp.chat *.google.com *.google.fr *.google.ie *.jardindupicvert.com *.jardindupicvert.com.localhost *.promessedefleurs.com *.promessedefleurs.com.localhost cl.avis-verifies.com ct.pinterest.com bat.bing.com www.google.com.vn https:\/\/cdn-redirector.glopal.com https:\/\/plugin-magento-ui.glopalservice.com https:\/\/firebasestorage.googleapis.com https:\/\/secure-magenta.dalenys.com bzr.openai.com https:\/\/redchamps.com *.openstreetmap.fr *.openstreetmap.org unpkg.com www.promessedefleurs.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/client.crisp.chat *.google.com *.google.fr *.google.ie *.googletagmanager.com *.googleadservices.com cl.avis-verifies.com bat.bing.com s.pinimg.com https:\/\/cdn-redirector.glopal.com https:\/\/plugin-magento-ui.glopalservice.com cdn-renderer.glopalstore.com *.avada.io *.shopify.com https:\/\/cdnjs.cloudflare.com https:\/\/secure-magenta.dalenys.com https:\/\/applepay.cdn-apple.com api-qa.payplug.com cdn.payplug.com https:\/\/cdn.payplug.com cdn-qa.payplug.com https:\/\/cdn-qa.payplug.com *.clarity.ms bzrcdn.openai.com https:\/\/unpkg.com\/pwacompat www.promessedefleurs.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https:\/\/client.crisp.chat https:\/\/cdn-redirector.glopal.com https:\/\/plugin-magento-ui.glopalservice.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/secure-magenta.dalenys.com unpkg.com www.promessedefleurs.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.promessedefleurs.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/client.crisp.chat wss:\/\/client.relay.crisp.chat https:\/\/plugins.crisp.chat *.doubleclick.net *.jardindupicvert.com *.jardindupicvert.com.localhost *.promessedefleurs.com *.promessedefleurs.com.localhost ct.pinterest.com https:\/\/api-plugin-facade.glopalservice.com https:\/\/cognito-idp.eu-west-1.amazonaws.com api.glopaltranslator.com https:\/\/get.geojs.io *.avada.io *.clarity.ms c.bing.com bzr.openai.com bzrcdn.openai.com *.openstreetmap.org *.arcgis.com www.promessedefleurs.com 'self' 'unsafe-inline'; child-src www.promessedefleurs.com http: https: blob: 'self' 'unsafe-inline'; default-src cl.avis-verifies.com www.promessedefleurs.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.jsdelivr.net https:\/\/unpkg.com https:\/\/cdnjs.cloudflare.com https:\/\/code.jquery.com https:\/\/ajax.googleapis.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/connect.facebook.net https:\/\/www.googletagmanager.com https:\/\/analytics.tiktok.com https:\/\/www.google-analytics.com https:\/\/googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com https:\/\/www.gstatic.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdnjs.cloudflare.com; img-src 'self' data: blob: https:\/\/jazzcash.com.pk https:\/\/www.jazzcash.com.pk https:\/\/*.jazzcash.com.pk https:\/\/fonts.gstatic.com https:\/\/cdnjs.cloudflare.com https:\/\/www.google.com https:\/\/www.google.com.pk https:\/\/www.gstatic.com https:\/\/*.tile.openstreetmap.org https:\/\/raw.githubusercontent.com https:\/\/www.facebook.com https:\/\/analytics.tiktok.com https:\/\/googleads.g.doubleclick.net; media-src 'self' blob:; connect-src 'self' https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/*.googleapis.com https:\/\/speech.googleapis.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/analytics.tiktok.com https:\/\/www.facebook.com https:\/\/ad.doubleclick.net https:\/\/googleads.g.doubleclick.net wss:\/\/www.google.com wss:\/\/*.google.com; frame-src 'self' https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/maps.google.com https:\/\/www.googletagmanager.com; worker-src 'self' blob:; manifest-src 'self';","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.bootstrapcdn.com *.yotpo.com *.userway.org mediacdn.espssl.com *.klarnacdn.net *.fontawesome.com *.cloudflare.com *.googleapis.com *.twitter.com nitropack.io *.nitrocdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com widget.nfusionsolutions.com *.klarna.com *.wesupply.xyz https:\/\/wesupplylabs.com *.weltpixel.com *.addthis.com *.trustpilot.com *.twitter.com *.vimeo.com *.doubleclick.net nitropack.io c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com *.typeform.com *.yotpo.com https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.taboola.com *.scalebus.com scalebus.com www.facebook.com t.vibe.co verifi.pdscrb.com p.yotpoapi.com i.liadm.com i6.liadm.com connect.facebook.net pixel.tapad.com match.adsrvr.org *.userway.org *.listrakbi.com *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com *.disqus.com https:\/\/img.youtube.com *.cloudflare.com *.google-analytics.com *.twitter.com *.contentsquare.net nitropack.io *.nitrocdn.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com *.yotpo.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page *.abtasty.com *.scalebus.com scalebus.com *.taboola.com connect.facebook.net blob: *.userway.org *.yotpo.com *.cloudfront.net *.listrakbi.com *.google-analytics.com *.gstatic.com widget.nfusionsolutions.com *.northbeam.io i.govmint.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.cloudflare.com widget.freshworks.com m2epro.freshdesk.com *.klarnaservices.com *.disqus.com *.addthis.com *.googleapis.com *.fontawesome.com googletagmanager.com graph.facebook.com *.moatads.com *.trustpilot.com widgets.pinterest.com *.contentsquare.com *.contentsquare.net cdn.tailwindcss.com cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com https:\/\/cdn-scripts.signifyd.com https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.bootstrapcdn.com *.userway.org *.yotpo.com *.listrakbi.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net *.fontawesome.com *.cloudflare.com *.googleapis.com *.gstatic.com *.twitter.com cdn.tailwindcss.com nitropack.io cdnjs.cloudflare.com *.nitrocdn.com cdn.jsdelivr.net assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.abtasty.com api.experianaperture.io *.scalebus.com scalebus.com *.taboola.com www.facebook.com graph.facebook.com ipv4.pdscrb.com d2pupanw9x802c.cloudfront.net t.lt02.net *.userway.org *.listrakbi.com bam.nr-data.net *.launchdarkly.com dp.signifyd.com *.northbeam.io i.govmint.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net widget.freshworks.com m2epro.freshdesk.com *.klarnaservices.com *.klarna.com *.cloudflare.com *.twitter.com *.contentsquare.net *.google-analytics.com *.nitrocdn.com nitropack.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com *.yotpo.com https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bam.nr-data.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/qad.com https:\/\/www.qad.com https:\/\/staticfiles.qad.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/*.qad.com https:\/\/staticfiles.qad.com https:\/\/*.trustarc.com https:\/\/cdn.cookielaw.org https:\/\/www.googletagmanager.com https:\/\/js.qualified.com https:\/\/*.wistia.com https:\/\/*.wistia.net https:\/\/browser.sentry-cdn.com https:\/\/snap.licdn.com https:\/\/munchkin.marketo.net https:\/\/j.nrich.ai https:\/\/js.zi-scripts.com https:\/\/browser-update.org https:\/\/translate.google.com https:\/\/translate.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/cdn.datatables.net; style-src 'self' 'unsafe-inline' https:\/\/*.qad.com https:\/\/staticfiles.qad.com https:\/\/translate.googleapis.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/www.gstatic.com https:\/\/*.typekit.net https:\/\/cdn.datatables.net; frame-src 'self' https:\/\/*.qad.com https:\/\/go.qad.com https:\/\/*.trustarc.com https:\/\/*.wistia.com https:\/\/*.wistia.net https:\/\/www.google.com; connect-src 'self' https:\/\/*.qad.com https:\/\/*.trustarc.com https:\/\/cdn.cookielaw.org https:\/\/*.onetrust.com https:\/\/*.marketo.com https:\/\/*.mktoresp.com https:\/\/px.ads.linkedin.com https:\/\/pagead2.googlesyndication.com https:\/\/*.qualified.com https:\/\/*.zi-scripts.com https:\/\/*.zoominfo.com https:\/\/*.wistia.com https:\/\/*.wistia.net https:\/\/browser.sentry-cdn.com https:\/\/*.litix.io; font-src 'self' data: https:\/\/*.trustarc.com https:\/\/fonts.gstatic.com https:\/\/cdnjs.cloudflare.com https:\/\/*.typekit.net https:\/\/*.wistia.com https:\/\/*.wistia.net; img-src 'self' data: https:\/\/*.qad.com https:\/\/staticfiles.qad.com https:\/\/*.trustarc.com https:\/\/*.truste.com https:\/\/cdn.cookielaw.org https:\/\/px.ads.linkedin.com https:\/\/translate.google.com https:\/\/*.marketo.net https:\/\/*.mktoresp.com https:\/\/*.wistia.com https:\/\/www.googletagmanager.com https:\/\/www.figma.com https:\/\/cdnjs.cloudflare.com; media-src 'self' blob: https:\/\/*.qad.com https:\/\/*.wistia.com https:\/\/*.wistia.net; frame-ancestors 'self' http:\/\/*.qad.com https:\/\/*.qad.com https:\/\/*.cebos.com https:\/\/*.dys.com https:\/\/*.precisionsoftware.com https:\/\/*.trustarc.com;","count":1},{"content-security-policy-report-only":" font-src *.googleapis.com *.gstatic.com data: fonts.googleapis.com fonts.gstatic.com *.fontawesome.com * *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.twitter.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.googleapis.com maps.googleapis.com maps.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com gateway.apaylater.com gateway.atome.sg ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.facebook.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com maps.googleapis.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ maps.gstatic.com fonts.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com gateway.apaylater.com gateway.atome.sg chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.googletagmanager.com *.facebook.net www.termsfeed.com *.avada.io https:\/\/*.googletagmanager.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com gateway.apaylater.com gateway.atome.sg downloads.mailchimp.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.google-analytics.com https:\/\/get.geojs.io *.avada.io https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com *.cloudflare.com *.twitter.com *.twimg.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http:\/\/csp-reporting-service.com\/my-project\/endpoint; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.adingo.jp *.adsrvr.org *.ad-stir.com *.ads-twitter.com *.amanad.adtdp.com *.bidswitch.net *.bing.com *.bootstrapcdn.com *.caprofitx.com *.casalemedia.com *.clarity.ms https:\/\/t.co https:\/\/creativecdn.com https:\/\/id5-sync.com *.contentsquare.com *.contentsquare.net *.creativecdn.com *.criteo.com *.datasign.co *.demdex.net *.doubleclick.net *.eu-1-id5-sync.com *.facebook.com *.facebook.net *.fanp.me *.fanplayr.com *.fontawesome.com https:\/\/sdk.form.run *.fastly.net *.gmossp-sp.jp *.google.co.jp *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com https:\/\/cs.gssprt.jp https:\/\/fonts.gstatic.com *.id5-sync.com *.im-apps.net *.imgvc.com *.jp.cinarra.com *.zeals.ai *.jp2.as.criteo.net *.ladsp.com *.ladsp.jp https:\/\/tr.line.me *.line-scdn.net https:\/\/www.login.secomtrust.net *.mazrica.com https:\/\/www2.mouse-jp.co.jp *.openx.net https:\/\/sync.outbrain.com *.promolayer.io *.ptengine.com *.ptengine.jp *.pubmatic.com https:\/\/show.revico.jp *.rubiconproject.com https:\/\/form.run https:\/\/s-cs.send.microad.jp https:\/\/match.sharethrough.com *.slim02.jp *.smartadserver.com *.smartnews-ads.com *.smbc-gp.co.jp *.snva.jp *.socdm.com *.st-hatena.com *.taboola.com *.tiktok.com *.tiktokw.us *.treasuredata.com *.twitter.com https:\/\/rt.udmserve.net *.valuecommerce.com *.valuecommerce.ne.jp *.yahoo.co.jp *.yimg.jp *.youtube.com *.ytimg.com *.prandolisto.com https:\/\/tag.flvcdn.net https:\/\/sp-trk.com https:\/\/ib.adnxs.com https:\/\/placehold.jp *.adobedtm.com *.googleadservices.com; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl\/tv_google","count":1},{"content-security-policy-report-only":" default-src 'self'; object-src 'none'; base-uri 'none'; script-src 'nonce-99775fd83316332670e45d094955b541' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/at.alicdn.com; img-src 'self' data: https: http: blob:; connect-src 'self' https: wss:; frame-src 'self' https: http:; media-src 'self' data: https: http: blob:; worker-src 'self' blob:","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: http:; style-src 'self' 'unsafe-inline' https: http:; img-src 'self' data: blob: https: http:; font-src 'self' data: https:; connect-src 'self' https: http: ws: wss:; frame-src 'self' https: http:; worker-src 'self' blob:; media-src 'self' https: http:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https:\/\/www.uahurtado.cl\/__csp_report__","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:;","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' *.brandinsight.tech *.bing.com *.taboola.com *.geocomply.com *.kameleoon.io *.ads-twitter.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co *.betano.co *.datadome.co *.betano.bg *.sportal365.com d32tdr35c4icxo.cloudfront.net *.app.delivery *.betano.com *.betgenius.com *.cloudflare.com *.cloudflareinsights.com *.cookielaw.org *.creativecdn.com *.facebook.net *.fullstory.com *.gmlinteractive.com *.google-analytics.com *.googletagmanager.com *.kaizengaming.com *.kameleoon.eu *.lgrckt-in.com *.optimove.net *.sportradar.com *.sportradarserving.com *.tostarsbuilding.com *.adform.net *.logr-in.com; worker-src 'self' blob:; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=4EWVWhgf_rvzKJJ0Q2OOruOgiWOFNcdS1FAkDwumu8g-1788492218.6819355-1.0.1.1-myK1zX6p6UjNLiPe5vO3.j7.pK3BMEgliH746lRIuItK52eKNMiv7qTLMqVU6ZrrNiEvahNK1Il6rwDXhw9wfZdIS93f9ZkhD3juh4FgmwkeoVImzxSAQUdi04Q5kRbQSKO7iwLlCpcxYQAaK.J2Oln2UAaBawytpxXIi7SHg4.rEISfBXH3jiJ8w3TOFNL.; report-to cf-xmzexfepilmishoz","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/cdn.cookielaw.org https:\/\/cdn.branch.io https:\/\/app.link https:\/\/static.hotjar.com https:\/\/cdn.parsely.com https:\/\/cdn.segment.com https:\/\/static.chasecdn.com https:\/\/accounts.google.com https:\/\/cdn.apple-mapkit.com https:\/\/res.cloudinary.com https:\/\/www.googletagmanager.com https:\/\/tag.wknd.ai https:\/\/assets.bounceexchange.com https:\/\/api.bounceexchange.com; connect-src 'self' https:\/\/*.jpmchase.net https:\/\/static.chasecdn.com https:\/\/*.branch.io https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/*.parsely.com https:\/\/cdn.segment.com https:\/\/api.segment.io https:\/\/*.cookielaw.org https:\/\/accounts.google.com https:\/\/*.bugsnag.com https:\/\/*.braze.com https:\/\/*.split.io https:\/\/*.contentful.com https:\/\/*.ctfassets.net https:\/\/res.cloudinary.com https:\/\/*.bounceexchange.com https:\/\/events.bouncex.net https:\/\/*.cdnwidget.com https:\/\/*.cdnbasket.net https:\/\/pippio.com https:\/\/*.wknd.ai https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.apple-mapkit.com https:\/\/*.theinfatuation.com; img-src 'self' data: blob: https:\/\/res.cloudinary.com https:\/\/cdn.apple-mapkit.com https:\/\/*.hotjar.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.bounceexchange.com https:\/\/*.jpmchase.net https:\/\/*.parsely.com https:\/\/*.segment.com https:\/\/*.segment.io https:\/\/*.braze.com https:\/\/*.wknd.ai https:\/\/*.cookielaw.org https:\/\/*.cdnwidget.com https:\/\/pippio.com https:\/\/events.bouncex.net https:\/\/*.ctfassets.net; frame-src 'self' https:\/\/accounts.google.com https:\/\/*.hotjar.com https:\/\/*.cookielaw.org https:\/\/*.bounceexchange.com; style-src 'self' 'unsafe-inline' https:\/\/accounts.google.com https:\/\/assets.bounceexchange.com; font-src 'self' data:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" object-src 'none'; frame-ancestors 'none'; base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/*.mercdn.net https:\/\/www.google.com https:\/\/*.adtrafficquality.google https:\/\/*.g.doubleclick.net https:\/\/analytics.tiktok.com https:\/\/b99.yahoo.co.jp https:\/\/bat.bing.com https:\/\/*.smartnews-ads.com https:\/\/connect.facebook.net https:\/\/ct.pinterest.com https:\/\/d.line-scdn.net https:\/\/dmp.im-apps.net https:\/\/dynamic.criteo.com https:\/\/h.accesstrade.net https:\/\/s.pinimg.com https:\/\/s.yimg.jp https:\/\/*.criteo.com https:\/\/static.ads-twitter.com https:\/\/statics.a8.net https:\/\/*.blob.core.windows.net https:\/\/trj.valuecommerce.com https:\/\/*.google-analytics.com https:\/\/apps.rokt.com https:\/\/apps.rokt-api.com https:\/\/apps.roktecommerce.com https:\/\/sourcemaps-wsdk.roktinternal.com https:\/\/*.forter.com; worker-src blob:; style-src 'self' 'unsafe-inline' https:\/\/*.mercdn.net https:\/\/fonts.googleapis.com; font-src https:\/\/fonts.gstatic.com;","count":1},{"content-security-policy-report-only":" default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' ; report-uri https:\/\/events.ocdn.eu\/v2\/csp-report?_ac=events&_fv=www.forbes.pl::PROD_V2","count":1},{"content-security-policy-report-only":" default-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' http:\/\/*.uqtr.uquebec.ca http:\/\/*.uqtr.ca data: https: blob:; base-uri 'self' http:\/\/*.uqtr.ca; form-action 'self' https: javascript: inline:; report-to csp-endpoint; report-uri https:\/\/webservice.uqtr.ca\/prod\/nginx\/csp_api\/report","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/beacon-v2.helpscout.net https:\/\/cdnjs.cloudflare.com https:\/\/cdn.firstpromoter.com https:\/\/fast.bentonow.com https:\/\/js.stripe.com https:\/\/widget.docsbot.ai; script-src-elem 'self' 'unsafe-inline' https:\/\/beacon-v2.helpscout.net https:\/\/cdnjs.cloudflare.com https:\/\/cdn.firstpromoter.com https:\/\/fast.bentonow.com https:\/\/js.stripe.com https:\/\/widget.docsbot.ai; script-src-attr 'none'; worker-src 'self' blob: https:\/\/cdnjs.cloudflare.com; child-src 'self' blob:; connect-src 'self' https:\/\/api.docsbot.ai wss:\/\/api.docsbot.ai https:\/\/cdn.docsbot.ai https:\/\/docsbot.ai https:\/\/*.bentonow.com https:\/\/*.firebaseio.com wss:\/\/*.firebaseio.com https:\/\/*.googleapis.com https:\/\/*.helpscout.net wss:\/\/*.helpscout.net https:\/\/*.posthog.com https:\/\/api.stripe.com https:\/\/eu.i.posthog.com https:\/\/firebasestorage.googleapis.com https:\/\/r.stripe.com https:\/\/securetoken.googleapis.com https:\/\/widget.docsbot.ai; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; media-src 'self' data: blob: https:; frame-src 'self' https:\/\/checkout.stripe.com https:\/\/hooks.stripe.com https:\/\/js.stripe.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com; form-action 'self' https:\/\/checkout.stripe.com","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com *.googleapis.com data: cdnjs.cloudflare.com js-agent.newrelic.com api.map.baidu.com *.baidu.com *.bdimg.com *.mtcaptcha.com *.bglobale.com *.global-e.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * www.google.com *.bglobale.com *.global-e.com maisongoyard--staging.sandbox.my.salesforce-sites.com maisongoyard.my.salesforce-sites.com *.mtcaptcha.com *.smartpixels.fr *.ls-group.fr c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * *.googleapis.com maps.googleapis.com maps.gstatic.com *.baidu.com *.bdimg.com sdk.privacy-center.org *.mtcaptcha.com *.bglobale.com *.global-e.com *.goyard.com *.smartpixels.fr goyard-marquage-test-we-appservice-webconf.azurewebsites.net *.ls-group.fr sprint-7onpvba-jccxky3s5ebcw.us-a1.magentosite.cloud www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https:\/\/rum.hlx.page *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ cdnjs.cloudflare.com bam.nr-data.net mcstaging.goyard.com mcprod.goyard.com goyard.com js-agent.newrelic.com api.map.baidu.com *.baidu.com *.bdimg.com sdk.privacy-center.org *.mtcaptcha.com *.bglobale.com *.global-e.com *.goyard.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https:\/\/cdn-scripts.signifyd.com https:\/\/cdn-scripts.signifyd.com\/api\/script-tag.js https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app cdnjs.cloudflare.com *.googleapis.com *.baidu.com *.bdimg.com *.mtcaptcha.com *.bglobale.com *.global-e.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.goyard.com *.goyard.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.googleapis.com api.map.baidu.com *.baidu.com *.bdimg.com api.privacy-center.org *.mtcaptcha.com *.goyard.com *.bglobale.com *.global-e.com *.smartpixels.fr *.ls-group.fr api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src maisongoyard--staging.sandbox.my.salesforce-sites.com maisongoyard.my.salesforce-sites.com *.mtcaptcha.com *.goyard.com *.bglobale.com *.global-e.com *.nr-data.net *.smartpixels.fr *.ls-group.fr 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src blob: https:\/\/*.mhcache.com;font-src 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com https:\/\/fonts.gstatic.com;frame-src 'self' https:\/\/*.mhcache.com https:\/\/portal.allyable.com https:\/\/mh-site-files-5c53d6a9947c.s3.amazonaws.com https:\/\/myheritage-container.com https:\/\/www.myheritage-partners.com https:\/\/www.myheritage.com https:\/\/*.mk-sense.com https:\/\/player.vimeo.com https:\/\/*.facebook.com https:\/\/*.google.com https:\/\/tpc.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/accounts.google.com\/gsi\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/recaptcha.google.com\/recaptcha\/  https:\/\/widget.trustpilot.com;script-src https:\/\/accounts.google.com\/gsi\/client https:\/\/www.datadoghq-browser-agent.com https:\/\/appleid.cdn-apple.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/maps.googleapis.com *.myheritage.es https:\/\/www.myheritage.es  'unsafe-eval' 'nonce-c67d4dd4a68a978ab8ed4ad46995d640' 'strict-dynamic' https:\/\/widget.trustpilot.com https:\/\/invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com https:\/\/fonts.googleapis.com https:\/\/accounts.google.com\/gsi\/style  https:\/\/widget.trustpilot.com;connect-src data: 'self' https:\/\/*.myheritage.com https:\/\/portal.allyable.com https:\/\/*.mhcache.com https:\/\/adservice.google.com https:\/\/*.logs.datadoghq.com https:\/\/*.browser-intake-datadoghq.com https:\/\/browser-intake-datadoghq.com https:\/\/sentry.io https:\/\/*.bing.com https:\/\/*.facebook.com https:\/\/*.doubleclick.net https:\/\/*.mk-sense.com https:\/\/*.filae.com https:\/\/accounts.google.com\/gsi\/ https:\/\/www.google.com\/pagead\/landing https:\/\/maps.googleapis.com\/maps\/api\/mapsjs\/gen_204 https:\/\/translate.googleapis.com https:\/\/www.google.com\/ccm\/collect https:\/\/cdn.builder.io https:\/\/www.google.com\/recaptcha\/enterprise\/* https:\/\/www.google.com\/recaptcha\/enterprise\/ https:\/\/www.google.com\/recaptcha\/enterprise\/clr https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com https:\/\/people.googleapis.com https:\/\/translate-pa.googleapis.com *.myheritage.es https:\/\/widget.trustpilot.com;media-src 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com;frame-ancestors 'self' https:\/\/builder.io;img-src * data:  https:\/\/widget.trustpilot.com https:\/\/*.trustpilot.com;object-src 'none';base-uri 'self' https:\/\/*.mhcache.com;report-uri \/FP\/API\/ContentSecurityPolicy\/report-violation.php?report_mode=report&canonical_page_id=\/company\/home\/","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' https:\/\/api.mapbox.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com unpkg.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem * 'unsafe-inline'; style-src 'self' cdnjs.cloudflare.com https:\/\/api.mapbox.com https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem * 'unsafe-inline'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.googleapis.com fonts.googleapis.com https:\/\/fonts.gstatic.com *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: static.curations.bazaarvoice.com maxcdn.bootstrapcdn.com *.hotjar.com x.klarnacdn.net *.yotpo.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com api.bazaarvoice.com stg.api.bazaarvoice.com www.facebook.com *.wahooligan.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googletagmanager.com *.affirm.com *.affirm.ca *.certcapture.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com https:\/\/www.googletagmanager.com\/ *.refersion.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com wahoofitness.pxf.io insight.adsrvr.org match.adsrvr.org www.affirm.com sandbox.affirm.com *.attn.tv bugcrowd.com imgs.cdn-btsg.com *.cloudfront.net consentag.eu track.cordial.io gum.criteo.com bid.g.doubleclick.net *.fls.doubleclick.net td.doubleclick.net www.facebook.com script.google.com *.googleapis.com *.hotjar.com *.iterable.com *.klarnaservices.com *.online-metrix.net privacyportal-cdn.onetrust.com imgs.signifyd.com js.stripe.com *.vimeo.com vimeo.com *.wahooligan.com record.webeyez.com d.emails.wahoofitness.com wahoofitness.yonyx.com *.yotpo.com https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com p.typekit.net *.googleapis.com *.gstatic.com maps.googleapis.com maps.gstatic.com *.affirm.com *.affirm.ca *.certcapture.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com https:\/\/helloextend-static-assets.s3.amazonaws.com https:\/\/extendcoreoffersdemo-offersthemelogobucketeb21afa-19jnurg0a0o17.s3.amazonaws.com https:\/\/s3.amazonaws.com https:\/\/extendcoreoffersprod-offersthemelogobucketeb21afa-1lr7le13dvgtp.s3.amazonaws.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ www.googletagmanager.com wahoofitness.pxf.io *.adnxs.com public.adobecc.com data.adxcel-ec2.com insight.adsrvr.org match.adsrvr.org *.amazonaws.com *.atdmt.com *.bing.com *.bazaarvoice.com imgs.cdn-btsg.com *.clarity.ms cdn.cookielaw.org dis.criteo.com gum.criteo.com *.ctnsnet.com ad.doubleclick.net cm.g.doubleclick.net stats.g.doubleclick.net www.facebook.com *.google.com *.googletagmanager.com *.hotjar.com humango.ai *.iterable.com kcc0.com www.kinomap.com *.klarnaevt.com *.klarnaservices.com *.klarnauserservices.com *.ktxlytics.io www.lightboxcdn.com simage2.pubmatic.com alb.reddit.com *.rudderstack.com imgs.signifyd.com image.simplecastcdn.com t.co tk0x1.com *.wahoofitness.com *.xg4ken.com ads.yahoo.com *.analytics.yahoo.com *.yotpo.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com *.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googletagmanager.com www.gstatic.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.affirm.com *.affirm.ca *.certcapture.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com https:\/\/*.helloextend.com utt.impactcdn.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ *.avada.io *.refersion.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com unsafe-inline *.adnxs.com js.adsrvr.org cdn.jsdelivr.net lightboxapi.azurewebsites.net cdn.attn.tv bam-cell.nr-data.net *.bazaarvoice.com bat.bing.com bugcrowd.com assets.bugcrowdusercontent.com imgs.cdn-btsg.com *.clarity.ms static.curations.bazaarvoice.com consentag.eu cdn.cookielaw.org track.cordial.io script.crazyegg.com static.criteo.net sslwidget.criteo.com *.ctnsnet.com connect.facebook.net *.fontawesome.com *.getroster.com *.google.com googleads.g.doubleclick.net *.hotjar.com *.iterable.com *.ktxlytics.io www.lightboxcdn.com cdn.livesession.io i.loopme.me js-agent.newrelic.com bam.nr-data.net code.jquery.com eu-library.klarnaservices.com eu-library.playground.klarnaservices.com oc-library.klarnaservices.com oc-library.playground.klarnaservices.com x.klarnacdn.net geolocation.onetrust.com h64.online-metrix.net cdn.optimizely.com www.redditstatic.com www.refersion.com assets.reflow.tv *.rudderlabs.com *.rudderstack.com cdn.segment.com imgs.signifyd.com *.stackadapt.com js.stripe.com static.ads-twitter.com analytics.twitter.com modelviewer.dev d.emails.wahoofitness.com forms.wahoofitness.com record.webeyez.com sec.webeyez.com *.xg4ken.com *.yotpo.com www.youtube.com https:\/\/cdn-scripts.signifyd.com https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com display.ugc.bazaarvoice.com https:\/\/fonts.googleapis.com *.fontawesome.com static.curations.bazaarvoice.com maxcdn.bootstrapcdn.com cdn.cookielaw.org *.hotjar.com www.lightboxcdn.com x.klarnacdn.net *.stackadapt.com forms.wahoofitness.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ *.bazaarvoice.com data: mpsnare.iesnare.com www.wahoofitness.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.adobe.io performance.typekit.net *.sentry.io geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.googleapis.com *.affirm.com *.affirm.ca *.certcapture.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com https:\/\/*.helloextend.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ *.refersion.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com wahoofitness.pxf.io *.attentivemobile.com *.attn.tv bam-cell.nr-data.net *.bing.com imgs.cdn-btsg.com *.clarity.ms cdn.cookielaw.org track.cordial.io script.crazyegg.com i.ctnsnet.com stats.g.doubleclick.net ad.doubleclick.net www.facebook.com *.getroster.com analytics.google.com *.analytics.google.com *.hotjar.com *.hotjar.io mpsnare.iesnare.com *.iterable.com wss: gdpr.loopme.com i.loopme.me *.klarnaservices.com *.klarnauserservices.com *.ktxlytics.io rs.livesession.io bam.nr-data.net *.onetrust.com insight.reflow.tv *.rollbar.com *.rudderlabs.com *.rudderstack.com api.segment.io cdn.segment.com imgs.signifyd.com bt.signifyd.com bt.signifyd.com:1103 bt.signifyd.com:11103 d.emails.wahoofitness.com vimeo.com record.webeyez.com send.webeyez.com *.xg4ken.com *.yotpo.com https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/www.wahoofitness.com\/nullreport\/report\/nullendpoint; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self' www.google-analytics.com www.youtube.com cdn.cookielaw.org *.onetrust.com *.gstatic.com *.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com cdn.jsdelivr.net cdn.cookielaw.org img03.en25.com *.youtube.com *.google.com *.gstatic.com *.google-analytics.com embed.vev.page *.vev.design *.googleapis.com discover.hdrinc.com *.cloudflare.com unpkg.com; style-src 'self' 'unsafe-inline' cloud.typography.com cdn.jsdelivr.net *.googleapis.com www.hdrinc.com unpkg.com *.cloudflare.com; img-src 'self' data: *; media-src film.vev.design cdn.vev.design; frame-src 'self' *.google.com *.youtube.com *.vimeo.com discover.hdrinc.com *.doubleclick.net player.blubrry.com e.issuu.com caupneif01 *.youtube-nocookie.com *.googletagmanager.com *.cloudflare.com; child-src 'self' *.google.com *.youtube.com; font-src 'self' data: cloud.typography.com cdn.vev.design *.gstatic.com www.hdrinc.com cdn.scite.ai use.typekit.net fonts.vev.design; connect-src 'self' *.googleapis.com *.google-analytics.com *.cookielaw.org *.onetrust.com analytics.google.com *.doubleclick.net region1.analytics.google.com *.google.com *.gstatic.com; report-uri \/report-csp-violation; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https: data:; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'","count":1},{"content-security-policy-report-only":" default-src 'none'; report-uri \/next-external\/log\/csp\/violations; report-to csp-violations; connect-src 'self' wss:\/\/www.nordnet.fi https:\/\/www.googletagmanager.com https:\/\/analytics.nordnet.fi https:\/\/cdn.prod.nntech.io https:\/\/files.nordnet.fi https:\/\/api.prod.nntech.io https:\/\/experimentation.public.prod.nntech.io https:\/\/www.google.com https:\/\/storage.googleapis.com https:\/\/www.recaptcha.net https:\/\/relay.prod.nntech.io; font-src 'self' https:\/\/cdn.prod.nntech.io https:\/\/files.nordnet.fi; frame-src 'self' https:\/\/analytics.nordnet.fi https:\/\/10961666.fls.doubleclick.net https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/w.soundcloud.com https:\/\/embed.acast.com https:\/\/link.tink.com https:\/\/www.tv2.no https:\/\/checkout.trustly.com https:\/\/www.recaptcha.net https:\/\/www.google.com https:\/\/t.email.nordnet.fi https:\/\/dashboard.fundrella.com; img-src 'self' https:\/\/www.googletagmanager.com https:\/\/analytics.nordnet.fi https:\/\/cdn.prod.nntech.io https:\/\/files.nordnet.fi https:\/\/api.prod.nntech.io data: blob: https:\/\/cdn.tink.se https:\/\/images.ctfassets.net https:\/\/i.vimeocdn.com https:\/\/img.youtube.com https:\/\/i.scdn.co https:\/\/www.recaptcha.net; manifest-src 'self'; media-src https:\/\/cdn.prod.nntech.io https:\/\/files.nordnet.fi https:\/\/videos.ctfassets.net; object-src 'self'; script-src 'self' 'nonce-e3a409a4-d2f9-4a6e-85b8-d6a3a47f91a4' https:\/\/analytics.nordnet.fi https:\/\/cdn.prod.nntech.io https:\/\/files.nordnet.fi https:\/\/www.recaptcha.net https:\/\/www.google.com; script-src-attr 'none'; style-src 'unsafe-inline' 'self' https:\/\/cdn.prod.nntech.io https:\/\/files.nordnet.fi; worker-src 'none'; base-uri 'none'; form-action 'self' https:\/\/pvu.nets.no https:\/\/pvu.avtalegiro.no https:\/\/online.alandsbanken.fi https:\/\/verkkopankki.danskebank.fi https:\/\/verkkomaksu.handelsbanken.fi https:\/\/epmt.nordea.fi https:\/\/identify.nordea.com https:\/\/verkkomaksu.poppankki.fi https:\/\/verkkomaksu.saastopankki.fi https:\/\/online.s-pankki.fi https:\/\/auth.aktia.fi https:\/\/kirjaudu.aktia.fi https:\/\/ebank.aktia.fi; frame-ancestors 'self' https:\/\/app.contentful.com;","count":1},{"content-security-policy-report-only":" default-src 'self';base-uri 'self';object-src 'none';frame-ancestors 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.tailwindcss.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/cdn-cookieyes.com https:\/\/*.cookieyes.com https:\/\/pi.pardot.com https:\/\/*.pardot.com https:\/\/tags.srv.stackadapt.com https:\/\/*.stackadapt.com https:\/\/*.rb2b.com https:\/\/ddwl4m2hdecbv.cloudfront.net https:\/\/fast.wistia.com https:\/\/fast.wistia.net https:\/\/*.wistia.com https:\/\/www.youtube.com https:\/\/statuspal.io https:\/\/*.statuspal.io https:\/\/snap.licdn.com https:\/\/*.linkedin.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdn.tailwindcss.com;font-src 'self' https:\/\/fonts.gstatic.com data:;img-src 'self' data: https:;connect-src 'self' https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/pi.pardot.com https:\/\/*.pardot.com https:\/\/ww2.armorpoint.com https:\/\/www.armorpoint.com https:\/\/tags.srv.stackadapt.com https:\/\/*.stackadapt.com https:\/\/*.rb2b.com https:\/\/*.cookieyes.com https:\/\/*.wistia.com https:\/\/*.wistia.net https:\/\/statuspal.io https:\/\/*.statuspal.io https:\/\/status.armorpoint.com https:\/\/api.armorpoint.com;frame-src 'self' https:\/\/fast.wistia.net https:\/\/*.wistia.net https:\/\/www.youtube.com https:\/\/*.youtube.com https:\/\/*.pardot.com https:\/\/*.statuspal.io;media-src 'self' data: https:\/\/*.wistia.com https:\/\/*.wistia.net https:\/\/*.cloudfront.net;form-action 'self' https:\/\/*.pardot.com https:\/\/pi.pardot.com https:\/\/ww2.armorpoint.com https:\/\/www.armorpoint.com","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https:\/\/news.google.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.clarity.ms https:\/\/*.clarity.ms https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/connect.facebook.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' data: https:\/\/fonts.gstatic.com; img-src 'self' data: blob: https:\/\/news.google.com https:\/\/backend.moldtelecom.md https:\/\/apiwww.moldtelecom.md https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/www.google.com https:\/\/www.google.md https:\/\/*.g.doubleclick.net https:\/\/www.facebook.com https:\/\/*.clarity.ms https:\/\/c.bing.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/img.youtube.com https:\/\/i.ytimg.com https:\/\/pagead2.googlesyndication.com https:\/\/eprel.ec.europa.eu; connect-src 'self' https:\/\/news.google.com https:\/\/backend.moldtelecom.md https:\/\/apiwww.moldtelecom.md https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/googleads.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com https:\/\/*.clarity.ms https:\/\/c.bing.com https:\/\/maps.googleapis.com https:\/\/*.googleapis.com https:\/\/connect.facebook.net https:\/\/www.facebook.com; frame-src 'self' https:\/\/news.google.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net https:\/\/*.facebook.com https:\/\/moldtc.speedtestcustom.com; media-src 'self' https:\/\/www.moldtelecom.md; worker-src 'self' blob:; manifest-src 'self'","count":1},{"content-security-policy-report-only":" default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; report-uri \/CspReport\/Report","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-eval' https:\/\/connect.facebook.net https:\/\/am.yahoo.co.jp https:\/\/b99.yahoo.co.jp https:\/\/www.google-analytics.com assets.adobedtm.com https:\/\/www.googletagmanager.com http:\/\/hm.mieru-ca.com https:\/\/hpjp.mieru-ca.com https:\/\/www.everestjs.net https:\/\/s.yimg.jp http:\/\/aigjapan.sc.omtrdc.net https:\/\/www.youtube.com 'sha256-dMIRRtml3Oi21Iaq03PtC+8mIuBozHki1nfF3K1YXgw=' 'sha256-Yw3\/67WDFoT7czVF2RALaOaLaRtweKwjgMzcHEb7oIs=' 'sha256-+\/WzJIUpU+5NsHuQGBp2n0iZvi5LUQ0h8K\/qrDy2YJQ=' 'sha256-T4GdVguKtoAY\/4wetSihwnlAEpUpN0SBr64TOJa8NU0=' 'sha256-KIDFo1cCsPZjm0CKg+wI3amz1hzD9mNUJ2+4AGHa3uU=' 'sha256-LBsTTQlX5+H68ly1EZvOY6Z9bHzQqntXIpb70r7UJis=' 'sha256-U\/nEWHrEPshKXL66+Ph2p6sLJqyHx9w9Sjv8K1Ya0zU=' 'sha256-BcF795XkHI9YEs7DNkb2Auwhmzf0SqcdlO\/cXV17POc=' 'sha256-cQonxShNT1IfSfxwOOa2GnQjv3H9iqQdPYmUrW6Tl9w=' 'sha256-Dsxt1\/qoUZUtAc\/xB2KsqxHj3ORjhh9iGH+ezhmuyks=' 'sha256-UeZ0R36qQ5kcoJ4QcT9JHYwgL70p9095Vm9jdRGAKSc=' 'nonce-bmpcte9ovhdrrg';script-src-elem 'self' https:\/\/connect.facebook.net https:\/\/am.yahoo.co.jp https:\/\/b99.yahoo.co.jp https:\/\/www.google-analytics.com assets.adobedtm.com https:\/\/www.googletagmanager.com http:\/\/hm.mieru-ca.com https:\/\/hpjp.mieru-ca.com https:\/\/www.everestjs.net https:\/\/s.yimg.jp http:\/\/aigjapan.sc.omtrdc.net https:\/\/www.youtube.com 'sha256-dMIRRtml3Oi21Iaq03PtC+8mIuBozHki1nfF3K1YXgw=' 'sha256-Yw3\/67WDFoT7czVF2RALaOaLaRtweKwjgMzcHEb7oIs=' 'sha256-+\/WzJIUpU+5NsHuQGBp2n0iZvi5LUQ0h8K\/qrDy2YJQ=' 'sha256-T4GdVguKtoAY\/4wetSihwnlAEpUpN0SBr64TOJa8NU0=' 'sha256-KIDFo1cCsPZjm0CKg+wI3amz1hzD9mNUJ2+4AGHa3uU=' 'sha256-LBsTTQlX5+H68ly1EZvOY6Z9bHzQqntXIpb70r7UJis=' 'sha256-U\/nEWHrEPshKXL66+Ph2p6sLJqyHx9w9Sjv8K1Ya0zU=' 'sha256-BcF795XkHI9YEs7DNkb2Auwhmzf0SqcdlO\/cXV17POc=' 'sha256-cQonxShNT1IfSfxwOOa2GnQjv3H9iqQdPYmUrW6Tl9w=' 'sha256-Dsxt1\/qoUZUtAc\/xB2KsqxHj3ORjhh9iGH+ezhmuyks=' 'sha256-UeZ0R36qQ5kcoJ4QcT9JHYwgL70p9095Vm9jdRGAKSc=' 'nonce-bmpcte9ovhdrrg';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.ispe.org https:\/\/*.typekit.net https:\/\/*.fusesearch.app https:\/\/*.googletagmanager.com https:\/\/www.googletagmanager.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googlesyndication.com https:\/\/c.adsco.re https:\/\/*.adtrafficquality.google https:\/\/*.doubleclick.net https:\/\/*.cloudflare.com https:\/\/app.termly.io https:\/\/*.mathjax.org https:\/\/*.addthis.com https:\/\/*.cloudfront.net https:\/\/*.bettybot.ai https:\/\/*.facebook.net https:\/\/*.linkedin.com https:\/\/*.twitter.com https:\/\/*.vimeo.com https:\/\/*.blackfire.io https:\/\/*.clarity.ms https:\/\/js.hs-scripts.com https:\/\/*.licdn.com https:\/\/*.hubspot.com https:\/\/*.hs-banner.com https:\/\/*.hs-analytics.net https:\/\/*.hscollectedforms.net https:\/\/*.usemessages.com https:\/\/*.jsdelivr.net https:\/\/unpkg.com; object-src 'none'; style-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.ispe.org https:\/\/*.bettybot.ai https:\/\/fonts.googleapis.com https:\/\/app.termly.io https:\/\/ispe.webscribble.com https:\/\/unpkg.com; img-src 'self' blob: data: https:; media-src 'self' data: https:\/\/ispe.org https:\/\/*.ispe.org https:\/\/ispefoundation.org https:\/\/ispewebassets.org https:\/\/*.platformsh.site; frame-src https:\/\/ispe.org https:\/\/*.ispe.org https:\/\/ispefoundation.org https:\/\/*.platformsh.site https:\/\/*.vimeo.com https:\/\/*.youtube.com https:\/\/*.youtube-nocookie.com https:\/\/app.termly.io https:\/\/*.hubspot.com https:\/\/*.hs-sites.com https:\/\/*.google.com https:\/\/*.googleadservices.com https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/*.googletagmanager.com https:\/\/*.adtrafficquality.google https:\/\/*.twitter.com https:\/\/*.facebook.com https:\/\/online.fliphtml5.com; frame-ancestors 'self' https:\/\/ispe.org https:\/\/*.ispe.org https:\/\/ispefoundation.org https:\/\/*.platformsh.site; child-src https:\/\/ispe.org https:\/\/*.ispe.org https:\/\/ispefoundation.org https:\/\/*.platformsh.site https:\/\/*.vimeo.com https:\/\/*.youtube.com https:\/\/*.youtube-nocookie.com https:\/\/app.termly.io https:\/\/*.hubspot.com https:\/\/*.hs-sites.com https:\/\/*.google.com https:\/\/*.googleadservices.com https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/*.googletagmanager.com https:\/\/*.adtrafficquality.google https:\/\/*.twitter.com https:\/\/*.facebook.com; font-src 'self' https:\/\/*.typekit.net https:\/\/*.cloudfront.net https:\/\/fonts.gstatic.com https:\/\/*.cloudflare.com; connect-src 'self' https:\/\/*.ispe.org https:\/\/ispewebassets.org  https:\/\/betty-api.tasio.co https:\/\/*.clarity.ms https:\/\/ad.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/*.fusesearch.app https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/*.hscollectedforms.net https:\/\/*.linkedin.com https:\/\/*.openfpcdn.io  https:\/\/sentry.io https:\/\/*.termly.io https:\/\/*.typekit.net https:\/\/*.google-analytics.com https:\/\/*.googleadservices.com https:\/\/*.googletagmanager.com https:\/\/*.googlesyndication.com https:\/\/*.gstatic.com https:\/\/*.adtrafficquality.google https:\/\/google.com https:\/\/*.google.com https:\/\/*.google.ad https:\/\/*.google.ae https:\/\/*.google.com.af https:\/\/*.google.com.ag https:\/\/*.google.al https:\/\/*.google.am https:\/\/*.google.co.ao https:\/\/*.google.com.ar https:\/\/*.google.as https:\/\/*.google.at https:\/\/*.google.com.au https:\/\/*.google.az https:\/\/*.google.ba https:\/\/*.google.com.bd https:\/\/*.google.be https:\/\/*.google.bf https:\/\/*.google.bg https:\/\/*.google.com.bh https:\/\/*.google.bi https:\/\/*.google.bj https:\/\/*.google.com.bn https:\/\/*.google.com.bo https:\/\/*.google.com.br https:\/\/*.google.bs https:\/\/*.google.bt https:\/\/*.google.co.bw https:\/\/*.google.by https:\/\/*.google.com.bz https:\/\/*.google.ca https:\/\/*.google.cd https:\/\/*.google.cf https:\/\/*.google.cg https:\/\/*.google.ch https:\/\/*.google.ci https:\/\/*.google.co.ck https:\/\/*.google.cl https:\/\/*.google.cm https:\/\/*.google.cn https:\/\/*.google.com.co https:\/\/*.google.co.cr https:\/\/*.google.com.cu https:\/\/*.google.cv https:\/\/*.google.com.cy https:\/\/*.google.cz https:\/\/*.google.de https:\/\/*.google.dj https:\/\/*.google.dk https:\/\/*.google.dm https:\/\/*.google.com.do https:\/\/*.google.dz https:\/\/*.google.com.ec https:\/\/*.google.ee https:\/\/*.google.com.eg https:\/\/*.google.es https:\/\/*.google.com.et https:\/\/*.google.fi https:\/\/*.google.com.fj https:\/\/*.google.fm https:\/\/*.google.fr https:\/\/*.google.ga https:\/\/*.google.ge https:\/\/*.google.gg https:\/\/*.google.com.gh https:\/\/*.google.com.gi https:\/\/*.google.gl https:\/\/*.google.gm https:\/\/*.google.gr https:\/\/*.google.com.gt https:\/\/*.google.gy https:\/\/*.google.com.hk https:\/\/*.google.hn https:\/\/*.google.hr https:\/\/*.google.ht https:\/\/*.google.hu https:\/\/*.google.co.id https:\/\/*.google.ie https:\/\/*.google.co.il https:\/\/*.google.im https:\/\/*.google.co.in https:\/\/*.google.iq https:\/\/*.google.is https:\/\/*.google.it https:\/\/*.google.je https:\/\/*.google.com.jm https:\/\/*.google.jo https:\/\/*.google.co.jp https:\/\/*.google.co.ke https:\/\/*.google.com.kh https:\/\/*.google.ki https:\/\/*.google.kg https:\/\/*.google.co.kr https:\/\/*.google.com.kw https:\/\/*.google.kz https:\/\/*.google.la https:\/\/*.google.com.lb https:\/\/*.google.li https:\/\/*.google.lk https:\/\/*.google.co.ls https:\/\/*.google.lt https:\/\/*.google.lu https:\/\/*.google.lv https:\/\/*.google.com.ly https:\/\/*.google.co.ma https:\/\/*.google.md https:\/\/*.google.me https:\/\/*.google.mg https:\/\/*.google.mk https:\/\/*.google.ml https:\/\/*.google.com.mm https:\/\/*.google.mn https:\/\/*.google.com.mt https:\/\/*.google.mu https:\/\/*.google.mv https:\/\/*.google.mw https:\/\/*.google.com.mx https:\/\/*.google.com.my https:\/\/*.google.co.mz https:\/\/*.google.com.na https:\/\/*.google.com.ng https:\/\/*.google.com.ni https:\/\/*.google.ne https:\/\/*.google.nl https:\/\/*.google.no https:\/\/*.google.com.np https:\/\/*.google.nr https:\/\/*.google.nu https:\/\/*.google.co.nz https:\/\/*.google.com.om https:\/\/*.google.com.pa https:\/\/*.google.com.pe https:\/\/*.google.com.pg https:\/\/*.google.com.ph https:\/\/*.google.com.pk https:\/\/*.google.pl https:\/\/*.google.pn https:\/\/*.google.com.pr https:\/\/*.google.ps https:\/\/*.google.pt https:\/\/*.google.com.py https:\/\/*.google.com.qa https:\/\/*.google.ro https:\/\/*.google.ru https:\/\/*.google.rw https:\/\/*.google.com.sa https:\/\/*.google.com.sb https:\/\/*.google.sc https:\/\/*.google.se https:\/\/*.google.com.sg https:\/\/*.google.sh https:\/\/*.google.si https:\/\/*.google.sk https:\/\/*.google.com.sl https:\/\/*.google.sn https:\/\/*.google.so https:\/\/*.google.sm https:\/\/*.google.sr https:\/\/*.google.st https:\/\/*.google.com.sv https:\/\/*.google.td https:\/\/*.google.tg https:\/\/*.google.co.th https:\/\/*.google.com.tj https:\/\/*.google.tl https:\/\/*.google.tm https:\/\/*.google.tn https:\/\/*.google.to https:\/\/*.google.com.tr https:\/\/*.google.tt https:\/\/*.google.com.tw https:\/\/*.google.co.tz https:\/\/*.google.com.ua https:\/\/*.google.co.ug https:\/\/*.google.co.uk https:\/\/*.google.com.uy https:\/\/*.google.co.uz https:\/\/*.google.com.vc https:\/\/*.google.co.ve https:\/\/*.google.co.vi https:\/\/*.google.com.vn https:\/\/*.google.vu https:\/\/*.google.ws https:\/\/*.google.rs https:\/\/*.google.co.za https:\/\/*.google.co.zm https:\/\/*.google.co.zw https:\/\/*.google.cat; report-uri \/report-csp-violation","count":1},{"content-security-policy-report-only":" default-src 'self'; connect-src *; img-src * data:; script-src 'nonce-qxD4HFNLcx3DsP9xonzmwAtoJZk93MwR' 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' 'self' https: http: 'self' cdn.bizible.com; style-src 'self' 'unsafe-inline' https:\/\/404-tpa-276.mktoweb.com\/ https:\/\/*.qualified.com; font-src 'self' kit.fontawesome.com https:\/\/ka-p.fontawesome.com\/ https:\/\/fast.wistia.com\/ data:; form-action 'self'; object-src 'none'; media-src 'self' blob: mediastream: https:\/\/*.qualified.com; frame-src https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net\/ https:\/\/gtm.docketwise.com\/ https:\/\/www.youtube.com\/ https:\/\/insight.adsrvr.org\/ https:\/\/app.netlify.com\/ https:\/\/404-tpa-276.mktoweb.com\/ https:\/\/*.qualified.com; child-src https:\/\/*.qualified.com; frame-ancestors demo.affinipay.com ka-p.fontawesome.com; upgrade-insecure-requests; block-all-mixed-content; report-uri \/.netlify\/functions\/__csp-violations","count":1},{"content-security-policy-report-only":" default-src 'self' *.h24.ua h24.ua *.iit.com.ua *.cloudflare.com; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.gstatic.com *.googleapis.com *.h24.ua; img-src 'self' data: blob: h24.ua *.h24.ua *.google.com *.google.com.ua *.google-analytics.com *.googletagmanager.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.gstatic.com googleads.g.doubleclick.net www.googleadservices.com https:\/\/*.clarity.ms https:\/\/c.bing.com https:\/\/www.facebook.com https:\/\/*.facebook.com; font-src 'self' data: fonts.gstatic.com *.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com static.cloudflareinsights.com www.googletagmanager.com *.google-analytics.com *.facebook.net maps.googleapis.com googleads.g.doubleclick.net www.clarity.ms scripts.clarity.ms script.crazyegg.com meet.jit.si *.jit.si telegram.org *.telegram.org; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com static.cloudflareinsights.com www.googletagmanager.com *.google-analytics.com *.facebook.net maps.googleapis.com googleads.g.doubleclick.net www.clarity.ms scripts.clarity.ms script.crazyegg.com meet.jit.si *.jit.si telegram.org *.telegram.org; connect-src 'self' https:\/\/*.google.com https:\/\/*.h24.ua https:\/\/h24.ua https:\/\/*.google-analytics.com https:\/\/*.google.com.ua https:\/\/*.facebook.net https:\/\/*.facebook.com https:\/\/www.facebook.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/www.googletagmanager.com https:\/\/challenges.cloudflare.com https:\/\/maps.googleapis.com https:\/\/static.cloudflareinsights.com https:\/\/cloudflareinsights.com https:\/\/*.cloudflareinsights.com https:\/\/googleads.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/meet.jit.si https:\/\/*.jit.si https:\/\/telegram.org https:\/\/*.telegram.org https:\/\/mpc2-prod-29-is5qnl632q-uc.a.run.app https:\/\/demo-1.conversionsapigateway.com https:\/\/*.clarity.ms wss:\/\/*.h24.ua wss:\/\/meet.jit.si wss:\/\/*.jit.si; frame-src 'self' www.googletagmanager.com eu.iit.com.ua *.iit.com.ua *.google.com *.google.com.ua *.h24.ua meet.jit.si *.jit.si id.gov.ua *.id.gov.ua; media-src 'self' blob: meet.jit.si *.jit.si; worker-src 'self' blob:; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" base-uri 'self';connect-src 'self' https: wss:;default-src 'none';font-src 'self' data: https:;form-action 'self' https:;frame-ancestors https:;frame-src https: blob:;img-src 'self' blob: data: https: http:;manifest-src 'none';media-src 'self' https: blob:;object-src 'self' https:\/\/djtflbt20bdde.cloudfront.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;worker-src 'self' https:\/\/zenkit.com https:\/\/*.zenkit.com;report-uri \/csp-report;script-src-attr 'none';style-src 'self' https: 'unsafe-inline'","count":1},{"content-security-policy-report-only":" default-src 'unsafe-inline' 'self' *.txst.edu *.txstate.edu *.doubleclick.net *.trumba.com *.yuja.com www.facebook.com\/tr www.googleapis.com\/customsearch analytics.google.com www.google-analytics.com www.googletagmanager.com; report-uri \/.csp_report","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' blob: https:; worker-src 'self' blob:; child-src 'self' blob: https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; manifest-src 'self'; upgrade-insecure-requests;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' https:\/\/cdn.cookielaw.org https:\/\/*.scarabresearch.com https:\/\/cdn.usefathom.com https:\/\/*.userway.org https:\/\/cdn.veritonic.com https:\/\/cdnjs.cloudflare.com https:\/\/compass.halfspace.co.uk https:\/\/*.facebook.net https:\/\/*.freshworks.com https:\/\/*.doubleclick.net https:\/\/imagesrv.adition.com https:\/\/js.stripe.com https:\/\/*.licdn.com https:\/\/*.ads-twitter.com https:\/\/*.contentsquare.net https:\/\/www.details-enterprise-7.com https:\/\/*.google.com https:\/\/*.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/tag.demandbase.com https:\/\/*.usbrowserspeed.com https:\/\/*.gstatic.com https:\/\/cdn.matomo.cloud; style-src 'unsafe-inline' 'self' https:\/\/*.userway.org; object-src 'none'; base-uri 'self'; connect-src 'self' https:\/\/*.doubleclick.net https:\/\/*.avfcservices.co.uk https:\/\/*.userway.org https:\/\/av-halfspacegroup.matomo.cloud https:\/\/*.contentsquare.net https:\/\/cdn.cookielaw.org https:\/\/cdn.usefathom.com https:\/\/*.mux.com https:\/\/*.on.aws https:\/\/*.litix.io https:\/\/ip.veritonicmetrics.com https:\/\/*.linkedin.com https:\/\/*.scarabresearch.com https:\/\/*.google.com https:\/\/*.google.co.uk; font-src 'self' data: https:\/\/*.userway.org; frame-src 'self' https:\/\/*.google.com https:\/\/*.userway.org https:\/\/js.stripe.com https:\/\/*.facebook.com; img-src 'self' https:\/\/*.linkedin.com https:\/\/*.twitter.com https:\/\/cdn.cookielaw.org https:\/\/cdn.usefathom.com https:\/\/*.userway.org https:\/\/compass.halfspace.co.uk https:\/\/*.mux.com https:\/\/*.avfcservices.co.uk https:\/\/t.co https:\/\/*.facebook.com https:\/\/*.google.co.uk https:\/\/*.google.com; manifest-src 'self'; media-src 'self';","count":1},{"content-security-policy-report-only":" default-src 'self' d1c7drk47yg0al.cloudfront.net; base-uri 'self'; object-src 'none'; script-src 'self' 'nonce-YTBmZTM0MzgtOGExZC00ZmYzLTk4YjQtYjU3MmI3MWQ4MTg3' 'wasm-unsafe-eval' d1c7drk47yg0al.cloudfront.net js.stripe.com www.paypalobjects.com www.googletagmanager.com *.gstatic.com www.google-analytics.com www.google.com maps.googleapis.com connect.facebook.net challenges.cloudflare.com cdn.segment.com cdn-cookieyes.com browser.sentry-cdn.com cdn.tailwindcss.com cdn.mxpnl.com *.filepicker.io static.filestackapi.com widget.trustpilot.com dev.visualwebsiteoptimizer.com *.vimeo.com *.youtube.com *.youtube-nocookie.com *.youtu.be o4508130513256448.ingest.de.sentry.io; style-src 'self' 'unsafe-inline' d1c7drk47yg0al.cloudfront.net fonts.googleapis.com *.gstatic.com *.filepicker.io static.filestackapi.com *.vimeo.com *.youtube.com *.youtube-nocookie.com *.youtu.be; font-src 'self' d1c7drk47yg0al.cloudfront.net fonts.gstatic.com static.filestackapi.com data:; img-src 'self' data: blob: d1c7drk47yg0al.cloudfront.net prod-chuffedcontent.s3.amazonaws.com *.facebook.com connect.facebook.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net stats.g.doubleclick.net www.googleadservices.com maps.googleapis.com *.gstatic.com *.amazonaws.com *.chuffed.org chuffed.org cdn-cookieyes.com dev.visualwebsiteoptimizer.com *.mxpnl.com image.mux.com *.litix.io *.filepicker.io static.filestackapi.com process.filestackapi.com cdn.filestackcontent.com *.storyblok.com *.vimeo.com *.vimeocdn.com *.youtube.com img.youtube.com i.ytimg.com *.youtube-nocookie.com *.youtu.be www.google.com www.google.com.au translate.googleapis.com translate.google.com; connect-src 'self' d1c7drk47yg0al.cloudfront.net chuffed.org *.stripe.com *.stripe.network api.paypal.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com maps.googleapis.com *.facebook.com *.segment.io cdn.segment.com o4508130513256448.ingest.de.sentry.io *.launchdarkly.com *.mixpanel.com *.mxpnl.com *.mux.com *.amazonaws.com dev.visualwebsiteoptimizer.com cdn-cookieyes.com directory.cookieyes.com log.cookieyes.com analytics.google.com ad.doubleclick.net stats.g.doubleclick.net www.googleadservices.com vimeo.com *.filepicker.io *.filestackapi.com challenges.cloudflare.com https:\/\/*.pusher.com wss:\/\/*.pusher.com blob: *.litix.io storage.googleapis.com widget.trustpilot.com www.google.com translate.googleapis.com translate.google.com; frame-src 'self' *.stripe.com www.facebook.com m.facebook.com www.google.com challenges.cloudflare.com www.googletagmanager.com *.filepicker.io *.vimeo.com *.youtube.com *.youtube-nocookie.com *.youtu.be; media-src 'self' blob: d1c7drk47yg0al.cloudfront.net *.mux.com *.vimeo.com *.gstatic.com *.youtube.com *.youtube-nocookie.com","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/maps.googleapis.com https:\/\/s3-eu-west-1.amazonaws.com https:\/\/unpkg.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com https:\/\/*.recaptcha.net https:\/\/*.google.com https:\/\/*.doubleclick.net https:\/\/*.googleusercontent.com https:\/\/*.youtube.com https:\/\/*.facebook.net https:\/\/*.hotjar.com https:\/\/*.inteliwise.com https:\/\/bat.bing.com https:\/\/pixel.wp.pl https:\/\/*.clarity.ms https:\/\/analytics.tiktok.com https:\/\/static.ads-twitter.com https:\/\/www.googleadservices.com https:\/\/microsoft.com https:\/\/perfo.salestube.pl https:\/\/*.przelewy24.pl https:\/\/browser-update.org https:\/\/cdn.evgnet.com https:\/\/cdn.evergage.com https:\/\/tenantpluginapiserver1.eloacc.warta.pl https:\/\/public-api-sessionserver1.eloacc.warta.pl https:\/\/*.startquestion.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/s3-eu-west-1.amazonaws.com https:\/\/*.hotjar.com https:\/\/*.inteliwise.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com https:\/\/tenantpluginapiserver1.eloacc.warta.pl https:\/\/public-api-sessionserver1.eloacc.warta.pl https:\/\/*.startquestion.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; connect-src 'self' https:\/\/inteliwise-eu.s3.amazonaws.com https:\/\/maps.googleapis.com https:\/\/s3-eu-west-1.amazonaws.com https:\/\/stats.g.doubleclick.net https:\/\/www.google-analytics.com https:\/\/*.analytics.google.com https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.recaptcha.net https:\/\/*.hotjar.com https:\/\/*.inteliwise.com https:\/\/pixel.wp.pl https:\/\/*.evergage.com https:\/\/*.evgnet.com https:\/\/rail-publisher.app.inteliwi.se https:\/\/ad.doubleclick.net https:\/\/*.clarity.ms wss:\/\/ws.hotjar.com https:\/\/content.hotjar.io https:\/\/metrics.hotjar.io https:\/\/www.facebook.com https:\/\/analytics.tiktok.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/bat.bing.com https:\/\/unpkg.com https:\/\/vc.hotjar.io https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/microsoft.com https:\/\/perfo.salestube.pl https:\/\/*.przelewy24.pl https:\/\/tenantpluginapiserver1.eloacc.warta.pl https:\/\/public-api-sessionserver1.eloacc.warta.pl https:\/\/*.startquestion.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/tenantpluginapiserver1.eloacc.warta.pl https:\/\/public-api-sessionserver1.eloacc.warta.pl; frame-src 'self' https:\/\/10798259.fls.doubleclick.net https:\/\/9049979.fls.doubleclick.net https:\/\/s3-eu-west-1.amazonaws.com https:\/\/www.recaptcha.net https:\/\/*.google.com https:\/\/*.hotjar.com https:\/\/*.inteliwise.com https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net https:\/\/*.youtube.com https:\/\/*.vimeo.com https:\/\/*.wp.pl https:\/\/tenantpluginapiserver1.eloacc.warta.pl https:\/\/*.startquestion.com; img-src 'self' data: https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.google.pl https:\/\/*.hotjar.com https:\/\/*.inteliwise.com https:\/\/pixel.wp.pl https:\/\/ad.doubleclick.net https:\/\/bat.bing.com https:\/\/*.clarity.ms https:\/\/www.googletagmanager.com https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/c.bing.com https:\/\/t.co https:\/\/analytics.twitter.com https:\/\/fonts.gstatic.com https:\/\/*.ytimg.com https:\/\/*.vimeocdn.com https:\/\/tenantpluginapiserver1.eloacc.warta.pl https:\/\/public-api-sessionserver1.eloacc.warta.pl https:\/\/*.startquestion.com; manifest-src 'self'; media-src 'self' https:\/\/tenantpluginapiserver1.eloacc.warta.pl https:\/\/public-api-sessionserver1.eloacc.warta.pl; worker-src 'self' blob:; report-uri \/csp-report-endpoint;","count":1},{"content-security-policy-report-only":" default-src blob: https:\/\/*.mhcache.com;font-src 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com https:\/\/fonts.gstatic.com;frame-src 'self' https:\/\/*.mhcache.com https:\/\/portal.allyable.com https:\/\/mh-site-files-5c53d6a9947c.s3.amazonaws.com https:\/\/myheritage-container.com https:\/\/www.myheritage-partners.com https:\/\/www.myheritage.com https:\/\/*.mk-sense.com https:\/\/player.vimeo.com https:\/\/*.facebook.com https:\/\/*.google.com https:\/\/tpc.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/accounts.google.com\/gsi\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/recaptcha.google.com\/recaptcha\/  https:\/\/widget.trustpilot.com;script-src https:\/\/accounts.google.com\/gsi\/client https:\/\/www.datadoghq-browser-agent.com https:\/\/appleid.cdn-apple.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/maps.googleapis.com *.myheritage.fr https:\/\/www.myheritage.fr  'unsafe-eval' 'nonce-100e2fdf6bc5a09a7df778a3c7237b00' 'strict-dynamic' https:\/\/widget.trustpilot.com https:\/\/invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com https:\/\/fonts.googleapis.com https:\/\/accounts.google.com\/gsi\/style  https:\/\/widget.trustpilot.com;connect-src data: 'self' https:\/\/*.myheritage.com https:\/\/portal.allyable.com https:\/\/*.mhcache.com https:\/\/adservice.google.com https:\/\/*.logs.datadoghq.com https:\/\/*.browser-intake-datadoghq.com https:\/\/browser-intake-datadoghq.com https:\/\/sentry.io https:\/\/*.bing.com https:\/\/*.facebook.com https:\/\/*.doubleclick.net https:\/\/*.mk-sense.com https:\/\/*.filae.com https:\/\/accounts.google.com\/gsi\/ https:\/\/www.google.com\/pagead\/landing https:\/\/maps.googleapis.com\/maps\/api\/mapsjs\/gen_204 https:\/\/translate.googleapis.com https:\/\/www.google.com\/ccm\/collect https:\/\/cdn.builder.io https:\/\/www.google.com\/recaptcha\/enterprise\/* https:\/\/www.google.com\/recaptcha\/enterprise\/ https:\/\/www.google.com\/recaptcha\/enterprise\/clr https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com https:\/\/people.googleapis.com https:\/\/translate-pa.googleapis.com *.myheritage.fr https:\/\/widget.trustpilot.com;media-src 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com;frame-ancestors 'self' https:\/\/builder.io;img-src * data:  https:\/\/widget.trustpilot.com https:\/\/*.trustpilot.com;object-src 'none';base-uri 'self' https:\/\/*.mhcache.com;report-uri \/FP\/API\/ContentSecurityPolicy\/report-violation.php?report_mode=report&canonical_page_id=\/company\/home\/","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-8Uuf8ytQKHlx9bEXNxBNOw==' 'strict-dynamic' https:\/\/stats.theglobalfund.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:\/\/stats.theglobalfund.org; frame-src 'self' https:; media-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri \/csp-report; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' adform.net *.adform.net betano.com *.betano.com betano.ng *.betano.ng cloudflare.com *.cloudflare.com cookielaw.org *.cookielaw.org facebook.net *.facebook.net fullstory.com *.fullstory.com gmlinteractive.com *.gmlinteractive.com googletagmanager.com *.googletagmanager.com kaizengaming.com *.kaizengaming.com kameleoon.io *.kameleoon.io optimove.net *.optimove.net sportradar.com *.sportradar.com sportradarserving.com *.sportradarserving.com cloudflareinsights.com *.cloudflareinsights.com ads-twitter.com *.ads-twitter.com app.delivery *.app.delivery lgrckt-in.com *.lgrckt-in.com tostarsbuilding.com *.tostarsbuilding.com *.bing.com *.taboola.com *.geocomply.com *.creativecdn.com *.kameleoon.eu *.google-analytics.com *.jsdelivr.net *.kwai.net *.clarity.ms *.betgenius.com *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co *.betano.co *.datadome.co d32tdr35c4icxo.cloudfront.net; worker-src 'self' blob:; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=NSCzq8aLq9V2qpR2WEfb98YTqG5qwM15tH_iHbcbM1s-1788510589.8416219-1.0.1.1-tkONUJZ9Jwn0VBt4BW0g65WZw0BU6i_gHNo_fkgx7QcqpFwLAVKX3JuL7jffDqCxQelX9CUHlbQaaHaJXqbvgR8lVTTKS7BXTq5CaMFTgAw.79E8F3IzZwUMm2.HbKSe2PI4IC6pr49v.BT_50YEdY7ehXjHIsO67JjsxmkjpDWyCactlRbopYEhKrlnkOQD; report-to cf-yijyixlqkilzqgnp","count":1},{"content-security-policy-report-only":" default-src 'none'; connect-src googleads.g.doubleclick.net our.umbraco.com stats.g.doubleclick.net www.google-analytics.com www.google.com cdn.linkedin.oribi.io region1.analytics.google.com iwfsecurity.report-uri.com consentcdn.cookiebot.com translate.googleapis.com 'self';  font-src fonts.gstatic.com use.typekit.net 'self'; manifest-src 'self'; object-src 'self'; frame-src vimeo.com donorbox.org www.buzzsprout.com player.vimeo.com www.googletagmanager.com www.youtube.com consentcdn.cookiebot.com www.google.com indd.adobe.com 'self'; frame-ancestors 'self'; img-src data: t.co analytics.twitter.com fonts.gstatic.com www.google.co.uk our.umbraco.com www.gravatar.com www.googletagmanager.com www.linkedin.com www.facebook.com px4.ads.linkedin.com www.google-analytics.com px.ads.linkedin.com gtranslate.net p.typekit.net www.gstatic.com dashboard.umbraco.com i.vimeocdn.com www.google.com translate.googleapis.com translate.google.com bat.bing.com *.cookiebot.com 'self'; media-src data: 'self' vimeo.com player.vimeo.com *.akamaized.net; script-src 'self' 'unsafe-eval' bat.bing.com static.ads-twitter.com vimeo.com www.vimeo.com ajax.aspnetcdn.com www.google.com connect.facebook.net www.googleadservices.com www.gstatic.com www.google-analytics.com snap.licdn.com translate-pa.googleapis.com consent.cookiebot.com use.typekit.net translate.google.com translate.googleapis.com consentcdn.cookiebot.com use.typekit.net dev.iwf.org.uk www.googletagmanager.com *.iwf.org.uk *.cookiebot.com *.typekit.net cdn.veritonic.com inline: 'unsafe-inline' 'unsafe-eval' 'self'; style-src translate.googleapis.com  www.gstatic.com inline: 'self' 'unsafe-inline'; report-uri https:\/\/iwfsecurity.report-uri.com\/r\/d\/csp\/enforce;","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.mercadolibre.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com maps.googleapis.com maps.gstatic.com 'self' data: gpsfarma.com www.afip.gob.ar www.google.com.ar https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.mlstatic.com *.mercadopago.com maps.googleapis.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com fonts.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.mercadopago.com *.mercadolibre.com maps.googleapis.com stats.g.doubleclick.net https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src *.bellroy.com 'self' https: data:; base-uri 'self'; connect-src *.bellroy.com https: wss: www.google.com api.tangiblee.com; font-src *.bellroy.com 'self' data: https: themes.googleusercontent.com fonts.googleapis.com fonts.gstatic.com; frame-src *.bellroy.com 'self' https: data: ms-appx-web: www.facebook.com; img-src *.bellroy.com https: data: blob: android-webview-video-poster:; media-src *.bellroy.com https: data: blob:; script-src *.bellroy.com 'self' https: 'unsafe-inline' 'unsafe-eval' data: opera: google.com *.visa.com d1fc8wv8zag5ca.cloudfront.net; style-src *.bellroy.com https: 'unsafe-inline' data:; worker-src 'self' blob:; child-src 'self' blob:; block-all-mixed-content; report-uri \/csp_reports","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self';","count":1},{"content-security-policy-report-only":" font-src *.fontawesome.com *.gstatic.com 'self' data: fonts.googleapis.com fonts.gstatic.com *.hotjar.com *.clickdimensions.com *.permaleads.ch *.mouseflow.com *.smart-business-intuition.com data: 'self' 'unsafe-inline'; form-action www.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com www.linkedin.com linkedin.com *.clickdimensions.com *.permaleads.ch *.mouseflow.com *.smart-business-intuition.com 'self'; frame-src bid.g.doubleclick.net youtube.com *.youtube-nocookie.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ www.google.com landofcoder.com www.paypal.com www.sandbox.paypal.com www.youtube.com *.hotjar.com *.google.com www.facebook.com www.linkedin.com linkedin.com *.clickdimensions.com *.permaleads.ch *.mouseflow.com *.smart-business-intuition.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com youtube.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com https:\/\/img.youtube.com *.hsforms.net *.hsforms.com 'self' data: fpdbs.paypal.com fpdbs.sandbox.paypal.com s.ytimg.com t.paypal.com www.google-analytics.com www.paypal.com www.paypalobjects.com px.ads.linkedin.com stats.g.doubleclick.net *.googleapis.com *.gstatic.com www.linkedin.com linkedin.com googletagmanager.com www.facebook.com master-7rqtwti-mnyjem72y4b5c.eu-5.magentosite.cloud img.youtube.com *.clickdimensions.com *.permaleads.ch *.mouseflow.com *.smart-business-intuition.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ landofcoder.com *.disqus.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com js.braintreegateway.com t.paypal.com video.google.com www.paypal.com www.paypalobjects.com www.sandbox.paypal.com google.com www.google.com gstatic.com www.gstatic.com *.googleapis.com *.hotjar.com *.fontawesome.com connect.facebook.net apis.google.com www.linkedin.com linkedin.com platform.linkedin.com *.clickdimensions.com *.permaleads.ch *.mouseflow.com *.smart-business-intuition.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com *.googleapis.com *.gstatic.com *.clickdimensions.com *.permaleads.ch *.mouseflow.com *.smart-business-intuition.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com landofcoder.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.fontawesome.com www.google-analytics.com stats.g.doubleclick.net *.hotjar.com *.hotjar.io *.clickdimensions.com *.permaleads.ch *.mouseflow.com *.smart-business-intuition.com *.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" frame-ancestors https:\/\/*.facebook.com https:\/\/*.youtube.com https:\/\/*.cleverwebserver.com https:\/\/*.graphic.com.gh https:\/\/*.x.com;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/accounts.google.com https:\/\/www.gstatic.com https:\/\/ssl.gstatic.com https:\/\/cdn.jsdelivr.net; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https:; font-src 'self' data:; connect-src 'self' https:\/\/*.sarvam.ai https:\/\/*.sentry.io https:\/\/us.i.posthog.com https:\/\/us-assets.i.posthog.com; frame-src 'self' https:\/\/accounts.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:\/\/*.sarvam.ai https:\/\/accounts.google.com; object-src 'none'","count":1},{"content-security-policy-report-only":" worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com *.fontawesome.com https:\/\/fonts.gstatic.com https:\/\/www.google.com https:\/\/www.gstatic.com *.gstatic.com 'self' data: principiaskin.com *.principiaskin.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com *.pinterest.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com google.com *.addthis.com *.mercadolibre.com *.weltpixel.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com *.authorize.net *.google.com *.paypal.com *.freshchat.com *.pagseguro.uol.com.br *.doubleclick.net *.pinterest.com *.principiacosmeticos.com principiaskin.com *.principiaskin.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com google.com *.gstatic.com *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.pagseguro.uol.com.br content.app-us1.com cdn.jsdelivr.net *.cloudfront.net *.hsforms.net *.hsforms.com 'self' data: *.instagram.com *.magentocommerce.com *.ytimg.com s.ytimg.com *.pinterest.com *.googleadservices.com *.google.com *.google.com.br *.google.it *.google-analytics.com www.paypalobjects.com *.paypalobjects.com *.paypal.com www.paypal.com t.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.ftcdn.com *.behance.com www.apptrian.com *.apptrian.com *.mercadolivre.com *.yotpo.com *.adobedtm.com *.demdex.net *.everesttech.net assets.braintreegateway.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com c.paypal.com checkout.paypal.com https:\/\/pagseguro.uol.com.br https:\/\/sandbox.pagseguro.uol.com.br https:\/\/stc.pagseguro.uol.com.br https:\/\/sandbox.stc.pagseguro.uol.com.br *.doubleclick.net *.onesignal.com *.principiacosmeticos.com principiaskin.com *.principiaskin.com *.googletagmanager.com https:\/\/principiacosmeticos.com\/mtracking.gif https:\/\/www.google.com.ar\/ads\/ga-audiences https:\/\/www.google.com.ar\/pagead\/1p-user-list\/700931334\/ https:\/\/principiaskincare.com.br\/mtracking.gif https:\/\/t.co\/1\/i\/adsct *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.googleapis.com google.com *.gstatic.com cdn.ampproject.org connect.facebook.net www.googletagmanager.com googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.mlstatic.com www.facebook.com graph.facebook.com business.facebook.com *.google.com *.avada.io diffuser-cdn.app-us1.com prism.app-us1.com *.activehosted.com trackcmp.net cdn.jsdelivr.net *.hsforms.net *.hsforms.com *.ap4r.com *.ks-la.net *.kwai.net *.kwai-pro.com *.freshchat.com *.google-analytics.com *.facebook.com *.adobedtm.com *.authorize.net *.braintreegateway.com *.cardinalcommerce.com *.paypal.com www.paypal.com *.ytimg.com *.googleadservices.com *.paypalobjects.com www.paypalobjects.com *.vimeo.com www.youtube.com *.viacep.com.br www.apptrian.com *.apptrian.com *.polyfill.io *.cloudflare.com *.pagseguro.uol.com.br *.tiktok.com *.pinimg.com *.mercadopago.com *.doubleclick.net *.ccdc02.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com pay.google.com *.yotpo.com *.onesignal.com https:\/\/onesignal.com\/api\/v1\/sync\/980b27db-f331-407d-8b91-7ea1ff79c577\/web *.principiacosmeticos.com https:\/\/principiacosmeticos.com\/mtc.js *.k-analytix.com principiaskin.com *.principiaskin.com *.cloudflareinsights.com https:\/\/designestylelab.com\/css\/ https:\/\/analytics-manager.com\/an https:\/\/analytics-manager.com\/an\/ https:\/\/principiaskincare.com.br\/mtc.js https:\/\/static.cloudflareinights.com\/beacon.min.js\/v52afc6f149f6479b8c77fa569edb01181681764108816 *.ads-twitter.com\/uwt.js *.pinterest.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com google.com *.kxcdn.com *.gstatic.com *.fontawesome.com *.google.com cdn.jsdelivr.net *.freshchat.com fonts.googleapis.com *.mercadopago.com getfirebug.com cdn.dnky.co webchat.dotdigital.com *.yotpo.com *.onesignal.com https:\/\/onesignal.com\/sdks\/OneSignalSDKStyles.css *.principiacosmeticos.com principiaskin.com *.principiaskin.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https:\/\/www.paypal.com\/xoplatform\/logger\/api\/logger cdn.ampproject.org *.kxcdn.com *.mercadopago.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.rastreio.alfatracking.com.br *.tracking.totalexpress.com.br *.rastreio.fmtransportes.com.br *.correios.com.br http:\/\/dpm.demdex.net https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/get.geojs.io *.avada.io *.viacep.com.br *.activehosted.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.ap4r.com *.kwai.net *.kwai-pro.com *.mythad.com *.instagram.com *.pinterest.com www.apptrian.com *.apptrian.com *.polyfill.io *.cloudflare.com *.paypal.com *.pinimg.com *.tiktok.com *.google.com *.google.com.br *.google.it https:\/\/www.google.com.br\/ads\/ga-audiences https:\/\/www.google.it\/ads\/ga-audiences *.doubleclick.net *.yotpo.com *.mercadolibre.com *.onesignal.com https:\/\/onesignal.com\/api\/v1\/apps\/980b27db-f331-407d-8b91-7ea1ff79c577\/icon *.principiacosmeticos.com https:\/\/principiacosmeticos.com\/mtc\/event *.konduto.com principiaskin.com *.principiaskin.com *.googleapis.com https:\/\/viacep.com.br\/ws\/ viacep.com.br\/ws *.amcglobal.sc.omtrdc.net *.geostag.cardinalcommerce.com *.geo.cardinalcommerce.com *.1eafstag.cardinalcommerce.com *.1eaf.cardinalcommerce.com *.centinelapistag.cardinalcommerce.com *.centinelapi.cardinalcommerce.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.api.comapi.com *.webchat.dotdigital.com *.ekr.zdassets.com *.braintreegateway.com *.braintree-api.com https:\/\/principiaskincare.com.br\/mtc\/event https:\/\/pagead2.googlesyndication.com\/pagead\/buyside_topics\/set\/ analytics.pangle-ads.com https:\/\/google.com\/ccm\/form-data\/700931334 https:\/\/google.com\/pagead\/form-data\/700931334 analytics-ipv6.tiktokw.us 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" font-src https:\/\/fonts.gstatic.com *.klevu.com *.ksearchnet.com fonts.gstatic.com blog.vintageking.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.syfpos.com *.facebook.com blog.vintageking.com 'self' 'unsafe-inline'; frame-ancestors blog.vintageking.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com *.affirm.com *.affirm.ca c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * syf.demdex.net *.syfpos.com *.syf.com *.weltpixel.com www.xtento.com *.wesupply.xyz https:\/\/wesupplylabs.com *.googletagmanager.com *.doubleclick.net https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com blog.vintageking.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/images.unsplash.com *.affirm.com *.affirm.ca https:\/\/helloextend-static-assets.s3.amazonaws.com validate.fishpig.co.uk www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.syfpos.com *.syf.com analytics.synchrony.com *.d1.sc.omtrdc.net www.xtento.com cdn.xtento.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com *.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net blog.vintageking.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.affirm.com *.affirm.ca https:\/\/*.helloextend.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.syfpos.com analytics.synchrony.com *.mysynchrony.com https:\/\/*.leadmanagerfx.com https:\/\/*.marketingcloudfx.com www.xtento.com cdn.xtento.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com *.cloudflare.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net https:\/\/cdn-scripts.signifyd.com https:\/\/imgs.signifyd.com blog.vintageking.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https:\/\/fonts.googleapis.com unsafe-inline assets.braintreegateway.com *.syfpos.com https:\/\/static.klaviyo.com *.klevu.com *.ksearchnet.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com blog.vintageking.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blog.vintageking.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.affirm.com *.affirm.ca https:\/\/*.helloextend.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.syfpos.com *.syf.com *.d1.sc.omtrdc.net https:\/\/*.leadmanagerfx.com https:\/\/*.marketingcloudfx.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app https:\/\/imgs.signifyd.com blog.vintageking.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com blog.vintageking.com http: https: blob: 'self' 'unsafe-inline'; default-src blog.vintageking.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:\/\/cdn.cookielaw.org https:\/\/www.bnpparibas.de https:\/\/brasil.bnpparibas; script-src 'self' 'unsafe-eval' https:\/\/fast.wistia.com https:\/\/beacon-v2 https:\/\/analyticsgroupcom.bnpparibas.com https:\/\/cdn-group.bnpparibas.com https:\/\/cdn.cookielaw.org https:\/\/cdn.territories.bnpparibas ajax.googleapis.com www.googletagmanager.com googletagmanager.com tagmanager.google.com 'sha256-F+QMJISS2IIkRUd2a+c+u1owMqMSoidCaHFDAmzUgOo=' 'sha256-iqOPaRlwwgtNy7J3vh\/+LSW9\/QVdN+Fl+YfMS8+GcPo=' 'sha256-yZHeusBmoqYSsqdm5ylf993dfqVyosFaYa5gueKZDsA=' 'sha256-rjfSUjIA2A20p4lATAefLLG7Fy7VJssnkJ+SnJ2TXNo=' 'sha256-NoWu+BuWxBsWAc9iEH0HnQQP7HC05AcUDK7axdIDjwo=' 'sha256-RWn1w3BKiDlDNbD6vM1kYLpeWCwwWPkob0LMWJ2gKJk=' 'sha256-TFtZL+IG7iZFxL01Bw8saYGQywvA\/RDl1Ces+hBrSNM=' 'sha256-fPXetwWx4258jL256OrNtQQyvFVR4\/BotkeZKtfk54Q=' 'sha256-yElBEKucE35qwHf8qWcAvqD25zOJ7TqTptcHyzGhOxw=' 'sha256-Xr7tFjKXkiF47o9\/dlJ+izWVWEtr67XyWOK085\/Y43E=' 'sha256-qcT\/R0HkWUs2DMxvtvcMobUms6Z5\/fPtfgUe2hN67gE='; style-src 'self' 'unsafe-inline' data: https:\/\/fonts.googleapis.com https:\/\/www.gstatic.com https:\/\/cdn-group.bnpparibas.com https:\/\/cdn.cookielaw.org https:\/\/cdn.territories.bnpparibas fonts.googleapis.com www.googletagmanager.com tagmanager.google.com; img-src 'self' data: https:\/\/s.w.org https:\/\/wp-rocket.me https:\/\/c.tile.openstreetmap.org https:\/\/a.tile.openstreetmap.org https:\/\/b.tile.openstreetmap.org blob: https:\/\/www.google.com\/pagead\/landing https:\/\/ade.googlesyndication.com https:\/\/pagead2.googlesyndication.com https:\/\/ad.doubleclick.net https:\/\/contrib.territories.bnpparibas https:\/\/cdn-group.bnpparibas.com https:\/\/cdn.cookielaw.org https:\/\/cdn.territories.bnpparibas secure.gravatar.com www.gravatar.com i.ytimg.com data: www.googletagmanager.com; connect-src 'self' https:\/\/bnp-privacy.my.onetrust.com https:\/\/geolocation.onetrust.com\/cookieconsentpub\/v1\/geo\/location https:\/\/yoast.com https:\/\/cdn.cookielaw.org https:\/\/o173685.ingest.sentry.io https:\/\/analyticsgroupcom.bnpparibas.com https:\/\/contrib.territories.bnpparibas https:\/\/www.google.com\/pagead\/landing https:\/\/pagead2.googlesyndication.com https:\/\/adservice.google.com https:\/\/sourcemap.devowl.io https:\/\/sourcemap.devowl.io\/real-media-library\/4.22.47\/adb9a2f4ef22d5d85978840bd322bf76\/index.js.map www.googletagmanager.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/fast.wistia.com https:\/\/github.com\/google\/fonts https:\/\/cdn-group.bnpparibas.com https:\/\/cdn.cookielaw.org https:\/\/cdn.territories.bnpparibas fonts.gstatic.com fonts.googleapis.com data:; media-src 'self' https:\/\/asset.mediahub.bnpparibas https:\/\/upload.wikimedia.org https:\/\/broadcast.mediahub.bnpparibas data: https:\/\/mediahub.group.echonet https:\/\/my.mediahub.bnpparibas https:\/\/my.mediahub.bnpparibas\/AssetLink\/1cwfu8n4ki414p6d240ff18r41ver00j.mp4 https:\/\/cdn-group.bnpparibas.com https:\/\/cdn.cookielaw.org https:\/\/cdn.territories.bnpparibas; frame-src 'self' https:\/\/www.youtube.com https:\/\/wp-rocket.me https:\/\/open.spotify.com https:\/\/www.youtube-nocookie.com https:\/\/centric.bnpparibas.com https:\/\/13179764.fls.doubleclick.net https:\/\/td.doubleclick.net https:\/\/gateway.zscalertwo.net https:\/\/remove.video https:\/\/mozbar.moz.com blob: https:\/\/fxplus.bnpparibas.com www.youtube.com www.googletagmanager.com; child-src 'self' www.youtube.com www.googletagmanager.com; worker-src 'self' blob:;","count":1},{"content-security-policy-report-only":" upgrade-insecure-requests;base-uri\t'self';child-src\t'self'\tblob:;connect-src\t'self'\tapi.raiffeisen.ch\tboerse.raiffeisen.ch\tlogin.raiffeisen.ch\ttools.raiffeisen.ch\tmicrosites.raiffeisen.ch\tstatistics.raiffeisen.ch\tscene7.raiffeisen.ch\tlivechat.raiffeisen.ch\twss:\/\/livechat.raiffeisen.ch\tmaps.googleapis.com\tdpm.demdex.net\tidservice.raiffeisen.ch\traiffeisen.tt.omtrdc.net\toffers.raiffeisen.ch;default-src\t'none';font-src\t'self'\tlivechat.raiffeisen.ch\tfonts.googleapis.com\tfonts.gstatic.com;form-action\t'self'\twww.news.raiffeisen.ch;frame-ancestors\tebanking.raiffeisen.ch\texperience.adobe.com\traiffeisen.experiencecloud.adobe.com;frame-src\tblob:\tmicrosites.raiffeisen.ch\tactivitymap.adobe.com\tauthorize.omniture.com\tsitecatalyst.omniture.com\tcdn.tt.omtrdc.net\tmedia10.simplex.tv\tnubes.simplex.tv;img-src\t'self'\tdata:\ttools.raiffeisen.ch\tidservice.raiffeisen.ch\tlivechat.raiffeisen.ch\tstatistics.raiffeisen.ch\tanalytics.rmarkt.ch\tanalytics.raiffeisen.ch\tscene7.raiffeisen.ch\twww.facebook.com\twww.google.ch\twww.google.com\tkhms0.googleapis.com\tkhms1.googleapis.com\tmaps.googleapis.com\tcsi.gstatic.com\tmaps.gstatic.com\tdmp.adform.net\tdpm.demdex.net\traiffeisen.demdex.net\tgoogleads.g.doubleclick.net\tmedia10.simplex.tv;manifest-src\t'self';media-src\t'self'\tblob:\tscene7.raiffeisen.ch\tmedia10.simplex.tv;object-src\t'self';script-src\t'self'\t'unsafe-eval'\t'unsafe-inline'\tlogin.raiffeisen.ch\ttools.raiffeisen.ch\tmicrosites.raiffeisen.ch\tlivechat.raiffeisen.ch\tscene7.raiffeisen.ch\tactivitymap.adobe.com\twww.googleadservices.com\tmaps.googleapis.com\tgoogleads.g.doubleclick.net\tcdn.tt.omtrdc.net;style-src\t'self'\t'unsafe-inline'\ttools.raiffeisen.ch\tmicrosites.raiffeisen.ch\tlivechat.raiffeisen.ch\tscene7.raiffeisen.ch\tfonts.googleapis.com\tcdn.tt.omtrdc.net;worker-src\t'self';report-uri https:\/\/api.rreports.ch\/svreport\/v1\/api\/wwwrch\/csp;","count":1},{"content-security-policy-report-only":" base-uri 'none'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-aw5OVtbQxd9kk7m8z7SS6w=='","count":1},{"content-security-policy-report-only":" default-src blob: https:\/\/*.mhcache.com;font-src 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com https:\/\/fonts.gstatic.com;frame-src 'self' https:\/\/*.mhcache.com https:\/\/portal.allyable.com https:\/\/mh-site-files-5c53d6a9947c.s3.amazonaws.com https:\/\/myheritage-container.com https:\/\/www.myheritage-partners.com https:\/\/www.myheritage.com https:\/\/*.mk-sense.com https:\/\/player.vimeo.com https:\/\/*.facebook.com https:\/\/*.google.com https:\/\/tpc.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/accounts.google.com\/gsi\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/recaptcha.google.com\/recaptcha\/  https:\/\/widget.trustpilot.com;script-src https:\/\/accounts.google.com\/gsi\/client https:\/\/www.datadoghq-browser-agent.com https:\/\/appleid.cdn-apple.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/maps.googleapis.com *.myheritage.de https:\/\/www.myheritage.de  'unsafe-eval' 'nonce-92fa2669a8c64d63d204db06b9676b36' 'strict-dynamic' https:\/\/widget.trustpilot.com https:\/\/invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com https:\/\/fonts.googleapis.com https:\/\/accounts.google.com\/gsi\/style  https:\/\/widget.trustpilot.com;connect-src data: 'self' https:\/\/*.myheritage.com https:\/\/portal.allyable.com https:\/\/*.mhcache.com https:\/\/adservice.google.com https:\/\/*.logs.datadoghq.com https:\/\/*.browser-intake-datadoghq.com https:\/\/browser-intake-datadoghq.com https:\/\/sentry.io https:\/\/*.bing.com https:\/\/*.facebook.com https:\/\/*.doubleclick.net https:\/\/*.mk-sense.com https:\/\/*.filae.com https:\/\/accounts.google.com\/gsi\/ https:\/\/www.google.com\/pagead\/landing https:\/\/maps.googleapis.com\/maps\/api\/mapsjs\/gen_204 https:\/\/translate.googleapis.com https:\/\/www.google.com\/ccm\/collect https:\/\/cdn.builder.io https:\/\/www.google.com\/recaptcha\/enterprise\/* https:\/\/www.google.com\/recaptcha\/enterprise\/ https:\/\/www.google.com\/recaptcha\/enterprise\/clr https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com https:\/\/people.googleapis.com https:\/\/translate-pa.googleapis.com *.myheritage.de https:\/\/widget.trustpilot.com;media-src 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com;frame-ancestors 'self' https:\/\/builder.io;img-src * data:  https:\/\/widget.trustpilot.com https:\/\/*.trustpilot.com;object-src 'none';base-uri 'self' https:\/\/*.mhcache.com;report-uri \/FP\/API\/ContentSecurityPolicy\/report-violation.php?report_mode=report&canonical_page_id=\/company\/home\/","count":1},{"content-security-policy-report-only":" default-src 'self' https:; font-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com; worker-src 'self' blob:; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: www.googletagmanager.com; connect-src 'self' https: ws: wss:; report-uri https:\/\/csp-report.browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pubf68dfe1092b9b71f30b0f8123a55b7f0&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=project%3Ask%2Cenv%3Aproduction&service=sk","count":1},{"content-security-policy-report-only":" connect-src 'self' https:\/\/correspondent.report-uri.com https:\/\/static.cdn-decorrespondent.nl https:\/\/useruploads.cdn-decorrespondent.nl https:\/\/decorrespondent.matomo.cloud https:\/\/o206126.ingest.sentry.io https:\/\/space-corre.video-dns.com; media-src 'self' https:\/\/static.cdn-decorrespondent.nl https:\/\/traffic.omny.fm https:\/\/*.pdn.tritondigital.com https:\/\/useruploads.cdn-decorrespondent.nl blob: https:\/\/space-corre.video-dns.com; form-action 'self' https:\/\/www.mollie.com https:\/\/pay.ideal.nl https:\/\/www.paypal.com; report-uri https:\/\/correspondent.report-uri.com\/r\/d\/csp\/reportOnly; report-to csp-report-only-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/accounts.google.com https:\/\/oauth2.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; connect-src 'self' https:; font-src 'self' data:; frame-src 'self' https:\/\/www.google.com https:\/\/accounts.google.com; object-src 'none'; base-uri 'self'","count":1},{"content-security-policy-report-only":" font-src *.klevu.com *.ksearchnet.com *.gstatic.com https:\/\/fonts.gstatic.com *.fontawesome.com fonts.gstatic.com https:\/\/pos.snapscan.io *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https:\/\/secure.paygate.co.za\/payweb3\/process.trans https:\/\/sandbox.payfast.co.za https:\/\/www.payfast.co.za\/eng\/process oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; style-src *.adobe.com *.klevu.com *.ksearchnet.com *.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.fontawesome.com oppwa.com *.oppwa.com *.peachpayments.com *.cloudflare.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; connect-src *.google-analytics.com dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/*.ingest.sentry.io *.klevu.com *.ksearchnet.com https:\/\/ipinfo.io *.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/get.geojs.io *.avada.io oppwa.com *.oppwa.com *.peachpayments.com *.testfreaks.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.paypal.com *.tawk.to wss:\/\/*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.what3words.com *.googleapis.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss:\/\/widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: 'self' 'unsafe-inline'; frame-src data:text fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; img-src *.criteo.com *.krxd.net *.chatlayer.ai assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.klevu.com *.ksearchnet.com *.google.com *.gstatic.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com oppwa.com *.oppwa.com *.peachpayments.com *.eu-west-1.amazonaws.com https:\/\/pos.snapscan.io *.cloudflare.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.facebook.com *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; script-src *.incredible.co.za *.chatlayer.ai assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/browser.sentry-cdn.com *.klevu.com *.ksearchnet.com *.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.avada.io *.oppwa.com oppwa.com *.peachpayments.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.facebook.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network https:\/\/js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval';","count":1},{"content-security-policy-report-only":" default-src 'self'; style-src 'self' https:\/\/*.typekit.net https:\/\/cdnjs.cloudflare.com; font-src https:\/\/*.typekit.net; script-src 'self' https:\/\/sparkplatform.com https:\/\/cdnjs.cloudflare.com","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klarnacdn.net *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com js.stripe.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https:\/\/js.mollie.com https:\/\/checkoutshopper-test.adyen.com https:\/\/checkoutshopper.adyen.com *.adyen.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.doofinder.com https:\/\/s3.amazonaws.com https:\/\/aggregate-imgs.s3.eu-north-1.amazonaws.com https:\/\/fsc-images.s3.eu-north-1.amazonaws.com https:\/\/checkoutshopper-test.adyen.com https:\/\/checkoutshopper.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper.cdn.adyen.com *.cdn.adyen.com *.adyen.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https:\/\/www.google.com.ua https:\/\/www.googleadservices.com https:\/\/bat.bing.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.stripe.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.doofinder.com widget.freshworks.com m2epro.freshdesk.com https:\/\/js.mollie.com https:\/\/*.ngrok.app https:\/\/checkoutshopper-test.adyen.com https:\/\/checkoutshopper.adyen.com *.adyen.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https:\/\/widget.reviews.co.uk https:\/\/porjs.com https:\/\/cdn-cookieyes.com https:\/\/log.cookieyes.com https:\/\/www.google.com.ua newrelic.com nr-data.net https:\/\/bat.bing.com https:\/\/www.clarity.ms https:\/\/static.addtoany.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net www.googletagmanager.com *.fontawesome.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.doofinder.com wss:\/\/*.doofinder.com widget.freshworks.com m2epro.freshdesk.com https:\/\/*.fero.com https:\/\/*.ngrok.app wss:\/\/*.ngrok.app wss:\/\/fero.ngrok.app:3000\/ws https:\/\/checkoutshopper-test.adyen.com https:\/\/checkoutshopper.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper-live.cdn.adyen.com *.adyen.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https:\/\/k.clarity.ms api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.link.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/mc.yandex.ru https:\/\/api-maps.yandex.ru; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; connect-src 'self' https:\/\/mc.yandex.ru; frame-src https:\/\/api-maps.yandex.ru https:\/\/yandex.ru","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; upgrade-insecure-requests; block-all-mixed-content","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src * 'unsafe-inline' 'unsafe-eval'; script-src-attr 'self'; base-uri 'self'; frame-ancestors 'self' https:","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' https:\/\/*.cookiefirst.com https:\/\/*.hsforms.net https:\/\/*.hs-scripts.com https:\/\/share.lineindustries.com https:\/\/www.recaptcha.net https:\/\/www.gstatic.com\/recaptcha\/ *.tableau.com *.tableausoftware.com blob: data:; style-src 'self' 'unsafe-inline' *; font-src 'self' data: *; img-src 'self' data: *; object-src 'none'; frame-src 'self' https: data: blob: *.tableau.com *.tableausoftware.com; child-src 'self' https: data: blob: *.tableau.com *.tableausoftware.com; connect-src 'self' *.tableau.com *.tableausoftware.com wss:\/\/*.tableau.com; worker-src 'self' blob: data:; frame-ancestors 'self' *.tableau.com *.tableausoftware.com;","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:\/\/forms.hsforms.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.timetopet.com https:\/\/app.enzuzo.com https:\/\/app.getbeamer.com https:\/\/assets.daysmartpayments.com https:\/\/ph.daysmartpayments.com https:\/\/cdn.mouseflow.com https:\/\/cdn.plaid.com https:\/\/connect-js.stripe.com https:\/\/js.stripe.com https:\/\/connect.facebook.net https:\/\/ct.capterra.com https:\/\/embed.typeform.com https:\/\/googleads.g.doubleclick.net https:\/\/maps.googleapis.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com https:\/\/www.gstatic.cn https:\/\/www.recaptcha.net https:\/\/code.jquery.com https:\/\/js.storylane.io https:\/\/*.hubspot.com https:\/\/*.hs-scripts.com https:\/\/*.hs-analytics.net https:\/\/*.hs-banner.com https:\/\/*.hsforms.net https:\/\/*.intercom.io https:\/\/*.intercomcdn.com; style-src 'self' 'unsafe-inline' https:\/\/cdn.timetopet.com https:\/\/app.getbeamer.com https:\/\/embed.typeform.com https:\/\/fonts.googleapis.com; font-src 'self' data: https:\/\/cdn.timetopet.com https:\/\/fonts.gstatic.com https:\/\/static.hsappstatic.net https:\/\/*.intercomcdn.com; img-src 'self' data: blob: https:; connect-src 'self' blob: https: wss:; media-src 'self' blob: https:\/\/js.intercomcdn.com; worker-src 'self' blob:; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/app.getbeamer.com https:\/\/connect-js.stripe.com https:\/\/js.stripe.com https:\/\/form.typeform.com https:\/\/forms.hsforms.com https:\/\/player.vimeo.com https:\/\/www.youtube.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.recaptcha.net https:\/\/drive.google.com https:\/\/daysmart.storylane.io https:\/\/intercom-sheets.com https:\/\/www.intercom-reporting.com https:\/\/customer-y7bu0j063mhudygl.cloudflarestream.com; report-uri https:\/\/dashboard.timetopet.com\/csp-report?site=marketing","count":1},{"content-security-policy-report-only":" default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; report-uri https:\/\/taogroup.com\/wp-json\/tao-sec\/v1\/csp-report;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'nonce-ZTQ5ZGY4ZWEtZDBlMC00ZGNjLTg3ZDItYjgyMGNjMWJiNmI1' 'strict-dynamic' https:\/\/*.googletagmanager.com https:\/\/*.clarity.ms https:\/\/c.seznam.cz\/js\/rc.js 'unsafe-eval' https:\/\/*.hotjar.com 'unsafe-inline' 'self' https:\/\/tagmanager.google.com https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/pagead2.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/bzrcdn.openai.com; style-src 'self' 'unsafe-inline' https:\/\/p.typekit.net https:\/\/use.typekit.net https:\/\/*.hotjar.com https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' *.typekit.net fonts.googleapis.com https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:\/\/c.seznam.cz https:\/\/*.googlesyndication.com https:\/\/*.ads.linkedin.com https:\/\/www.facebook.com https:\/\/analytics.twitter.com https:\/\/www.google.com https:\/\/www.google.cz https:\/\/www.google.sk https:\/\/t.co https:\/\/my.teamio.com https:\/\/*.cloudimg.io https:\/\/dummyimage.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.hotjar.com https:\/\/static.intercomassets.com https:\/\/ssl.gstatic.com https:\/\/www.gstatic.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com https:\/\/*.google.cz https:\/\/*.google.sk https:\/\/google.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/*.intercomcdn.com https:\/\/intercom.helpdata.io https:\/\/bzr.openai.com; font-src 'self' data: https:\/\/use.typekit.net https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/script.hotjar.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/fonts.intercomcdn.com https:\/\/js.intercomcdn.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; connect-src 'self' https:\/\/www.prace.cz https:\/\/*.almacareer.tech https:\/\/api.selfservice.career-useraccount-prod.almacareer.net https:\/\/*.clarity.ms https:\/\/*.googlesyndication.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/www.google.com https:\/\/stats.g.doubleclick.net https:\/\/*.googletagmanager.com https:\/\/h.seznam.cz https:\/\/c.seznam.cz https:\/\/*.ads.linkedin.com https:\/\/www.facebook.com https:\/\/maps.geo.eu-west-1.amazonaws.com https:\/\/*.teamio.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/*.abtasty.com https:\/\/api-iam.intercom.io wss:\/\/nexus-websocket-a.intercom.io wss:\/\/*.intercom-messenger.com wss:\/\/*.intercom.io https:\/\/ad.doubleclick.net https:\/\/ct.leady.com https:\/\/*.s3.eu-west-1.amazonaws.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com https:\/\/*.google.cz https:\/\/*.google.sk https:\/\/google.com https:\/\/www.google.cz https:\/\/www.google.sk https:\/\/www.googleadservices.com https:\/\/bzr.openai.com https:\/\/bzrcdn.openai.com; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net https:\/\/www.youtube-nocookie.com\/ https:\/\/track.adform.net; manifest-src 'self'; media-src 'self' https:\/\/js.intercomcdn.com; worker-src 'self' blob:; report-uri \/api\/report\/csp;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-8V+Y9GmHo\/lp2wt80qlb7g=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:\/\/kit.fontawesome.com https:\/\/ka-p.fontawesome.com https:\/\/fonts.googleapis.com https:\/\/cdn.trustindex.io https:\/\/embed.typeform.com dev-hellowork.com *.dev-hellowork.com; img-src 'self' data: blob: https:\/\/www.google.bj https:\/\/www.google.cm https:\/\/fonts.gstatic.com https:\/\/www.google.tg https:\/\/www.googleadservices.com https:\/\/www.netreviews.eu c.clarity.ms lh3.googleusercontent.com phosphor.utils.elfsightcdn.com i.ytimg.com googleusercontent.com https:\/\/cdn.trustindex.io f.maformation.fr hellowork.com *.hellowork.com dev-hellowork.com *.dev-hellowork.com googletagmanager.com *.googletagmanager.com google.com *.google.com *.google.fr *.google.cm *.google.ie *.google.be *.google.co.uk *.google.co.id *.google.de *.google.it *.google.es *.google.nl *.google.ch googlesyndication.com *.googlesyndication.com cl.avis-verifies.com *.dmcdn.net linkedin.com *.linkedin.com *.bing.com *.facebook.com *.facebook.net *.smartadserver.com *.bidswitch.net *.doubleclick.net *.casalemedia.com *.criteo.com *.criteo.net id5-sync.com *.id5-sync.com *.360yield.com *.media.net *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.teads.tv *.tremorhub.com *.3lift.com *.yieldlab.net *.1rx.io *.demdex.net *.unrulymedia.com *.agkn.com *.taboola.com *.dmxleo.com joko-mobile-app-media.s3.eu-west-1.amazonaws.com *.tiktok.com analytics.tiktok.com https:\/\/googleads.g.doubleclick.net; font-src 'self' data: https:\/\/ka-p.fontawesome.com https:\/\/cdn.trustindex.io https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/ka-p.fontawesome.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/safesearchinc.com sslwidget.criteo.com *.clarity.ms hellowork.com *.hellowork.com dev-hellowork.com *.dev-hellowork.com hellowork-group.com *.hellowork-group.com https:\/\/infra-hellowork.com https:\/\/*.infra-hellowork.com infra-hellowork.com *.infra-hellowork.com regionsjob.com *.regionsjob.com https:\/\/www.google.com https:\/\/*.google.com https:\/\/*.google.com:443 google.com *.google.fr *.google.de *.google.it *.google.es *.google.nl *.google.be *.google.ch https:\/\/www.googleadservices.com https:\/\/*.googleadservices.com https:\/\/*.doubleclick.net googletagmanager.com *.googletagmanager.com googlesyndication.com *.googlesyndication.com googleadservices.com *.googleadservices.com abtasty.com *.abtasty.com aticdn.net *.aticdn.net bing.com *.bing.com linkedin.com *.linkedin.com facebook.com *.facebook.com *.tiktok.com analytics-ipv6.tiktokw.us *.skeepers.io *.doubleclick.net trustindex.io *.trustindex.io *.elfsight.com api.typeform.eu *.typeform.com https:\/\/googleads.g.doubleclick.net; frame-src *.typeform.com *.typeform.eu cl.avis-verifies.com widget.trustpilot.com youtube-nocookie.com *.youtube-nocookie.com dailymotion.com *.dailymotion.com player.vimeo.com *.player.vimeo.com googletagmanager.com *.googletagmanager.com google.com *.google.com criteo.com *.criteo.com *.criteo.net *.doubleclick.net facebook.com *.facebook.com abtasty.com *.abtasty.com *.zscloud.net https:\/\/googleads.g.doubleclick.net; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/www.facebook.com; frame-ancestors 'none'; report-to csp-endpoint; report-uri \/csp-report","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-'; base-uri 'none'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src none blob: data: gap:; script-src 'self' 'nonce-AEEkccS4_WaLBH4_z8LsjENbatzQz9BCpVZxdVE9Lapj7DKaGq4pHQ' 'strict-dynamic' https:\/\/www.utrecht.nl https:\/\/www.utrecht.nl.internal https:\/\/accept.utrecht.typocloud.nl data: https:\/\/virtuele-gemeente-assistent.nl https:\/\/siteimproveanalytics.com https:\/\/cdn-eu.readspeaker.com formulieren.digitaal.utrecht.nl stats.utrecht.nl 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https:\/\/translate.google.com https:\/\/stats.utrecht.nl https:\/\/www.toegankelijkheidsverklaring.nl https:\/\/nieuwsbrieven.utrecht.nl https:\/\/*.googleapis.com https:\/\/*.gstatic.com *.google.com *.googleusercontent.com https:\/\/web.archive.org *.6006206.global.siteimproveanalytics.io https:\/\/6006206.global.siteimproveanalytics.io\/image.aspx https:\/\/www.utrecht.nl https:\/\/www.utrecht.nl.internal https:\/\/accept.utrecht.typocloud.nl https:\/\/*.siteimproveanalytics.io https:\/\/virtuele-gemeente-assistent.nl https:\/\/*.siteimproveanalytics.com; base-uri none; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https:\/\/kaarten.utrecht.onatlas.nl https:\/\/subsidie-checker.nl https:\/\/sdk.companywebcast.com https:\/\/infogram.com https:\/\/nieuwsbrieven.utrecht.nl *.google.com *.gu-geo.maps.arcgis.com https:\/\/infogram-download-eu.s3.eu-west-1.amazonaws.com https:\/\/app-eu.readspeaker.com https:\/\/sketchfab.com https:\/\/utrecht-kaarten-review-acc-skda4g.delta10-review.nl https:\/\/e.infogram.com https:\/\/vttts-eu.readspeaker.com https:\/\/www.utrecht.nl https:\/\/www.utrecht.nl.internal https:\/\/accept.utrecht.typocloud.nl https:\/\/www.youtube-nocookie.com; style-src-elem 'self' 'nonce-AEEkccS4_WaLBH4_z8LsjENbatzQz9BCpVZxdVE9Lapj7DKaGq4pHQ' https:\/\/formulieren.digitaal.utrecht.nl https:\/\/cdn-eu.readspeaker.com https:\/\/virtuele-gemeente-assistent.nl https:\/\/mijn.virtuele-gemeente-assistent.nl https:\/\/www.gstatic.com https:\/\/formulieren.digitaal.utrecht.nl\/static\/sdk\/open-forms-sdk.css https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com *.formulieren.digitaal.utrecht.nl *.mijn.virtuele-gemeente-assistent.nl *.virtuele-gemeente-assistent.nl https:\/\/virtuele-gemeente-assistent.nl\/static\/css\/widget-v25.3.1-base.css https:\/\/virtuele-gemeente-assistent.nl\/static\/css\/widget-v25.3.1-custom.css https:\/\/mijn.virtuele-gemeente-assistent.nl\/utrecht\/_styling https:\/\/cdn.honey.io\/css\/empty.css *.www.gstatic.com https:\/\/v.kcmg.nl\/surveyembedding\/assets\/css\/standard_controls_inline.css https:\/\/v.kcmg.nl\/surveyembedding\/assets\/css\/ng-survey.component.css https:\/\/v.kcmg.nl\/surveyembedding\/assets\/css\/bootstrapslider.css https:\/\/v.kcmg.nl\/surveyembedding\/assets\/css\/surveyjs-readded-csp-styles.css https:\/\/v.kcmg.nl https:\/\/v.kcmg.nl\/surveyembedding\/assets\/css\/surveyjs-defaultv2css@1.12.23\/defaultV2.fontless.min.css *.v.kcmg.nl https:\/\/v.kcmg.nl\/surveyembedding\/assets\/css\/survey.component.css https:\/\/openstad-cdn.nl 'sha256-JQEHXnSrj4DJZ2DOwDDXtfkDs5+y7\/1gFxshQP2KBoA=' https:\/\/*.utrecht.nl https:\/\/viewer.kcmg.nl 'report-sample'; connect-src 'self' https:\/\/public.pandosearch.com https:\/\/www.utrecht.nl wss:\/\/virtuele-gemeente-assistent.nl https:\/\/formulieren.digitaal.utrecht.nl *.google.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com blob: data: https:\/\/translate.googleapis.com https:\/\/mijn.virtuele-gemeente-assistent.nl https:\/\/api.kcmg.nl https:\/\/viewerapi.kcmg.nl\/StartSurvey https:\/\/viewerapi.kcmg.nl *.viewerapi.kcmg.nl https:\/\/api.utrecht.openstad.dev *.obi4wan.com *.readspeaker.com *.pandosearch.com https:\/\/stats.utrecht.nl https:\/\/chatapi.obi4wan.com\/api https:\/\/cloudstatic.obi4wan.com\/api https:\/\/virtuele-gemeente-assistent.nl wss:\/\/virtuele-gemeente-assistent.nl\/socket.io\/ wss:\/\/ws-eu.pusher.com\/app https:\/\/cdn-eu.readspeaker.com; font-src 'self' https:\/\/formulieren.digitaal.utrecht.nl https:\/\/www.utrecht.nl https:\/\/fonts.gstatic.com https:\/\/v.kcmg.nl\/surveyembedding\/assets\/webfonts\/fa-brands-400.ttf https:\/\/v.kcmg.nl\/surveyembedding\/assets\/webfonts\/fa-regular-400.woff https:\/\/v.kcmg.nl\/surveyembedding\/assets\/webfonts\/fa-solid-900.woff https:\/\/v.kcmg.nl\/surveyembedding\/assets\/webfonts\/fa-regular-400.ttf https:\/\/v.kcmg.nl\/surveyembedding\/assets\/webfonts\/fa-regular-400.svg https:\/\/v.kcmg.nl\/surveyembedding\/assets\/webfonts\/fa-brands-400.eot https:\/\/v.kcmg.nl\/surveyembedding\/assets\/webfonts\/Radnika-Medium.otf https:\/\/v.kcmg.nl\/surveyembedding\/assets\/webfonts\/fa-solid-900.svg https:\/\/v.kcmg.nl\/surveyembedding\/assets\/webfonts\/fa-solid-900.woff2 https:\/\/v.kcmg.nl\/surveyembedding\/assets\/webfonts\/fa-regular-400.woff2 https:\/\/v.kcmg.nl\/surveyembedding\/assets\/webfonts\/fa-solid-900.eot https:\/\/v.kcmg.nl\/surveyembedding\/assets\/webfonts\/fa-solid-900.ttf https:\/\/v.kcmg.nl\/surveyembedding\/assets\/webfonts\/fa-brands-400.woff2 https:\/\/v.kcmg.nl *.v.kcmg.nl https:\/\/openstad-cdn.nl https:\/\/cdn.faceworks.nl data: https:\/\/cdn-eu.readspeaker.com; script-src-elem 'self' 'nonce-AEEkccS4_WaLBH4_z8LsjENbatzQz9BCpVZxdVE9Lapj7DKaGq4pHQ' https:\/\/stats.utrecht.nl https:\/\/formulieren.digitaal.utrecht.nl https:\/\/virtuele-gemeente-assistent.nl https:\/\/siteimproveanalytics.com https:\/\/e.infogram.com https:\/\/infogram.com 'strict-dynamic' https: 'unsafe-eval' blob: https:\/\/www.utrecht.nl https:\/\/formulieren.digitaal.utrecht.nl\/static\/sdk\/open-forms-sdk.js *.virtuele-gemeente-assistent.nl https:\/\/www.utrecht.nl\/templates\/js\/wijkvoorkeuren-wijzigen.js https:\/\/www.utrecht.nl\/templates\/js\/eventtracking.js *.www.utrecht.nl https:\/\/www.utrecht.nl\/fileadmin\/open-forms.js https:\/\/virtuele-gemeente-assistent.nl\/static\/js\/widget.js *.formulieren.digitaal.utrecht.nl https:\/\/www.utrecht.nl.internal https:\/\/accept.utrecht.typocloud.nl data: https:\/\/cdn-eu.readspeaker.com formulieren.digitaal.utrecht.nl stats.utrecht.nl https:\/\/viewer.kcmg.nl 'report-sample'; worker-src 'self' 'nonce-AEEkccS4_WaLBH4_z8LsjENbatzQz9BCpVZxdVE9Lapj7DKaGq4pHQ' blob:; style-src none blob: data: gap: 'self' *.obi4wan.com *.readspeaker.com https:\/\/www.utrecht.nl https:\/\/www.utrecht.nl.internal https:\/\/accept.utrecht.typocloud.nl https:\/\/redactie-acceptatie.utrecht.nl https:\/\/virtuele-gemeente-assistent.nl https:\/\/mijn.virtuele-gemeente-assistent.nl https:\/\/cdn-eu.readspeaker.com formulieren.digitaal.utrecht.nl 'report-sample'; form-action 'self' https:\/\/action.spike.email https:\/\/app-eu.readspeaker.com; media-src none blob: data: gap: https:\/\/app-eu.readspeaker.com https:\/\/cdn-eu.readspeaker.com https:\/\/vttts-eu.readspeaker.com; object-src none; report-uri https:\/\/www.utrecht.nl\/@http-reporting?csp=report&requestTime=1788500010251856&requestHash=d6d2b6e84529c4e35778dd4d2b3a802cc19f9f2a","count":1},{"content-security-policy-report-only":" frame-ancestors 'self' https:\/\/www.nwcg.gov","count":1},{"content-security-policy-report-only":" report-uri https:\/\/www.yelp.com\/csp_report_only?id=e77c4949925d392f&page=csp_report_frame_directives%2Cfull_site_ssl_csp_report_directives&policy_hash=41d0c45536d2a082f11d1cd0e00fde7f&site=www&timestamp=1788501038; frame-ancestors 'self' https:\/\/*.yelp.com; default-src https:; img-src https: data: blob:; script-src https: data: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' data:; font-src data: https:; child-src https: yelp-webview:\/\/* yelp:\/\/* data:; object-src 'none'; worker-src blob: https:; base-uri 'self'; form-action https:","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.mziq.com; script-src 'self' https:\/\/*.mziq.com; script-src-elem 'self' https:\/\/*.mziq.com 'sha256-kQ7PZqRD+DW+OLPgGpzeit+ne5Q32Q7r0bNZq\/\/y0Rw=' 'sha256-2L+nOGxRAxUhUjVdJf\/7Wl9Y9CJvuXyNSb7gUk9APMU=' https:\/\/*.googletagmanager.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.tinymce.com https:\/\/*.tiny.cloud; style-src 'self' 'unsafe-inline' https:\/\/*.mziq.com; style-src-elem 'self' 'unsafe-inline' https:\/\/*.mziq.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/*.tinymce.com https:\/\/*.tiny.cloud; font-src 'self' data: https:\/\/*.mziq.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/*.tinymce.com https:\/\/*.tiny.cloud; connect-src 'self' https:\/\/*.mziq.com wss:\/\/*.mziq.com https:\/\/mzai-iq.mzsuite.com https:\/\/*.google.com https:\/\/*.google.com.br https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.g.doubleclick.net https:\/\/*.googletagmanager.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.tinymce.com https:\/\/*.tiny.cloud https:\/\/mz-prd-pub-filemanager-external.s3.us-east-1.amazonaws.com https:\/\/mz-prd-pub-mziq-cdn.s3.us-east-1.amazonaws.com https:\/\/*.browser-intake-datadoghq.com https:\/\/browser-intake-datadoghq.com blob:; img-src 'self' data: polygon: https:\/\/*.mziq.com https:\/\/*.google.com https:\/\/*.google.com.br https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.tinymce.com https:\/\/*.tiny.cloud https:\/\/s3.amazonaws.com\/mz-mailer blob:; object-src 'none'; base-uri 'self'; worker-src blob:; report-uri https:\/\/csp-report.mziq.com\/csp-report; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/ostrava.cz https:\/\/*.ostrava.cz https:\/\/cdn-cookieyes.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googlesyndication.com https:\/\/*.googleadservices.com https:\/\/*.adtrafficquality.google https:\/\/syndicatedsearch.goog https:\/\/se-forms.cz https:\/\/app.smartemailing.cz https:\/\/cdnjs.cloudflare.com; worker-src 'self' blob:; child-src 'self' blob:; style-src 'self' 'unsafe-inline' https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/se-forms.cz https:\/\/app.smartemailing.cz; img-src 'self' data: blob: https:\/\/ostrava.cz https:\/\/*.ostrava.cz https:\/\/*.gstatic.com https:\/\/*.youtube.com https:\/\/*.ytimg.com https:\/\/cdn-cookieyes.com https:\/\/*.cookieyes.com https:\/\/tile.openstreetmap.org https:\/\/*.tile.openstreetmap.org https:\/\/*.google.com https:\/\/*.googlesyndication.com https:\/\/*.adtrafficquality.google https:\/\/syndicatedsearch.goog https:\/\/ovm.bezstavy.cz; font-src 'self' data:; connect-src 'self' blob: https:\/\/ostrava.cz https:\/\/*.ostrava.cz https:\/\/cdn-cookieyes.com https:\/\/*.cookieyes.com https:\/\/*.google.com https:\/\/*.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/*.adtrafficquality.google https:\/\/syndicatedsearch.goog https:\/\/se-forms.cz https:\/\/app.smartemailing.cz; frame-src 'self' https:\/\/*.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/*.arcgis.com https:\/\/ostrava.cz https:\/\/*.ostrava.cz https:\/\/cityvizor.cz https:\/\/api.602.cz https:\/\/*.google.com https:\/\/*.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/*.adtrafficquality.google https:\/\/syndicatedsearch.goog; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/*.google.com; frame-ancestors 'self' https:\/\/ostrava.cz https:\/\/*.ostrava.cz https:\/\/digitalninosice.cz https:\/\/www.digitalninosice.cz","count":1},{"content-security-policy-report-only":" worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com *.googleapis.com https:\/\/www.gstatic.com maxcdn.bootstrapcdn.com https:\/\/fonts.gstatic.com https:\/\/widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com https:\/\/*.contentsquare.net https:\/\/*.contentsquare.com https:\/\/analytics.tiktok.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * https:\/\/images.unsplash.com *.googleapis.com https:\/\/*.gstatic.com https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/*.contentsquare.net https:\/\/*.contentsquare.com https:\/\/www.google.nl https:\/\/www.google.de https:\/\/bat.bing.com https:\/\/match.sharethrough.com https:\/\/cm.g.doubleclick.net https:\/\/criteo-partners.tremorhub.com https:\/\/x.bidswitch.net https:\/\/ib.adnxs.com https:\/\/rtb-csync.smartadserver.com https:\/\/sync-t1.taboola.com https:\/\/visitor.omnitagjs.com https:\/\/r.casalemedia.com https:\/\/gum.criteo.com https:\/\/id5-sync.com https:\/\/ad.360yield.com https:\/\/matching.ivitrack.com https:\/\/contextual.media.net https:\/\/ad.yieldlab.net https:\/\/ps.eyeota.net https:\/\/exchange.mediavine.com https:\/\/jadserve.postrelease.com https:\/\/sync.outbrain.com https:\/\/simage2.pubmatic.com https:\/\/pixel.rubiconproject.com https:\/\/criteo-sync.teads.tv https:\/\/eb2.3lift.com https:\/\/sync-criteo.ads.yieldmo.com https:\/\/e1.emxdgt.com https:\/\/dis.criteo.com https:\/\/sync.1rx.io https:\/\/analytics.tiktok.com https:\/\/*.reskyt.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https:\/\/rum.hlx.page https:\/\/cdn.jsdelivr.net\/npm\/@ryangjchandler\/spruce@2.x.x\/dist\/spruce.umd.js *.googleapis.com https:\/\/*.gstatic.com https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com t.contentsquare.net static.hotjar.com https:\/\/*.contentsquare.net https:\/\/app.contentsquare.com https:\/\/*.cookiefirst.com https:\/\/*.noibu.com https:\/\/cdn-4.convertexperiments.com https:\/\/s.pinimg.com https:\/\/static.criteo.net https:\/\/www.dwin1.com https:\/\/bat.bing.com https:\/\/ct.pinterest.com https:\/\/cdn.watchtower.graindata.com https:\/\/script.hotjar.com https:\/\/lantern.roeyecdn.com https:\/\/sslwidget.criteo.com https:\/\/cdn.segmentify.com https:\/\/*.prenatal.nl https:\/\/analytics.tiktok.com https:\/\/*.reskyt.com https:\/\/app.aiden.cx https:\/\/ar-view-zieny.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app maxcdn.bootstrapcdn.com https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com assets.braintreegateway.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com https:\/\/*.cookiefirst.com https:\/\/cdn.segmentify.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * *.googleapis.com https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site https:\/\/*.contentsquare.net https:\/\/*.contentsquare.com https:\/\/pagead2.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/*.cookiefirst.com https:\/\/pipeline.prenatal.nl https:\/\/region1.google-analytics.com https:\/\/www.google.nl https:\/\/ct.pinterest.com https:\/\/measurement-api.criteo.com https:\/\/vc.hotjar.io https:\/\/gandalf-eu.segmentify.com https:\/\/*.convertexperiments.com https:\/\/*.noibu.com wss:\/\/*.noibu.com https:\/\/analytics.tiktok.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com blob: http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https:\/\/fonts.gstatic.com https:\/\/ws.colissimo.fr *.fontawesome.com maxcdn.bootstrapcdn.com https:\/\/assets-staging.oney.io https:\/\/assets.oney.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com https:\/\/plumrocket.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.dotdigital-pages.com *.dotdigital.com https:\/\/www.youtube.com https:\/\/form.typeform.com *.criteo.com *.hotjar.com *.facebook.com *.simply-jobs.fr https:\/\/plumrocket.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.bird.eu *.trackedlink.net *.ddlnk.net https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/ws.colissimo.fr https:\/\/*.tile.openstreetmap.fr https:\/\/*.onyourmap.com https:\/\/google.fr magefan.com cm.magefan.com *.disqus.com *.thebrighttag.com *.avis-verifies.com *.adform.net id5-sync.com *.liadm.com *.google.com *.google.fr *.kameleoon.eu *.nr-data.net *.metaffiliation.com *.facebook.com *.d-bi.fr *.adnxs.com *.omnitagjs.com *.casalemedia.com *.dmxleo.com *.360yield.com *.criteo.com *.media.net *.mediavine.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.sharethrough.com *.smaato.net *.smartadserver.com *.taboola.com *.teads.tv *.3lift.com *.advertising.com *.yahoo.com *.yieldlab.net *.yieldmo.com *.rlcdn.com *.smartclip.net *.tremorhub.com *.twiago.com *.krxd.net *.bing.com *.bidswitch.net *.doubleclick.net *.googletagmanager.com *.googleapis.com *.monnaiedeparis.fr blob: www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/widget-stg.oney.io https:\/\/assets-staging.oney.io https:\/\/assets.oney.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-ds.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal https:\/\/maps.googleapis.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/ws.colissimo.fr https:\/\/api.mapbox.com https:\/\/*.typeform.com *.disqus.com *.kameleoon.eu *.google.fr *.facebook.net *.d-bi.fr *.hotjar.com *.serving-sys.com *.criteo.com *.criteo.net *.monnaiedeparis.fr *.metaffiliation.com *.eulerian.net *.doubleclick.net *.bing.com *.soundclound.com *.soundcloud.com *.piwik.pro *.gstatic.com *.clarity.ms ipinfo.io *.addtoany.com maps.googleapis.com api.mapbox.com ws.colissimo.fr *.googletagmanager.com *.m1by1.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https:\/\/widgets.rr.skeepers.io\/ https:\/\/api-product-reviews.cxr.skeepers.io\/ https:\/\/cl-ppr.rr.skeepers.io\/ https:\/\/cl-pbr.cxr.skeepers.io\/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/assets-staging.oney.io https:\/\/assets.oney.io https:\/\/www.monnaiedeparis.fr 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/fonts.googleapis.com https:\/\/ws.colissimo.fr https:\/\/api.mapbox.com https:\/\/*.typeform.com *.fontawesome.com *.googleapis.com *.addtoany.com 'self' data: *.typekit.net maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com qa-api.magedevteam.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https:\/\/ws.colissimo.fr https:\/\/maps.googleapis.com https:\/\/nominatim.openstreetmap.org https:\/\/*.onyourmap.com https:\/\/*.mapbox.com http:\/\/dpm.demdex.net *.google-analytics.com *.g.doubleclick.net *.kameleoon.eu *.google.fr *.hotjar.com *.serving-sys.com *.criteo.com *.criteo.net *.monnaiedeparis.fr *.metaffiliation.com *.eulerian.net *.piwik.pro * payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https:\/\/widgets.rr.skeepers.io\/ https:\/\/api-product-reviews.cxr.skeepers.io\/ https:\/\/cl-ppr.rr.skeepers.io\/ https:\/\/cl-pbr.cxr.skeepers.io\/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/widget-stg.oney.io https:\/\/oney.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/fonts.googleapis.com; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action *.googlesyndication.com *.clarity.ms *.google.com *.facebook.com  'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ bid.g.doubleclick.net *.youtube-nocookie.com www.google.com *.tbibank.ro consentcdn.cookiebot.com *.google.ro *.facebook.com *.weltpixel.com  https:\/\/*.sameday.ro *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com https:\/\/images.unsplash.com *.tbicp.com *.tbibank.ro imgsct.cookiebot.com *.google.ro *.clarity.ms *.bing.com https:\/\/a.tile.openstreetmap.org https:\/\/b.tile.openstreetmap.org https:\/\/c.tile.openstreetmap.org https:\/\/www.selfawb.ro t.themarketer.com cdn1.themarketer.com https:\/\/firebasestorage.googleapis.com flagpedia.net *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ https:\/\/maps.googleapis.com *.tbicp.com *.tbibank.ro consentcdn.cookiebot.com *.cookiebot.com *.google.ro *.clarity.ms *.aqurate.ai *.themarketer.com t.themarketer.com cdn1.themarketer.com *.avada.io https:\/\/*.sameday.ro *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.google.ro *.fontawesome.com t.themarketer.com cdn1.themarketer.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com https:\/\/*.sameday.ro *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.google.ro *.google.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com consentcdn.cookiebot.com *.googlesyndication.com *.clarity.ms *.google.com google.com *.facebook.com *.aqurate.ai *.themarketer.com https:\/\/ecommerce.fancourier.ro https:\/\/nominatim.openstreetmap.org https:\/\/api.fancourier.ro t.themarketer.com cdn1.themarketer.com https:\/\/get.geojs.io *.avada.io www.gstatic.com  *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/251703a9-46ab-4e4f-ab25-1de6ee452399.sansec.watch\/; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src blob: https:\/\/*.mhcache.com;font-src 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com https:\/\/fonts.gstatic.com;frame-src 'self' https:\/\/*.mhcache.com https:\/\/portal.allyable.com https:\/\/mh-site-files-5c53d6a9947c.s3.amazonaws.com https:\/\/myheritage-container.com https:\/\/www.myheritage-partners.com https:\/\/www.myheritage.com https:\/\/*.mk-sense.com https:\/\/player.vimeo.com https:\/\/*.facebook.com https:\/\/*.google.com https:\/\/tpc.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/accounts.google.com\/gsi\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/recaptcha.google.com\/recaptcha\/  https:\/\/widget.trustpilot.com;script-src https:\/\/accounts.google.com\/gsi\/client https:\/\/www.datadoghq-browser-agent.com https:\/\/appleid.cdn-apple.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/maps.googleapis.com *.myheritage.nl https:\/\/www.myheritage.nl  'unsafe-eval' 'nonce-70362743cf27748a158e3792b2cd5795' 'strict-dynamic' https:\/\/widget.trustpilot.com https:\/\/invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com https:\/\/fonts.googleapis.com https:\/\/accounts.google.com\/gsi\/style  https:\/\/widget.trustpilot.com;connect-src data: 'self' https:\/\/*.myheritage.com https:\/\/portal.allyable.com https:\/\/*.mhcache.com https:\/\/adservice.google.com https:\/\/*.logs.datadoghq.com https:\/\/*.browser-intake-datadoghq.com https:\/\/browser-intake-datadoghq.com https:\/\/sentry.io https:\/\/*.bing.com https:\/\/*.facebook.com https:\/\/*.doubleclick.net https:\/\/*.mk-sense.com https:\/\/*.filae.com https:\/\/accounts.google.com\/gsi\/ https:\/\/www.google.com\/pagead\/landing https:\/\/maps.googleapis.com\/maps\/api\/mapsjs\/gen_204 https:\/\/translate.googleapis.com https:\/\/www.google.com\/ccm\/collect https:\/\/cdn.builder.io https:\/\/www.google.com\/recaptcha\/enterprise\/* https:\/\/www.google.com\/recaptcha\/enterprise\/ https:\/\/www.google.com\/recaptcha\/enterprise\/clr https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com https:\/\/people.googleapis.com https:\/\/translate-pa.googleapis.com *.myheritage.nl https:\/\/widget.trustpilot.com;media-src 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com;frame-ancestors 'self' https:\/\/builder.io;img-src * data:  https:\/\/widget.trustpilot.com https:\/\/*.trustpilot.com;object-src 'none';base-uri 'self' https:\/\/*.mhcache.com;report-uri \/FP\/API\/ContentSecurityPolicy\/report-violation.php?report_mode=report&canonical_page_id=\/company\/home\/","count":1},{"content-security-policy-report-only":" font-src *.googleapis.com *.gstatic.com data: 'self' data: *.doubleclick.net *.facebook.com *.alicdn.com *.cloudflare.com *.faceworks.nl *.font.im ncspublicasset.s3.eu-west-3.amazonaws.com *.typekit.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action *.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https:\/\/pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com *.sharethis.com www.google.com *.google.com *.doubleclick.net *.facebook.com *.multisafepay.com https:\/\/pay.google.com www.paypal.com www.sandbox.paypal.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.xtento.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.sharethis.com *.gstatic.com *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.multisafepay.com www.paypal.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.xtento.com cdn.xtento.com *.alicdn.com *.bing.com *.bing.net *.cookiebot.com europe-west1-maxlead-dwh-test.cloudfunctions.net *.googleadservices.com *.google-analytics.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt google.com *.googlesyndication.com *.licdn.com *.linkedin.com *.magento.cloud *.mailplus.nl s3.amazonaws.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.sharethis.com *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.multisafepay.com https:\/\/pay.google.com m17.mailplus.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com www.xtento.com cdn.xtento.com 9292.nl *.bing.com *.clarity.ms *.cloudflare.com *.cookiebot.com *.cookiebot.eu *.googleadservices.com *.googlesyndication.com *.hotjar.com *.ipify.org *.licdn.com *.mailplus.nl *.marker.io *.oribi.io *.pinimg.com *.pinterest.com *.thinglink.me *.vimeo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com *.sharethis.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.multisafepay.com unsafe-inline assets.braintreegateway.com *.mailplus.nl *.typekit.net *.vimeocdn.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.gstatic.com *.vimeocdn.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.sharethis.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.multisafepay.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com t.elasticsuite.io 9292.nl *.alicdn.com *.bing.com *.bing.net *.clarity.ms *.cookiebot.com *.cookiebot.eu *.doubleclick.net *.googleadservices.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.bs www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.se www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.tg www.google.tn www.google.tt *.googlesyndication.com *.gstatic.com *.hotjar.com *.hotjar.io *.ipify.org *.jquery.com *.licdn.com *.linkedin.com *.marker.io *.pinterest.com s3.ap-east-1.amazonaws.com s3.eu-west-1.amazonaws.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/95b39a76-7377-449c-a715-7f75d8431eb4.sansec.watch\/; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'sha256-KRBprNr4DWO3\/FHh5dcOtrQXcvjR7p1hkC3JJk3PZSo=' 'sha256-\/q35rpf\/AVJadvqDcbPcbMT4vH9XjOl0hW64u6uLvFY=' 'sha256-NMJ76hPpLBjvSbjqdmE9l+O7whlqwrkzrP4CHU5uedk=' 'sha256-alw6ukPmer0umdTpJo4qo91sjHzeAcWjroXN11MKHXA=' 'sha256-pvdnVs0cU7XwQPSzVwnUK5+DS9vwHTyfbHhlFMUT95g=' 'sha256-BaWtKTtJv38JC9y9FzlPS3jW0rVjM8k58br2sS711RY=' 'sha256-LOt4egTxbgB3FWTl2vL3IumdjygU0V+4SXY+TboFF3s=' 'sha256-FYXDsSTuKIc603efXJdVDc3S5bxjK6\/djpW30DROdoM=' 'sha256-rOy92FMzNqpHMIRJuffM\/qsIrMrZ5DSEhUsbuZHrKj0=' 'sha256-GvmdLyo+2VsblVYXQ6mSOUlE+FbP5iROpw6rsC6F14w=' 'sha256-04thO+ixvtlZU2w5i6oPk3eppRrDNomHxe7ZA6iNwwQ=' 'sha256-XzFiuvYA21TiTBoKt2Hqobb73cFUAAZsHRnXL94wW5E=' 'sha256-m1XKIkE3Zgdm8PEepQa7dcCos\/k9TTAfd46byya7KHg=' 'sha256-sJo1Kmpj+6L+aTwFYqB4yRAHCFGITUB8yECp8ZYc2X4=' 'sha256-cOUD21qB4yOI1mF9pWywWKUq3fZ7hpgyf7pVtuzd+7M=' 'sha256-IPsnT+QK3vDhzp7Jv++SDjVONbjZ7Kn36ZibWCdw87Y=' 'sha256-FKMQLMl2DLwfNeEGS6V57FBigJbFWnKqNz5zYj\/818Y=' 'sha256-+SIVQ6J4UAx\/inNMclVnbOupJMhIL56dJkBkmgp0AQc=' 'sha256-bXGjGHrjaTk56pkDfdhztoMDfKh3wYzk88T2aYe5cq4=' 'sha256-3pNrD4TR6kso+E2s7XDZDzqc8NiWxIObbSYHVxSP8zk=' 'sha256-5Lx4WpcGPOFUSUo\/DLhl4nkxLc4h3N2bCRORmpc2uPY=' 'sha256-R0ACV71YraXfq6TM2HFsTNTGWjQmNthUPPWEymRCRlc=' 'sha256-yJWxx+rwT+UkeaHJ0YokdJdtvhIWtLCg7upihytAMUg=' 'sha256-yAN93zyQ0nA7bJ4x2eW67E7jolnMVsR8voaOWMikKGk=' 'sha256-vzrEa408Gicpbh0oFH3agfx+A0Fi9WHIbQtmc\/D\/QfY=' 'sha256-5MoEQwF0N21nfEGYWtyinb+e3sjfrGTGRHXNMC1IE4w=' 'sha256-x+zW2zEbt58KCESttT0N1tQziOZrqGu8op7tizMbGvQ=' 'sha256-z8anABVqjPet\/N7pCzHrUU\/3k3oklaK9kO0Gqsc2ZpE=' 'sha256-AiLbK3MVwIqil5ZFsU2J0ncs+2jOLn0ZUtmeH2gy7nM=' 'wasm-unsafe-eval' static.cloudflareinsights.com *.googletagmanager.com monsido-consent.com moderate.cleantalk.org heatmaps.monsido.com app-script.monsido.com fd.cleantalk.org; object-src 'none'; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com; img-src 'self' data: tracking.monsido.com;; media-src 'self'; frame-src 'self' *.vidyard.com *.youtube.com www.google.com *.supersaas.com *.matterport.com *.podbean.com; frame-ancestors 'self'; child-src 'self' blob:; font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com data:; connect-src 'self' *.googletagmanager.com *.google-analytics.com analytics.google.com *.google.com *.vidyard.com *.eloqua.com monsido-consent.com *.monsido-consent.com *.monsido.com script.crazyegg.com tracking.crazyegg.com use.typekit.net kit.fontawesome.com ka-p.fontawesome.com *.jwpsrv.com *.jwplayer.com *.searchstax.com stats.g.doubleclick.net fd-api.cleantalk.org; report-uri \/report-csp-violation","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' *.gardners.com;         script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' *.gardners.com\/ js.braintreegateway.com\/ *.cardinalcommerce.com\/ *.gardners.com\/scripts\/jquery-3.7.1.min.js *.google-analytics.com\/ www.googletagmanager.com\/ api.os.uk api.whichosmap.co.uk\/ code.jquery.com\/* maps-api-ssl.google.com\/ songbird.cardinalcommerce.com\/ whichosmap.co.uk\/ www.gstatic.com\/ rum-static.pingdom.net\/ kg668dbov0.execute-api.us-east-1.amazonaws.com\/ *.cardinaltrusted.com\/ code.jquery.com\/jquery-migrate-3.5.2.min.js *.csidetm.com s3.amazonaws.com\/downloads.mailchimp.com\/js\/ c.paypal.com\/;  style-src 'report-sample' 'self' 'unsafe-inline' *.gardners.com *.braintreegateway.com *.cardinalcommerce.com *.googleapis.com api.os.uk api.whichosmap.co.uk assets.braintreegateway.com stackpath.bootstrapcdn.com whichosmap.co.uk cdn-images.mailchimp.com;  object-src 'none';  base-uri 'self';  connect-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.gardners.com *.braintree-api.com *.braintreegateway.com *.cardinalcommerce.com www.googletagmanager.com *.google-analytics.com api.braintreegateway.com api2.smartrecruitonline.com client-analytics.braintreegateway.com maps.googleapis.com translate.googleapis.com *.cardinaltrusted.com rum-collector-2.pingdom.net www.paypal.com www.paypalobjects.com pay.google.com https:\/\/pay.google.com https:\/\/pay.google.com\/about\/redirect\/ https:\/\/google.com\/pay api.whichosmap.co.uk kg668dbov0.execute-api.us-east-1.amazonaws.com *.csidetm.com;  font-src 'report-sample' 'self' 'unsafe-inline' data: *.braintreegateway.com *.cardinalcommerce.com *.googleapis.com api.os.uk api.whichosmap.co.uk fonts.gstatic.com stackpath.bootstrapcdn.com *.paypal.com cdn.jsdelivr.net fonts.cdnfonts.com;  frame-src 'report-sample' 'self' *.cardinalcommerce.com www.rsa3dsauth.co.uk *.arcot.com channel-cards-html.lloydsbankinggroup.com verify.monzo.com 3dsecure.starlingbank.com acs.revolut.com acs-challenge.apata.io *.paypal.com api.whichosmap.co.uk assets.braintreegateway.com whichosmap.co.uk www.googletagmanager.com www.youtube.com;  img-src 'report-sample' 'self' blob: data: https: *.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.paypal.com *.youtube.com\/ api.os.uk api.whichosmap.co.uk assets.braintreegateway.com jackets.dmmserver.com maps-api-ssl.google.com maps.gstatic.com www.googletagmanager.com;  manifest-src 'self';  media-src 'self';  worker-src 'self' *.csidetm.com;  report-uri https:\/\/67917890e3f085153460661d.endpoint.csper.io?v=13;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/cdn.jsdelivr.net https:\/\/www.googletagmanager.com https:\/\/unpkg.com; style-src 'self' https:\/\/fonts.googleapis.com; img-src 'self' data:; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self'; frame-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests;","count":1},{"content-security-policy-report-only":" default-src 'self' data: *.facebook.com *.google.com.au *.tpc.googlesyndication.com *.stats.g.doubleclick.net *.google.co.in *.tgtag.io *.youtube.com *.abtasty.com *.gstatic.com *.googleapis.com *.amazonaws.com *.powerfront.com *.exacttarget.com *.adimo.co *.adimouat.co *.amazonaws.com *.formstack.com *.clarity.ms *.bing.com *.adswizz.com *.spotify.com *.googletagmanager.com *.adnxs.com *.aidemsrv.com *.criteo.com *.pinimg.com *.omguk.com *.abtasty.com *.bing.com *.cellardoor.co *.clarity.ms *.cquotient.com *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.force.com *.fouanalytics.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.igodigital.com *.linkedin.com *.omneo.io *.penfolds.cn *.penfolds.com *.salesforce.com *.salesforceliveagent.com *.spotify.com *.subscribepro.com *.tealiumiq.com *.tiqcdn.com *.vimeocdn.com *.wolfblass.com *.pinterest.com *.linkedin.com *.licdn.com *.smartadserver.com analytics.tiktok.com *.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com; script-src 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' *.site.com *.flippingbook.com *.criteo.net *.cquotient.com *.adyen.com *.doubleclick.net *.hotjar.com *.google.com *.googleapis.com *.google-analytics.com *.googleadservices.com *.gstatic.com *.paypal.com *.paypalobjects.com *.facebook.net *.googletagmanager.com *.datatoolscloud.net.au *.igodigital.com *.salesforceliveagent.com *.serving-sys.com *.force.com *.tiqcdn.com *.rezdy.com *.polyfill.io *.cloudflare.com *.subscribepro.com *.dwin1.com *.criteo.com *.adnxs.com *.salesforce.com *.wayin.com *.typekit.net *.ooyala.com *.licdn.com *.getwisp.co *.omneo.io *.vimeo.com *.formstack.com *.thefork.com.au *.resy.com *.tealiumiq.com *.yimg.com *.go2cloud.org *.adobe.com *.cloudfront.net *.sc-static.net sc-static.net *.adsrvr.org *.googleoptimize.com *.googleanalytics.com *.bing.com *.facebook.com *.google.com.au *.tpc.googlesyndication.com *.stats.g.doubleclick.net *.google.co.in *.onelink-edge.com *.inside-graph.com *.fouanalytics.com *.tgtag.io *.youtube.com *.byspotify.com *.abtasty.com *.tryzens.com *.powerfront.com *.exacttarget.com blob: *.adimo.co *.adimouat.co *.amazonaws.com *.clarity.ms *.bing.com *.adswizz.com *.spotify.com *.aidemsrv.com *.pinimg.com *.omguk.com commerceops.tryzens-analytics.com *.abtasty.com *.bing.com *.cellardoor.co *.clarity.ms *.cquotient.com *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.force.com *.fouanalytics.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.igodigital.com *.linkedin.com *.omneo.io *.penfolds.cn *.penfolds.com *.salesforce.com *.salesforceliveagent.com *.spotify.com *.subscribepro.com *.tealiumiq.com *.tiqcdn.com *.vimeocdn.com *.wolfblass.com *.pinterest.com *.linkedin.com *.licdn.com *.smartadserver.com *.dyntrk.com unpkg.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.site.com d.ratepay.com *.ratepay.com analytics.tiktok.com *.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com *.cloudflareinsights.com s.yimg.com d.yimg.com; style-src 'self' data: 'unsafe-inline' 'unsafe-hashes' *.site.com *.adyen.com *.googleapis.com *.force.com *.omneo.io *.subscribepro.com *.datatoolscloud.net.au *.salesforceliveagent.com *.ooyala.com *.formstack.com *.thefork.com.au *.go2cloud.org *.sc-static.net *.google.com *.google-analytics.com *.bing.com *.facebook.com *.google.com.au *.tpc.googlesyndication.com *.stats.g.doubleclick.net *.google.co.in *.inside-graph.com *.fouanalytics.com *.tgtag.io *.youtube.com *.byspotify.com *.abtasty.com *.gstatic.com *.powerfront.com *.exacttarget.com *.adimo.co *.adimouat.co *.amazonaws.com *.clarity.ms *.adswizz.com *.spotify.com *.googletagmanager.com *.adnxs.com *.aidemsrv.com *.criteo.com *.pinimg.com *.omguk.com *.abtasty.com *.bing.com *.cellardoor.co *.clarity.ms *.cquotient.com *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.force.com *.fouanalytics.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.igodigital.com *.linkedin.com *.omneo.io *.penfolds.cn *.penfolds.com *.salesforce.com *.salesforceliveagent.com *.spotify.com *.subscribepro.com *.tealiumiq.com *.tiqcdn.com *.vimeocdn.com *.wolfblass.com *.pinterest.com *.linkedin.com *.licdn.com *.smartadserver.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.site.com analytics.tiktok.com *.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com; img-src 'self' data: *.penfolds.com *.site.com *.cloudfront.net *.flippingbook.com *.adyen.com *.doubleclick.net *.facebook.com *.adform.net *.mediavine.com *.postrelease.com *.360yield.com *.twiago.com *.adscale.de *.1rx.io *.meba.kr *.rubiconproject.com *.aralego.com *.daum.net *.adsrvr.org *.dotomi.com *.contextweb.com *.admixer.co.kr *.adsymptotic.com *.smrtb.com *.bnmla.com *.tpmn.co.kr *.zemanta.com *.stackadapt.com *.kakao.com *.toast.com *.outbrain.com *.addthis.com *.gstatic.com *.google-analytics.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.bidswitch.net *.salesforce.com *.googletagmanager.com *.googleapis.com *.paypal.com *.mookie1.com *.igodigital.com *.adnxs.com *.googleadservices.com *.zenaps.com *.placeholder.com *.facebook.net *.3lift.com *.ad-stir.com *.adtdp.com *.advertising.com *.bing.com *.casalemedia.com *.clmbtech.com *.criteo.com *.dmxleo.com *.ivitrack.com *.mgid.com *.omnitagjs.com *.pubmatic.com *.rlcdn.com *.sharethrough.com *.smartadserver.com *.socdm.com *.stickyadstv.com *.taboola.com *.tapad.com *.yahoo.com *.yieldmo.com *.dable.io *.adingo.jp *.gssprt.jp *.microad.jp *.demandware.net *.media.net *.openx.net *.smaato.net *.smartclip.net *.yieldlab.net *.teads.tv *.ants.vn *.adswizz.com *.serving-sys.com *.unsplash.com *.typekit.net *.linkedin.com *.vimeocdn.com *.hotjar.com *.mathtag.com *.tealiumiq.com *.yimg.com *.go2cloud.org *.tpc.googlesyndication.com *.stats.g.doubleclick.net *.inside-graph.com *.fouanalytics.com *.tgtag.io *.youtube.com *.abtasty.com *.amazonaws.com *.powerfront.com *.exacttarget.com blob: *.adimo.co *.adimouat.co *.amazonaws.com *.formstack.com *.clarity.ms *.bing.com *.spotify.com *.aidemsrv.com *.pinimg.com *.omguk.com *.cquotient.com *.abtasty.com *.bing.com *.cellardoor.co *.clarity.ms *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.force.com *.fouanalytics.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.igodigital.com *.linkedin.com *.omneo.io *.penfolds.cn *.penfolds.com *.salesforce.com *.salesforceliveagent.com *.spotify.com *.subscribepro.com *.tealiumiq.com *.tiqcdn.com *.vimeocdn.com *.wolfblass.com *.pinterest.com *.linkedin.com *.licdn.com *.smartadserver.com *.dyntrk.com cdn.n.dynstc.com analytics.tiktok.com *.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com sp.analytics.yahoo.com geo.yahoo.com s.yimg.com d.yimg.com; font-src 'self' data: *.site.com *.sfdcstatic.com *.gstatic.com *.typekit.net *.hotjar.com *.ooyala.com *.formstack.com *.go2cloud.org *.inside-graph.com *.fouanalytics.com *.byspotify.com *.abtasty.com *.googleapis.com *.powerfront.com *.exacttarget.com blob: *.adimo.co *.adimouat.co *.amazonaws.com *.clarity.ms *.bing.com *.adswizz.com *.spotify.com *.googletagmanager.com *.adnxs.com *.aidemsrv.com *.facebook.com *.criteo.com *.pinimg.com *.omguk.com *.abtasty.com *.bing.com *.cellardoor.co *.clarity.ms *.cquotient.com *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.force.com *.fouanalytics.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.igodigital.com *.linkedin.com *.omneo.io *.penfolds.cn *.penfolds.com *.salesforce.com *.salesforceliveagent.com *.spotify.com *.subscribepro.com *.tealiumiq.com *.tiqcdn.com *.vimeocdn.com *.wolfblass.com; connect-src 'self' *.site.com *.analytics.google.com analytics.google.com *.flippingbook.com *.hotjar.com *.hotjar.io *.serving-sys.com *.paypal.com *.tryzens-analytics.com:12280 *.tryzens-analytics.com:12443 *.google-analytics.com *.googleapis.com *.tealiumiq.com *.facebook.net *.demandware.net *.ooyala.com *.getomneo.com *.force.com wss: *.yimg.com *.adobe.io *.snapchat.com *.onelink-edge.com *.inside-graph.com *.fouanalytics.com *.youtube.com *.byspotify.com *.abtasty.com https:\/\/google.com *.google.com *.adyen.com *.powerfront.com *.exacttarget.com *.adimo.co *.adimouat.co *.amazonaws.com *.formstack.com *.clarity.ms *.bing.com *.adswizz.com *.spotify.com *.googletagmanager.com *.adnxs.com *.aidemsrv.com *.facebook.com *.criteo.com *.pinimg.com *.omguk.com *.cquotient.com *.abtasty.com *.bing.com *.cellardoor.co *.clarity.ms *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.force.com *.fouanalytics.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.igodigital.com *.linkedin.com *.omneo.io *.penfolds.cn *.penfolds.com *.salesforce.com *.salesforceliveagent.com *.spotify.com *.subscribepro.com *.tealiumiq.com *.tiqcdn.com *.vimeocdn.com *.wolfblass.com *.pinterest.com *.linkedin.com *.licdn.com *.smartadserver.com commerceops.tryzens-analytics.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.site.com analytics.tiktok.com *.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com *.google.co.in sp.analytics.yahoo.com geo.yahoo.com dataxoline.yahoo.com aaca.yahooinc.com batch.datax.yahoo.com; frame-src 'self' bytedance: sslocal: *.adsrvr.org *.vintagejournal.co *.doubleclick.net *.paypalobjects.com *.adyen.com *.hotjar.com *.facebook.com *.criteo.net *.paypal.com *.google.com *.force.com *.rezdy.com *.matterport.com *.criteo.com *.vimeo.com *.wayin.com *.typekit.net *.ooyala.com *.snazzymaps.com https:\/\/snazzymaps.com *.spotify.com *.exacttarget.com *.sfmc-content.com *.thefork.com.au *.lafourchette.com *.resy.com vimeo.com *.serving-sys.com *.flipsnack.com *.adobe.com *.opinionstage.com *.cloudfront.net *.penfolds.com *.snapchat.com *.bing.com *.inside-graph.com *.fouanalytics.com *.youtube.com *.byspotify.com *.abtasty.com *.gstatic.com *.googleapis.com *.amazonaws.com *.powerfront.com *.exacttarget.com *.adimo.co *.adimouat.co *.amazonaws.com *.formstack.com *.clarity.ms *.adswizz.com *.spotify.com *.googletagmanager.com *.adnxs.com *.aidemsrv.com *.pinimg.com *.omguk.com *.abtasty.com *.bing.com *.cellardoor.co *.clarity.ms *.cquotient.com *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.force.com *.fouanalytics.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.igodigital.com *.linkedin.com *.omneo.io *.penfolds.cn *.penfolds.com *.salesforce.com *.salesforceliveagent.com *.spotify.com *.subscribepro.com *.tealiumiq.com *.tiqcdn.com *.vimeocdn.com *.wolfblass.com *.pinterest.com *.linkedin.com *.licdn.com *.smartadserver.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.site.com analytics.tiktok.com *.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com; worker-src 'self' blob: *.datatoolscloud.net.au *.adyen.com *.cloudflare.com *.cquotient.com *.dwin1.com *.force.com *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.igodigital.com *.licdn.com *.paypal.com *.paypalobjects.com *.rezdy.com *.salesforceliveagent.com *.serving-sys.com *.tiqcdn.com *.polyfill.io *.doubleclick.net *.facebook.net 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *.getwisp.co *.criteo.com *.subscribepro.com *.youtube.com *.powerfront.com *.exacttarget.com *.adimo.co *.adimouat.co *.amazonaws.com *.formstack.com *.clarity.ms *.bing.com *.adswizz.com *.spotify.com *.adnxs.com *.aidemsrv.com *.facebook.com *.pinimg.com *.omguk.com *.cquotient.com *.abtasty.com *.bing.com *.cellardoor.co *.clarity.ms *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.force.com *.fouanalytics.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.igodigital.com *.linkedin.com *.omneo.io *.penfolds.cn *.penfolds.com *.salesforce.com *.salesforceliveagent.com *.spotify.com *.subscribepro.com *.tealiumiq.com *.tiqcdn.com *.vimeocdn.com *.wolfblass.com *.pinterest.com *.linkedin.com *.licdn.com *.smartadserver.com; frame-ancestors 'self' data: *.site.com;; report-uri https:\/\/tweau-csp.tryzens-analytics.com;","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.klevu.com *.personalizer.ai data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com *.googlesyndication.com *.constructor.com *.constructor.dev 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.vimeo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.personalizer.ai *.klevu.com *.eplaneta.ha.rs *.eplaneta.rs *.google.hr *.google.rs *.constructor.com *.constructor.dev data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https:\/\/browser.sentry-cdn.com *.klevu.com *.personalizer.ai *.platforma-microservices.loc platforma-microservices.loc *.constructor.com *.constructor.dev 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.klevu.com *.personalizer.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com https:\/\/*.ingest.sentry.io *.personalizer.ai *.zsdevelopment.com *.platforma-microservices.loc platforma-microservices.loc *.remiks.com *.eplaneta.rs *.eplaneta.loc *.google.hr *.google.rs *.constructor.com *.constructor.dev *.cnstrc.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" connect-src 'self' data: https:\/\/www.motonet.fi https:\/\/graphql.datocms.com https:\/\/*.doubleclick.net https:\/\/www.instagram.com https:\/\/*.broman.group https:\/\/*.litix.io https:\/\/vimeo.com https:\/\/*.adyen.com\/checkoutanalytics\/ https:\/\/*.adyen.com\/checkoutshopper\/ https:\/\/api.checkout.uat.walleydev.com\/checkout\/ https:\/\/api.checkout.walleypay.com\/checkout\/ https:\/\/api.postmarkapp.com https:\/\/www.youtube.com https:\/\/api.videoly.co https:\/\/js.testfreaks.com https:\/\/api.testfreaks.com https:\/\/reviews.testfreaks.com https:\/\/policy.app.cookieinformation.com https:\/\/consent.app.cookieinformation.com\/api\/consent https:\/\/api.custobar.com https:\/\/*.google-analytics.com https:\/\/googleads.g.doubleclick.net\/pagead\/viewthroughconversion\/ https:\/\/*.googlesyndication.com https:\/\/*.adform.net https:\/\/*.creativecdn.com https:\/\/connect.facebook.net https:\/\/browser-intake-datadoghq.eu https:\/\/motonet.pbx.fi:883 https:\/\/*.broman.group https:\/\/*.cdn.adyen.com\/checkoutshopper\/ https:\/\/i.ytimg.com https:\/\/www.datocms-assets.com https:\/\/stagingaksapimanagementbroman.azure-api.net https:\/\/testapimanagementbroman.azure-api.net https:\/\/*.googleapis.com https:\/\/*.gstatic.com *.google.com https:\/\/*.ggpht.com https:\/\/*.mux.com https:\/\/*.vimeocdn.com https:\/\/dapi.videoly.co https:\/\/*.facebook.com https:\/\/*.seadform.net https:\/\/*.adform.net https:\/\/*.criteo.net https:\/\/*.criteo.com https:\/\/www.googletagmanager.com\/ https:\/\/ib.adnxs.com\/setuid https:\/\/ib.adnxs.com\/getuid https:\/\/cm.g.doubleclick.net https:\/\/qr.motonet.fi https:\/\/embed.upseller.cloud https:\/\/cm4-production-assets.s3.amazonaws.com\/ https:\/\/general-runtime.voiceflow.com https:\/\/runtime-api.voiceflow.com https:\/\/embed.upseller.cloud https:\/\/upseller-analytics.vercel.app wss:\/\/general-runtime.voiceflow.com wss:\/\/runtime-api.voiceflow.com wss:\/\/embed.upseller.cloud https:\/\/*.googletagmanager.com https:\/\/eu.fw-cdn.com https:\/\/*.freshchat.com\/ https:\/\/src.freshmarketer.eu\/mas https:\/\/ac.cnstrc.com https:\/\/pcs.cnstrc.com; img-src 'self' data: https:\/\/www.datocms-assets.com https:\/\/i.ytimg.com https:\/\/image.mux.com https:\/\/*.broman.group https:\/\/*.cdn.adyen.com\/checkoutshopper\/ https:\/\/i.ytimg.com https:\/\/www.datocms-assets.com https:\/\/stagingaksapimanagementbroman.azure-api.net https:\/\/testapimanagementbroman.azure-api.net https:\/\/*.googleapis.com https:\/\/*.gstatic.com *.google.com https:\/\/*.ggpht.com https:\/\/*.mux.com https:\/\/*.vimeocdn.com https:\/\/dapi.videoly.co https:\/\/*.facebook.com https:\/\/*.seadform.net https:\/\/*.adform.net https:\/\/*.criteo.net https:\/\/*.criteo.com https:\/\/www.googletagmanager.com\/ https:\/\/ib.adnxs.com\/setuid https:\/\/ib.adnxs.com\/getuid https:\/\/cm.g.doubleclick.net https:\/\/qr.motonet.fi https:\/\/embed.upseller.cloud https:\/\/cm4-production-assets.s3.amazonaws.com\/; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/checkout.uat.walleydev.com\/ https:\/\/checkout.walleypay.com\/ https:\/\/*.adyen.com\/ https:\/\/*.vimeo.com https:\/\/app.ecoonline.com https:\/\/www.maston.fi https:\/\/websds.volvo.com https:\/\/policy.app.cookieinformation.com\/ https:\/\/*.criteo.com https:\/\/*.adform.net https:\/\/*.creativecdn.com https:\/\/www.facebook.com https:\/\/www.gatestechzone.com https:\/\/staging-cdn.broman.group https:\/\/cdn.motonet.fi https:\/\/embed.upseller.cloud https:\/\/*.googletagmanager.com https:\/\/eu.fw-cdn.com https:\/\/*.freshchat.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.broman.group https:\/\/maps.googleapis.com https:\/\/api.walleypay.com\/walley-checkout-loader.js https:\/\/api.videoly.co\/1\/quchbox\/0\/299\/quch.js https:\/\/www.paypal.com\/sdk\/js https:\/\/dapi.videoly.co https:\/\/www.youtube.com https:\/\/*.vimeo.com https:\/\/policy.app.cookieinformation.com https:\/\/script.custobar.com https:\/\/*.criteo.net https:\/\/*.criteo.com https:\/\/*.adform.net https:\/\/connect.facebook.net https:\/\/tags.creativecdn.com https:\/\/embed.upseller.cloud https:\/\/cdn.voiceflow.com https:\/\/*.googletagmanager.com https:\/\/eu.fw-cdn.com https:\/\/*.freshchat.com https:\/\/cnstrc.com; object-src data:; worker-src 'self' blob:;","count":1},{"content-security-policy-report-only":" script-src 'self' 'report-sample' https:\/\/ajax.googleapis.com https:\/\/code.jquery.com https:\/\/cdnjs.cloudflare.com https:\/\/ajax.aspnetcdn.com\/ajax\/ https:\/\/static.cloudflareinsights.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/b.st-hatena.com\/js\/ https:\/\/www.googletagmanager.com https:\/\/platform.twitter.com; object-src 'none'; base-uri 'self'; report-uri \/__csp-report; report-to csp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cdn.jsdelivr.net; img-src 'self' data: blob: https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdn.jsdelivr.net; connect-src 'self' blob: https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/www.google.com; worker-src 'self' blob:; frame-src 'self' https:\/\/www.google.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https:\/\/fonts.bunny.net https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com www.redwolfairsoft.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com airwallex.com *.airwallex.com google.com *.google.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com www.redwolfairsoft.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com www.redwolfairsoft.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com checkout.airwallex.com checkout-demo.airwallex.com h.online-metrix.net\/ static-demo.airwallex.com pci-api-demo.airwallex.com demo-pacybsmock.airwallex.com imgs.signifyd.com airwallex.com *.airwallex.com *.cdn-apple.com www.google.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com https:\/\/www.google.com www.redwolfairsoft.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net google.com *.online-metrix.net\/ checkout.airwallex.com imgs.signifyd.com checkout-demo.airwallex.com airwallex.com *.airwallex.com *.google.com www.gstatic.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/firebasestorage.googleapis.com www.redwolfairsoft.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com checkout.airwallex.com checkout-demo.airwallex.com h.online-metrix.net\/ static-demo.airwallex.com static.airwallex.com cdn-scripts.signifyd.com bws-demo.airwallex.com bws.airwallex.com imgs.signifyd.com h64.online-metrix.net airwallex.com *.airwallex.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.avada.io *.shopify.com https:\/\/www.google.com https:\/\/www.gstatic.com www.redwolfairsoft.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/static.klaviyo.com *.fontawesome.com https:\/\/fonts.bunny.net www.redwolfairsoft.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.redwolfairsoft.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com checkout.airwallex.com checkout-demo.airwallex.com h.online-metrix.net\/ bws-demo.airwallex.com bws.airwallex.com api-demo.airwallex.com api.airwallex.com o11y-demo.airwallex.com o11y.airwallex.com imgs.signifyd.com airwallex.com *.airwallex.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/get.geojs.io *.avada.io www.redwolfairsoft.com 'self' 'unsafe-inline'; child-src airwallex.com *.airwallex.com www.redwolfairsoft.com http: https: blob: 'self' 'unsafe-inline'; default-src airwallex.com *.airwallex.com www.redwolfairsoft.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.cloudflare.com *.twitter.com *.facebook.net *.twimg.com *.hotjar.com *.trustedshops.com *.googleapis.com *.magentocommerce.com *.paypal.com *.cardinalcommerce.com *.authorize.net *.fontawesome.com https:\/\/fonts.bunny.net *.mncdn.com *.masterpassturkiye.com *.iyzipay.com *.bkm.com.tr *.akbank.com.tr *.yapikredi.com.tr *.garanti.com.tr *.ingage.tech *.useinsider.com *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.cloudfront.net *.openx.net *.sharethis.com *.google.com.tr *.googlesyndication.com https:\/\/buysoci.al *.agkn.com *.a.run.app *.clarity.ms sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com *.cloudflareinsights.com *.cookiespool.com *.tiktokw.us *.zopim.com *.zopim.io *.personaclick.com *.mnmedya.com *.ipaper.io https:\/\/*.useinsider.com wss:\/\/*.useinsider.com *.tiktok.com *.googleoptimize.com *.creativecdn.com https:\/\/*.amazonaws.com *.criteo.com *.rossmann.com.tr cdn.rossmann.com.tr *.vimeo.com www.rossmann.com.tr *.snapchat.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.twitter.com *.facebook.com *.ingage.tech *.useinsider.com *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.cloudfront.net *.openx.net *.sharethis.com *.google.com.tr *.googlesyndication.com https:\/\/buysoci.al *.agkn.com *.a.run.app *.clarity.ms sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com *.cloudflareinsights.com *.cookiespool.com *.tiktokw.us *.mncdn.com *.personaclick.com *.mnmedya.com *.ipaper.io https:\/\/*.useinsider.com wss:\/\/*.useinsider.com *.tiktok.com *.googleoptimize.com *.creativecdn.com https:\/\/*.amazonaws.com *.criteo.com *.rossmann.com.tr cdn.rossmann.com.tr *.vimeo.com *.snapchat.com 'self' 'unsafe-inline'; frame-ancestors *.google.com *.gstatic.com *.ingage.tech *.useinsider.com *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.cloudfront.net *.openx.net *.sharethis.com *.google.com.tr *.googlesyndication.com https:\/\/buysoci.al *.agkn.com *.a.run.app *.clarity.ms sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com *.cloudflareinsights.com *.cookiespool.com *.tiktokw.us *.mncdn.com *.personaclick.com *.mnmedya.com *.ipaper.io https:\/\/*.useinsider.com wss:\/\/*.useinsider.com *.tiktok.com *.googleoptimize.com *.creativecdn.com https:\/\/*.amazonaws.com *.criteo.com *.rossmann.com.tr cdn.rossmann.com.tr *.vimeo.com *.snapchat.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com https:\/\/www.googletagmanager.com\/ *.twitter.com *.gstatic.com *.hotjar.com *.google.com.tr *.veinteractive.com *.demdex.net *.solocpm.com *.facebook.com *.facebook.net *.addthis.com *.livechatinc.com *.yandex.ru *.adyen.com *.vimeo.com *.doubleclick.net *.bluekai.com *.useinsider.com *.masterpassturkiye.com *.iyzipay.com *.bkm.com.tr *.akbank.com.tr *.yapikredi.com.tr *.garanti.com.tr *.ingage.tech *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.cloudfront.net *.openx.net *.sharethis.com *.googlesyndication.com https:\/\/buysoci.al *.agkn.com *.a.run.app *.clarity.ms sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com *.cloudflareinsights.com *.cookiespool.com *.tiktokw.us https:\/\/www.youtube.com http:\/\/www.sandbox.paypal.com www.paypal.com *.mncdn.com *.personaclick.com *.mnmedya.com *.ipaper.io https:\/\/*.useinsider.com wss:\/\/*.useinsider.com *.tiktok.com *.googleoptimize.com *.creativecdn.com https:\/\/*.amazonaws.com *.criteo.com *.rossmann.com.tr cdn.rossmann.com.tr rossmann.api.useinsider.com td.doubleclick.net ams.creativecdn.com *.snapchat.com 'self' 'unsafe-inline'; img-src 'self' data: *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.swagger.io https:\/\/images.unsplash.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ *.cloudflare.com *.klarna.com *.googleadservices.com *.paypalobjects.com *.hotjar.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.magentocommerce.com *.cardinalcommerce.com *.authorize.net *.omtrdc.net *.newrelic.com *.doubleclick.net *.google.com *.google.com.tr *.facebook.com *.facebook.net *.demdex.net *.everesttech.net *.googleapis.com *.adis.ws *.livechatinc.com *.yandex.ru *.adyen.com *.setrowid.com *.setrow.com *.instagram.com *.useinsider.com *.googletagmanager.com https:\/\/firebasestorage.googleapis.com *.mncdn.com *.iyzicopwi.com.tr *.masterpassturkiye.com *.iyzipay.com *.bkm.com.tr *.akbank.com.tr *.yapikredi.com.tr *.garanti.com.tr *.ingage.tech *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.cloudfront.net *.openx.net *.sharethis.com *.googlesyndication.com https:\/\/buysoci.al *.agkn.com *.a.run.app *.clarity.ms sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com *.cloudflareinsights.com *.cookiespool.com *.tiktokw.us *.bing.com *.zopim.com *.zopim.io *.google.co.in *.mastercard.com *.personaclick.com *.mnmedya.com *.ipaper.io https:\/\/*.useinsider.com wss:\/\/*.useinsider.com *.tiktok.com *.googleoptimize.com *.creativecdn.com https:\/\/*.amazonaws.com *.criteo.com *.rossmann.com.tr *.vimeo.com *.bidswitch.net *.adnxs.com *.casalemedia.com *.media.net *.360yield.com *.outbrain.com *.rubinproject.com *.sharethrough.com *.smartadserver.net *.taboola.com *.teads.tv *.3lift.com *.emxdgt.com *.adform.net *.omnitagjs.com *.sync.com *.ivitrack.com *.mediavine.com *.pubmatic.com *.tremorhub.com *.yieldlab.net *.yieldmo.com *.semasio.net *.krxd.net *.thebrighttag.com *.smartadserver.com *.yahoo.com https:\/\/id5-sync.com *.rubiconproject.com www.rossmann.com.tr cdn.rossmann.com.tr web-image.useinsider.com image.useinsider.com static.ads-twitter.com ads-twitter.com ads-api.twitter.com analytics.twitter.com t.co www.facebook.com *.snapchat.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.magentocommerce.com *.paypal.com *.hotjar.com *.cardinalcommerce.com *.authorize.net *.omtrdc.net *.instana.io *.google.com.tr *.googletagmanager.com *.veinteractive.com *.facebook.net *.supert.ag *.setrowid.com *.mainadv.com *.doubleclick.net *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.livechatinc.com *.yandex.ru *.adyen.com *.vimeo.com *.jsdelivr.net *.setrow.com *.instagram.com *.criteo.com *.criteo.net *.ciritizr.com *.bkrtx.com *.cloudfront.net *.useinsider.com *.critizr.com *.behance.net *.swagger.io *.avada.io *.shopify.com *.mncdn.com *.iyzicopwi.com.tr *.masterpassturkiye.com *.iyzipay.com *.bkm.com.tr *.akbank.com.tr *.garanti.com.tr *.ingage.tech *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.openx.net *.sharethis.com *.googlesyndication.com https:\/\/buysoci.al *.agkn.com *.a.run.app *.clarity.ms sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com *.cloudflareinsights.com *.cookiespool.com *.tiktokw.us *.bing.com *.zopim.com *.zdassets.com *.personaclick.com *.mnmedya.com *.ipaper.io https:\/\/*.useinsider.com wss:\/\/*.useinsider.com *.tiktok.com *.googleoptimize.com *.creativecdn.com https:\/\/*.amazonaws.com *.rossmann.com.tr www.rossmann.com.tr rossmann.api.useinsider.com connect.facebook.net tags.creativecdn.com static.ads-twitter.com ads-twitter.com ads-api.twitter.com analytics.twitter.com embeds.ipaper.io static.hotjar.com cdn.rossmann.com.tr eitri.api.useinsider.com analytics.tiktok.com script.hotjar.com ams.creativecdn.com *.snapchat.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.facebook.net *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.magentocommerce.com *.fontawesome.com *.paypal.com *.paypalobjects.com *.hotjar.com *.cardinalcommerce.com *.authorize.net *.omtrdc.net *.newrelic.com *.setrowid.com *.setrow.com *.critizr.com *.useinsider.com *.adobedtm.com *.google-analytics.com *.googletagmanager.com *.swagger.io https:\/\/fonts.bunny.net *.mncdn.com *.masterpassturkiye.com *.iyzipay.com *.bkm.com.tr *.akbank.com.tr *.yapikredi.com.tr *.garanti.com.tr *.ingage.tech *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.cloudfront.net *.openx.net *.sharethis.com *.google.com.tr *.googlesyndication.com https:\/\/buysoci.al *.agkn.com *.a.run.app *.clarity.ms sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com *.cloudflareinsights.com *.cookiespool.com *.tiktokw.us *.bing.com *.personaclick.com *.mnmedya.com *.ipaper.io https:\/\/*.useinsider.com wss:\/\/*.useinsider.com *.tiktok.com *.googleoptimize.com *.creativecdn.com https:\/\/*.amazonaws.com *.criteo.com *.rossmann.com.tr *.vimeo.com www.rossmann.com.tr cdn.rossmann.com.tr maxcdn.bootstrapcdn.com assets.api.useinsider.com *.snapchat.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net *.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ *.cloudflare.com www.google-analytics.com https:\/\/stats.g.doubleclick.net *.twitter.com *.facebook.com *.facebook.net *.paypalobjects.com *.hotjar.com *.hotjar.io *.twimg.com *.magentocommerce.com *.cardinalcommerce.com *.cardinalcommerce.net *.veinteractive.com *.demdex.net *.yandex.ru *.vimeo.com *.setrowid.com *.setrow.com *.useinsider.com *.adobedtm.com *.swagger.io https:\/\/get.geojs.io *.avada.io *.masterpassturkiye.com *.iyzipay.com *.bkm.com.tr *.akbank.com.tr *.yapikredi.com.tr *.garanti.com.tr https:\/\/mnemos-api.ahtapot.ai *.ingage.tech *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.cloudfront.net *.openx.net *.sharethis.com *.google.com.tr *.googlesyndication.com https:\/\/buysoci.al *.agkn.com *.a.run.app *.clarity.ms sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com *.cloudflareinsights.com *.cookiespool.com *.tiktokw.us *.zdassets.com *.zopim.com *.zopim.io wss:\/\/widget-mediator.zopim.com *.mncdn.com *.personaclick.com *.mnmedya.com *.ipaper.io https:\/\/*.useinsider.com wss:\/\/*.useinsider.com *.tiktok.com *.googleoptimize.com *.creativecdn.com https:\/\/*.amazonaws.com *.criteo.com *.rossmann.com.tr analytics.google.com www.rossmann.com.tr cdn.rossmann.com.tr rossmann.api.useinsider.com aryuder.api.useinsider.com hit.api.useinsider.com ams.creativecdn.com recommendationv2.api.useinsider.com *.snapchat.com static.ads-twitter.com ads-twitter.com ads-api.twitter.com analytics.twitter.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.ingage.tech *.useinsider.com *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.cloudfront.net *.openx.net *.sharethis.com *.google.com.tr *.googlesyndication.com *.buysoci.al *.agkn.com *.a.run.app sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com www.rossmann.com.tr cdn.rossmann.com.tr *.clarity.ms googleads.g.doubleclick.net analytics.tiktok.com *.snapchat.com *.twitter.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' adform.net *.adform.net *.bing.com *.taboola.com *.fullstory.com *.geocomply.com *.kameleoon.eu *.ads-twitter.com *.google-analytics.com *.kaizengaming.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.sportradarserving.com *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co *.app.delivery *.betano.co *.betgenius.com *.cloudflare.com *.cloudflareinsights.com *.cookielaw.org *.creativecdn.com *.facebook.net *.gmlinteractive.com *.googletagmanager.com *.kameleoon.io *.lgrckt-in.com *.optimove.net *.sportradar.com *.tostarsbuilding.com *.betano.cz *.datadome.co d32tdr35c4icxo.cloudfront.net *.logr-in.com; worker-src 'self' blob:; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=1o6.aZtRtIotvnocJg70j6i1VGxXhYD_65tE6oY_e.s-1788489638.8598382-1.0.1.1-zaKEWYlIGk76VfRLyUOfzmo0A9SLoNN4yF0dxLiLK2GGjPPFFBRgZUMOPpN7vqgMQn7vcqqy1Qy17MB7Fl6sm0uvxRf_.eraZjGb2Hp6Qu4tkkZgLNYuhERn.hRGrGU13EtrfUMSbObxKsjWyCOE8XCVVefihrQAevAGdnrEGI5KDuXbVFgOKH2Zsuqzmv44; report-to cf-hurowbymwtxcpowk","count":1},{"content-security-policy-report-only":" default-src 'self'; font-src data: https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/composer.apps.nonprod.cf.dmtech.cloud; script-src 'self' https:\/\/*.bazaarvoice.com https:\/\/app.usercentrics.eu https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/composer.apps.nonprod.cf.dmtech.cloud https:\/\/d2pqvatijh75rn.cloudfront.net https:\/\/exc.mm.dm.rs https:\/\/mpsnare.iesnare.com https:\/\/omt.dm.rs https:\/\/tags.tiqcdn.com https:\/\/web.cmp.usercentrics.eu https:\/\/www.dm.rs https:\/\/www.google.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com https:\/\/www.gstatic.com\/recaptcha\/; worker-src 'self' blob:; connect-src 'self' https:\/\/*.bazaarvoice.com https:\/\/aggregator.service.usercentrics.eu https:\/\/api.mapbox.com https:\/\/api.usercentrics.eu https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/browser-intake-datadoghq.eu https:\/\/cart-recos.services.dmtech.com https:\/\/cdcs.usercentrics.eu https:\/\/collect.tealiumiq.com https:\/\/consent-api.service.consent.usercentrics.eu https:\/\/consent-rt-ret.service.consent.usercentrics.eu https:\/\/consents.usercentrics.eu https:\/\/content-preview.apps.prod.gcp.dmtech.cloud https:\/\/d2pqvatijh75rn.cloudfront.net https:\/\/direct-collect.dy-api.eu https:\/\/direct.dy-api.eu https:\/\/dmpay-gateway.services.dmtech.com https:\/\/dy-api.eu https:\/\/editorial-content.dm-static.com https:\/\/events.mapbox.com https:\/\/exc.mm.dm.rs https:\/\/frontend-tracking-infra-service.services.dmtech.com https:\/\/graphql.usercentrics.eu https:\/\/insights.algolia.io https:\/\/logs.browser-intake-datadoghq.eu https:\/\/maut-prod.services.dmtech.com https:\/\/maut-rls.nonprod.services.dmtech.com https:\/\/mpsnare.iesnare.com https:\/\/my-products-api.services.dmtech.com https:\/\/omacs.services.dmtech.com https:\/\/omc.dm.rs https:\/\/predictive-shopping-service.services.dmtech.com https:\/\/product-based-recos.services.dmtech.com https:\/\/product-search.services.dmtech.com https:\/\/product-semantic-search.services.dmtech.com https:\/\/rcom-eu.dynamicyield.com https:\/\/recos-as-a-service.services.dmtech.com https:\/\/region1.google-analytics.com https:\/\/retail-media.services.dmtech.com https:\/\/rum.browser-intake-datadoghq.eu https:\/\/s2s.adjust.com https:\/\/signin.dm.rs https:\/\/sos-prod.availability.services.dmtech.com https:\/\/staedtetour.dm-fb2.de https:\/\/stars.services.dmtech.com https:\/\/storage.googleapis.com\/gift-card-builder-emergency-disabled-bucket\/ https:\/\/store-data-service.services.dmtech.com https:\/\/store-order-service.services.dmtech.com https:\/\/v1.api.service.cmp.usercentrics.eu https:\/\/www.google-analytics.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/zoe-shop-proxy-prod.services.dmtech.com https:\/\/kuba-prod.services.dmtech.com https:\/\/zoe-shop-proxy-prod.services.dmtech.com https:\/\/cartnext.services.dmtech.com https:\/\/dmcsm-proxy.prod.services.dmtech.com https:\/\/zoe-shop-proxy-prod.services.dmtech.com https:\/\/customer-helpcenter-prod.services.dmtech.com https:\/\/paint-prod.services.dmtech.com https:\/\/content.services.dmtech.com https:\/\/content-search-service-preview.apps.prod.gcp.dmtech.cloud https:\/\/content-search-service.services.dmtech.com https:\/\/products.dm.de https:\/\/pds-import-prod.apps.prod.gcp.dmtech.cloud https:\/\/shopping-list-prod.services.dmtech.com; media-src 'self'; style-src 'self' 'unsafe-inline' https:\/\/*.bazaarvoice.com https:\/\/api.tiles.mapbox.com https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/composer.apps.nonprod.cf.dmtech.cloud; form-action 'self' https:\/\/*.bazaarvoice.com https:\/\/apps.bazaarvoice.com https:\/\/checkout.dm.rs https:\/\/giftcard-checkout.dm.de\/api\/checkout https:\/\/signin.dm.rs; img-src 'self' blob: data: https:\/\/*.bazaarvoice.com https:\/\/app.usercentrics.eu https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/cdn-eu.dynamicyield.com https:\/\/composer.apps.nonprod.cf.dmtech.cloud https:\/\/content-preview.apps.prod.gcp.dmtech.cloud https:\/\/d2pqvatijh75rn.cloudfront.net https:\/\/editorial-content.dm-static.com https:\/\/exc.mm.dm.rs https:\/\/i.ytimg.com https:\/\/images.podigee-cdn.net https:\/\/img.usercentrics.eu https:\/\/img.youtube.com\/ https:\/\/media.dm-static.com https:\/\/photos-eu.bazaarvoice.com https:\/\/products.dm-static.com https:\/\/uct.service.usercentrics.eu https:\/\/content.services.dmtech.com; frame-ancestors 'self' https:\/\/account.dm.rs https:\/\/app.datadoghq.eu https:\/\/checkout.dm.rs https:\/\/content-preview.apps.prod.gcp.dmtech.cloud https:\/\/mobileapp.dm.rs https:\/\/studio.dm-drogeriemarkt.com; frame-src 'self' https:\/\/*.bazaarvoice.com https:\/\/account.dm.rs https:\/\/app.usercentrics.eu https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/cdn.podigee.com https:\/\/checkout.dm.rs https:\/\/configurator.nuk.de https:\/\/gastfamilie.podigee.io https:\/\/geburtskanal-dm.podigee.io https:\/\/hey-familie.podigee.io https:\/\/kinderwunschsprechstunde.podigee.io https:\/\/mobileapp.dm.rs https:\/\/player.podigee-cdn.net https:\/\/recaptcha.google.com\/recaptcha\/ https:\/\/sandbox.om.dm.rs https:\/\/signin.dm.rs https:\/\/web.cmp.usercentrics.eu https:\/\/www.google.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.youtube-nocookie.com; base-uri 'self' https:\/\/exc.mm.dm.rs; child-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint; report-uri \/__csp-reports__","count":1},{"content-security-policy-report-only":" default-src 'self' blob:  https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; frame-src 'self' https:\/\/*.noxiaohao.com https:\/\/telegram.org https:\/\/*.bitget.com https:\/\/accounts.google.com https:\/\/oauth.telegram.org https:\/\/sgtm.btsgtm.com ; script-src 'self' 'nonce-vhh7i\/LRPv\/IbxgqBxcDWw==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6\/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh\/v3RIRuG3kMikr5iha+7P\/0TN\/GNA=' https:\/\/*.noxiaohao.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com https:\/\/accounts.google.com https:\/\/www.googletagmanager.com https:\/\/fonts.googleapis.com https:\/\/play.google.com https:\/\/analytics.google.com https:\/\/fonts.gstatic.com https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/*.geetest.com https:\/\/*.geevisit.com https:\/\/sgtm.btsgtm.com; connect-src 'self' wss: https:\/\/stats.g.doubleclick.net https:\/\/analytics.google.com https:\/\/www.google.com wss:\/\/stream.bitget.cloud https:\/\/*.noxiaohao.com wss:\/\/*.noxiaohao.com wss:\/\/*.bitget.com https:\/\/www.turingfraud.net https:\/\/play.google.com https:\/\/accounts.google.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/sgtm.btsgtm.com ; worker-src 'self' blob:; img-src 'self' data: blob: https:\/\/www.googletagmanager.com https:\/\/img.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/img.bitgetimg.com https:\/\/img.gurenla.com https:\/\/*.bgbstatic.com https:\/\/lh3.googleusercontent.com https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/static-web.jjdsn.vip https:\/\/cdn.bitkeep.vip https:\/\/www.google.co.jp https:\/\/bin.wangsustatic.com https:\/\/sgtm.btsgtm.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/accounts.google.com https:\/\/fonts.googleapis.com https:\/\/static.bgbstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; font-src 'self' data: https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/fonts.gstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri \/v1\/buried\/log\/cspSecurity \/v1\/monitor\/csp?appId=d4b6df7d;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com;","count":1},{"content-security-policy-report-only":" report-uri https:\/\/www.yelp.com\/csp_report_only?id=0d9a766547aad14e&page=csp_report_frame_directives%2Cfull_site_ssl_csp_report_directives&policy_hash=41d0c45536d2a082f11d1cd0e00fde7f&site=www&timestamp=1788490483; frame-ancestors 'self' https:\/\/*.yelp.com; default-src https:; img-src https: data: blob:; script-src https: data: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' data:; font-src data: https:; child-src https: yelp-webview:\/\/* yelp:\/\/* data:; object-src 'none'; worker-src blob: https:; base-uri 'self'; form-action https:","count":1},{"content-security-policy-report-only":" default-src data: 'self' 'unsafe-inline' 'unsafe-eval' shop2gether.com.br *.shop2gether.com.br wake-components.fbitsstatic.net shop2gether.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss:\/\/signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss:\/\/signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br gstatic.com *.criteo.com *.criteo.net *.g.doubleclick.net *.google.com.br *.googleadservices.com static.zdassets.com clarity.ms assets.zendesk.com *.creativecdn.com *.zdassets.com shop2gether.zendesk.com widget-mediator.zopim.com *.clarity.ms td.doubleclick.net icomm-public.s3.amazonaws.com vm.icommgroup.com.br:3005 *.icommgroup.com.br:3005 *.icommgroup.com.br s3.sa-east-1.amazonaws.com *.infraicommgroup.com:3005 *.infraicommgroup.com n8n.icommgroup.com.br *.hotjar.com koin-custom-conector-gateway.fbits.net static.hotjar.com static.fbits.net payments.koin.com.br *.pinterest.com *.useinsider.com *.api.useinsider.com nocodb.infraicommgroup.com:8080 nocodb.infraicommgroup.com *.varify.io *.wepowerconnections.com *.sciencebehindecommerce.com *.zenaps.com *.awin1.com *.dwin1.com recommendationv2.api.useinsider.com wake-commerce-scripts.omni.chat viacep.com.br nominatim.openstreetmap.org trackings.nemu.com.br openfpcdn.io api.bigdatacloud.net firebase.googleapis.com cdn.jsdelivr.net appleid.cdn-apple.com src.mastercard.com api.fpjs.io *.smarthint.co analytics.tiktok.com s.pinimg.com bat.bing.net bat.bing.com *.bing.com *.bing.net googleads.g.doubleclick.net *.doubleclick.net z.asbmit.com artfut.com pafutos.com lemkmio.com ad.admitad.com; frame-ancestors *.shop2gether.com.br shop2gether.com.br; report-uri https:\/\/pub-csp.fbits.net\/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:;","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https:\/\/cdnjs.cloudflare.com *.cloudfront.net *.googleapis.com *.webformatlabs.com *.pu.subcom.it *.passionebeauty.com https:\/\/fonts.gstatic.com *.zdassets.com *.zopim.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/forms-eu1.hsforms.com *.zdassets.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.bolt.com *.passionebeauty.com cloudfront.net self https: *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com *.bolt.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.firework.com *.fwcdn1.com *.fwcdn2.com *.fwcdn3.com self https: integration.api.scalapay.com api.scalapay.com consentcdn.cookiebot.com www.paypalobjects.com *.hipay-tpp.com *.hipay.com *.facebook.com www.youtube.com www.twitter.com *.nr-data.net *.criteo.net\/ *.criteo.com\/ *.hotjar.com https:\/\/optimize.google.com https:\/\/*.adform.net https:\/\/cdn.smooch.io\/ *.hsforms.com *.hubspot.com https:\/\/*.hs-sites-eu1.com *.zdassets.com *.zopim.com https:\/\/app-eu1.hubspot.com *.typeform.com https:\/\/passione-toolkit.replit.app\/ *.cloudfront.net *.passionebeauty.com *.omtrdc.net *.demdex.net assets.adobedtm.com cm.everesttech.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net commerce.adobe.io widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net data: https:\/\/images.unsplash.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.firework.com *.fw-assets1.com *.fwcdn1.com *.fwcdn2.com *.fwcdn3.com asset.fwcdn2.com *.asset.fwcdn2.com asset.fwcdn1.com *.asset.fwcdn1.com fireworktv.com *.fireworktv.com p2.fwpixel.com *.p2.fwpixel.com integration.api.scalapay.com api.scalapay.com www.sandbox.paypal.com *.hipay-tpp.com *.hipay.com *.cloudfront.net *.googleadservices.com *.google-analytics.com https:\/\/www.googletagmanager.com www.google.it *.google.com *.webformatlabs.com *.pu.subcom.it *.passionebeauty.com *.criteo.net\/ *.criteo.com\/ *.facebook.com https:\/\/s.thebrighttag.com https:\/\/beacon.krxd.net https:\/\/ad.yieldlab.net https:\/\/matching.ivitrack.com https:\/\/visitor.omnitagjs.com https:\/\/*.adform.net https:\/\/ups.analytics.yahoo.com https:\/\/eb2.3lift.com https:\/\/criteo-sync.teads.tv https:\/\/sync-t1.taboola.com https:\/\/rtb-csync.smartadserver.com https:\/\/pixel.rubiconproject.com https:\/\/simage2.pubmatic.com https:\/\/exchange.mediavine.com https:\/\/contextual.media.net https:\/\/ad.360yield.com https:\/\/ib.adnxs.com https:\/\/dis.criteo.com https:\/\/cm.g.doubleclick.net https:\/\/x.bidswitch.net https:\/\/r.casalemedia.com https:\/\/sync.outbrain.com https:\/\/match.sharethrough.com https:\/\/id5-sync.com https:\/\/criteo-partners.tremorhub.com https:\/\/sync-criteo.ads.yieldmo.com *.hsforms.com *.hubspot.com https:\/\/track.hubspot.com https:\/\/perf-eu1.hsforms.com https:\/\/cta-eu1.hubspot.com https:\/\/js-eu1.hubspot.com https:\/\/static.hubspot.com *.hsappstatic.net https:\/\/optimize.google.com *.googleapis.com *.etrusted.com https:\/\/analytics.tiktok.com https:\/\/cdn.qapla.it https:\/\/s.pinimg.com *.zdassets.com *.zopim.com https:\/\/imgsct.cookiebot.com https:\/\/c.clarity.ms *.postrelease.com app.passionebeauty.test fireworkapi1.com asset.fwcdn3.com fireworkadservices1.com asset.fwbiz1.com asset.fwpub1.com asset.fwadcdn1.com cdn1.fireworkn.com fireworkanalytics.com *.agora.io *.sd-rtn.com business.firework.com api.firework.com ig-importer.firework-prod.com cdn.fw-assets1.com *.execute-api.us-west-2.amazonaws.com *.omtrdc.net *.demdex.net 'self' blob: *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com commerce.adobe.io geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com http:\/\/localhost:8082 https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com unpkg.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.firework.com *.fw-assets1.com *.fwcdn1.com *.fwcdn2.com *.fwcdn3.com asset.fwcdn1.com *.asset.fwcdn1.com asset.fwcdn3.com *.asset.fwcdn3.com asset.fwcdn2.com *.asset.fwcdn2.com https:\/\/cdnjs.cloudflare.com integration.api.scalapay.com api.scalapay.com *.paypal.com *.cloudfront.net *.fontawesome.com *.google-analytics.com googletagmanager.com *.gstatic.com js-agent.newrelic.com *.webformatlabs.com *.pu.subcom.it *.passionebeauty.com consent.cookiebot.com consentcdn.cookiebot.com bam.eu01.nr-data.net https:\/\/www.googleoptimize.com https:\/\/optimize.google.com *.criteo.net\/ *.criteo.com\/ *.hotjar.com s7.addthis.com *.hipay-tpp.com *.hipay.com zn1ynnliufrct75cb-paypalxm.siteintercept.qualtrics.com www.recaptcha.net *.facebook.com *.doubleclick.net https:\/\/*.adform.net *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hubspot.com *.hubspotfeedback.com https:\/\/www.googleanalytics.com https:\/\/cdn.logico3c.com *.webgains.io *.solocpm.com *.tangooserver.com https:\/\/api.qapla.it *.googleapis.com *.onyourmap.com *.mapbox.com https:\/\/analytics.tiktok.com *.euh.stape.io *.euh.stape.net https:\/\/ajax.googleapis.com https:\/\/s.pinimg.com *.zdassets.com *.zopim.com *.clarity.ms https:\/\/js-eu1.usemessages.com https:\/\/pagead2.googlesyndication.com https:\/\/app-eu1.hubspot.com https:\/\/rum.hlx.page *.goaffpro.com *.hsadspixel.net *.typeform.com *.impactcdn.com cdn.jsdelivr.net\/npm\/photoswipe\/ player.vimeo.com *.omtrdc.net *.demdex.net cm.everesttech.net bat.bing.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com integration.api.scalapay.com api.scalapay.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com *.hipay-tpp.com *.hipay.com *.paypal.com *.cloudfront.net *.gstatic.com js-agent.newrelic.com *.webformatlabs.com *.pu.subcom.it *.passionebeauty.com *.facebook.com https:\/\/optimize.google.com *.etrusted.com https:\/\/api.qapla.it *.zdassets.com *.zopim.com https:\/\/webgains.io *.typeform.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.yotpo.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.firework.com *.fw-assets1.com *.fwcdn1.com *.fwcdn2.com *.fwcdn3.com *.live-video.net *.playback.live-video.net cdn4.fireworktv.com *.cdn4.fireworktv.com 'self' data: blob: * *.passionebeauty.com 'self' 'unsafe-inline'; manifest-src *.cloudfront.net 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com p13n-mr.adobe.io *.adobedc.net *.demdex.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.bolt.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com commerce.adobedtm.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.firework.com *.live-video.net *.playback.live-video.net *.agora.io *.sd-rtn.com *.execute-api.us-west-2.amazonaws.com *.pixelsdata.com wss: p2.fwpixel.com *.p2.fwpixel.com fireworkapi1.com *.fireworkapi1.com fireworkadservices1.com *.fireworkadservices1.com fireworkanalytics.com *.fireworkanalytics.com consentcdn.cookiebot.com api-staging.oney.io api.oney.io integration.api.scalapay.com api.scalapay.com *.hipay-tpp.com *.hipay.com *.cloudfront.net consent.cookiebot.com *.doubleclick.net *.pu.subcom.it *.webformatlabs.com *.passionebeauty.com bam.eu01.nr-data.net pagead2.googlesyndication.com *.facebook.com zn1ynnliufrct75cb-paypalxm.siteintercept.qualtrics.com www.recaptcha.net *.hotjar.com commerce.adobe.io *.criteo.net\/ *.criteo.com\/ *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com https:\/\/*.adform.net *.webgains.io *.googleapis.com *.onyourmap.com *.mapbox.com api.qapla.it https:\/\/analytics.tiktok.com *.euh.stape.io *.euh.stape.net https:\/\/s.pinimg.com *.zendesk.com https:\/\/passionebeauty-it.zendesk.com *.zdassets.com *.zopim.com *.clarity.ms https:\/\/rum.hlx.page *.hubapi.com *.pinterest.com *.typeform.com passionebeauty.sjv.io *.fireworktv.com wss:\/\/fireworkapi1.com asset.fwcdn3.com asset.fwcdn1.com asset.fwcdn2.com asset.fwbiz1.com asset.fwpub1.com asset.fwadcdn1.com cdn1.fireworkn.com business.firework.com api.firework.com ig-importer.firework-prod.com cdn.fw-assets1.com *.2o7.net *.omtrdc.net assets.adobedtm.com cm.everesttech.net cdn.scalapay.com bat.bing.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.gstatic.com *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' https:; style-src 'self' https:; report-uri https:\/\/csp-collector-qt0v.onrender.com\/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' *.hubspot.com *.hsforms.com *.hs-sites.com *.hubspotusercontent.net *.hubapi.com *.hs-analytics.net *.hscollectedforms.net *.hs-banner.com *.hsadspixel.net static.hsappstatic.net code.jquery.com cdn.datatables.net cdn.jsdelivr.net maps.googleapis.com d2wy8f7a9ursnm.cloudfront.net *.oracle.com *.oraclecorp.com *.oraclecloud.com *.custhelp.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.facebook.net *.rnengage.com platform.twitter.com platform.linkedin.com *.banrural.niu.marketing banrural.niu.marketing https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/*.hotjarcdn.com *.google.com 'strict-dynamic' 'nonce-O396\/vKSoHT41YzrgUZY\/w==' 'nonce-JeiXcgoSqgFliM3WJNi8WQ=='; style-src 'self' tailwindcss.com *.hubspot.com *.hsforms.com *.hs-sites.com *.hubspotusercontent.net *.fs1.hubspotusercontent-na1.net fonts.googleapis.com *.custhelp.com *.hsappstatic.net cdn.datatables.net cdn.jsdelivr.net *.banrural.niu.marketing banrural.niu.marketing https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/*.hotjarcdn.com *.googletagmanager.com *.google.com; img-src 'self' data: blob: www.tailwindcss.com *.hubspot.com *.hsforms.com *.hs-sites.com *.hubspotusercontent.net *.hubspotusercontent-na1.net maps.googleapis.com *.gstatic.com forms.hsforms.com *.custhelp.com *.hsappstatic.net *.banrural.com.gt *.banrural.niu.marketing banrural.niu.marketing *.facebook.com connect.facebook.net px.ads.linkedin.com *.rnengage.com *.google.com *.google.com.gt *.googletagmanager.com *.google-analytics.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/*.hotjarcdn.com; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.hubspotusercontent-na1.net *.custhelp.com *.banrural.niu.marketing banrural.niu.marketing static.hsappstatic.net; frame-src 'self' https:\/\/i-a.co blob: https:\/\/www.youtube.com https:\/\/docs.google.com https:\/\/www.google.com https:\/\/google.com https:\/\/www.banrural.com.gt https:\/\/21994660.fs1.hubspotusercontent-na1.net https:\/\/50794169.fs1.hubspotusercontent-na1.net *.hubspot.com *.hsforms.com *.hsforms.net play.hubspotvideo.com https:\/\/*.jotform.com *.oracle.com *.oraclecloud.com *.custhelp.com *.googletagmanager.com td.doubleclick.net platform.twitter.com banrural-klaro.tiiny.site https:\/\/*.hotjar.com; connect-src https:\/\/stats.g.doubleclick.net https:\/\/analytics.ahrefs.com https:\/\/ad.doubleclick.net js.hs-banner.com banrural.com.gt unpkg.com *.contentsquare.net *.fs1.hubspotusercontent-na1.net 'self' https:\/\/static.hsappstatic.net https:\/\/js.hsforms.net static.hsappstatic.net *.hubspot.com *.hsforms.com *.hs-sites.com *.hubapi.com *.hubspotusercontent.net d2wy8f7a9ursnm.cloudfront.net *.oracle.com *.oraclecorp.com *.oraclecloud.com *.custhelp.com forms.hscollectedforms.net *.google.com *.google.com.gt *.googletagmanager.com *.google-analytics.com maps.googleapis.com *.banrural.niu.marketing banrural.niu.marketing px.ads.linkedin.com sessions.bugsnag.com otlp.bugsnag.com in.hotjar.com content.hotjar.io ws.hotjar.com wss:\/\/*.hotjar.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io; worker-src 'self' blob:; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src data: 'self' 'unsafe-inline' 'unsafe-eval' oqvestir.com.br *.oqvestir.com.br wake-components.fbitsstatic.net oqvestir.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss:\/\/signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss:\/\/signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br *.g.doubleclick.net *.doubleclick.net oqvestir.fbitsstatic.net *.criteo.com *.clarity.ms capig.shop2gether.com.br q.clarity.ms static.criteo.net clarity.ms sslwidget.criteo.com dynamic.criteo.com googleads.g.doubleclick.net gum.criteo.com bat.bing.com google.com.br googleadservices.com tags.creativecdn.com apigate.shop2gether.com.br o.clarity.ms *.creativecdn.com n8n.icommgroup.com.br *.icommgroup.com.br *.pinterest.com *.api.useinsider.com *.useinsider.com *.dwin1.com *.awin1.com *.zenaps.com *.sciencebehindecommerce.com *.wepowerconnections.com recommendationv2.api.useinsider.com wake-commerce-scripts.omni.chat trackings.nemu.com.br openfpcdn.io ipinfo.io api.bigdatacloud.net firebase.googleapis.com *.googleapis.com d1vrnvkozosezy.cloudfront.net *.infraicommgroup.com src.mastercard.com *.viacep.com.br viacep.com.br analytics.tiktok.com s.pinimg.com td.doubleclick.net bat.bing.net *.bing.com *.bing.net *.googleadservices.com artfut.com pafutos.com lemkmio.com ad.admitad.com z.asbmit.com pagead2.googlesyndication.com cep.awesomeapi.com.br firebaseio.com assets.mastercard.com; frame-ancestors *.oqvestir.com.br oqvestir.com.br; report-uri https:\/\/pub-csp.fbits.net\/2f73a911-c722-49fc-85bf-17568d3af0e8; report-to csp-endpoint; worker-src 'self' blob:;","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com cash-f.squarecdn.com converse.com.br https:\/\/magento.com *.converse.com.br *.fontawesome.com https:\/\/fonts.gstatic.com https:\/\/www.google.com https:\/\/www.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * www.facebook.com 'self' connect.facebook.net graph.facebook.com business.facebook.com https:\/\/plumrocket.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * www.google.com https:\/\/gum.criteo.com\/ api.sunset.systems targeting.voxus.tv https:\/\/springmedia.go2cloud.org\/ https:\/\/googleads.g.doubleclick.net\/ https:\/\/www.google.com.br\/ https:\/\/tpc.googlesyndication.com\/ https:\/\/static.criteo.net\/ td.doubleclick.net https:\/\/fledge.us.criteo.com\/ https:\/\/www.googletagmanager.com\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com https:\/\/plumrocket.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * converse.com.br www.facebook.com https:\/\/mcstaging.converse.com.br www.google.com.br conectiva.io https:\/\/s.ad.smaato.net https:\/\/simage2.pubmatic.com https:\/\/ade.clmbtech.com\/ https:\/\/sync-criteo.ads.yieldmo.com https:\/\/e1.emxdgt.com https:\/\/x.bidswitch.net\/ https:\/\/cm.g.doubleclick.net https:\/\/ib.adnxs.com\/ secure.adnxs.com https:\/\/pixel.rubiconproject.com\/ https:\/\/match.sharethrough.com https:\/\/rtb-csync.smartadserver.com https:\/\/sync-t1.taboola.com\/ https:\/\/criteo-sync.teads.tv https:\/\/eb2.3lift.com\/ https:\/\/ups.analytics.yahoo.com\/ https:\/\/tg.socdm.com\/ https:\/\/visitor.omnitagjs.com https:\/\/gum.criteo.com https:\/\/r.casalemedia.com https:\/\/ads.stickyadstv.com https:\/\/ad.360yield.com https:\/\/matching.ivitrack.com https:\/\/i.liadm.com\/ https:\/\/exchange.mediavine.com https:\/\/c.bing.com\/ https:\/\/trends.revcontent.com https:\/\/criteo-partners.tremorhub.com\/ https:\/\/secure.adnxs.com https:\/\/contextual.media.net https:\/\/dis.criteo.com https:\/\/tags.bluekai.com https:\/\/cm.adgrx.com https:\/\/sync.outbrain.com bat.bing.com https:\/\/device.clearsale.com.br https:\/\/c.clarity.ms https:\/\/rsp.servername.net http:\/\/rsp.servername.net https:\/\/googleads.g.doubleclick.net\/ http:\/\/www.googleadservices.com\/ https:\/\/idsync.rlcdn.com\/ https:\/\/*.rakuten.com https:\/\/*.linksynergy.com https:\/\/*.nxtck.com https:\/\/*.xg4ken.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com https:\/\/*.google.com.br *.converse.com.br http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ connect.facebook.net graph.facebook.com business.facebook.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com https:\/\/adobe.com\/ www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net https:\/\/amcglobal.sc.omtrdc.net\/ commerce.adobe.net use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-ds.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/adyen.com pay.google.com *.payments-amazon.com http:\/\/www.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ converse.com.br js-agent.newrelic.com js.go2sdk.com tag.rmp.rakuten.com ads01.groovinads.com img.metaffiliation.com https:\/\/assets.adobedtm.com\/ https:\/\/secure.authorize.net\/ https:\/\/test.authorize.net\/ https:\/\/js.braintreegateway.com\/ https:\/\/unpkg.com\/ https:\/\/commerce.adobe.net\/ https:\/\/use.typekit.net\/ https:\/\/t.paypal.com https:\/\/s.ytimg.com https:\/\/magento-ds.com www.facebook.com connect.facebook.net https:\/\/graph.facebook.com\/ https:\/\/business.facebook.com\/ https:\/\/google.com.br\/ https:\/\/gstatic.com\/ http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ http:\/\/www.paypalobjects.com https:\/\/www.googleoptimize.com https:\/\/static.zdassets.com\/ https:\/\/device.clearsale.com.br https:\/\/dynamic.criteo.com www.rtb123.com conectiva.io analytics.tiktok.com cdn.targeting.voxus.com.br https:\/\/app.cartstack.com.br bat.bing.com https:\/\/static.hotjar.com https:\/\/service.maxymiser.net https:\/\/widget-mediator.zopim.com https:\/\/sslwidget.criteo.com https:\/\/bat.bing.com www.clarity.ms targeting.voxus.com.br https:\/\/script.hotjar.com\/ https:\/\/tpc.googlesyndication.com https:\/\/*.rakuten.com https:\/\/*.linksynergy.com https:\/\/*.nxtck.com https:\/\/*.xg4ken.com https:\/\/*.googletagmanager.com *.converse.com.br *.collect.igodigital.com https:\/\/cdn.pmweb.com.br graph.facebook.com business.facebook.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https:\/\/adobe.com fonts.googleapis.com *.cash.app converse.com.br https:\/\/fonts.googleapis.com https:\/\/magento.com *.fontawesome.com https:\/\/gstatic.com use.typekit.net p.typekit.net *.converse.com.br *.googleapis.com *.google.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https:\/\/static.zdassets.com\/ *.converse.com.br http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com qa-api.magedevteam.com * fcmregistrations.googleapis.com firebaseinstallations.googleapis.com k.clarity.ms bam.nr-data.net converse.com.br https:\/\/dpm.demdex.net https:\/\/amcglobal.sc.omtrdc.net www.google-analytics.com https:\/\/commerce.adobedtm.com https:\/\/commerce.adobedc.net https:\/\/*.snplow.net https:\/\/api.magento.com https:\/\/*.adobe.io https:\/\/performance.typekit.net https:\/\/www.sandbox.paypal.com https:\/\/www.paypalobjects.com https:\/\/www.paypal.com https:\/\/pilot-payflowlink.paypal.com https:\/\/commerce.adobe.io https:\/\/commerce.adobe.net https:\/\/qa-api.magedevteam.com https:\/\/*.sentry.io https:\/\/*.adyen.com http:\/\/magento.com https:\/\/magento.com http:\/\/stats.g.doubleclick.net https:\/\/stats.g.doubleclick.net http:\/\/www.google-analytics.com https:\/\/www.google-analytics.com www.facebook.com https:\/\/connect.facebook.net https:\/\/graph.facebook.com https:\/\/business.facebook.com https:\/\/t.elasticsuite.io https:\/\/analytics.google.com\/ analytics.google.com https:\/\/ekr.zdassets.com\/ https:\/\/conscooper.zendesk.com wss:\/\/widget-mediator.zopim.com https:\/\/analytics.tiktok.com targeting.voxus.com.br api.performa.ai https:\/\/www.google.com.br https:\/\/bat.bing.com\/ https:\/\/api.ipify.org logs-01.loggly.com https:\/\/api.voxus.tv https:\/\/conectiva.io https:\/\/coopershoes.zendesk.com\/ https:\/\/*.clarity.ms\/ https:\/\/vc.hotjar.io\/ https:\/\/pagead2.googlesyndication.com\/ https:\/\/measurement-api.criteo.com\/ https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com https:\/\/*.google.com.br *.converse.com.br http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ connect.facebook.net graph.facebook.com business.facebook.com http:\/\/dpm.demdex.net https:\/\/www.google.com https:\/\/www.gstatic.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src converse.com.br bat.bing.com k.clarity.ms www.google.com commerce.adobedc.net analytics.tiktok.com *.converse.com.br *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' stories.greenclimate.fund greenclimatefund.shorthandstories.com *.shorthand.com survey.alchemer.com cxppusa1formui01cdnsa01-endpoint.azureedge.net player.meta-fusion.com www.googletagmanager.com *.google-analytics.com www.clarity.ms scripts.clarity.ms snap.licdn.com ipmeta.io public-apj.mkt.dynamics.com www.youtube.com *.youtube.com s.ytimg.com; object-src 'none'; style-src 'self' 'unsafe-inline' fonts.googleapis.com use.typekit.net p.typekit.net; img-src 'self' data: stgcfwebsitetest.blob.core.windows.net i.vimeocdn.com img.youtube.com i.ytimg.com www.googletagmanager.com *.google-analytics.com *.doubleclick.net assets-apj.mkt.dynamics.com c.clarity.ms px.ads.linkedin.com stories.greenclimate.fund *.shorthand.com i.postimg.cc *.bing.com; media-src 'self' stories.greenclimate.fund; frame-src 'self' www.youtube.com www.youtube-nocookie.com player.vimeo.com surveys.greenclimate.fund gcf.meta-dcr.com www.googletagmanager.com *.shorthand.com; frame-ancestors 'self'; child-src 'self' blob:; font-src 'self' use.typekit.net fonts.gstatic.com; connect-src 'self' public-apj.mkt.dynamics.com assets-apj.mkt.dynamics.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com c.clarity.ms *.clarity.ms ipmeta.io px.ads.linkedin.com snap.licdn.com *.shorthand.com stories.greenclimate.fund www.gstatic.com cxppusa1formui01cdnsa01-endpoint.azureedge.net blob:","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com cash-f.squarecdn.com https:\/\/*.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com https:\/\/fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com *.klarnacdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.adyen.com *.doubleclick.net *.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com consentcdn.cookiebot.com service.force.com *.livestory.io *.trustpilot.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com img.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io s.ytimg.com *.ftcdn.net *.behance.net * https:\/\/*.gstatic.com *.adyen.com *.bird.eu 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com https:\/\/firebasestorage.googleapis.com *.alothemes.com *.magepow.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.adobedtm.com dev.visualwebsiteoptimizer.com *.exacttarget.com *.google.it\/pagead\/1p-user-list serverside.stiga.com *.cookiebot.com via.placeholder.com maps.googleapis.com *.teads.tv www.xtento.com *.trustpilot.com imgsct.cookiebot.com *.livestory.io cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com *.newrelic.com *.nr-data.net *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-ds.com *.magento-datasolutions.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.youtube.com video.google.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https:\/\/rum.hlx.page *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.klarna.com consent.cookiebot.com *.collect.igodigital.com serverside.stiga.com cdnjs.cloudflare.com service.force.com *.salesforceliveagent.com *.salesforce-scrt.com *.site.com *.mczbf.com *.emjcd.com dev.visualwebsiteoptimizer.com *.clarity.ms *.imedia.cz consentcdn.cookiebot.com *.teads.tv *.seznam.cz *.xtento.com *.livestory.io *.trustpilot.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com getfirebug.com *.cash.app https:\/\/fonts.googleapis.com\/ *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.fontawesome.com https:\/\/fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com assets.braintreegateway.com service.force.com *.klarnacdn.net *.site.com *.livestory.io *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.adyen.com fcmregistrations.googleapis.com firebaseinstallations.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net api.addressy.com https:\/\/get.geojs.io *.avada.io *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com consentcdn.cookiebot.com *.googlesyndication.com dev.visualwebsiteoptimizer.com serverside.stiga.com *.klarna.com *.klarnaevt.com trustpilot.com googleads.g.doubleclick.net *.teads.tv *.clarity.ms noembed.com *.livestory.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; frame-src 'self' https:; connect-src 'self' https:;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce--IEvKytJRf3c1AxDYaP5nA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-uZUovfW7yE3uZIt3ydPN9g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; media-src 'self' https: blob:; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/courses.wallstreetmojo.com https:\/\/academy.wallstreetmojo.com https:\/\/india.wallstreetmojo.com https:\/\/wallstreetmojo.knorish.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" font-src https:\/\/www.googletagmanager.com *.googleapis.com *.gstatic.com https:\/\/*.gopersonal.ai *.yotpo.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com https:\/\/plumrocket.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ https:\/\/*.gopersonal.ai https:\/\/plumrocket.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.gstatic.com https:\/\/*.gopersonal.ai *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ tagmanager.google.com https:\/\/www.googletagmanager.com https:\/\/assets.emarsys.net https:\/\/cdn.scarabresearch.com https:\/\/*.gopersonal.ai https:\/\/*.gstatic.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https:\/\/www.googletagmanager.com tagmanager.google.com *.googleapis.com https:\/\/production-tailoy-repo-magento-statics.s3.us-east-2.amazonaws.com https:\/\/*.gopersonal.ai *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com https:\/\/www.google-analytics.com https:\/\/recommender.scarabresearch.com https:\/\/*.gopersonal.ai https:\/\/*.goshops.ai https:\/\/*.googleapis.com https:\/\/*.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' chosen.jquery.js https:\/\/unpkg.com; script-src-attr 'self'; style-src 'self' chosen.css https:\/\/use.typekit.net; style-src-attr 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" style-src-elem preprod-cdn.otter.ro cdn.otter.ro dev.otter247.local stage2.otter.ro stage2.tezyo.ro stage2.gryxx.ro stage2.aldoshoes.ro data: https:\/\/static.klaviyo.com https:\/\/cdn.jsdelivr.net https:\/\/*.adobe.com https:\/\/fonts.googleapis.com https:\/\/*.doubleclick.net https:\/\/*.facebook.com https:\/\/fonts.gstatic.com https:\/\/*.googletagmanager.com https:\/\/*.googlesyndication.com https:\/\/*.fontawesome.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/fonts.bunny.net https:\/\/fonts.static.com https:\/\/*.nosto.com https:\/\/*.nos.to https:\/\/assets.braintreegateaway.com https:\/\/*.cloudfront.net https:\/\/*.reviews.io https:\/\/*.reviews.co.uk https:\/\/preprod-cdn.otter.ro https:\/\/cdn.otter.ro 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.googlesyndication.com https:\/\/use.fontawesome.com https:\/\/assets.braintreegateway.com https:\/\/d2c7ipcroan06u2.cloudfront.net; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.googleapis.com https:\/\/fonts.bunny.net fonts.googleapis.com preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com cdn.jsdelivr.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.nosto.com *.nos.to *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors https:\/\/www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.google.com\/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.innoship.ro *.nosto.com *.nos.to *.reviews.io *.reviews.co.uk preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com cdn.jsdelivr.net https:\/\/www.googletagmanager.com https:\/\/consentcdn.cookiebot.eu https:\/\/event.2performant.com https:\/\/ams.creativecdn.com https:\/\/www.gstatic.com\/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com *.tile.openstreetmap.org *.openstreetmap.org https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ * https:\/\/www.magezon.com *.nosto.com *.nos.to *.cloudfront.net *.reviews.io *.reviews.co.uk https:\/\/firebasestorage.googleapis.com quickchart.io img.youtube.com www.google.com.ua preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com cdn.jsdelivr.net https:\/\/ss.otter.ro data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https:\/\/www.google.com\/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com cdn.jsdelivr.net *.tiktok.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ * *.nosto.com *.nos.to *.reviews.io *.reviews.co.uk *.fontawesome.com *.googleapis.com https:\/\/www.gstatic.com\/ *.avada.io *.shopify.com maps.googleapis.com preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com https:\/\/cdn.otter.ro https:\/\/ss.otter.ro 'self' 'unsafe-inline' 'unsafe-eval'; style-src https:\/\/*.adobe.com fonts.googleapis.com *.googleapis.com https:\/\/*.doubleclick.net https:\/\/*.facebook.com *.gstatic.com https:\/\/*.googletagmanager.com https:\/\/*.googlesyndication.com *.tiktok.com https:\/\/*.fontawesome.com maxcdn.bootstrapcdn.com https:\/\/static.klaviyo.com https:\/\/*.nosto.com *.nos.to https:\/\/*.cloudfront.net *.reviews.io *.reviews.co.uk https:\/\/fonts.bunny.net fonts.gstatic.com preprod-cdn.otter.ro cdn.otter.ro dev.otter247.local stage2.otter.ro stage2.tezyo.ro stage2.gryxx.ro stage2.aldoshoes.ro data: https:\/\/cdn.jsdelivr.net https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/fonts.static.com https:\/\/*.nos.to https:\/\/assets.braintreegateaway.com https:\/\/*.reviews.io https:\/\/*.reviews.co.uk https:\/\/preprod-cdn.otter.ro https:\/\/cdn.otter.ro 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.googlesyndication.com https:\/\/use.fontawesome.com https:\/\/assets.braintreegateway.com https:\/\/d2c7ipcroan06u2.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com cdn.jsdelivr.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.facebook.com *.facebook.net https:\/\/www.google.com\/ *.doubleclick.net *.googlesyndication.com *.tiktok.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.nosto.com *.nos.to *.cloudfront.net *.reviews.io *.reviews.co.uk https:\/\/get.geojs.io *.avada.io maps.googleapis.com preprod-cdn.otter.ro cdn.otter.ro stage2.otter.ro stage2.tezyo.ro stage2.gryxx.ro stage2.aldoshoes.ro static.klaviyo.com cdn.jsdelivr.net https:\/\/tezyo.zendesk.com https:\/\/ekr.zdassets.com https:\/\/*.zendesk.com https:\/\/*.zdassets.com https:\/\/event.2performant.com https:\/\/tidytracking.com https:\/\/ss.otter.ro 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/www.googletagmanager.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com data:; img-src 'self' https: data: blob:; connect-src 'self' https:; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' ajax.aspnetcdn.com *.plexonline.com *.plexus-online.com *.plex.com web-sdk.aptrinsic.com; style-src 'report-sample' 'self' data: 'unsafe-inline' ajax.aspnetcdn.com *.plexonline.com *.plexus-online.com *.plex.com web-sdk.aptrinsic.com; img-src 'self' data: ajax.aspnetcdn.com *.plexonline.com *.plexus-online.com www.gstatic.com 127.0.0.1:18623 *.plex.com; font-src 'self' *.plex.com data: *.plexus-online.com fonts.gstatic.com maxcdn.bootstrapcdn.com *.plexonline.com at.alicdn.com use.typekit.net; connect-src 'self' web-sdk.aptrinsic.com esp.aptrinsic.com *.plex.com pcn-move.plexdev.io cdnma.cdnservice.space cdnma.global-cache.online cdnmb.global-cache.online 127.0.0.1:18623 js.authorize.net tablet.sigwebtablet.com:47290; media-src 'self' *.plex.com; object-src 'self'; child-src 'self'; frame-src 'self'; worker-src 'self'; frame-ancestors 'self' www.plexonline.com www.plexus-online.com; form-action 'self' *.plexus-online.com *.plexonline.com *.plex.com; base-uri 'self'; manifest-src 'self'; script-src-elem 'self' 'unsafe-inline' web-sdk.aptrinsic.com www.gstatic.com *.plexonline.com *.plex.com js.authorize.net jstest.authorize.net *.google-analytics.com www.pagespeed-mod.com *.plexus-online.com www.gstatic.com; style-src-elem 'unsafe-inline' *.plexonline.com web-sdk.aptrinsic.com www.gstatic.com maxcdn.bootstrapcdn.com *.plex.com *.plexus-online.com; report-uri https:\/\/csp.security.plex.com\/csp\/reporting","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' adform.net *.adform.net betano.com *.betano.com betano.dk *.betano.dk betgenius.com *.betgenius.com cookielaw.org *.cookielaw.org creativecdn.com *.creativecdn.com facebook.net *.facebook.net fullstory.com *.fullstory.com gmlinteractive.com *.gmlinteractive.com googletagmanager.com *.googletagmanager.com optimove.net *.optimove.net sportradar.com *.sportradar.com cloudflareinsights.com *.cloudflareinsights.com app.delivery *.app.delivery lgrckt-in.com *.lgrckt-in.com tostarsbuilding.com *.tostarsbuilding.com *.performgroup.com *.bing.com *.taboola.com *.geocomply.com *.kameleoon.io *.kameleoon.eu *.ads-twitter.com *.google-analytics.com *.kaizengaming.com *.cloudflare.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.scoutgg.net *.sportradarserving.com *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co d32tdr35c4icxo.cloudfront.net; worker-src 'self' blob:; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=nvpgdY9ejcdKvsIHJM3psL2nqOjMSlzpefjYzWIvLWk-1788505618.1959794-1.0.1.1-hxi0GPu_E5TxTWNA7rJmu1G.x3VokUCSACP1ummMACHrlzN913ecINczp1CojTAddUHD4KW847jPNKb.ud1h5ngMVHz.votMvmxGaZejzjBj.PNtIlUDwtAPq_LFuFhy3ku7wWY.2TAzqKPdl1IP0okHxswf0LOl8JtgxsboX5A6h7z7jBl0iaWWQ9iwKRbS; report-to cf-cxwgeaxnqmcrmyxg","count":1},{"content-security-policy-report-only":" default-src 'self'; img-src 'self' 'unsafe-inline' data: blob: https: https:\/\/www.googletagmanager.com https:\/\/ssl.gstatic.com https:\/\/www.gstatic.com https:\/\/*.maxwork.pt https:\/\/*.maxwork.fr https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/api.mapbox.com https:\/\/*.proptexx.com https:\/\/widget.opinionsystem.fr; font-src 'self' https: data:; media-src 'self' https: blob: data:; connect-src https: wss: https:\/\/*.maxwork.pt https:\/\/*.maxwork.fr; script-src 'self' 'nonce-xnNb7ni-Vuv1eQeiGuTaTu150IbrU4dsfDjk7n41AZE' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/pagead2.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/ad.doubleclick.net https:\/\/ade.googlesyndication.com https:\/\/adservice.google.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.facebook.net 'sha256-vq3MdMjj+48fD6QeeFSr4SDBaDKd1ciOBDLl5J\/otHU=' https:\/\/*.proptexx.com https:\/\/api.mapbox.com https:\/\/*.cookiebot.com https:\/\/widget.opinionsystem.fr https:\/\/deskbolt.com https:\/\/*.deskbolt.com 'sha256-C2KfArrunTPoL2Kq85oxvp4H5m3fX6SjROY6tiauAAE=' https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/*.clarity.ms 'sha256-oD7IpqoAHRbqg0aDpmIBd08ulAhgbSXDtdixbfkH\/L4='; object-src 'self'; frame-src 'self' https:; form-action 'self'; frame-ancestors 'self'; worker-src 'self' blob:; base-uri 'self'; style-src 'self' 'unsafe-inline' https:\/\/*.proptexx.com https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/www.gstatic.com https:\/\/widget.opinionsystem.fr https:\/\/deskbolt.com https:\/\/*.deskbolt.com; report-uri \/api\/csp-report; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" font-src use.typekit.net fonts.gstatic.com static.sensefuel.live *.lafoirfouille.fr data: 'self' 'unsafe-inline'; form-action sogecommerce.societegenerale.eu *.multisafepay.com *.lafoirfouille.fr 'self' 'unsafe-inline'; frame-src www.google.com sogecommerce.societegenerale.eu https:\/\/v.calameo.com\/ *.lafoirfouille.fr 'self' 'unsafe-inline' about: data:; img-src www.googletagmanager.com cdn-cookieyes.com tag.beyable.com www.facebook.com tr.snapchat.com *.lafoirfouille.fr data: 'self' 'unsafe-inline'; script-src front.activation.beyable.com tag.search.sensefuel.live tag.search.sensefuel.com tag.beyable.com www.gstatic.com www.google.com www.googletagmanager.com cdn-cookieyes.com *.socloz.com beyableprodrt.blob.core.windows.net connect.facebook.net sc-static.net *.clarity.ms *.lafoirfouille.fr 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com use.typekit.net p.typekit.net tag.search.sensefuel.com *.search.sensefuel.live tag.beyable.com *.lafoirfouille.fr 'self' 'unsafe-inline'; manifest-src *.lafoirfouille.fr 'self' 'unsafe-inline'; connect-src cdn-cookieyes.com *.cookieyes.com geolocation.onetrust.com *.search.sensefuel.live api.sensefuel.live *.ingest.de.sentry.io *.google-analytics.com beyableprodrt.blob.core.windows.net www.googletagmanager.com www.google.com graph.facebook.com www.facebook.com tr.snapchat.com *.clarity.ms *.lafoirfouille.fr 'self' 'unsafe-inline'; media-src *.search.sensefuel.live *.lafoirfouille.fr 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; frame-ancestors https:\/\/api.cqeq65dd63-ffdigital1-d1-public.model-t.cc.commerce.ondemand.com https:\/\/api.cqeq65dd63-ffdigital1-s1-public.model-t.cc.commerce.ondemand.com https:\/\/api.cqeq65dd63-ffdigital1-p1-public.model-t.cc.commerce.ondemand.com https:\/\/v.calameo.com https:\/\/*.lafoirfouille.fr\/ 'self'; object-src data: 'self' 'unsafe-inline'; child-src www.google.com sogecommerce.societegenerale.eu https:\/\/v.calameo.com\/ *.lafoirfouille.fr http: https: blob: data: 'self' 'unsafe-inline' about:; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-XJZn5r9evJj8oNwRzyx3uCSv9851q4QZSCg80Qwl' https:\/\/challenges.cloudflare.com https:\/\/www.instagram.com https:\/\/play.pod.co; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:\/\/media.creativeboom.com; media-src 'self' https:\/\/media.creativeboom.com; font-src 'self'; connect-src 'self'; frame-src https:\/\/www.youtube.com https:\/\/youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/www.instagram.com https:\/\/instagram.com https:\/\/challenges.cloudflare.com https:\/\/play.pod.co; base-uri 'self'; form-action 'self'; object-src 'none'; report-uri https:\/\/www.creativeboom.com\/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/js.stripe.com https:\/\/challenges.cloudflare.com https:\/\/js.cloudflare.com https:\/\/newrelic.com https:\/\/js-agent.newrelic.com https:\/\/beacon.helpscout.net https:\/\/beacon-v2.helpscout.net https:\/\/ajax.googleapis.com https:\/\/api.amplitude.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/showroom.doyoubuzz.com; img-src 'self' data: https:\/\/www.google-analytics.com https:\/\/ssl.gstatic.com https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com https:\/\/www.doyoubuzz.com https:\/\/images.prismic.io https:\/\/static.cdn.prismic.io; frame-src 'self' https:\/\/www.google.com https:\/\/js.stripe.com https:\/\/challenges.cloudflare.com https:\/\/secure.helpscout.net https:\/\/www.youtube.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/js-agent.newrelic.com https:\/\/bam.nr-data.net https:\/\/beacon.helpscout.net https:\/\/api.stripe.com https:\/\/region1.google-analytics.com https:\/\/region1.analytics.google.com https:\/\/beacon-v2.helpscout.net https:\/\/*.cloudfront.net https:\/\/api.amplitude.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/beaconapi.helpscout.net data; style-src-elem 'self' 'unsafe-inline' https:\/\/www.gstatic.com https:\/\/fonts.googleapis.com; media-src 'self' https:\/\/beacon-v2.helpscout.net; style-src-attr 'unsafe-inline'; form-action 'self'; object-src 'none'; frame-ancestors 'self'; report-to default","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' www.uscc.gov www.google.com analytics.google.com fonts.googleapis.com www.googletagmanager.com www.gstatic.com fonts.gstatic.com use.fontawesome.com s7.addthis.com www.senate.gov;","count":1},{"content-security-policy-report-only":" default-src 'self' https: *.channel.io *.channel.app *.cdninstagram.com; font-src 'self' https: data:; img-src 'self' https: data: blob: https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com *.channel.io *.cdninstagram.com *.with.is; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/js.stripe.com https:\/\/connect.facebook.net https:\/\/platform.twitter.com https:\/\/cdn.jsdelivr.net https:\/\/*.googletagmanager.com https:\/\/www.google-analytics.com *.channel.io *.sentry-cdn.com https:\/\/static.ads-twitter.com https:\/\/js-agent.newrelic.com *.with.is; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https:\/\/api.stripe.com https:\/\/analytics.twitter.com https:\/\/www.facebook.com https:\/\/support.with.is *.channel.io *.channel.app *.sentry.io wss:\/\/*.channel.io wss:\/\/*.desk-ws.channel.io wss:\/\/*.front-ws.channel.io https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/*.google.co.jp https:\/\/*.google.com wss:\/\/ntjp.mieru-ca.com https:\/\/bam.nr-data.net *.with.is; frame-src 'self' https:\/\/js.stripe.com https:\/\/www.facebook.com https:\/\/www.youtube.com https:\/\/cdn.d2-apps.net https:\/\/10252404.fls.doubleclick.net https:\/\/www.google.com https:\/\/with-1923.firebaseapp.com; report-uri \/csp-violation-report","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk https:\/\/www.googletagmanager.com\/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.bing.com *.googleadservices.com *.google.co.uk maps.gstatic.com *.googletagmanager.com *.expressentry.melissadata.net *.paypalobjects.com *.ometria.services *.feefo.com *.adobedtm.com https:\/\/www.anglingdirect.co.uk *.pbffinancecalculator.info cdn.shopify.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ *.ometria.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.bing.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleapis.com googleapis.com maps.googleapis.com expressentry.melissadata.net *.paypalobjects.com *.ometria.services *.noibu.com https:\/\/www.noibu.com https:\/\/cdn.noibu.com *.facebook.net https:\/\/cdn.jsdelivr.net https:\/\/applepay.cdn-apple.com https:\/\/www.anglingdirect.co.uk *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.dixa.io x.klarnacdn.net *.klarnaservices.com *.avada.io *.shopify.com https:\/\/api.ometria.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.ometria.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.klarnacdn.net *.fontawesome.com https:\/\/fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.bing.com *.googletagmanager.com *.googlesyndication.com *.googleapis.com maps.googleapis.com places.googleapis.com expressentry.melissadata.net *.paypalobjects.com *.ometria.services *.advancedcommerce.services https:\/\/cdn.noibu.com wss:\/\/input.noibu.com https:\/\/input.noibu.com *.noibu.com *.facebook.net https:\/\/cdn.jsdelivr.net *.apple.com https:\/\/api.stripe.com ad.doubleclick.net *.doubleclick.net doubleclick.net *.staging-pbffinancecalculator.info *.pbffinancecalculator.info wss:\/\/*.staging-pbffinancecalculator.info wss:\/\/*.pbffinancecalculator.info *.paybyfinance.co.uk http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.dixa.io x.klarnacdn.net *.klarnaservices.com https:\/\/get.geojs.io *.avada.io https:\/\/api.ometria.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.ometria.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:;","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.sharethis.com platform.cloud-iq.com.au *.facebook.com *.adyen.com *.doubleclick.net *.bedbathntable.com.au *.criteo.com *.pinterest.com *.dotdigital-pages.com *.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.youtube.com www.youtube-nocookie.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net * *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.sharethis.com *.googleapis.com dev.visualwebsiteoptimizer.com *.google.com *.facebook.com *.cloud-iq.com.au *.adyen.com *.afterpay.com *.linksynergy.com *.google.com.au *.bedbathntable.com.au bbnt-m2-image-library.s3-ap-southeast-2.amazonaws.com *.cdninstagram.com *.google.lk *.doubleclick.net *.bidswitch.net *.adnxs.com *.smartadserver.com *.taboola.com *.socdm.com *.criteo.com *.casalemedia.com *.dable.io *.adingo.jp *.stickyadstv.com *.360yield.com *.rlcdn.com *.media.net *.bing.com *.yieldmo.com *.aralego.com *.3lift.com *.clmbtech.com *.teads.tv *.smaato.net *.rubiconproject.com *.pubmatic.com *.outbrain.com *.aralego.net *.bluekai.com *.1rx.io *.contextweb.com *.unrulymedia.com px.ads.linkedin.com *.trackedlink.net *.ddlnk.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com t.zip.co static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.googletagmanager.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https:\/\/rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.sharethis.com *.googleapis.com *.gstatic.com *.searchspring.net *.athoscommerce.net applepay.cdn-apple.com dev.visualwebsiteoptimizer.com cdnjs.cloudflare.com bam-cell.nr-data.net platform.cloud-iq.com.au *.crazyegg.com *.facebook.net *.facebook.com *.rakuten.com googleads.g.doubleclick.net cdn.lr-ingest.io *.foursixty.com *.bedbathntable.com.au *.tiktok.com *.pinimg.com *.criteo.com *.pinterest.com *.freshworks.net *.freshworks.com *.abtasty.com snap.licdn.com *.clarity.ms *.stackadapt.com *.insightech.com foursixty.com *.zip.co player.vimeo.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com static.zip.co zip.co https:\/\/www.bedbathntable.com.au 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.sharethis.com *.searchspring.net *.athoscommerce.net unpkg.com *.foursixty.com *.bedbathntable.com.au *.cloud-iq.com.au use.typekit.net p.typekit.net *.stackadapt.com foursixty.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.sharethis.com *.googleapis.com *.searchspring.net *.athoscommerce.net *.crazyegg.com googleads.g.doubleclick.net *.lr-ingest.io *.foursixty.com foursixty.com *.google-analytics.com *.doubleclick.net *.bedbathntable.com.au *.pinterest.com *.pangle-ads.com *.tiktok.com *.criteo.com *.freshworks.net *.freshworks.com *.attraqt.io *.abtasty.com px.ads.linkedin.com *.clarity.ms *.insightech.com *.stackadapt.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" form-action 'self' https:\/\/uwosh.tfaforms.net https:\/\/www.facebook.com\/tr\/; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/*.doubleclick.net https:\/\/syndicatedsearch.goog https:\/\/*.adtrafficquality.google https:\/\/www.google.com https:\/\/tr.snapchat.com https:\/\/player.vimeo.com https:\/\/www.youtube.com https:\/\/static.addtoany.com https:\/\/www.facebook.com https:\/\/public.tableau.com https:\/\/bbox.blackbaudhosting.com https:\/\/cdn.yoshki.com https:\/\/cdnapisec.kaltura.com; frame-ancestors 'self'; object-src 'none'; report-uri https:\/\/sentry.it.uwosh.edu\/api\/3\/security\/?sentry_key=a83fa724347d841bd65fdab57f19925a; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" default-src blob: https:\/\/*.mhcache.com;font-src 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com https:\/\/fonts.gstatic.com;frame-src 'self' https:\/\/*.mhcache.com https:\/\/portal.allyable.com https:\/\/mh-site-files-5c53d6a9947c.s3.amazonaws.com https:\/\/myheritage-container.com https:\/\/www.myheritage-partners.com https:\/\/www.myheritage.com https:\/\/*.mk-sense.com https:\/\/player.vimeo.com https:\/\/*.facebook.com https:\/\/*.google.com https:\/\/tpc.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/accounts.google.com\/gsi\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/recaptcha.google.com\/recaptcha\/  https:\/\/widget.trustpilot.com;script-src https:\/\/accounts.google.com\/gsi\/client https:\/\/www.datadoghq-browser-agent.com https:\/\/appleid.cdn-apple.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/maps.googleapis.com *.myheritage.pl https:\/\/www.myheritage.pl  'unsafe-eval' 'nonce-651437b7e4a7e3da7b47b0484f0ef5e5' 'strict-dynamic' https:\/\/widget.trustpilot.com https:\/\/invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com https:\/\/fonts.googleapis.com https:\/\/accounts.google.com\/gsi\/style  https:\/\/widget.trustpilot.com;connect-src data: 'self' https:\/\/*.myheritage.com https:\/\/portal.allyable.com https:\/\/*.mhcache.com https:\/\/adservice.google.com https:\/\/*.logs.datadoghq.com https:\/\/*.browser-intake-datadoghq.com https:\/\/browser-intake-datadoghq.com https:\/\/sentry.io https:\/\/*.bing.com https:\/\/*.facebook.com https:\/\/*.doubleclick.net https:\/\/*.mk-sense.com https:\/\/*.filae.com https:\/\/accounts.google.com\/gsi\/ https:\/\/www.google.com\/pagead\/landing https:\/\/maps.googleapis.com\/maps\/api\/mapsjs\/gen_204 https:\/\/translate.googleapis.com https:\/\/www.google.com\/ccm\/collect https:\/\/cdn.builder.io https:\/\/www.google.com\/recaptcha\/enterprise\/* https:\/\/www.google.com\/recaptcha\/enterprise\/ https:\/\/www.google.com\/recaptcha\/enterprise\/clr https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com https:\/\/people.googleapis.com https:\/\/translate-pa.googleapis.com *.myheritage.pl https:\/\/widget.trustpilot.com;media-src 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com;frame-ancestors 'self' https:\/\/builder.io;img-src * data:  https:\/\/widget.trustpilot.com https:\/\/*.trustpilot.com;object-src 'none';base-uri 'self' https:\/\/*.mhcache.com;report-uri \/FP\/API\/ContentSecurityPolicy\/report-violation.php?report_mode=report&canonical_page_id=\/company\/home\/","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/maps.googleapis.com https:\/\/*.yotpo.com https:\/\/static.zdassets.com https:\/\/*.zendesk.com https:\/\/cdn.scarabresearch.com https:\/\/static.scarabresearch.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/connect.facebook.net https:\/\/js.adsrvr.org https:\/\/www.clarity.ms https:\/\/scripts.clarity.ms https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/seoab.io https:\/\/*.usercentrics.eu https:\/\/*.cmp.usercentrics.eu https:\/\/cdn.jsdelivr.net https:\/\/app.checkout.australia-southeast1.gcp.commercetools.com https:\/\/*.assets.australia-southeast1.gcp.3.commercetools.app https:\/\/checkoutshopper-live.adyen.com https:\/\/checkoutshopper-live-au.adyen.com https:\/\/checkoutshopper-test.adyen.com https:\/\/pay.google.com https:\/\/www.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/applepay.cdn-apple.com https:\/\/www.youtube.com https:\/\/player.vimeo.com; style-src 'self' 'unsafe-inline' https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/fonts.googleapis.com https:\/\/*.yotpo.com https:\/\/app.checkout.australia-southeast1.gcp.commercetools.com https:\/\/checkoutshopper-live.adyen.com https:\/\/checkoutshopper-live-au.adyen.com https:\/\/checkoutshopper-test.adyen.com https:\/\/embed.typeform.com; font-src 'self' https:\/\/use.typekit.net https:\/\/fonts.gstatic.com data: https:\/\/applepay.cdn-apple.com https:\/\/*.yotpo.com; img-src 'self' data: blob: https:\/\/images.cdn.australia-southeast1.gcp.commercetools.com https:\/\/images.ctfassets.net https:\/\/videos.ctfassets.net https:\/\/bynder.beaconlighting.com.au https:\/\/assets.beaconlighting.com.au https:\/\/www.beaconlighting.com.au https:\/\/beacon-lighting-assets.s3.ap-southeast-2.amazonaws.com https:\/\/beacon-lighting-assets-prod.s3.ap-southeast-2.amazonaws.com https:\/\/static.pxlecdn.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/www.gstatic.com https:\/\/www.google.com https:\/\/www.google.com.au https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/www.facebook.com https:\/\/insight.adsrvr.org https:\/\/*.hotjar.com https:\/\/*.clarity.ms https:\/\/*.usercentrics.eu https:\/\/*.cmp.usercentrics.eu https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/*.yotpo.com https:\/\/p.yotpoapi.com https:\/\/*.zdassets.com https:\/\/*.zendesk.com https:\/\/checkoutshopper-live.adyen.com https:\/\/checkoutshopper-live-au.adyen.com https:\/\/checkoutshopper-test.adyen.com https:\/\/checkoutshopper-live.cdn.adyen.com https:\/\/checkoutshopper-test.cdn.adyen.com https:\/\/pay.google.com https:\/\/*.paypal.com https:\/\/*.paypalobjects.com https:\/\/applepay.cdn-apple.com https:\/\/img.youtube.com https:\/\/i.ytimg.com https:\/\/i.vimeocdn.com https:\/\/ade.googlesyndication.com; connect-src 'self' https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/*.algolia.io https:\/\/cdn.contentful.com https:\/\/preview.contentful.com https:\/\/images.ctfassets.net https:\/\/assets.ctfassets.net https:\/\/dev-api.beaconlighting.com.au https:\/\/api.beaconlighting.com.au https:\/\/api-ct-bff.beaconlighting.com.au https:\/\/api-ct-bff-staging.beaconlighting.com.au https:\/\/cognito-idp.ap-southeast-2.amazonaws.com https:\/\/cognito-identity.ap-southeast-2.amazonaws.com https:\/\/app.checkout.australia-southeast1.gcp.commercetools.com https:\/\/checkout.australia-southeast1.gcp.commercetools.com https:\/\/*.australia-southeast1.gcp.3.commercetools.app https:\/\/checkoutshopper-live.adyen.com https:\/\/checkoutshopper-live-au.adyen.com https:\/\/checkoutshopper-test.adyen.com https:\/\/checkoutshopper-live.cdn.adyen.com https:\/\/checkoutshopper-test.cdn.adyen.com https:\/\/checkoutanalytics-live.adyen.com https:\/\/checkoutanalytics-test.adyen.com https:\/\/pay.google.com https:\/\/*.paypal.com https:\/\/maps.googleapis.com https:\/\/*.yotpo.com https:\/\/www.google.com https:\/\/distillery.pixlee.co https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/analytics.google.com https:\/\/www.googletagmanager.com https:\/\/www.google.com.au https:\/\/ad.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/google.com https:\/\/www.facebook.com https:\/\/7s-d309b5b93ece4e188e0aa4e9c7906f0f.ecs.us-west-1.on.aws https:\/\/insight.adsrvr.org https:\/\/*.clarity.ms https:\/\/*.hotjar.com wss:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/recommender.scarabresearch.com https:\/\/webchannel-content.eservice.emarsys.net https:\/\/*.usercentrics.eu https:\/\/*.cmp.usercentrics.eu https:\/\/*.zdassets.com https:\/\/*.zendesk.com https:\/\/*.zopim.com wss:\/\/*.zendesk.com wss:\/\/*.zopim.com https:\/\/vimeo.com; media-src 'self' blob: https:\/\/videos.ctfassets.net https:\/\/bynder.beaconlighting.com.au https:\/\/assets.beaconlighting.com.au https:\/\/beacon-lighting-assets.s3.ap-southeast-2.amazonaws.com https:\/\/beacon-lighting-assets-prod.s3.ap-southeast-2.amazonaws.com; frame-src 'self' https:\/\/www.google.com https:\/\/app.checkout.australia-southeast1.gcp.commercetools.com https:\/\/checkoutshopper-live.adyen.com https:\/\/checkoutshopper-live-au.adyen.com https:\/\/checkoutshopper-test.adyen.com https:\/\/pay.google.com https:\/\/*.paypal.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/my.matterport.com https:\/\/form.typeform.com https:\/\/www.facebook.com https:\/\/insight.adsrvr.org https:\/\/match.adsrvr.org https:\/\/*.fls.doubleclick.net https:\/\/asia.creativecdn.com https:; frame-ancestors https:\/\/app.contentful.com; form-action 'self' https:; base-uri 'self'; object-src 'none'; worker-src 'self' blob:; manifest-src 'self'; report-uri \/api\/csp-report; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval' *.alicdn.com *.aliyun.com *.alyasset.com *.alcasset.com *.alipay.com log.mmstat.com ynuf.aliapp.org *.alipayobjects.com local.alipcsec.com:6691 appx appx-t2; style-src 'unsafe-inline' *.alicdn.com *.aliyun.com *.alipay.com *.alipayobjects.com; font-src data: *.alicdn.com *.aliyun.com *.alipayobjects.com; frame-src *.aliyun.com *.alicdn.com *.aliyuncs.com *.alipay.com *.taobao.com *.alibabacloud.com *.1688.com xstore.insights.1688.com; report-uri \/\/www.aliyun.com\/api\/log\/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self'; font-src data: https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/composer.apps.nonprod.cf.dmtech.cloud; script-src 'self' https:\/\/*.bazaarvoice.com https:\/\/app.usercentrics.eu https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/composer.apps.nonprod.cf.dmtech.cloud https:\/\/d2pqvatijh75rn.cloudfront.net https:\/\/exc.mm.dm.at https:\/\/mpsnare.iesnare.com https:\/\/omt.dm.at https:\/\/tags.tiqcdn.com https:\/\/web.cmp.usercentrics.eu https:\/\/www.dm.at https:\/\/www.google.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com https:\/\/www.gstatic.com\/recaptcha\/; worker-src 'self' blob:; connect-src 'self' https:\/\/*.bazaarvoice.com https:\/\/aggregator.service.usercentrics.eu https:\/\/api.mapbox.com https:\/\/api.usercentrics.eu https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/browser-intake-datadoghq.eu https:\/\/cart-recos.services.dmtech.com https:\/\/cdcs.usercentrics.eu https:\/\/collect.tealiumiq.com https:\/\/consent-api.service.consent.usercentrics.eu https:\/\/consent-rt-ret.service.consent.usercentrics.eu https:\/\/consents.usercentrics.eu https:\/\/content-preview.apps.prod.gcp.dmtech.cloud https:\/\/d2pqvatijh75rn.cloudfront.net https:\/\/direct-collect.dy-api.eu https:\/\/direct.dy-api.eu https:\/\/dmpay-gateway.services.dmtech.com https:\/\/dy-api.eu https:\/\/editorial-content.dm-static.com https:\/\/events.mapbox.com https:\/\/exc.mm.dm.at https:\/\/frontend-tracking-infra-service.services.dmtech.com https:\/\/graphql.usercentrics.eu https:\/\/insights.algolia.io https:\/\/logs.browser-intake-datadoghq.eu https:\/\/maut-prod.services.dmtech.com https:\/\/maut-rls.nonprod.services.dmtech.com https:\/\/mpsnare.iesnare.com https:\/\/my-products-api.services.dmtech.com https:\/\/omacs.services.dmtech.com https:\/\/omc.dm.at https:\/\/predictive-shopping-service.services.dmtech.com https:\/\/product-based-recos.services.dmtech.com https:\/\/product-search.services.dmtech.com https:\/\/product-semantic-search.services.dmtech.com https:\/\/rcom-eu.dynamicyield.com https:\/\/recos-as-a-service.services.dmtech.com https:\/\/region1.google-analytics.com https:\/\/retail-media.services.dmtech.com https:\/\/rum.browser-intake-datadoghq.eu https:\/\/s2s.adjust.com https:\/\/signin.dm.at https:\/\/sos-prod.availability.services.dmtech.com https:\/\/staedtetour.dm-fb2.de https:\/\/stars.services.dmtech.com https:\/\/storage.googleapis.com\/gift-card-builder-emergency-disabled-bucket\/ https:\/\/store-data-service.services.dmtech.com https:\/\/store-order-service.services.dmtech.com https:\/\/v1.api.service.cmp.usercentrics.eu https:\/\/www.google-analytics.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/zoe-shop-proxy-prod.services.dmtech.com https:\/\/kuba-prod.services.dmtech.com https:\/\/zoe-shop-proxy-prod.services.dmtech.com https:\/\/cartnext.services.dmtech.com https:\/\/dmcsm-proxy.prod.services.dmtech.com https:\/\/zoe-shop-proxy-prod.services.dmtech.com https:\/\/customer-helpcenter-prod.services.dmtech.com https:\/\/paint-prod.services.dmtech.com https:\/\/content.services.dmtech.com https:\/\/content-search-service-preview.apps.prod.gcp.dmtech.cloud https:\/\/content-search-service.services.dmtech.com https:\/\/products.dm.de https:\/\/pds-import-prod.apps.prod.gcp.dmtech.cloud https:\/\/shopping-list-prod.services.dmtech.com; media-src 'self'; style-src 'self' 'unsafe-inline' https:\/\/*.bazaarvoice.com https:\/\/api.tiles.mapbox.com https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/composer.apps.nonprod.cf.dmtech.cloud; form-action 'self' https:\/\/*.bazaarvoice.com https:\/\/apps.bazaarvoice.com https:\/\/checkout.dm.at https:\/\/giftcard-checkout.dm.de\/api\/checkout https:\/\/signin.dm.at; img-src 'self' blob: data: https:\/\/*.bazaarvoice.com https:\/\/app.usercentrics.eu https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/cdn-eu.dynamicyield.com https:\/\/composer.apps.nonprod.cf.dmtech.cloud https:\/\/content-preview.apps.prod.gcp.dmtech.cloud https:\/\/d2pqvatijh75rn.cloudfront.net https:\/\/editorial-content.dm-static.com https:\/\/exc.mm.dm.at https:\/\/i.ytimg.com https:\/\/images.podigee-cdn.net https:\/\/img.usercentrics.eu https:\/\/img.youtube.com\/ https:\/\/media.dm-static.com https:\/\/photos-eu.bazaarvoice.com https:\/\/products.dm-static.com https:\/\/uct.service.usercentrics.eu https:\/\/content.services.dmtech.com; frame-ancestors 'self' https:\/\/account.dm.at https:\/\/app.datadoghq.eu https:\/\/checkout.dm.at https:\/\/content-preview.apps.prod.gcp.dmtech.cloud https:\/\/mobileapp.dm.at https:\/\/studio.dm-drogeriemarkt.com; frame-src 'self' https:\/\/*.bazaarvoice.com https:\/\/account.dm.at https:\/\/app.usercentrics.eu https:\/\/apps.bazaarvoice.com https:\/\/assets.dm.de https:\/\/cdn.podigee.com https:\/\/checkout.dm.at https:\/\/configurator.nuk.de https:\/\/gastfamilie.podigee.io https:\/\/geburtskanal-dm.podigee.io https:\/\/hey-familie.podigee.io https:\/\/kinderwunschsprechstunde.podigee.io https:\/\/mobileapp.dm.at https:\/\/player.podigee-cdn.net https:\/\/recaptcha.google.com\/recaptcha\/ https:\/\/sandbox.om.dm.at https:\/\/signin.dm.at https:\/\/web.cmp.usercentrics.eu https:\/\/www.google.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.youtube-nocookie.com; base-uri 'self' https:\/\/exc.mm.dm.at; child-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint; report-uri \/__csp-reports__","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/tagmanager.google.com https:\/\/connect.facebook.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/www.googletagmanager.com; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.youtube.com; object-src 'none';","count":1},{"content-security-policy-report-only":" script-src * 'self' 'unsafe-inline' 'unsafe-eval' blob *.zuerich.com *.holidu.com *.usercentrics.eu plausible.io *.tomas-travel.com *.dynamics.com *.vimeo.com *.youtube.com *.youtube-nocookie.com *.facebook.net connect.facebook.net *.tiktok.com *.sojern.com static.sojern.com *.licdn.com snap.licdn.com *.datadoghq.com *.azureedge.net *.guidle.com *.list-manage.com *.ostendis.com cdnjs.cloudflare.com *.goodguys.ai *.joaia.app *.windows.net *.ddev.site *.platformsh.site *.jsdelivr.net *.siteimprove.net *.siteimprove.com *.cloudfront.net *.newrelic.com *.datatrans.com *.doubleclick.net secured-pixel.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleapis.com *.google.com; object-src *.ddev.site; style-src 'self' 'unsafe-inline' *.zuerich.com *.tomas-travel.com *.ostendis.com *.windows.net *.googleapis.com *.goodguys.ai *.ddev.site *.platformsh.site *.datatrans.com *.guidle.com *.joaia.app *.googletagmanager.com *.gstatic.com; img-src * 'self' blob: data: *.zuerich.com *.isu.pub *.mapz.com *.tomas-travel.com *.tomas.travel *.roundshot.com *.matterport.com *.goodguys.ai *.joaia.app *.ytimg.com *.vimeocdn.com *.usercentrics.eu *.yieldoptimizer.com *.doubleclick.net *.ads.linkedin.com *.adsrvr.org *.sojern.com *.adnxs.com *.giphy.com *.facebook.com *.tiktok.com *.tiktokw.us *.run.app *.ddev.site *.platformsh.site *.canto.de *.googlesyndication.com *.guidle.com bexi.ch *.sky-cam.ch *.yellow.camera *.einsiedeln.ch *.linkedin.com *.dynamics.com *.gstatic.com *.facebook.net *.amazee.io *.amazonaws.com *.brunnialpthal.ch *.honey.io *.phia.com *.pinterest.com *.rapperswil-zuerichsee.ch *.researchsolutions.com *.segelclub-sihlsee.ch *.studen-sz.ch *.waegitalersee.ch *.webcontentassessor.com *.webserve.ch *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleapis.com *.google.com; media-src 'self' *.zuerich.com *.vimeo.com *.youtube.com *.youtube-nocookie.com datawrapper.dwcdn.net *.ddev.site *.platformsh.site; frame-src *.googletagmanager.com *.usercentrics.eu *.doubleclick.net *.issuu.com *.vimeo.com *.zuerich.com *.ddev.site *.platformsh.site *.youtube-nocookie.com *.joaia.app *.goodguys.ai *.canto.de *.cloudfront.net *.datatrans.com *.facebook.net *.guidle.com *.dailymotion.com *.roundshot.com *.feratel.com *.youtube.com camserver.ch *.camserver.ch *.tiktok.com *.facebook.com *.fotoshare.co datawrapper.dwcdn.net *.lunchgate.ch *.zscloud.net *.baustoffportal.com *.dynamics.com *.matterport.com *.moving-pictures.com *.it-wms.com *.eyz.swiss *.rapperswil-zuerichsee.ch *.zuerich-experience.com *.tomas-travel.com; frame-ancestors 'self' *.joaia.app *.goodguys.ai; font-src 'self' data: *.gstatic.com *.zuerich.com *.ddev.site *.platformsh.site *.perplexity.ai; connect-src * 'self' *.zuerich.com *.sentry.io *.tomas-travel.com vimeo.com *.vimeo.com *.youtube.com *.youtube-nocookie.com *.usercentrics.eu plausible.io *.doubleclick.net *.g.doubleclick.net *.googlesyndication.com *.dynamics.com *.guidle.com *.ostendis.com cdnjs.cloudflare.com *.goodguys.ai wss:\/\/*.goodguys.ai *.amazonaws.com *.joaia.app *.facebook.net *.ads.linkedin.com px.ads.linkedin.com *.tiktok.com *.tiktokw.us *.run.app *.sojern.com *.conversionsapigateway.com *.logs.datadoghq.com *.browser-intake-datadoghq.com *.ddev.site *.platformsh.site *.siteimprove.com *.facebook.com *.canto.de *.datatrans.com *.azure-api.net *.launchdarkly.com *.linkedin.com *.windows.net *.wordtune.com rumt-zh.com safesearchinc.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleapis.com *.google.com *.azureedge.net; report-uri \/api\/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'sha256-LPVgiGXP5ugI6AyggLLDsIF8M9WRauLJwxaEP7ydWeQ=' https:\/\/analytics.ahrefs.com https:\/\/bat.bing.com https:\/\/beacon.riskified.com https:\/\/cdn-cookieyes.com https:\/\/chimpstatic.com https:\/\/device.maxmind.com https:\/\/dynamic.criteo.com https:\/\/form-assets.mailchimp.com https:\/\/js.authorize.net https:\/\/maps.googleapis.com https:\/\/static.olark.com https:\/\/api.olark.com https:\/\/utt.impactcdn.com https:\/\/www.clarity.ms https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com https:\/\/www.recaptcha.net https:\/\/www.redditstatic.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/static.olark.com https:\/\/www.gstatic.com; img-src 'self' data: blob: https:\/\/cdn.bullionexchanges.com https:\/\/log.olark.com https:\/\/www.gstatic.com https:\/\/bat.bing.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.facebook.com https:\/\/seal-newyork.bbb.org; connect-src 'self' https:\/\/bullionexchanges.com https:\/\/form-assets.mailchimp.com https:\/\/knrpc.olark.com https:\/\/api.olark.com https:\/\/js.authorize.net https:\/\/maps.googleapis.com https:\/\/analytics.ahrefs.com https:\/\/bat.bing.com https:\/\/beacon.riskified.com https:\/\/device.maxmind.com https:\/\/dynamic.criteo.com https:\/\/www.clarity.ms https:\/\/*.clarity.ms https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net; font-src 'self' https:\/\/fonts.gstatic.com; frame-src 'self' https:\/\/www.google.com https:\/\/www.recaptcha.net https:\/\/static.olark.com; worker-src 'self' blob:; frame-ancestors 'self';","count":1},{"content-security-policy-report-only":" default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' *.buzzsprout.com *.cookielaw.org *.getblueshift.com *.onetrust.org *.typekit.net *.vercel-scripts.com bat.bing.com connect.facebook.net static.hotjar.com script.hotjar.com vercel.live *.chatbot.com *.clarity.ms crux-api-onerhino.vercel.app unpkg.com cwv.onerhino.com *.internationalliving.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net;style-src 'self' 'unsafe-inline' *.typekit.net vercel.live;img-src 'self' blob: data: *.buzzsprout.com *.cookielaw.org *.ctfassets.net *.facebook.com *.internationalliving.com *.nodebb.com *.youtube.com *.ytimg.com *.vercel.com vercel.com *.bing.com *.clarity.ms https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com https:\/\/*.google.ad https:\/\/*.google.ae https:\/\/*.google.com.af https:\/\/*.google.com.ag https:\/\/*.google.al https:\/\/*.google.am https:\/\/*.google.co.ao https:\/\/*.google.com.ar https:\/\/*.google.as https:\/\/*.google.at https:\/\/*.google.com.au https:\/\/*.google.az https:\/\/*.google.ba https:\/\/*.google.com.bd https:\/\/*.google.be https:\/\/*.google.bf https:\/\/*.google.bg https:\/\/*.google.com.bh https:\/\/*.google.bi https:\/\/*.google.bj https:\/\/*.google.com.bn https:\/\/*.google.com.bo https:\/\/*.google.com.br https:\/\/*.google.bs https:\/\/*.google.bt https:\/\/*.google.co.bw https:\/\/*.google.by https:\/\/*.google.com.bz https:\/\/*.google.ca https:\/\/*.google.cd https:\/\/*.google.cf https:\/\/*.google.cg https:\/\/*.google.ch https:\/\/*.google.ci https:\/\/*.google.co.ck https:\/\/*.google.cl https:\/\/*.google.cm https:\/\/*.google.cn https:\/\/*.google.com.co https:\/\/*.google.co.cr https:\/\/*.google.com.cu https:\/\/*.google.cv https:\/\/*.google.com.cy https:\/\/*.google.cz https:\/\/*.google.de https:\/\/*.google.dj https:\/\/*.google.dk https:\/\/*.google.dm https:\/\/*.google.com.do https:\/\/*.google.dz https:\/\/*.google.com.ec https:\/\/*.google.ee https:\/\/*.google.com.eg https:\/\/*.google.es https:\/\/*.google.com.et https:\/\/*.google.fi https:\/\/*.google.com.fj https:\/\/*.google.fm https:\/\/*.google.fr https:\/\/*.google.ga https:\/\/*.google.ge https:\/\/*.google.gg https:\/\/*.google.com.gh https:\/\/*.google.com.gi https:\/\/*.google.gl https:\/\/*.google.gm https:\/\/*.google.gr https:\/\/*.google.com.gt https:\/\/*.google.gy https:\/\/*.google.com.hk https:\/\/*.google.hn https:\/\/*.google.hr https:\/\/*.google.ht https:\/\/*.google.hu https:\/\/*.google.co.id https:\/\/*.google.ie https:\/\/*.google.co.il https:\/\/*.google.im https:\/\/*.google.co.in https:\/\/*.google.iq https:\/\/*.google.is https:\/\/*.google.it https:\/\/*.google.je https:\/\/*.google.com.jm https:\/\/*.google.jo https:\/\/*.google.co.jp https:\/\/*.google.co.ke https:\/\/*.google.com.kh https:\/\/*.google.ki https:\/\/*.google.kg https:\/\/*.google.co.kr https:\/\/*.google.com.kw https:\/\/*.google.kz https:\/\/*.google.la https:\/\/*.google.com.lb https:\/\/*.google.li https:\/\/*.google.lk https:\/\/*.google.co.ls https:\/\/*.google.lt https:\/\/*.google.lu https:\/\/*.google.lv https:\/\/*.google.com.ly https:\/\/*.google.co.ma https:\/\/*.google.md https:\/\/*.google.me https:\/\/*.google.mg https:\/\/*.google.mk https:\/\/*.google.ml https:\/\/*.google.com.mm https:\/\/*.google.mn https:\/\/*.google.com.mt https:\/\/*.google.mu https:\/\/*.google.mv https:\/\/*.google.mw https:\/\/*.google.com.mx https:\/\/*.google.com.my https:\/\/*.google.co.mz https:\/\/*.google.com.na https:\/\/*.google.com.ng https:\/\/*.google.com.ni https:\/\/*.google.ne https:\/\/*.google.nl https:\/\/*.google.no https:\/\/*.google.com.np https:\/\/*.google.nr https:\/\/*.google.nu https:\/\/*.google.co.nz https:\/\/*.google.com.om https:\/\/*.google.com.pa https:\/\/*.google.com.pe https:\/\/*.google.com.pg https:\/\/*.google.com.ph https:\/\/*.google.com.pk https:\/\/*.google.pl https:\/\/*.google.pn https:\/\/*.google.com.pr https:\/\/*.google.ps https:\/\/*.google.pt https:\/\/*.google.com.py https:\/\/*.google.com.qa https:\/\/*.google.ro https:\/\/*.google.ru https:\/\/*.google.rw https:\/\/*.google.com.sa https:\/\/*.google.com.sb https:\/\/*.google.sc https:\/\/*.google.se https:\/\/*.google.com.sg https:\/\/*.google.sh https:\/\/*.google.si https:\/\/*.google.sk https:\/\/*.google.com.sl https:\/\/*.google.sn https:\/\/*.google.so https:\/\/*.google.sm https:\/\/*.google.sr https:\/\/*.google.st https:\/\/*.google.com.sv https:\/\/*.google.td https:\/\/*.google.tg https:\/\/*.google.co.th https:\/\/*.google.com.tj https:\/\/*.google.tl https:\/\/*.google.tm https:\/\/*.google.tn https:\/\/*.google.to https:\/\/*.google.com.tr https:\/\/*.google.tt https:\/\/*.google.com.tw https:\/\/*.google.co.tz https:\/\/*.google.com.ua https:\/\/*.google.co.ug https:\/\/*.google.co.uk https:\/\/*.google.com.uy https:\/\/*.google.co.uz https:\/\/*.google.com.vc https:\/\/*.google.co.ve https:\/\/*.google.co.vi https:\/\/*.google.com.vn https:\/\/*.google.vu https:\/\/*.google.ws https:\/\/*.google.rs https:\/\/*.google.co.za https:\/\/*.google.co.zm https:\/\/*.google.co.zw https:\/\/*.google.cat;connect-src wss:\/\/*.pusher.com 'self' *.cookielaw.org api.getblueshift.com *.onetrust.com *.hotjar.io vercel.live *.chatbot.com bat.bing.com *.clarity.ms crux-api.vercel.app *.internationalliving.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com https:\/\/*.google.ad https:\/\/*.google.ae https:\/\/*.google.com.af https:\/\/*.google.com.ag https:\/\/*.google.al https:\/\/*.google.am https:\/\/*.google.co.ao https:\/\/*.google.com.ar https:\/\/*.google.as https:\/\/*.google.at https:\/\/*.google.com.au https:\/\/*.google.az https:\/\/*.google.ba https:\/\/*.google.com.bd https:\/\/*.google.be https:\/\/*.google.bf https:\/\/*.google.bg https:\/\/*.google.com.bh https:\/\/*.google.bi https:\/\/*.google.bj https:\/\/*.google.com.bn https:\/\/*.google.com.bo https:\/\/*.google.com.br https:\/\/*.google.bs https:\/\/*.google.bt https:\/\/*.google.co.bw https:\/\/*.google.by https:\/\/*.google.com.bz https:\/\/*.google.ca https:\/\/*.google.cd https:\/\/*.google.cf https:\/\/*.google.cg https:\/\/*.google.ch https:\/\/*.google.ci https:\/\/*.google.co.ck https:\/\/*.google.cl https:\/\/*.google.cm https:\/\/*.google.cn https:\/\/*.google.com.co https:\/\/*.google.co.cr https:\/\/*.google.com.cu https:\/\/*.google.cv https:\/\/*.google.com.cy https:\/\/*.google.cz https:\/\/*.google.de https:\/\/*.google.dj https:\/\/*.google.dk https:\/\/*.google.dm https:\/\/*.google.com.do https:\/\/*.google.dz https:\/\/*.google.com.ec https:\/\/*.google.ee https:\/\/*.google.com.eg https:\/\/*.google.es https:\/\/*.google.com.et https:\/\/*.google.fi https:\/\/*.google.com.fj https:\/\/*.google.fm https:\/\/*.google.fr https:\/\/*.google.ga https:\/\/*.google.ge https:\/\/*.google.gg https:\/\/*.google.com.gh https:\/\/*.google.com.gi https:\/\/*.google.gl https:\/\/*.google.gm https:\/\/*.google.gr https:\/\/*.google.com.gt https:\/\/*.google.gy https:\/\/*.google.com.hk https:\/\/*.google.hn https:\/\/*.google.hr https:\/\/*.google.ht https:\/\/*.google.hu https:\/\/*.google.co.id https:\/\/*.google.ie https:\/\/*.google.co.il https:\/\/*.google.im https:\/\/*.google.co.in https:\/\/*.google.iq https:\/\/*.google.is https:\/\/*.google.it https:\/\/*.google.je https:\/\/*.google.com.jm https:\/\/*.google.jo https:\/\/*.google.co.jp https:\/\/*.google.co.ke https:\/\/*.google.com.kh https:\/\/*.google.ki https:\/\/*.google.kg https:\/\/*.google.co.kr https:\/\/*.google.com.kw https:\/\/*.google.kz https:\/\/*.google.la https:\/\/*.google.com.lb https:\/\/*.google.li https:\/\/*.google.lk https:\/\/*.google.co.ls https:\/\/*.google.lt https:\/\/*.google.lu https:\/\/*.google.lv https:\/\/*.google.com.ly https:\/\/*.google.co.ma https:\/\/*.google.md https:\/\/*.google.me https:\/\/*.google.mg https:\/\/*.google.mk https:\/\/*.google.ml https:\/\/*.google.com.mm https:\/\/*.google.mn https:\/\/*.google.com.mt https:\/\/*.google.mu https:\/\/*.google.mv https:\/\/*.google.mw https:\/\/*.google.com.mx https:\/\/*.google.com.my https:\/\/*.google.co.mz https:\/\/*.google.com.na https:\/\/*.google.com.ng https:\/\/*.google.com.ni https:\/\/*.google.ne https:\/\/*.google.nl https:\/\/*.google.no https:\/\/*.google.com.np https:\/\/*.google.nr https:\/\/*.google.nu https:\/\/*.google.co.nz https:\/\/*.google.com.om https:\/\/*.google.com.pa https:\/\/*.google.com.pe https:\/\/*.google.com.pg https:\/\/*.google.com.ph https:\/\/*.google.com.pk https:\/\/*.google.pl https:\/\/*.google.pn https:\/\/*.google.com.pr https:\/\/*.google.ps https:\/\/*.google.pt https:\/\/*.google.com.py https:\/\/*.google.com.qa https:\/\/*.google.ro https:\/\/*.google.ru https:\/\/*.google.rw https:\/\/*.google.com.sa https:\/\/*.google.com.sb https:\/\/*.google.sc https:\/\/*.google.se https:\/\/*.google.com.sg https:\/\/*.google.sh https:\/\/*.google.si https:\/\/*.google.sk https:\/\/*.google.com.sl https:\/\/*.google.sn https:\/\/*.google.so https:\/\/*.google.sm https:\/\/*.google.sr https:\/\/*.google.st https:\/\/*.google.com.sv https:\/\/*.google.td https:\/\/*.google.tg https:\/\/*.google.co.th https:\/\/*.google.com.tj https:\/\/*.google.tl https:\/\/*.google.tm https:\/\/*.google.tn https:\/\/*.google.to https:\/\/*.google.com.tr https:\/\/*.google.tt https:\/\/*.google.com.tw https:\/\/*.google.co.tz https:\/\/*.google.com.ua https:\/\/*.google.co.ug https:\/\/*.google.co.uk https:\/\/*.google.com.uy https:\/\/*.google.co.uz https:\/\/*.google.com.vc https:\/\/*.google.co.ve https:\/\/*.google.co.vi https:\/\/*.google.com.vn https:\/\/*.google.vu https:\/\/*.google.ws https:\/\/*.google.rs https:\/\/*.google.co.za https:\/\/*.google.co.zm https:\/\/*.google.co.zw https:\/\/*.google.cat;font-src 'self' *.typekit.net vercel.live;frame-src 'self' *.buzzsprout.com *.typeform.com *.youtube-nocookie.com *.youtube.com fast.wistia.net player.vimeo.com td.doubleclick.net vimeo.com vercel.live *.chatbot.com *.googletagmanager.com;object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'none'","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com fonts.googleapis.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https:\/\/pinterest.com https:\/\/www.pinterest.com appleid.apple.com *.nosto.com *.nos.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com www.googletagmanager.com * a9p7q2lm.adopt.com www.facebook.com *.nosto.com *.nos.to challenges.cloudflare.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * https:\/\/images.unsplash.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.openstreetmap.org maps.googleapis.com maps.gstatic.com *.nosto.com *.nos.to *.gstatic.com *.googleapis.com *.hsforms.net *.hsforms.com adopt.twic.pics 'self' data: data: 'self' 'unsafe-inline'; script-src www.google-analytics.com googleads.g.doubleclick.net www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com try.abtasty.com a9p7q2lm.adopt.com *.clarity.ms *.iadvize.com *.mention-me.com *.wonderpush.com *.usedrop.io *.brevo.com sibautomation.com *.bambuser.com https:\/\/maps.googleapis.com https:\/\/rum.hlx.page www.google.com maps.googleapis.com www.gstatic.com cookie-cdn.cookiepro.com checkoutshopper-test.adyen.com geolocation.onetrust.com maps.gstatic.com fonts.googleapis.com *.nosto.com *.nos.to *.googleapis.com *.gstatic.com challenges.cloudflare.com *.hsforms.net *.hsforms.com adopt.twic.pics sdk.privacy-center.org *.google.com https:\/\/challenges.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app use.typekit.net p.typekit.net *.nosto.com *.nos.to *.gstatic.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * dcinfos-cache.abtasty.com try.abtasty.com a9p7q2lm.adopt.com *.iadvize.com *.mention-me.com *.wonderpush.com *.usedrop.io *.brevo.com sibautomation.com *.bambuser.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com cookie-cdn.cookiepro.com maps.googleapis.com *.nosto.com *.nos.to t.elasticsuite.io *.hsforms.net *.hsforms.com adopt.twic.pics 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; media-src 'self' blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.fontawesome.com https:\/\/cdnjs.cloudflare.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com *.awin1.com *.zenaps.com *.fls.doubleclick.net account.wmf.com accountuat.wmf.com ad4m.at ct.pinterest.com fledge.eu.criteo.com groupe-seb.my.salesforce-sites.com gum.criteo.com service.force.com static.criteo.com static.criteo.net td.doubleclick.net www.paypalobjects.com www.sovendus-connect.com backoffice-eu.oct8ne.com static.trbo.com collect.trbo.com track2.trbo.com charger-v2.trbo.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.awin1.com *.zenaps.com *.wepowerconnections.com magefan.com cm.magefan.com https:\/\/images.unsplash.com *.disqus.com https:\/\/img.youtube.com * https:\/\/api.mapbox.com *.hsforms.net *.hsforms.com 'self' data: *.contentsquare.net static.trbo.com collect.trbo.com track2.trbo.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com lantern.roeyecdn.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.disqus.com * https:\/\/cdnjs.cloudflare.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com *.contentsquare.net *.contentsquare.com halc.iadvize.com static.trbo.com api-v4.trbo.com charger-v2.trbo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.fontawesome.com https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com *.googleapis.com *.gstatic.com service.force.com static.trbo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com autocomplete2.postdirekt.de t.elasticsuite.io *.hsforms.net *.hsforms.com *.contentsquare.net app.contentsquare.com api.paypal.com ariane.abtasty.com bat.bing.com cdn.cookielaw.org content.hotjar.io ct.pinterest.com dcinfos-cache.abtasty.com geolocation.onetrust.com googleads.g.doubleclick.net identification-api.sovendus.com maps.googleapis.com measurement-api.criteo.com pagead2.googlesyndication.com privacyportal-eu.onetrust.com region1.analytics.google.com stats.g.doubleclick.net tag.commander1.com try.abtasty.com ws.hotjar.com www.google.com www.google.de www.pinterest.com halc.iadvize.com data.trbo.com newsletter-api.trbo.com api-v4.trbo.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/customer.cludo.com https:\/\/app.icontact.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.trumba.com https:\/\/snapwidget.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/app.icontact.com; img-src 'self' data: https:\/\/www.trumba.com https:\/\/www.facebook.com https:\/\/app.icontact.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com; font-src 'self' https:\/\/fonts.gstatic.com; frame-src https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/snapwidget.com https:\/\/www.google.com https:\/\/widgets.collegetransfer.net https:\/\/content.dtcc.edu https:\/\/dtcc.smugmug.com https:\/\/delawaretech.wufoo.com; frame-ancestors 'none'; connect-src 'self' https:\/\/www.googletagmanager.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/api.cludo.com https:\/\/www.trumba.com https:\/\/www.facebook.com https:\/\/connect.facebook.net; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/app.icontact.com; upgrade-insecure-requests;","count":1},{"content-security-policy-report-only":" default-src 'none'; base-uri 'self'; child-src 'self' blob:; connect-src 'self' bam.nr-data.net links.services.disqus.com cdn.cookielaw.org api.segment.io *.mapbox.com *.mux.com analytics.google.com www.google-analytics.com geolocation.onetrust.com wss: bat.bing.com *.clarity.ms wahoofitness-us.attn.tv wahoofitness.attn.tv events.attentivemobile.com stats.g.doubleclick.net region1.analytics.google.com www.google.com privacyportal.onetrust.com api.rudderstack.com vc.hotjar.io region1.google-analytics.com www.google.cz www.google.au cdn.segment.com fonts.googleapis.com cdn.wahooligan.com www.google.no *.wahooligan.com; font-src 'self' cdn.wahooligan.com fonts.gstatic.com moz-extension data:; form-action 'self' www.wahooligan.com *.wahoofitness.com wahoofitness.zendesk.com api.wahooligan.com www.facebook.com bat.bing.com n.clarity.ms analytics.google.com wahoofitness.centercode.com api.wahooligan.com\/oauth\/authorize api.staging.wahooligan.com\/oauth\/authorize *.wahooligan.com; frame-ancestors 'self' *.zendesk.com *.wahooligan.com *.wahoofitness.com; frame-src 'self' disqus.com metabase.wahooligan.com www.youtube-nocookie.com js.stripe.com www.googletagmanager.com td.doubleclick.net www.facebook.com; img-src * data: blob:; media-src blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.wahooligan.com www.google-analytics.com api.tiles.mapbox.com code.jquery.com cdn.segment.com cdnjs.cloudflare.com js.stripe.com js-agent.newrelic.com bam.nr-data.net bam.nr-data.com *.zendesk.com static.zdassets.com cdn.cookielaw.org c.disquscdn.com optanon.blob.core.windows.net www.gstatic.com www.googletagmanager.com cdn.rudderlabs.com data: *.wahooligan.com; script-src-elem 'self' 'unsafe-inline' cdn.wahooligan.com code.jquery.online code.jquery.com cdn.cookielaw.org cdn.segment.com bam.nr-data.com bam.nr-data.net www.googletagmanager.com js-agent.newrelic.com optanon.blob.core.windows.net assets.zendesk.com static.zdassets.com www.google-analytics.com api.tiles.mapbox.com cdnjs.cloudflare.com geolocation.onetrust.com www.gstatic.com js.stripe.com cdn.rudderlabs.com cdn.attn.tv *.zendesk.com www.clarity.ms script.hotjar.com static.hotjar.com resources.xg4ken.com googleads.g.doubleclick.net bat.bing.com connect.facebook.net n.clarity.ms analytics.google.com *.wahooligan.com; style-src 'self' 'unsafe-inline' fonts.gstatic.com cdn.cookielaw.org fonts.googleapis.com api.tiles.mapbox.com cdn.wahooligan.com c.disquscdn.com www.gstatic.com; style-src-elem 'self' 'unsafe-inline' cdn.wahooligan.com cdn.cookielaw.org assets.zendesk.com api.tiles.mapbox.com fonts.googleapis.com www.gstatic.com connect.facebook.net cdnjs.cloudflare.com; report-uri https:\/\/www.wahooligan.com\/csp_reports","count":1},{"content-security-policy-report-only":" form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.facebook.net webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.facebook.com *.facebook.net https:\/\/www.magezon.com ozow-live-cdn.s3.eu-west-1.amazonaws.com *.cloudflare.com https:\/\/cdn.klarna.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.jsdelivr.net *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com *.adobedtm.com data: 'self' 'unsafe-inline'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.googleapis.com *.cloudflare.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: https:\/\/js.klevu.com https:\/\/www.ctm.co.za 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.amazonaws.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; font-src https:\/\/www.roomvo.com fonts.gstatic.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.fonts.googleapis.com *.gstatic.com 'unsafe-inline' data: *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com data: 'self' 'unsafe-inline'; connect-src https:\/\/agents.engati.ai wt.omnisendlink.com dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com cdn.ampproject.org https:\/\/*.ingest.sentry.io *.klevu.com *.ksearchnet.com ekr.zdassets.com\/ *.facebook.com *.facebook.net https:\/\/get.geojs.io *.avada.io embed.payjustnow.com *.payjustnow.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https:\/\/graph.instagram.com *.testfreaks.com *.google.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss:\/\/*.tawk.to *.tawk.link *.addthisedge.com *.what3words.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss:\/\/widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: cdn.plyr.io noembed.com 'self' 'unsafe-inline'; frame-src https:\/\/unicons.iconscout.com https:\/\/youtube.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https:\/\/www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.facebook.com *.facebook.net *.google.com embed.payjustnow.com *.payjustnow.com *.addthis.com *.pinterest.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com webchat.jdg.co.za *.jdg.co.za www.youtube.com 'self' 'unsafe-inline'; script-src https:\/\/unicons.iconscout.com https:\/\/agents.engati.ai https:\/\/bb.branding-element.com *.convertexperiments.com www.roomvo.com omnisnippet1.com bat.bing.com *.omnisnippet1.com static.ads-twitter.com analytics.tiktok.com https:\/\/s.pinterest.com https:\/\/scripts.clarity.ms assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ cdn.ampproject.org raw.githubusercontent.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https:\/\/polyfill-fastly.io https:\/\/browser.sentry-cdn.com js.klevu.com *.ksearchnet.com s7.addthis.com *.facebook.com *.facebook.net *.avada.io *.google.com embed.payjustnow.com *.payjustnow.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.mouseflow.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network www.youtube.com player.vimeo.com https:\/\/js.klevu.com https:\/\/www.ctm.co.za 'self' 'unsafe-inline' 'unsafe-eval';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/cdn.vuukle.com https:\/\/script.google.com https:\/\/www.youtube.com https:\/\/platform.instagram.com https:\/\/platform.twitter.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:\/\/images.assettype.com https:\/\/media.assettype.com https:\/\/gumlet.assettype.com https:\/\/i.ytimg.com https:\/\/www.google-analytics.com; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/tribune.quintype.io https:\/\/www.google-analytics.com https:\/\/cdn.vuukle.com https:\/\/query1.finance.yahoo.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.facebook.com https:\/\/platform.twitter.com; object-src 'none'; base-uri 'self'; form-action 'self'","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl\/sre_google","count":1},{"content-security-policy-report-only":" default-src 'self' *.apsiyon.com; style-src 'self' 'unsafe-inline' analytics.tiktok.com analytics.tiktok.com\/api\/v2\/monitor cdn.apsiyon.com cdnjs.cloudflare.com translate.googleapis.com fonts.googleapis.com *.apsiyon.com wchat.freshchat.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.apsiyon.com www.google.com www.clarity.ms cdn.apsiyon.com analytics.tiktok.com analytics.tiktok.com\/api\/v2\/monitor www.analytics.tiktok.com\/api\/v2\/monitor connect.facebook.net www.googledservices.com www.googleadservices.com code.jquery.com cdn.jsdelivr.net maps.googleapis.com www.googletagmanager.com  www.google-analytics.com googleads.g.doubleclick.net cdn.taboola.com trc.taboola.com  www.gstatic.com wchat.freshchat.com  snap.licdn.com; frame-src 'self' www.googletagmanager.com www.googleadservices.com connect.facebook.net web.facebook.com *.apsiyon.com m.facebook.com  www.google.ro www.youtube.com youtube.com httpsapsiyoncom.webpush.freshchat.com www.google.com bid.g.doubleclick.net wchat.freshchat.com www.facebook.com analytics.tiktok.com analytics.tiktok.com\/api\/v2\/monitor; img-src data: * ; connect-src 'self' 'unsafe-inline' localhost:51192 analytics.tiktok.com analytics.tiktok.com\/api\/v2\/monitor www.google.bg www.google.li www.google.com.bd www.google.ro www.google.com.hk www.google.co.jp www.google.tm www.google.ps www.google.pl www.google.ba www.google.co.za www.google.cz www.google.md www.google.com.ua www.google.com.qa www.google.ba www.google.com.et www.google.jo www.google.hu www.google.ph stats.g.doubleclick.net www.google.at www.google.com.cy www.google.nl www.google.kz www.google.co.in www.google.com.sa www.google.es www.google.kg  www.google.co.id www.google.dk www.google.com.kw www.google.co.kr www.google.cn www.google.co.th www.google.co.uz www.google.co.uk www.google.ae www.google.ch www.google.az www.google.lu www.google.it www.google.com.pk www.google.be www.google.fi www.google.no www.google.sn www.bing.com www.google.se www.google.iq www.google.ie www.google.fr www.googleanalytics.com www.google.de www.google.ru *.taboola.com www.google.co.il  www.facebook.com  www.google.com.tr *.clarity.ms  *.apsiyon.com  analytics.google.com www.google-analytics.com; font-src 'self' data: fonts.googleapis.com use.fontawesome.com themes.googleusercontent.com *.apsiyon.com themes.googleusercontent.com static3.avast.com cdnjs.cloudflare.com fonts.gstatic.com;","count":1},{"content-security-policy-report-only":" default-src 'self' blob: *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com connect.facebook.net;script-src *.facebook.com *.fbcdn.net *.facebook.net 'nonce-iTMNngXZ' blob: 'self' https:\/\/www.googletagmanager.com\/gtag\/js https:\/\/www.googletagmanager.com https:\/\/*.youtube.com;style-src data: blob: 'unsafe-inline' *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com 'unsafe-eval';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss:\/\/*.facebook.com:* wss:\/\/*.metacareers.com:* attachment.fbsbx.com ws:\/\/localhost:* blob: *.cdninstagram.com 'self' *.facebookcareers.com *.metacareers.com gateway.metacareers.com wss:\/\/gateway.metacareers.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com;font-src 'self' data: blob: *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com connect.facebook.net;img-src 'self' data: blob: *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com *.fbsbx.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/www.googletagmanager.com https:\/\/*.ytimg.com *.youtube.com jsv3.recruitics.com;media-src 'self' data: blob: *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com connect.facebook.net;child-src 'self' data: blob: *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com connect.facebook.net;frame-src 'self' *.facebook.com *.fbcdn.net *.fbsbx.com https:\/\/*.youtube.com;manifest-src 'self' data: blob: *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com connect.facebook.net;object-src 'self' data: blob: *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com connect.facebook.net;worker-src 'self' data: blob: *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com connect.facebook.net;block-all-mixed-content;upgrade-insecure-requests;report-uri https:\/\/www.facebook.com\/csp\/reporting\/?m=tr_exp&minimize=0;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-Em43VWJvvjaaKMOAp3MrAQ' 'strict-dynamic' https: http: https:\/\/www.googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/pagead2.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/cdn.cookielaw.org https:\/\/js.qualified.com https:\/\/go.everlaw.com https:\/\/munchkin.marketo.net https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/www.clarity.ms https:\/\/extend.vimeocdn.com https:\/\/player.vimeo.com https:\/\/app.leandata.com https:\/\/cdn-3.convertexperiments.com https:\/\/cdn-4.convertexperiments.com https:\/\/tracking.g2crowd.com https:\/\/ws.zoominfo.com https:\/\/ddwl4m2hdecbv.cloudfront.net https:\/\/www.datadoghq-browser-agent.com https:\/\/static.ads-twitter.com https:\/\/bat.bing.com; style-src 'self' 'nonce-Em43VWJvvjaaKMOAp3MrAQ' https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/fonts.googleapis.com https:\/\/cdn.cookielaw.org; img-src 'self' data: blob: https:\/\/images.ctfassets.net https:\/\/www.googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/googletagmanager.com https:\/\/ssl.gstatic.com https:\/\/www.gstatic.com https:\/\/*.google-analytics.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com https:\/\/*.google.co.uk https:\/\/google.com https:\/\/www.google.com https:\/\/www.google.co.uk https:\/\/googleads.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com https:\/\/adservice.google.com https:\/\/ad.doubleclick.net https:\/\/ade.googlesyndication.com https:\/\/static.doubleclick.net https:\/\/www.facebook.com https:\/\/px.ads.linkedin.com https:\/\/*.linkedin.com https:\/\/www.clarity.ms https:\/\/b.clarity.ms https:\/\/c.clarity.ms https:\/\/c.bing.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/t.co https:\/\/analytics.twitter.com https:\/\/i.vimeocdn.com https:\/\/f.vimeocdn.com https:\/\/fresnel.vimeocdn.com https:\/\/tracking.g2crowd.com https:\/\/ws.zoominfo.com https:\/\/munchkin.marketo.net https:\/\/go.everlaw.com https:\/\/cdn.cookielaw.org https:\/\/*.datadoghq.com https:\/\/alb.reddit.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdn.cookielaw.org https:\/\/js.qualified.com; connect-src 'self' https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com https:\/\/*.google.co.uk https:\/\/www.google.com https:\/\/google.com https:\/\/www.google.co.uk https:\/\/pagead2.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/ad.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/go.everlaw.com https:\/\/munchkin.marketo.net https:\/\/*.marketo.net https:\/\/314-qpm-328.mktoresp.com https:\/\/314-qpm-328.mktoutil.com https:\/\/api.qualified.com https:\/\/*.qualified.com wss:\/\/*.qualified.com https:\/\/cdn.cookielaw.org https:\/\/geolocation.onetrust.com https:\/\/www.clarity.ms https:\/\/*.clarity.ms https:\/\/www.facebook.com https:\/\/px.ads.linkedin.com https:\/\/snap.licdn.com https:\/\/player.vimeo.com https:\/\/vimeo.com https:\/\/*.vimeocdn.com https:\/\/*.datadoghq.com https:\/\/browser-intake-datadoghq.com https:\/\/browser-intake-us3-datadoghq.com https:\/\/*.bugsnag.com https:\/\/notify.bugsnag.com https:\/\/sessions.bugsnag.com https:\/\/ws.zoominfo.com https:\/\/js.zi-scripts.com https:\/\/ddwl4m2hdecbv.cloudfront.net https:\/\/graphql.contentful.com https:\/\/images.ctfassets.net https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/app.leandata.com https:\/\/cdn-3.convertexperiments.com https:\/\/cdn-4.convertexperiments.com https:\/\/tracking-api.g2.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/static.ads-twitter.com https:\/\/pixel-config.reddit.com; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/td.doubleclick.net https:\/\/*.fls.doubleclick.net https:\/\/player.vimeo.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/app.leandata.com https:\/\/js.qualified.com https:\/\/*.qualified.com https:\/\/www.facebook.com https:\/\/go.everlaw.com https:\/\/www.google.com; media-src 'self' blob: data: https:\/\/player.vimeo.com https:\/\/*.vimeocdn.com https:\/\/js.qualified.com https:\/\/app.qualified.com https:\/\/videos.ctfassets.net; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self' https:\/\/go.everlaw.com https:\/\/www.facebook.com; report-uri https:\/\/browser-intake-us3-datadoghq.com\/api\/v2\/logs?dd-api-key=pubef23fdfafee01c9da472a178f535c7dd&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" font-src *.googleapis.com *.gstatic.com data: *.klarnacdn.net *.fontawesome.com *.cdn-apple.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/fonts.bunny.net *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.klarna.com *.playground.klarna.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.facebook.com *.bing.com *.coccinelle.com stileo.it *.cookiebot.com *.google.it *.klarnacdn.net *.klarnaservices.com *.playground.klarnaservices.com *.klarna.com *.klarnaevt.com *.worldline-solutions.com *.secured-by-ingenico.com https:\/\/firebasestorage.googleapis.com *.webtrekk.net *.wt-eu02.net https:\/\/fbc.wcfbc.net https:\/\/*.flx1.com\/ https:\/\/dmp.adform.net\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/rum.hlx.page *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de kit.fontawesome.com *.cookiebot.com *.jsdelivr.net *.facebook.net *.clarity.ms *.bing.com glamipixel.com *.coccinelle.com *.rakuten.com *.rmtag.com *.criteo.com *.adobedtm.com *.cardinalcommerce.com *.doubleclick.net *.google.com *.r-data.net *.accelasearch.io *.klarnacdn.net *.klarnaservices.com *.playground.klarnaservices.com *.klarna.com x.klarnacdn.net *.cdn-apple.com *.avada.io https:\/\/responder.wt-safetag.com https:\/\/*.flx1.com\/ https:\/\/www.googletagmanager.com https:\/\/*.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klarnacdn.net *.fontawesome.com *.gstatic.com *.googleapis.com *.google.com https:\/\/fonts.bunny.net unsafe-inline assets.braintreegateway.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cloudfront.net *.amazonaws.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.cookiebot.com *.googlesyndication.com *.google-analytics.com *.doubleclick.net *.coccinelle.com *.criteo.com *.klarnaevt.com *.playground.klarnaevt.com *.klarnaservices.com *.playground.klarnaservices.com *.klarnacdn.net x.klarnacdn.net *.klarna.com *.worldline-solutions.com http:\/\/dpm.demdex.net https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/get.geojs.io *.avada.io https:\/\/*.flx1.com\/ https:\/\/*.gstatic.com https:\/\/jamie.g.shortest-route.com https:\/\/*.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.link.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';base-uri 'self';form-action 'self'","count":1},{"content-security-policy-report-only":" base-uri https:\/\/*.adnami.io; worker-src blob: data:","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/exlibris.ch https:\/\/*.exlibris.ch https:\/\/*.sentry.io https:\/\/chatbot-api.migros.ch https:\/\/chatbot-cdn.migros.ch https:\/\/*.service.migros.cloud; script-src  'self' 'unsafe-inline' 'unsafe-eval' https:\/\/exlibris.ch https:\/\/*.exlibris.ch https:\/\/googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/epoq-systems.de http:\/\/epoq-systems.de https:\/\/*.epoq-systems.de http:\/\/*.epoq-systems.de https:\/\/epoq.de http:\/\/epoq.de https:\/\/*.epoq.de http:\/\/*.epoq.de https:\/\/connect.facebook.net https:\/\/google.com https:\/\/*.google.com https:\/\/googleanalytics.com https:\/\/*.googleanalytics.com https:\/\/google-analytics.com https:\/\/*.google-analytics.com https:\/\/googlesyndication.com https:\/\/*.googlesyndication.com https:\/\/gstatic.com https:\/\/*.gstatic.com https:\/\/googleapis.com https:\/\/*.googleapis.com https:\/\/googleadservices.com https:\/\/*.googleadservices.com bat.bing.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/datatrans.com https:\/\/*.datatrans.com https:\/\/googleads.g.doubleclick.net https:\/\/cookielaw.org https:\/\/*.cookielaw.org https:\/\/*.trustpilot.com https:\/\/pay.google.com https:\/\/sandbox.secure.checkout.visa.com https:\/\/*.sentry.io analytics.tiktok.com analytics-ipv6.tiktokw.us http:\/\/ads.tiktok.com https:\/\/chatbot-api.migros.ch https:\/\/chatbot-cdn.migros.ch https:\/\/*.service.migros.cloud; worker-src 'self' blob: https:\/\/chatbot-api.migros.ch https:\/\/chatbot-cdn.migros.ch https:\/\/*.service.migros.cloud; connect-src 'self' https:\/\/exlibris.ch https:\/\/*.exlibris.ch exlibris.azureedge.net exlibris.blob.core.windows.net https:\/\/epoq.de https:\/\/*.epoq.de http:\/\/epoq-systems.de https:\/\/epoq-systems.de *.facebook.com https:\/\/migros.ch https:\/\/www.google.at https:\/\/*.google.ba https:\/\/*.migros.ch https:\/\/*.google.de https:\/\/*.google.ch https:\/\/*.google.com https:\/\/www.google.fr https:\/\/*.google.it https:\/\/*.google.li https:\/\/*.google.tn https:\/\/*.google.co.uk https:\/\/*.google.com.sa https:\/\/www.googleadservices.com https:\/\/google-analytics.com https:\/\/*.google-analytics.com https:\/\/google-analytics.ch https:\/\/*.google-analytics.ch https:\/\/google.com https:\/\/*.google.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/analytics.google.ch https:\/\/*.analytics.google.ch https:\/\/googleapis.com https:\/\/*.googleapis.com https:\/\/googlesyndication.com https:\/\/*.googlesyndication.com https:\/\/*.googletagmanager.com bat.bing.com bat.bing.net https:\/\/doubleclick.net https:\/\/*.doubleclick.net https:\/\/g.doubleclick.net https:\/\/*.g.doubleclick.net https:\/\/cookielaw.org https:\/\/*.cookielaw.org https:\/\/onetrust.com https:\/\/*.onetrust.com https:\/\/onetrust.io https:\/\/*.onetrust.io https:\/\/hotjar.com https:\/\/*.hotjar.com https:\/\/hotjar.io https:\/\/*.hotjar.io wss:\/\/*.hotjar.com wss:\/\/hotjar.com https:\/\/*.sentry.io analytics.tiktok.com analytics-ipv6.tiktokw.us http:\/\/ads.tiktok.com https:\/\/widget.trustpilot.com https:\/\/chatbot-api.migros.ch https:\/\/chatbot-cdn.migros.ch https:\/\/*.service.migros.cloud; style-src 'self' 'unsafe-inline' https:\/\/exlibris.ch https:\/\/*.exlibris.ch https:\/\/googleapis.com https:\/\/*.googleapis.com https:\/\/google.com https:\/\/*.google.com https:\/\/googletagmanager.com https:\/\/tagmanager.google.com fast.fonts.net https:\/\/epoq-systems.de https:\/\/*.epoq-systems.de https:\/\/epoq.de https:\/\/*.epoq.de http:\/\/epoq-systems.de http:\/\/*.epoq-systems.de http:\/\/epoq.de http:\/\/*.epoq.de; img-src 'self' dhttps data: *.facebook.com https:\/\/exlibris.ch https:\/\/*.exlibris.ch exlibris.azureedge.net https:\/\/epoq-systems.de https:\/\/*.epoq-systems.de https:\/\/epoq.de https:\/\/*.epoq.de http:\/\/epoq-systems.de http:\/\/*.epoq-systems.de http:\/\/epoq.de http:\/\/*.epoq.de https:\/\/gstatic.com https:\/\/*.gstatic.com https:\/\/googleapis.com https:\/\/*.googleapis.com https:\/\/google-analytics.com https:\/\/*.google-analytics.com https:\/\/doubleclick.net https:\/\/*.doubleclick.net https:\/\/g.doubleclick.net https:\/\/*.g.doubleclick.net https:\/\/googlesyndication.com https:\/\/*.googlesyndication.com https:\/\/*.google.at https:\/\/*.google.ch https:\/\/*.google.de https:\/\/*.google.dz https:\/\/*.google.es https:\/\/*.google.fr https:\/\/*.google.hr https:\/\/*.google.it https:\/\/*.google.li https:\/\/*.google.lu https:\/\/*.google.nl https:\/\/*.google.sc https:\/\/*.google.si https:\/\/*.google.co.uk https:\/\/*.google.co.in https:\/\/*.google.com https:\/\/*.google.com.pa https:\/\/*.google.com.ph https:\/\/*.google.com.gh https:\/\/*.google.com.tr https:\/\/*.google.com.br https:\/\/*.google.com.cy https:\/\/www.googleadservices.com https:\/\/googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/hotjar.com https:\/\/*.hotjar.com https:\/\/hotjar.io https:\/\/*.hotjar.io bat.bing.com https:\/\/cookielaw.org https:\/\/*.cookielaw.org optanon.blob.core.windows.net exlibris.blob.core.windows.net https:\/\/migros.ch https:\/\/*.migros.ch analytics.tiktok.com analytics-ipv6.tiktokw.us http:\/\/ads.tiktok.com https:\/\/ytimg.com https:\/\/*.ytimg.com https:\/\/chatbot-cdn.migros.ch https:\/\/*.service.migros.cloud; media-src 'self' data https:\/\/exlibris.ch https:\/\/*.exlibris.ch exlibris.blob.core.windows.net https:\/\/*.phononet.de\/ exlibris.azureedge.net https:\/\/chatbot-api.migros.ch https:\/\/chatbot-cdn.migros.ch https:\/\/*.service.migros.cloud; frame-src 'self' bytedance: sslocal: https:\/\/exlibris.ch https:\/\/*.exlibris.ch https:\/\/google.de https:\/\/*.google.de https:\/\/google.com https:\/\/*.google.com https:\/\/googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/googlesyndication.com https:\/\/*.googlesyndication.com https:\/\/youtube.com https:\/\/*.youtube.com https:\/\/datatrans.com https:\/\/*.datatrans.com https:\/\/*.fls.doubleclick.net https:\/\/bic-media.com https:\/\/*.bic-media.com https:\/\/youtube-nocookie.com https:\/\/*.youtube-nocookie.com https:\/\/doubleclick.net https:\/\/*.doubleclick.net https:\/\/hotjar.com https:\/\/*.hotjar.com https:\/\/hotjar.io https:\/\/*.hotjar.io https:\/\/tradedoubler.com https:\/\/*.tradedoubler.com https:\/\/blickinsbuch.de https:\/\/*.blickinsbuch.de https:\/\/book2look.com https:\/\/*.book2look.com https:\/\/postfinance.ch https:\/\/*.postfinance.ch https:\/\/viseca.ch\/ https:\/\/*.viseca.ch\/ https:\/\/bonuscard.ch\/ https:\/\/*.bonuscard.ch\/ https:\/\/3ds.bonuscard.ch\/ https:\/\/*.3ds.bonuscard.ch\/ https:\/\/arcot.com\/ https:\/\/*.arcot.com\/ https:\/\/*.trustpilot.com https:\/\/pay.google.com https:\/\/sandbox.secure.checkout.visa.com https:\/\/3d.datatrans.com https:\/\/3d.sandbox.datatrans.com https:\/\/chatbot-api.migros.ch https:\/\/chatbot-cdn.migros.ch https:\/\/*.service.migros.cloud; font-src 'self' data: https:\/\/exlibris.ch https:\/\/*.exlibris.ch https:\/\/gstatic.com https:\/\/*.gstatic.com https:\/\/google.com https:\/\/*.google.com https:\/\/hotjar.com https:\/\/*.hotjar.com https:\/\/hotjar.io https:\/\/*.hotjar.io https:\/\/chatbot-api.migros.ch https:\/\/chatbot-cdn.migros.ch https:\/\/*.service.migros.cloud; manifest-src 'self' https:\/\/exlibris.ch https:\/\/*.exlibris.ch; frame-ancestors 'self' https:\/\/exlibris.ch https:\/\/*.exlibris.ch; report-uri \/loc\/csp-report","count":1},{"content-security-policy-report-only":" script-src 'nonce-SiAd3VGrAIw9rnwmoRMVbg==' 'strict-dynamic' 'unsafe-eval'; object-src 'none'; base-uri 'none'; report-to csp-endpoint; report-uri https:\/\/pdb9u9n7.uriports.com\/reports","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cdn.jsdelivr.net cdn.almapay.com https:\/\/fonts.gstatic.com https:\/\/ws.colissimo.fr *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https:\/\/cdnjs.cloudflare.com 'self' data: static.sensefuel.live data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.sips-services.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com https:\/\/www.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.getalma.eu *.almapay.com\/ *.stripe.com\/ *.checkout.com\/ *.adyen.com\/ *.truefitcorp.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com *.weltpixel.com https:\/\/form.typeform.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.google.com\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net *.afd.co.uk t.powerreviews.com assets-manager.abtasty.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/ws.colissimo.fr https:\/\/*.tile.openstreetmap.fr https:\/\/*.onyourmap.com https:\/\/google.fr https:\/\/www.magezon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud ebizmarts-website.s3.amazonaws.com *.openstreetmap.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com maps.googleapis.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.afd.co.uk cdn.jsdelivr.net js-agent.newrelic.com party.spockee.io app.ekoo.co ui.powerreviews.com *.truefitcorp.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https:\/\/maps.googleapis.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/ws.colissimo.fr https:\/\/api.mapbox.com https:\/\/*.typeform.com widget.proximis.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https:\/\/cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com maps.googleapis.com *.gstatic.com https:\/\/www.googletagmanager.com tagmanager.google.com  tag.search.sensefuel.live pdata.damart.fr try.abtasty.com                  'self' 'unsafe-eval' 'nonce-c2RmZW9kNjR0bXNmYjRjeHp3Yjhudjl6ajJtdGV6YmU=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k\/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY\/CkTMBhjNhwPvglpYumjx31B4fjkY8='; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net ui.powerreviews.com cdn-mobile.actito.com https:\/\/fonts.googleapis.com https:\/\/ws.colissimo.fr https:\/\/api.mapbox.com https:\/\/*.typeform.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https:\/\/cdnjs.cloudflare.com assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com tag.search.sensefuel.live 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afd.co.uk *.getalma.eu *.almapay.com api.spockee.io backoffice-api.spockee.io ui.powerreviews.com display.powerreviews.com app.ekoo.co maps.googleapis.com cdn-mobile.actito.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https:\/\/ws.colissimo.fr https:\/\/maps.googleapis.com https:\/\/nominatim.openstreetmap.org https:\/\/*.onyourmap.com https:\/\/*.mapbox.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.openstreetmap.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com c.search.sensefuel.live 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'report-sample' 'self' https:\/\/api-maps.yandex.ru\/2.1\/ https:\/\/bitrix.info\/ba.js https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/jquery-mousewheel\/3.1.13\/jquery.mousewheel.min.js https:\/\/mc.yandex.ru\/metrika\/watch.js https:\/\/yastatic.net\/s3\/front-maps-static\/maps-front-jsapi-v2-1\/2.1.79-16700290\/out\/release\/full-eab6f8e3ccfa741c06508cb710c0ae92a2a0c8ac.js; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self' https:\/\/bitrix.info https:\/\/mc.yandex.ru; font-src 'self'; frame-src 'self' https:\/\/mc.yandex.ru; img-src 'self' data: https:\/\/api-maps.yandex.ru; manifest-src 'self'; media-src 'self'; worker-src 'none';","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net *.merkur-static.si cdn.jsdelivr.net cdn.cnj.si omara.cdn-cnj.si ka-p.fontawesome.com media.flixfacts.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https:\/\/lapp.leanpay.hr https:\/\/app.leanpay.hr https:\/\/stage-app.leanpay.si https:\/\/app.leanpay.si https:\/\/stage-app.leanpay.ro https:\/\/vendor.leanpay.ro *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https:\/\/firebasestorage.googleapis.com cdn.jsdelivr.net *.nosto.com *.merkur-static.si *.fontawesome.com img.cdn-cnj.si www.merkur-static.si thumbs.nosto.com media.flixcar.com media.flixfacts.com logo.flix360.io rt.flix360.com maps.gstatic.com *.visualwebsiteoptimizer.com *.google.si *.facebook.com *.iprom.net *.hubspot.com inpref.com 536003278.recs.igodigital.com maps.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/api.cartfox.io https:\/\/app.cartfox.io *.avada.io *.shopify.com *.merkur-static.si cdn.jsdelivr.net unpkg.com *.pushpushgo.com *.fontawesome.com *.nosto.com *.smind.si kit.fontawesome.com inte.searchnode.io connect.nosto.com cpx.smind.si *.loadbee.com *.pandachat.ai media.flixfacts.com media.flixcar.com maps.googleapis.com *.cloudfront.net *.iprom.net *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.facebook.net *.videoly.co 536003278.recs.igodigital.com 536003278.collect.igodigital.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https:\/\/fonts.bunny.net *.merkur-static.si cdn.jsdelivr.net media.flixcar.com assets.braintreegateway.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/api.cartfox.io https:\/\/app.cartfox.io https:\/\/get.geojs.io *.avada.io *.merkur-static.si unpkg.com *.pushpushgo.com *.nosto.com *.fontawesome.com *.loadbee.com region1.google-analytics.com kit.fontawesome.com ka-p.fontawesome.com connect.nosto.com media.flixcar.com maps.googleapis.com *.visualwebsiteoptimizer.com inpref.com *.doubleclick.net *.iprom.net 536003278.recs.igodigital.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src media.flixcar.com rt.flix360.com 536003278.recs.igodigital.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/d045c69f-01fa-46bf-a2b1-87c1c2bb7952.sansec.watch\/; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/ajax.cloudflare.com  https:\/\/*.migracion.gob.do https:\/\/cdn.userway.org https:\/\/eticket.migracion.gob.do https:\/\/personal.migracion.gob.do https:\/\/cdn.jsdelivr.net https:\/\/connect.facebook.net https:\/\/www.google-analytics.com https:\/\/challenges.cloudflare.com https:\/\/static.cloudflareinsights.com; worker-src https:\/\/migracion.gob.do blob:; style-src 'self' 'unsafe-inline' https:\/\/cdn.userway.org https:\/\/fonts.googleapis.com https:\/\/cdn.jsdelivr.net; font-src 'self' https:\/\/cdn.userway.org https:\/\/fonts.gstatic.com https:\/\/cdn.jsdelivr.net; media-src https:\/\/cdn.userway.org; img-src 'self' https:\/\/secure.gravatar.com https:\/\/s.w.org https:\/\/a.tile.openstreetmap.org https:\/\/b.tile.openstreetmap.org https:\/\/c.tile.openstreetmap.org data: https:\/\/cdn.userway.org https:\/\/*.migracion.gob.do https:\/\/cdn.jsdelivr.net https:\/\/www.google-analytics.com; connect-src 'self' https:\/\/cdn.userway.org https:\/\/api.userway.org https:\/\/*.migracion.gob.do https:\/\/www.google-analytics.com https:\/\/challenges.cloudflare.com; frame-src 'self' https:\/\/cdn.userway.org https:\/\/www.facebook.com https:\/\/www.youtube.com https:\/\/be.nortic.ogtic.gob.do https:\/\/eticket.migracion.gob.do https:\/\/challenges.cloudflare.com; object-src 'self'; base-uri 'self'; form-action 'self' https:\/\/*.migracion.gob.do; frame-ancestors 'self'; upgrade-insecure-requests; block-all-mixed-content; report-uri https:\/\/report-uri.migracion.gob.do\/api\/reports; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self' https: 'unsafe-inline' 'unsafe-eval'; object-src 'none';","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' https:\/\/www.googletagmanager.com; connect-src 'self' https:","count":1},{"content-security-policy-report-only":" default-src data: 'self' blob: 'unsafe-inline' 'unsafe-eval' *.atyarisi.com wss:\/\/*.atyarisi.com *.google.com *.google.com.tr *.googletagmanager.com *.google-analytics.com *.support.google.com *.doubleclick.net *.googleadservices.com *.microsoft.com *.apple.com *.facebook.com *.facebook.net *.yahoo.com *.newrelic.com *.twitter.com *.instagram.com *.youtube.com tjktv.ercdn.net *.tjk.org *.broadage.com *.media.net *.liderform.com.tr *.googleapis.com *.googlevideo.com *.gstatic.com *.nsoft-cdn.com *.stg-digi.com *.rlcdn.com *.crwdcntrl.net *.dengage.com *.nr-data.net *.taboola.com *.tiktok.com *.dengagecdn.com *.sisalsanstech.com *.ondigitalocean.app *.millipiyangoonline.com *.rsc.cdn77.org *.7777gaming.tech *.7777gaming.xyz *.7777gaming.com.tr *.draggedbed.com *.shunnedstudios.com *.clarity.ms scripts.clarity.ms *.tiktokw.us *.tiktokv.com *.byteoversea.com https:\/\/106gamesgalaxsys.online https:\/\/shunnedstudios.com\/ *.mobilproses.com *.gtechgames.com football.playbook-fusion.com *.trhosted.com *.biahosted.net *.gametech.tr pagead2.googlesyndication.com; img-src * data:; report-uri \/csp\/cspreport\/","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/accounts.google.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/pagead2.googlesyndication.com https:\/\/securepubads.g.doubleclick.net https:\/\/tpc.googlesyndication.com https:\/\/ep1.adtrafficquality.google https:\/\/ep2.adtrafficquality.google https:\/\/connect.facebook.net https:\/\/static.xx.fbcdn.net https:\/\/cdn.onesignal.com https:\/\/onesignal.com https:\/\/www.clarity.ms https:\/\/scripts.clarity.ms https:\/\/ak.sail-horizon.com https:\/\/static.cloudflareinsights.com https:\/\/package.webvitalize.io https:\/\/maps.googleapis.com https:\/\/www.youtube.com https:\/\/cdn.ampproject.org https:\/\/*.adsafeprotected.com https:\/\/*.flashtalking.com https:\/\/ajs-assets.ftstatic.com https:\/\/js.ad-score.com https:\/\/creative-measurement.quantcount.com https:\/\/*.2mdn.net https:\/\/www.googletagservices.com https:\/\/media.adcanvas.com https:\/\/imasdk.googleapis.com https:\/\/dsp-media.eskimi.com https:\/\/ad.doubleclick.net https:\/\/track.adform.net https:\/\/dev.visualwebsiteoptimizer.com https:\/\/embed.typeform.com https:\/\/widget.usersnap.com https:\/\/websdk.appsflyer.com https:\/\/cookie-cdn.cookiepro.com https:\/\/euob.roundprinceweb.com https:\/\/obseu.roundprinceweb.com https:\/\/dynamic.criteo.com https:\/\/sslwidget.criteo.com https:\/\/comcluster.cxense.com https:\/\/code3.adtlgc.com https:\/\/widget.surveymonkey.com https:\/\/ajax.googleapis.com https:\/\/cdn.livechatinc.com https:\/\/api.livechatinc.com https:\/\/assets.imoradar24.ro; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; report-uri https:\/\/www.imoradar24.ro\/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/ccm.bbaw.de https:\/\/piwik.bbaw.de; connect-src 'self' https:\/\/piwik.bbaw.de https:\/\/ccm.bbaw.de; img-src 'self' https:\/\/digilib.bbaw.de https:\/\/piwik.bbaw.de data:; style-src 'self' https:\/\/ccm.bbaw.de 'unsafe-inline'; frame-src https:\/\/player.vimeo.com https:\/\/www.youtube.com https:\/\/youtu.be https:\/\/w.soundcloud.com https:\/\/embed.contentflow.net https:\/\/lisa.gerda-henkel-stiftung.de; font-src 'self'; object-src 'none'; base-uri 'self'","count":1},{"content-security-policy-report-only":" font-src *.fontawesome.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com https:\/\/fonts.gstatic.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.twitter.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com static.addtoany.com *.cookiebot.com *.doubleclick.net consentcdn.cookiebot.com bat.bing.com www.googletagmanager.com hose.gardeningexpress.co.uk pipe.gardeningexpress.co.uk consent.cookiebot.com pixel.thoughtmetric.io www.clarity.ms stats.g.doubleclick.net www.google.com www.gstatic.com cdn.tangoo.it cdn.tangooserver.com  ban.tangooserver.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.feedoptimise.com cdn.feedoptimise.com services.postcodeanywhere.co.uk *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net www.google.com.ua magefan.com cm.magefan.com mageside.com flagpedia.net www.ojrq.net *.clarity.ms *.bing.com *.cookiebot.com help.gardeningexpress.co.uk\/ www.google.de www.google.co.uk bat.bing.com hose.gardeningexpress.co.uk fonts.gstatic.com bat.bing.net https:\/\/pipe.gardeningexpress.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ polyfill.io chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com www.feedoptimise.com cdn.feedoptimise.com api.addressy.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com maps.googleapis.com static.addtoany.com *.cookiebot.com *.clarity.ms bam.nr-data.net cdn.jsdelivr.net *.impactcdn.com *.newrelic.com consent.cookiebot.com ajax.googleapis.com bat.bing.com pagead2.googlesyndication.com pipe.gardeningexpress.co.uk pixel.thoughtmetric.io www.clarity.ms stats.g.doubleclick.net www.gstatic.com cdn.tangoo.it cdn.tangooserver.com  ban.tangooserver.com https:\/\/pipe.gardeningexpress.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.fontawesome.com api.addressy.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com *.addtoany.com *.trustpilot.com www.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io form-assets.mailchimp.com *.intuit.com *.amazonaws.com https:\/\/gardeningexpress.us12.list-manage.com api.addressy.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com http:\/\/dpm.demdex.net www.gstatic.com maps.googleapis.com static.addtoany.com *.cookiebot.com *.clarity.ms bam.nr-data.net cdn.jsdelivr.net *.impactcdn.com pagead2.googlesyndication.com gardeningexpress.pxf.io *.doubleclick.net *.google.com bat.bing.com hose.gardeningexpress.co.uk google.com bat.bing.net pipe.gardeningexpress.co.uk consent.cookiebot.com pixel.thoughtmetric.io www.clarity.ms data.thoughtmetric.io stats.g.doubleclick.net www.google.com cdn.tangoo.it cdn.tangooserver.com  ban.tangooserver.com https:\/\/pipe.gardeningexpress.co.uk 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-ncHqmen-4tdWq2eB6jWr0w' 'unsafe-inline' 'unsafe-eval' https:\/\/*.msauth.net https:\/\/*.msftauth.net https:\/\/*.msftauthimages.net https:\/\/*.msauthimages.net https:\/\/*.msidentity.com https:\/\/*.microsoftonline-p.com https:\/\/*.microsoftazuread-sso.com https:\/\/*.azureedge.net https:\/\/*.outlook.com https:\/\/*.office.com https:\/\/*.office365.com https:\/\/*.microsoft.com https:\/\/*.bing.com 'report-sample'; report-uri https:\/\/csp.microsoft.com\/report\/ESTS-UX-All","count":1},{"content-security-policy-report-only":" frame-ancestors 'none'; default-src 'self'; script-src 'self' 'nonce-ODdkMzIwZDUtNjE0Zi00YmU4LThjMjgtMGY1ZDNiNDU2ZDk0' https:\/\/status.livepix.gg https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com https:\/\/js.intercomcdn.com https:\/\/widget.intercom.io https:\/\/www.youtube.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com https:\/\/fonts.intercomcdn.com; img-src 'self' https:\/\/static.livepix.gg https:\/\/cdn.livepix.gg https:\/\/www.googletagmanager.com https:\/\/downloads.intercomcdn.com https:\/\/static.intercomassets.com https:\/\/js.intercomcdn.com https:\/\/messenger-apps.intercom.io https:\/\/i.ytimg.com; frame-src 'self' https:\/\/checkout.livepix.gg https:\/\/rlgrjlrv2czy.statuspage.io https:\/\/www.googletagmanager.com https:\/\/intercom-sheets.com https:\/\/www.google.com https:\/\/www.youtube.com; connect-src 'self' https:\/\/webservice.livepix.gg https:\/\/fingerprint.livepix.gg https:\/\/fp.livepix.gg https:\/\/livia.livepix.gg https:\/\/www.google.com https:\/\/www.google-analytics.com https:\/\/api-iam.intercom.io wss:\/\/nexus-websocket-a.intercom.io https:\/\/o4508013286391808.ingest.us.sentry.io; manifest-src 'self' https:\/\/static.livepix.gg; media-src 'self' blob: https:\/\/static.livepix.gg https:\/\/js.intercomcdn.com","count":1},{"content-security-policy-report-only":" frame-ancestors *.googleapis.com 'self';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri \/__vsctcspreport__","count":1},{"content-security-policy-report-only":" style-src-elem maps.gstatic.com maps.googleapis.com fonts.googleapis.com *.gstatic.com 'unsafe-inline' 'self' mcstaging.chopo.com.mx www.chopo.com.mx; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com fonts.googleapis.com https:\/\/fonts.bunny.net https:\/\/fonts.gstatic.com data: https:\/\/www.google.com https:\/\/www.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action *.paypal.com *.mercadopago.com.mx https:\/\/mercadopago.com.mx https:\/\/grupoproa.qualtrics.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mitec.com.mx 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com.mx https:\/\/mercadopago.com.mx https:\/\/grupoproa.qualtrics.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mitec.com.mx www.gstatic.com self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com *.braintreegateway.com *.paypal.com google.com *.google.com *.mercadopago.com.mx https:\/\/mercadopago.com.mx https:\/\/grupoproa.qualtrics.com https:\/\/*.crazyegg.com 'self' *.doubleclick.net *.sharethis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mitec.com.mx www.google.com www.gstatic.com apis.google.com *.sapproa.com.mx https:\/\/devoluciones.sapproa.com.mx:34271 https:\/\/devolucionesqa.sapproa.com.mx:34271 *.examedi.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.mercadopago.com.mx https:\/\/mercadopago.com.mx https:\/\/grupoproa.qualtrics.com https:\/\/*.crazyegg.com https:\/\/user-images.crazyeggcdn.com maps.gstatic.com maps.googleapis.com *.facebook.com *.sharethis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/firebasestorage.googleapis.com *.mitec.com.mx *.googleapis.com *.sapproa.com.mx https:\/\/devoluciones.sapproa.com.mx:34271 https:\/\/devolucionesqa.sapproa.com.mx:34271 *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page *.mercadopago.com.mx https:\/\/mercadopago.com.mx https:\/\/grupoproa.qualtrics.com https:\/\/*.crazyegg.com *.googleapis.com maps.google.com *.gstatic.com *.sharethis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.avada.io *.shopify.com *.mitec.com.mx www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.sapproa.com.mx https:\/\/devoluciones.sapproa.com.mx:34271 https:\/\/devolucionesqa.sapproa.com.mx:34271 *.jscrambler.com *.examedi.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com *.mercadopago.com.mx https:\/\/mercadopago.com.mx https:\/\/grupoproa.qualtrics.com https:\/\/*.crazyegg.com maps.gstatic.com maps.googleapis.com *.gstatic.com 'unsafe-inline' 'self' mcstaging.chopo.com.mx www.chopo.com.mx *.sharethis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/fonts.bunny.net *.googleapis.com *.addtoany.com *.mitec.com.mx *.google.com *.sapproa.com.mx https:\/\/devoluciones.sapproa.com.mx:34271 https:\/\/devolucionesqa.sapproa.com.mx:34271 https:\/\/www.chopo.com.mx 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.mercadopago.com.mx https:\/\/mercadopago.com.mx https:\/\/grupoproa.qualtrics.com https:\/\/*.crazyegg.com *.googleapis.com maps.google.com *.gstatic.com *.sharethis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/get.geojs.io *.avada.io http:\/\/dpm.demdex.net *.mitec.com.mx https:\/\/www.google.com https:\/\/www.gstatic.com *.sapproa.com.mx https:\/\/devoluciones.sapproa.com.mx:34271 https:\/\/devolucionesqa.sapproa.com.mx:34271 *.jscrambler.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src https:\/\/*.crazyegg.com blob: http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src blob: https:\/\/*.mhcache.com;font-src 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com https:\/\/fonts.gstatic.com;frame-src 'self' https:\/\/*.mhcache.com https:\/\/portal.allyable.com https:\/\/mh-site-files-5c53d6a9947c.s3.amazonaws.com https:\/\/myheritage-container.com https:\/\/www.myheritage-partners.com https:\/\/www.myheritage.com https:\/\/*.mk-sense.com https:\/\/player.vimeo.com https:\/\/*.facebook.com https:\/\/*.google.com https:\/\/tpc.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/accounts.google.com\/gsi\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/recaptcha.google.com\/recaptcha\/  https:\/\/widget.trustpilot.com;script-src https:\/\/accounts.google.com\/gsi\/client https:\/\/www.datadoghq-browser-agent.com https:\/\/appleid.cdn-apple.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/maps.googleapis.com *.myheritage.se https:\/\/www.myheritage.se  'unsafe-eval' 'nonce-94879d47c9e6888bd4990415acaff963' 'strict-dynamic' https:\/\/widget.trustpilot.com https:\/\/invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com https:\/\/fonts.googleapis.com https:\/\/accounts.google.com\/gsi\/style  https:\/\/widget.trustpilot.com;connect-src data: 'self' https:\/\/*.myheritage.com https:\/\/portal.allyable.com https:\/\/*.mhcache.com https:\/\/adservice.google.com https:\/\/*.logs.datadoghq.com https:\/\/*.browser-intake-datadoghq.com https:\/\/browser-intake-datadoghq.com https:\/\/sentry.io https:\/\/*.bing.com https:\/\/*.facebook.com https:\/\/*.doubleclick.net https:\/\/*.mk-sense.com https:\/\/*.filae.com https:\/\/accounts.google.com\/gsi\/ https:\/\/www.google.com\/pagead\/landing https:\/\/maps.googleapis.com\/maps\/api\/mapsjs\/gen_204 https:\/\/translate.googleapis.com https:\/\/www.google.com\/ccm\/collect https:\/\/cdn.builder.io https:\/\/www.google.com\/recaptcha\/enterprise\/* https:\/\/www.google.com\/recaptcha\/enterprise\/ https:\/\/www.google.com\/recaptcha\/enterprise\/clr https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com https:\/\/people.googleapis.com https:\/\/translate-pa.googleapis.com *.myheritage.se https:\/\/widget.trustpilot.com;media-src 'self' https:\/\/*.myheritage.com https:\/\/*.mhcache.com;frame-ancestors 'self' https:\/\/builder.io;img-src * data:  https:\/\/widget.trustpilot.com https:\/\/*.trustpilot.com;object-src 'none';base-uri 'self' https:\/\/*.mhcache.com;report-uri \/FP\/API\/ContentSecurityPolicy\/report-violation.php?report_mode=report&canonical_page_id=\/company\/home\/","count":1},{"content-security-policy-report-only":" font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com https:\/\/applepay.cdn-apple.com https:\/\/static.dhlecommerce.nl https:\/\/fonts.gstatic.com *.fontawesome.com * data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com https:\/\/www.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/pay.google.com https:\/\/applepay.cdn-apple.com https:\/\/hostedfields-externalapi.alpha.buckaroo.aws https:\/\/hostedfields-externalapi.prod-pci.buckaroo.io js.mollie.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https:\/\/images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com https:\/\/static.buckaroo.nl https:\/\/www.buckaroo.nl https:\/\/www.paypalobjects.com https:\/\/pay.google.com https:\/\/developers.google.com https:\/\/applepay.cdn-apple.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com magefan.com cm.magefan.com https:\/\/www.mollie.com * data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/cdn.jsdelivr.net\/npm\/@ryangjchandler\/spruce@2.x.x\/dist\/spruce.umd.js https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net https:\/\/static.buckaroo.nl https:\/\/checkout.buckaroo.nl https:\/\/testcheckout.buckaroo.nl https:\/\/buckaroo.nl https:\/\/www.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/applepay.cdn-apple.com https:\/\/pay.google.com https:\/\/hostedfields-externalapi.alpha.buckaroo.aws https:\/\/hostedfields-externalapi.prod-pci.buckaroo.io https:\/\/static.dhlecommerce.nl js.mollie.com * 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com https:\/\/static.buckaroo.nl https:\/\/checkout.buckaroo.nl https:\/\/testcheckout.buckaroo.nl https:\/\/static.dhlecommerce.nl https:\/\/maps.googleapis.com https:\/\/fonts.googleapis.com *.fontawesome.com * 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com * 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com https:\/\/static.buckaroo.nl wss:\/\/websockets.buckaroo.io\/ https:\/\/checkout.buckaroo.nl https:\/\/testcheckout.buckaroo.nl https:\/\/hostedfields-externalapi.alpha.buckaroo.aws https:\/\/hostedfields-externalapi.prod-pci.buckaroo.io https:\/\/applepay.buckaroo.io https:\/\/smp-paymentservices.apple.com https:\/\/www.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/pay.google.com https:\/\/api-gw.dhlparcel.nl https:\/\/static.dhlecommerce.nl * 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/209c367d-15d5-45b5-8149-cd4f425fd724.sansec.watch\/; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" script-src-elem https:\/\/widget01.popin.to https:\/\/store.popin.to https:\/\/widget01.popin.to\/production *.popin.to blob: data: 'unsafe-inline' *.paypal.com *.paypalobjects.com; font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com uat.pinepg.in https:\/\/uat.pinepg.in\/api\/PG\/V2 secure.pinepg.in https:\/\/secure.pinepg.in\/payment 'self' data: *.payu.in 'self' 'unsafe-inline'; frame-ancestors 'self' data: *.payu.in *.facebook.com *.flydubai.com *.myshopify.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ https:\/\/googleads.g.doubleclick.net https:\/\/td.doubleclick.net *.doubleclick.net 'self' data: *.payu.in *.facebook.com *.flydubai.com *.myshopify.com https:\/\/widget01.popin.to *.popin.to blob: *.paypal.com *.paypalobjects.com landofcoder.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.ftcdn.net *.behance.net *.googleapis.com maps.gstatic.com www.pinelabs.com https:\/\/www.pinelabs.com\/img\/logo.png https:\/\/www.magezon.com *.gstatic.com https:\/\/googleads.g.doubleclick.net *.doubleclick.net https:\/\/www.googleadservices.com https:\/\/pagead2.googlesyndication.com https:\/\/widget01.popin.to https:\/\/store.popin.to *.popin.to blob: *.paypal.com *.paypalobjects.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-datasolutions.com https:\/\/rum.hlx.page maps.googleapis.com https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com tagmanager.google.com https:\/\/www.googleadservices.com https:\/\/js-agent.newrelic.com *.payu.in jssdk.payu.in https:\/\/widget01.popin.to https:\/\/store.popin.to https:\/\/widget01.popin.to\/production *.popin.to blob: data: 'unsafe-inline' 'unsafe-eval' *.paypal.com *.paypalobjects.com *.googleapis.com landofcoder.com https:\/\/storage.googleapis.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com tagmanager.google.com 'unsafe-inline' blob: 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https:\/\/store.popin.to *.popin.to blob: 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com maps.googleapis.com https:\/\/www.google-analytics.com https:\/\/fonts.gstatic.com https:\/\/googleads.g.doubleclick.net *.doubleclick.net https:\/\/www.googleadservices.com https:\/\/pagead2.googlesyndication.com https:\/\/bam.nr-data.net https:\/\/js-agent.newrelic.com *.payu.in https:\/\/widget01.popin.to https:\/\/store.popin.to *.popin.to blob: *.paypal.com *.paypalobjects.com *.googleapis.com https:\/\/www.gstatic.com landofcoder.com https:\/\/storage.googleapis.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src *.popin.to blob: http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri www.googleadservices.com 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' blob: https:\/\/thaipbs.or.th https:\/\/www.googletagmanager.com https:\/\/analytics-psb.thaipbs.or.th https:\/\/lvs.truehits.in.th https:\/\/mnjura.com https:\/\/*.mnjura.com https:\/\/cdn.taboola.com https:\/\/pm-widget.taboola.com https:\/\/cdn.thelead.tech https:\/\/connect.facebook.net https:\/\/storage.googleapis.com https:\/\/use.typekit.net https:\/\/www.instagram.com https:\/\/www.youtube.com https:\/\/cdn.moengage.com https:\/\/www.google-analytics.com https:\/\/*.clarity.ms https:\/\/analytics.tiktok.com https:\/\/d.line-scdn.net https:\/\/analytics.ahrefs.com https:\/\/byteark-sdk.cdn.byteark.com https:\/\/www.gstatic.com https:\/\/apis.google.com https:\/\/platform.twitter.com https:\/\/thaipbs-web-lionhead-asset.thaipbs.or.th; style-src 'self' 'unsafe-inline' https:\/\/use.typekit.net https:\/\/thaipbs.or.th https:\/\/byteark-sdk.cdn.byteark.com https:\/\/fonts.googleapis.com https:\/\/thaipbs-web-lionhead-asset.thaipbs.or.th; font-src 'self' https:\/\/thaipbs-web-lionhead-asset.thaipbs.or.th https:\/\/use.typekit.net https:\/\/fonts.gstatic.com; img-src 'self' data: https:\/\/*.thaipbs.or.th https:\/\/thaipbs.or.th https:\/\/d3dyak49qszsk5.cloudfront.net https:\/\/thaipbs-program.s3-ap-southeast-1.amazonaws.com https:\/\/thaipbs-program-production.s3.amazonaws.com https:\/\/thaipbs-web-lionhead-asset.s3.amazonaws.com https:\/\/www.thaipbs.or.th https:\/\/thaipbs-web-lionhead-asset.thaipbs.or.th https:\/\/www.thaipbspodcast.com https:\/\/st-th-1.byteark.com https:\/\/www.facebook.com https:\/\/www.altv.tv https:\/\/storage.googleapis.com https:\/\/img.youtube.com https:\/\/tr.line.me https:\/\/lvs.truehits.in.th https:\/\/www.google.co.th https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/*.mnjura.com https:\/\/*.taboola.com; connect-src 'self' https:\/\/*.thaipbs.or.th https:\/\/one.thaipbs.th https:\/\/www.altv.tv https:\/\/fleetapi.byteark.com https:\/\/*.cdn.byteark.com https:\/\/*.stream-playlist.byteark.com https:\/\/*.cdntrace.byteark.com https:\/\/gateway.lh.byteark.com https:\/\/timemachine.byteark.com https:\/\/analytics-psb.thaipbs.or.th https:\/\/lvs.truehits.in.th https:\/\/mnjura.com https:\/\/*.mnjura.com https:\/\/www.facebook.com https:\/\/www.instagram.com https:\/\/*.moengage.com https:\/\/analytics.google.com https:\/\/www.google-analytics.com https:\/\/*.clarity.ms https:\/\/analytics.tiktok.com https:\/\/*.taboola.com; frame-src 'self' https:\/\/*.thaipbs.or.th https:\/\/www.thaipbs.th https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/players.brightcove.net https:\/\/www.facebook.com https:\/\/vod.thaipbs.or.th https:\/\/stream-player.byteark.com https:\/\/platform.twitter.com https:\/\/syndication.twitter.com https:\/\/main.dji64z3tmvxa2.amplifyapp.com; media-src 'self' blob: https:\/\/*.thaipbs.or.th https:\/\/*.cdn.byteark.com https:\/\/vod.thaipbs.or.th https:\/\/4056.radio2.thzhost.com; worker-src 'self'; frame-ancestors 'none'","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; img-src 'self' data: https:; font-src 'self' data: https:\/\/fonts.gstatic.com; media-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/ista.piwik.pro https:\/\/*.usercentrics.eu https:\/\/www.youtube.com https:\/\/maps.googleapis.com https:\/\/*.g.doubleclick.net https:\/\/*.google-analytics.com https:\/\/*.googlesyndication.com https:\/\/*.googleapis.com https:\/\/tracking.ista.com https:\/\/www.googletagmanager.com https:\/\/www.clickcease.com https:\/\/www.googleoptimize.com https:\/\/*.hotjar.com https:\/\/siteintercept.qualtrics.com https:\/\/*.siteintercept.qualtrics.com https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/*.twitter.com 'report-sample'; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https: blob: 'report-sample'; style-src 'self' 'unsafe-inline' https:\/\/*.usercentrics.eu https:\/\/fonts.googleapis.com 'report-sample'; style-src-elem 'self' 'unsafe-inline' https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com https:\/\/www.googletagmanager.com\/debug\/badge.css 'report-sample'; worker-src 'self' 'unsafe-inline' 'unsafe-eval' blob: 'report-sample'; object-src 'none'; connect-src 'self' https:\/\/tracking.ista.com https:\/\/ista.piwik.pro https:\/\/*.usercentrics.eu https:\/\/fonts.googleapis.com *.google.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com blob: data: https:\/\/*.google.com https:\/\/*.google.de https:\/\/*.g.doubleclick.net https:\/\/*.google-analytics.com https:\/\/*.googlesyndication.com https:\/\/siteintercept.qualtrics.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com; frame-src 'self' https:\/\/*.usercentrics.eu *.youtube-nocookie.com *.youtube.com *.vimeo.com *.google.com https:\/\/*.doubleclick.net https:\/\/*.g.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/tracking.ista.com https:\/\/www.googletagmanager.com https:\/\/www.facebook.com https:\/\/*.twitter.com; frame-ancestors 'self'; report-uri https:\/\/www.ista.com\/corporate\/@http-reporting?csp=report&requestTime=1788448865750897&requestHash=baf5e33c2c97b0324081f63408459c34d2078dd0","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net https:\/\/cdnjs.cloudflare.com *.fontawesome.com https:\/\/fonts.gstatic.com https:\/\/www.google.com https:\/\/www.gstatic.com http:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.googleadservices.com *.paypal.com *.google-analytics.com https:\/\/l.clarity.ms\/collect  *.paypal.com  https:\/\/get.geojs.io  https:\/\/js-agent.newrelic.com  https:\/\/royaloak-dev.codilar.in https:\/\/mcstaging.royaloakindia.com  https:\/\/royaloakindia.com  https:\/\/bam.nr-data.net https:\/\/f.clarity.ms https:\/\/sdk-01.moengage.com\/ https:\/\/mcprod.royaloakindia.com https:\/\/cdnjs.cloudflare.com https:\/\/commerce.adobedtm.com https:\/\/js-agent.newrelic.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/plumrocket.com 'self' 'unsafe-inline'; frame-ancestors https:\/\/cdnjs.cloudflare.com https:\/\/js-agent.newrelic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.googleadservices.com *.paypal.com *.google-analytics.com https:\/\/l.clarity.ms\/collect  *.paypal.com  https:\/\/get.geojs.io  https:\/\/js-agent.newrelic.com  https:\/\/royaloak-dev.codilar.in  https:\/\/mcstaging.royaloakindia.com  https:\/\/royaloakindia.com  https:\/\/bam.nr-data.net https:\/\/f.clarity.ms https:\/\/sdk-01.moengage.com\/ https:\/\/mcprod.royaloakindia.com https:\/\/cdnjs.cloudflare.com https:\/\/commerce.adobedtm.com https:\/\/js-agent.newrelic.com api.razorpay.com www.youtube-nocookie.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com http:\/\/x.nitrocommerce.ai https:\/\/x.nitrocommerce.ai http:\/\/t.makehook.ws https:\/\/t.makehook.ws c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https:\/\/plumrocket.com testourcode.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.googleadservices.com *.paypalobjects.com *.google-analytics.com https:\/\/l.clarity.ms\/collect  *.paypal.com  https:\/\/get.geojs.io  https:\/\/js-agent.newrelic.com  https:\/\/royaloak-dev.codilar.in  https:\/\/mcstaging.royaloakindia.com  https:\/\/royaloakindia.com  https:\/\/bam.nr-data.net https:\/\/f.clarity.ms https:\/\/sdk-01.moengage.com\/ https:\/\/mcprod.royaloakindia.com https:\/\/cdnjs.cloudflare.com https:\/\/commerce.adobedtm.com https:\/\/js-agent.newrelic.com https:\/\/pdp.gokwik.co https:\/\/res.shopster.chat https:\/\/x.nitrocommerce.ai https:\/\/staging.royaloakindia.com https:\/\/www.facebook.com cdn.razorpay.com magefan.com cm.magefan.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com http:\/\/x.nitrocommerce.ai http:\/\/t.makehook.ws https:\/\/t.makehook.ws www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com assets.snapmint.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-ds.com *.googleadservices.com *.paypal.com *.google-analytics.com https:\/\/l.clarity.ms\/collect  *.paypal.com  https:\/\/get.geojs.io  https:\/\/js-agent.newrelic.com  https:\/\/royaloak-dev.codilar.in  https:\/\/mcstaging.royaloakindia.com  https:\/\/royaloakindia.com  https:\/\/bam.nr-data.net https:\/\/f.clarity.ms https:\/\/sdk-01.moengage.com\/ https:\/\/mcprod.royaloakindia.com https:\/\/cdnjs.cloudflare.com https:\/\/commerce.adobedtm.com https:\/\/js-agent.newrelic.com https:\/\/pdp.gokwik.co https:\/\/offer-widget.gokwik.co https:\/\/x.nitrocommerce.ai https:\/\/urlbird.nitrocommerce.ai https:\/\/assets.snapmint.com https:\/\/cdn.razorpay.com https:\/\/checkout.razorpay.com https:\/\/clarity.ms https:\/\/www.clarity.ms www.facebook.com https:\/\/www.googletagmanager.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/bat.bing.com https:\/\/unpkg.com checkout.razorpay.com *.googleapis.com *.google.com *.gstatic.com connect.facebook.net graph.facebook.com business.facebook.com http:\/\/x.nitrocommerce.ai http:\/\/t.makehook.ws https:\/\/t.makehook.ws js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com api.snapmint.com assets.snapmint.com sandboxapi.snapmint.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/cdnjs.cloudflare.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com http:\/\/x.nitrocommerce.ai https:\/\/x.nitrocommerce.ai http:\/\/t.makehook.ws https:\/\/t.makehook.ws http:\/\/fonts.googleapis.com https:\/\/fonts.googleapis.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.sentry.io *.googleadservices.com *.paypal.com *.google-analytics.com https:\/\/l.clarity.ms\/collect  *.paypal.com  https:\/\/get.geojs.io  https:\/\/js-agent.newrelic.com  https:\/\/royaloak-dev.codilar.in  https:\/\/mcstaging.royaloakindia.com  https:\/\/royaloakindia.com  https:\/\/bam.nr-data.net https:\/\/f.clarity.ms https:\/\/sdk-01.moengage.com\/ https:\/\/mcprod.royaloakindia.com https:\/\/cdnjs.cloudflare.com https:\/\/commerce.adobedtm.com https:\/\/js-agent.newrelic.com https:\/\/pdp.gokwik.co https:\/\/x.nitrocommerce.ai https:\/\/urlbird.nitrocommerce.ai https:\/\/t.makehook.ws https:\/\/assets.snapmint.com https:\/\/api.snapmint.com https:\/\/lumberjack.razorpay.com https:\/\/lumberjack-metrics.razorpay.com https:\/\/googleads.g.doubleclick.net https:\/\/clarity.ms https:\/\/mpc2-prod-26-is5qnl632q-uc.a.run.app https:\/\/api.braintreegateway.com https:\/\/client-analytics.braintreegateway.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com www.youtube.com http:\/\/dpm.demdex.net https:\/\/www.google.com https:\/\/www.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.gstatic.com http:\/\/x.nitrocommerce.ai http:\/\/t.makehook.ws api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri \/csp-report.php","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.checkout.com *.cdn-apple.com *.bglobale.com *.global-e.com https:\/\/fonts.gstatic.com *.klarnacdn.net *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com s3-eu-west-1.amazonaws.com fonts.feefo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.checkout.com *.klarna.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.bglobale.com *.global-e.com https:\/\/www.googletagmanager.com\/ js.mollie.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.youtube.com\/ *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com *.afd.co.uk https:\/\/images.unsplash.com *.brsrvr.com *.bloomreach.cloud *.checkout.com *.bglobale.com *.global-e.com *.klarna.com *.klarnaevt.com *.klarnacdn.net http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ magefan.com cm.magefan.com https:\/\/www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: *.cloudflare.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu cookie-cdn.cookiepro.com public.feefo.com data.joebrowns.co.uk lantern.roeye.com sync.missena.io bh.contextweb.com ams.creativecdn.com public-prod-dspcookiematching.dmxleo.com sync.adtech.ink brxcdn.com us.ck-ie.com inv-nets.admixer.net match.sharethrough.com sync.1rx.io www.google.co.uk sync.targeting.unrulymedia.com ik.imagekit.io *.facebook.com *.reddit.com *.ads-twitter.com t.co *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page www.google.com *.afd.co.uk *.jsdelivr.net https:\/\/maps.googleapis.com https:\/\/player.vimeo.com cdn.brcdn.com *.checkout.com *.klarnacdn.net *.online-metrix.net testflex.cybersource.com flex.cybersource.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.bglobale.com *.global-e.com *.klarna.com *.klarnaservices.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.trackedlink.net cdn.jsdelivr.net *.exponea.com *.cookiepro.com www.uqd.io login.dotomi.com cdns.brsrvr.com www.dwin1.com api.feefo.com register.feefo.com lantern.roeyecdn.com tags.creativecdn.com code.jquery.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.checkout.com *.bglobale.com *.global-e.com https:\/\/fonts.googleapis.com *.klarnacdn.net *.fontawesome.com assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu register.feefo.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.afd.co.uk https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.dxpapi.com *.checkout.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.browser-intake-datadoghq.com x.klarnacdn.net *.klarnaservices.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ *.klarnauserservices.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org experiments-api.fabric-analytics.com *.exponea.com *.global-e.com ams.creativecdn.com analytics-ipv6.tiktokw.us cookie-cdn.cookiepro.com geolocation.onetrust.com pagead2.googlesyndication.com api.feefo.com collect.feefo.com *.bglobale.com data.joebrowns.co.uk *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" base-uri 'none'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-RDlGiGqUBnAT3TaO7Nlgkw=='","count":1},{"content-security-policy-report-only":" default-src 'self';    object-src 'none';    base-uri 'self';    frame-ancestors 'none';    form-action 'self';    script-src 'self'      https:\/\/cdn.cookielaw.org      https:\/\/www.googletagmanager.com      https:\/\/www.google-analytics.com      https:\/\/assets.convertflow.com      https:\/\/cdn.jsdelivr.net      https:\/\/snap.licdn.com      https:\/\/pi.pardot.com      https:\/\/stats.g.doubleclick.net      https:\/\/region1.google-analytics.com;    style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com;    font-src 'self' https:\/\/fonts.gstatic.com;    img-src 'self' data:      https:\/\/www.google-analytics.com     .https:\/\/stats.g.doubleclick.net      https:\/\/cdn.cookielaw.org      https:\/\/cdn.convertflow.com      https:\/\/px.ads.linkedin.com      https:\/\/pi.pardot.com;    connect-src 'self'      https:\/\/www.google-analytics.com      https:\/\/analytics.google.com      https:\/\/region1.google-analytics.com      https:\/\/stats.g.doubleclick.net      https:\/\/api.convertflow.com      https:\/\/app.convertflow.co      https:\/\/cdn.cookielaw.org      https:\/\/geolocation.onetrust.com      https:\/\/snap.licdn.com      https:\/\/px.ads.linkedin.com      https:\/\/pi.pardot.com;    frame-src 'self'      https:\/\/www.googletagmanager.com      https:\/\/app.convertflow.co      https:\/\/pi.pardot.com;    upgrade-insecure-requests;    report-to csp-endpoint;    report-uri reporting URL\/report;","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * api.bazaarvoice.com stg.api.bazaarvoice.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.affirm.com *.affirm.ca *.certcapture.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.authorize.net *.trustpilot.com *.wesupply.xyz https:\/\/wesupplylabs.com *.weltpixel.com https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com *.affirm.com *.affirm.ca *.certcapture.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com services.postcodeanywhere.co.uk https:\/\/firebasestorage.googleapis.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.affirm.com *.affirm.ca *.certcapture.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com api.addressy.com *.avada.io *.authorize.net *.trustpilot.com *.cloudflare.com https:\/\/cdn-scripts.signifyd.com https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.certcapture.com display.ugc.bazaarvoice.com api.addressy.com *.fontawesome.com https:\/\/fonts.bunny.net *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com *.affirm.com *.affirm.ca *.certcapture.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com api.addressy.com https:\/\/get.geojs.io *.avada.io *.authorize.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' *.2mdn.net *.3lift.com *.a47b.com *.acuityplatform.com *.ad-score.com *.adform.net *.adnxs.com *.ads.smartadserver.com *.adsafeprotected.com *.adsappier.com *.adsrvr.org *.adtrafficquality.google *.amazon-adsystem.com *.amazonaws.com *.ampproject.org *.azureedge.net *.b2c.com *.basis.net *.betrad.com *.bidr.io *.browsiprod.com *.c3tag.com *.cdn.fastclick.net *.celtra.com *.cloudfront.net *.cog-tr3.com *.cog-tr4.com *.demdex.net *.dotomi.com *.doubleclick.net *.doubleverify.com *.enzymic.co *.evidon.com *.exelator.com *.eyeota.net *.flashtalking.com *.flx10.com *.fouanalytics.com *.ftstatic.com *.g.doubleclick.net *.getrockerbox.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.gumgum.com *.id5-sync.com *.innovid.com *.insiad.com *.intentiq.com *.jivox.com *.js7k.com *.jwplayer.com *.l-dsp.inmobicdn.net *.microsoft.com *.mxptint.net *.ns1p.net *.ntv.io *.onedsp.inmobi.com *.p.jwpcdn.com *.padsquad.com *.peer-39.com *.polarcdn.com *.poupdate.pulsepoint.com *.privacymanager.io *.puzzmo-game-assets.com *.puzzmo.com *.puzzmousercontent.com *.quantcount.com *.quantserve.com *.rendering.sharethrough.com *.rfihub.com *.rqtrk.eu *.rubiconproject.com *.rudderlabs.com *.scorecardresearch.com *.script.ac *.smadex.com *.srv.stackadapt.com *.trustarc.com *.truste.com *.turn.com *.update.adsrvr.org *.update.indexww.com *.update.rubiconproject.com *.update.wo.gumgum.com *.yabidos.com *.ybp.yahoo.com *.yimg.com adrta.com cdn-cookieyes.com htlbid.com lottingem.com openfpcdn.io; connect-src 'self' *.3lift.com *.ad-score.com *.adform.net *.adnxs.com *.ads.smartadserver.com *.adsrvr.org *.adtrafficquality.google *.amazon-adsystem.com *.amazonaws.com *.appiersig.com *.b2c.com *.c.appier.net *.c3tag.com *.casalemedia.com *.cheilmedia.com *.cloudfront.net *.cog-tr101.com *.contextweb.com *.cookieyes.com *.dotomi.com *.doubleclick.net *.doubleverify.com *.eu-1-id5-sync.com *.eu-3-id5-sync.com *.eu-4-id5-sync.com *.flashtalking.com *.fouanalytics.com *.ftstatic.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.gumgum.com *.id5-sync.com *.ingest.sentry.io *.innovid.com *.insiad.com *.jwplayer.com *.liadm.com *.lynx.cognitivlabs.com *.ns1p.net *.openx.net *.peer-39.com *.poupdate.pulsepoint.com *.prod.na.adsqtungsten.a9.amazon.dev *.pubmatic.com *.puzzmo-game-assets.com *.puzzmo.com *.puzzmousercontent.com *.quantserve.com *.rlcdn.com *.rubiconproject.com *.rudderstack.com *.srv.stackadapt.com *.tahoe-analytics.publishers.advertising.a2z.com *.update.adsrvr.org *.update.indexww.com *.update.rubiconproject.com *.update.wo.gumgum.com *.us-east-1.cxm-bcn.publisher-services.amazon.dev *.ybp.yahoo.com cdn-cookieyes.com data: geo-location.prebid.cloud geo.privacymanager.io id5-sync.com o1223952.ingest.sentry.io prebid.outcomes.net sevendata.fun wss:\/\/*.puzzmo.com; form-action 'none'; report-to default","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com *.klevu.com *.ksearchnet.com *.fontawesome.com https:\/\/fonts.bunny.net *.stripe.com *.klarna.com *.klarnaevt.com *.klarnacdn.net klarna.com https:\/\/fonts.gstatic.com https:\/\/static.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * 'self' *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors *.facebook.com * 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.braintreegateway.com *.paypal.com google.com *.google.com * *.awin1.com *.zenaps.com *.fls.doubleclick.net account.fetchify.com *.google.com\/ *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.weltpixel.com *.stripe.com consentcdn.cookiebot.com consentcdn.cookiebot.eu c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com challenges.cloudflare.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.awin1.com *.zenaps.com *.wepowerconnections.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.disqus.com https:\/\/firebasestorage.googleapis.com https:\/\/www.magezon.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com imgsct.cookiebot.com imgsct.cookiebot.eu www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.pushalert.co www.xtento.com cdn.xtento.com lookaside.fbsbx.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com lantern.roeyecdn.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com cc-cdn.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com *.disqus.com *.avada.io *.shopify.com *.google.com\/ *.facebook.com https:\/\/connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com https:\/\/maps.googleapis.com https:\/\/static.hotjar.com * https:\/\/www.googletagmanager.com tagmanager.google.com consent.cookiebot.com consent.cookiebot.eu js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com challenges.cloudflare.com *.pushalert.co bzrcdn.openai.com www.xtento.com cdn.xtento.com *.loudcrowd.com https:\/\/consent.cookiebot.com https:\/\/js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app downloads.mailchimp.com cc-cdn.com https:\/\/static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com https:\/\/fonts.bunny.net *.stripe.com *.klarna.com *.klarnaevt.com *.klarnacdn.net assets.braintreegateway.com tagmanager.google.com https:\/\/fonts.googleapis.com *.loudcrowd.com https:\/\/consent.cookiebot.com https:\/\/statsjs.klevu.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com lookaside.fbsbx.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com https:\/\/get.geojs.io *.avada.io *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com https:\/\/developer.adobe.com https:\/\/maps.googleapis.com https:\/\/www.google-analytics.com consentcdn.cookiebot.com consentcdn.cookiebot.eu api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pushalert.co bzr.openai.com *.loudcrowd.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/8fd11ad9-7da9-4946-bc96-2e043f30b371.sansec.watch\/; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.zma.gs *.devhec.com *.abtasty.com abtasty.com api-data-connector.abtasty.com ariane.abtasty.com assets-manager.abtasty.com common-fonts.abtasty.com dcinfos-cache.abtasty.com try.abtasty.com *.ipredictive.com ipredictive.com adlucent.com deepsearch.adlucent.com *.everesttech.net everesttech.net *.typekit.net typekit.net amazonaws.com execute-api.us-west-2.amazonaws.com us-east-2.amazonaws.com socialannex.com *.adnxs.com adnxs.com *.auryc.com auryc.com *.bidr.io prod.bidr.io *.bing.com *.bing.net bat.bing.net bing.com *.brxcdn.com brxcdn.com *.btttag.com btttag.com *.builder.io builder.io *.cloudflare.com *.cloudflareinsights.com cdnfonts.com cloudflare.com cloudflareinsights.com *.cloudfront.net cloudfront.net *.cloudinary.com cloudinary.com *.cnstrc.com cnstrc.com *.contentsquare.net bf.contentsquare.net contentsquare.net hj.contentsquare.net *.criteo.com criteo.com *.delighted.com delighted.com g.doubleclick.net *.doubleclick.net doubleclick.net fls.doubleclick.net *.dstillery.com dstillery.com media6degrees.com *.facebook.com *.facebook.net facebook.com facebook.net *.getfastr.com getfastr.com *.iesnare.com iesnare.com *.google.com *.googlesyndication.com *.gstatic.com analytics.google.com google.bg google.bs google.ca google.ch google.co.cr google.co.il google.co.in google.co.jp google.co.th google.co.uk google.co.vi google.co.za google.com google.com.ar google.com.au google.com.br google.com.bz google.com.co google.com.eg google.com.hk google.com.mx google.com.my google.com.ng google.com.pa google.com.pe google.com.ph google.com.pk google.com.pr google.com.sa google.com.sg google.com.sv google.com.tr google.com.tw google.de google.es google.fr google.hn google.hr google.ie google.it google.nl google.pt google.ro google.sc google.se google.sk google.tt googlesyndication.com gstatic.com *.googleadservices.com googleadservices.com *.googleapis.com googleapis.com *.googletagmanager.com googletagmanager.com *.google-analytics.com google-analytics.com *.fsastore.com *.hsastore.com *.welldeservedhealth.com fsastore.com hsastore.com welldeservedhealth.com *.heap-api.com *.heapanalytics.com heap-api.com heapanalytics.com us.heap-api.com ip-api.com *.izooto.com izooto.com jquery.com listrak.com listrakbi.com *.liadm.com liadm.com *.pcapredict.com *.postcodeanywhere.co.uk pcapredict.com bing.net *.clarity.ms mountain.com *.northbeam.io northbeam.io *.oursprivacy.com oursprivacy.com *.paypalobjects.com paypalobjects.com *.pepperjam.com *.pepperjamnetwork.com pepperjam.com pepperjamnetwork.com *.pinimg.com *.pinterest.com pinimg.com pinterest.com *.pdst.fm *.powerreviews.com powerreviews.com *.riskified.com riskified.com disstg.commercecloud.salesforce.com *.segment.com *.segment.io segment.com segment.io ingest.sentry.io *.spotify.com *.mobify-storefront.com mobify-storefront.com alocdn.com *.adsrvr.org adsrvr.org *.trustarc.com trustarc.com acsbapp.com postcodeanywhere.co.uk telemetry.vaultdcr.com zma.gs *.vaultdcr.com *.youtube.com *.ytimg.com youtube.com ytimg.com *.zdassets.com *.zendesk.com zdassets.com zendesk.com zopim.com *.zmags.com *.zmags.workers.dev creator-prod.zmags.com zmags.com zmags.workers.dev *.fsastore.com *.amazonaws.com *.google.nl *.google.ru *.ip-api.com *.ivaws.com *.legitscript.com *.usbrowserspeed.com clarity.ms google.ae google.co.ma google.com.bd google.com.qa google.lt google.no google.pl google.ru ivaws.com legitscript.com usbrowserspeed.com; frame-ancestors capacitor:\/\/localhost;","count":1},{"content-security-policy-report-only":" ; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.klaviyo.com *.paypalobjects.com *.licdn.com *.clarity.ms https:\/\/ttz41d7zd1.execute-api.eu-west-1.amazonaws.com\/Prod\/js storage.googleapis.com cdn.mxpnl.com *.finance-calculator.co.uk angus.finance-calculator.co.uk *.collector-11207.tvsquared.com collector-11207.tvsquared.com bat.bing.com cdn.sub2tech.com *.sub2tech.com dmtrk.net dmtrk.com r1.dmtrk.net r1.dmtrk.com r2.dmtrk.net r2.dmtrk.com r3.dmtrk.net r3.dmtrk.com ddlnk.net ddlnk.com r1.ddlnk.net r1.ddlnk.com r2.ddlnk.net r2.ddlnk.com r3.ddlnk.net r3.ddlnk.com t.trackedlink.net r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net webinsight.s3.amazonaws.com static.trackedweb.net trackedweb.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net i.emlfiles.com i.emlfiles1.com i.emlfiles2.com i.emlfiles3.com i.emlfiles4.com i.emlfiles5.com i.emlfiles6.com i.emlfiles7.com i.emlfiles8.com i.emfiles9.com r1.dotmailer-surveys.com r2.dotmailer-surveys.com r3.dotmailer-surveys.com r1.dotdigital-surveys.com r2.dotdigital-surveys.com r3.dotdigital-surveys.com *.dotdigital-pages.com script.hotjar.com player.vimeo.com www.googleoptimize.com *.bookingbug.com *.paypal.com static.trackedweb.net *.trackedlink.net *.gstatic.com static.zdassets.com *.trustpilot.com optimize.google.com tagmanager.google.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.facebook.net *.cquotient.com services.postcodeanywhere.co.uk cdn.cquotient.com www.googletagmanager.com googleads.g.doubleclick.net https:\/\/iploc.tryzens-analytics.com:12443 *.pcapredict.com maps.googleapis.com services.postcodeanywhere.co.uk *.collector-11207.tvsquared.com collector-11207.tvsquared.com bat.bing.com cdn.sub2tech.com *.collector-11207.tvsquared.com collector-11207.tvsquared.com *.sub2tech.com www.google-analytics.com p.cquotient.com static.hotjar.com www.googleadservices.com *.adyen.com geolocation.onetrust.com cdn.cookielaw.org *.googletagmanager.com extend.vimeocdn.com *.christopherward.com *.appointedd.com *.ratepay.com unpkg.com *.tryzens-analytics.com tally.so *.tally.so px4.ads.linkedin.com bat.bing.net *.getflowbox.com *.flbx.io; style-src 'self' 'unsafe-inline' *.klaviyo.com angus.finance-calculator.co.uk storage.googleapis.com *.collector-11207.tvsquared.com collector-11207.tvsquared.com bat.bing.com cdn.sub2tech.com *.sub2tech.com *.paypalobjects.com dmtrk.net dmtrk.com r1.dmtrk.net r1.dmtrk.com r2.dmtrk.net r2.dmtrk.com r3.dmtrk.net r3.dmtrk.com ddlnk.net ddlnk.com r1.ddlnk.net r1.ddlnk.com r2.ddlnk.net r2.ddlnk.com r3.ddlnk.net r3.ddlnk.com t.trackedlink.net r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net webinsight.s3.amazonaws.com static.trackedweb.net trackedweb.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net i.emlfiles.com i.emlfiles1.com i.emlfiles2.com i.emlfiles3.com i.emlfiles4.com i.emlfiles5.com i.emlfiles6.com i.emlfiles7.com i.emlfiles8.com i.emfiles9.com r1.dotmailer-surveys.com r2.dotmailer-surveys.com r3.dotmailer-surveys.com r1.dotdigital-surveys.com r2.dotdigital-surveys.com r3.dotdigital-surveys.com *.adyen.com optimize.google.com tagmanager.google.com foursixty.com cdn.jsdelivr.net fonts.googleapis.com services.postcodeanywhere.co.uk cdn.cookielaw.org *.christopherward.com px4.ads.linkedin.com bat.bing.net *.getflowbox.com *.flbx.io; frame-src 'self' *.doubleclick.net storage.googleapis.com *.surveymonkey.com *.finance-calculator.co.uk *.collector-11207.tvsquared.com collector-11207.tvsquared.com bat.bing.com cdn.sub2tech.com *.sub2tech.com *.dotdigital-pages.com *.bookingbug.com vars.hotjar.com *.paypal.com *.paypalobjects.com *.google.com widget.trustpilot.com *.youtube.com *.vimeo.com optimize.google.com www.facebook.com *.klarnaservices.com *.adyen.com extend.vimeocdn.com *.appointedd.com tally.so *.tally.so https:\/\/www.googletagmanager.com https:\/\/data.christopherward.com px4.ads.linkedin.com bat.bing.net *.getflowbox.com *.flbx.io; child-src 'none'; img-src 'self' data: *.doubleclick.net *.vimeocdn.com *.clarity.ms px.ads.linkedin.com c.bing.com storage.googleapis.com angus.finance-calculator.co.uk *.paypalobjects.com dmtrk.net dmtrk.com r1.dmtrk.net r1.dmtrk.com r2.dmtrk.net r2.dmtrk.com r3.dmtrk.net r3.dmtrk.com ddlnk.net ddlnk.com r1.ddlnk.net r1.ddlnk.com r2.ddlnk.net r2.ddlnk.com r3.ddlnk.net r3.ddlnk.com t.trackedlink.net r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net webinsight.s3.amazonaws.com static.trackedweb.net trackedweb.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net i.emlfiles.com i.emlfiles1.com i.emlfiles2.com i.emlfiles3.com i.emlfiles4.com i.emlfiles5.com i.emlfiles6.com i.emlfiles7.com i.emlfiles8.com i.emfiles9.com r1.dotmailer-surveys.com r2.dotmailer-surveys.com r3.dotmailer-surveys.com r1.dotdigital-surveys.com r2.dotdigital-surveys.com r3.dotdigital-surveys.com www.jrni.com *.bookingbug.com *.paypal.com stats.g.doubleclick.net *.collector-11207.tvsquared.com collector-11207.tvsquared.com bat.bing.com cdn.sub2tech.com *.sub2tech.com edge.disstg.commercecloud.salesforce.com *.collector-11207.tvsquared.com collector-11207.tvsquared.com cdn.sub2tech.com *.sub2tech.com www.google-analytics.com *.paypalobjects.com static.secure-afterpay.com.au um.simpli.fi www.instagram.com www.googletagmanager.com services.postcodeanywhere.co.uk pixel.mathtag.com aa.agkn.com cx.atdmt.com www.facebook.com *.pbbl.co *.optimove.net *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com *.googleapis.com *.google.com *.adyen.com t1.stormiq.com cdn.cookielaw.org *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.christopherward.com *.cloudflare.com *.ctfassets.net px4.ads.linkedin.com bat.bing.net *.getflowbox.com *.flbx.io; font-src 'self' data: www.christopherward.com fonts.gstatic.com res.cloudinary.com *.paypalobjects.com googleads.g.doubleclick.net px4.ads.linkedin.com bat.bing.net *.getflowbox.com *.flbx.io; connect-src 'self' *.onetrust.com *.mixpanel.com *.klaviyo.com *.collector-11207.tvsquared.com g.clarity.ms clarity.ms collector-11207.tvsquared.com bat.bing.com cdn.sub2tech.com *.sub2tech.com angus.finance-calculator.co.uk dmtrk.net dmtrk.com r1.dmtrk.net r1.dmtrk.com r2.dmtrk.net r2.dmtrk.com r3.dmtrk.net r3.dmtrk.com ddlnk.net ddlnk.com r1.ddlnk.net r1.ddlnk.com r2.ddlnk.net r2.ddlnk.com r3.ddlnk.net r3.ddlnk.com t.trackedlink.net r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net webinsight.s3.amazonaws.com static.trackedweb.net trackedweb.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net i.emlfiles.com i.emlfiles1.com i.emlfiles2.com i.emlfiles3.com i.emlfiles4.com i.emlfiles5.com i.emlfiles6.com i.emlfiles7.com i.emlfiles8.com i.emfiles9.com r1.dotmailer-surveys.com r2.dotmailer-surveys.com r3.dotmailer-surveys.com r1.dotdigital-surveys.com r2.dotdigital-surveys.com r3.dotdigital-surveys.com wss:\/\/*.hotjar.com *.hotjar.com *.hotjar.io *.paypal.com *.adyen.com widget.trustpilot.com wss:\/\/widget-mediator.zopim.com christopherward.zendesk.com *.trackedweb.net ekr.zdassets.com https:\/\/ttz41d7zd1.execute-api.eu-west-1.amazonaws.com\/Prod\/js* *.klarnaevt.com stats.g.doubleclick.net www.facebook.com https:\/\/www.tryzens-analytics.com:12280 *.pinterest.com *.klarnauserservices.com *.optimove.events www.google-analytics.com *.hotjar.com *.optimove.net *.hotjar.io https:\/\/uat.tryzens-analytics.com:12280 api.cquotient.com services.postcodeanywhere.co.uk cdn.cookielaw.org *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat google.com\/pay extend.vimeocdn.com unpkg.com *.tryzens-analytics.com player.vimeo.com download-video-ak.vimeocdn.com px.ads.linkedin.com https:\/\/data.christopherward.com px4.ads.linkedin.com bat.bing.net *.getflowbox.com *.flbx.io; form-action 'self' http:\/\/portal.afterpay.com http:\/\/portal-sandbox.afterpay.com *.playground.klarna.com *.klarna.com *.afterpay.com www.facebook.com *.collector-11207.tvsquared.com collector-11207.tvsquared.com bat.bing.com cdn.sub2tech.com *.sub2tech.com *.paypal.com *.adyen.com https:\/\/data.christopherward.com px.ads.linkedin.com px4.ads.linkedin.com bat.bing.net *.getflowbox.com *.flbx.io; media-src 'self' static.zdassets.com res.cloudinary.com *.akamaized.net download-video-ak.vimeocdn.com player.vimeo.com px4.ads.linkedin.com bat.bing.net *.getflowbox.com *.flbx.io;; report-uri https:\/\/289r1hnfc9.execute-api.eu-west-1.amazonaws.com\/prod\/chw-cspdata;","count":1},{"content-security-policy-report-only":" default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https:\/\/*.khealth-test.com https:\/\/*.khealth.com https:\/\/*.stream-io-api.com https:\/\/*.stream-io-video.com https:\/\/*.zoom.us https:\/\/api.segment.io https:\/\/aubrey.carenav.novanthealth.org\/ https:\/\/browser-intake-datadoghq.com https:\/\/cdnapisec.kaltura.com\/ https:\/\/doxy.me https:\/\/epicproxy.et0798.epichosted.com https:\/\/mychart-np.et0798.epichosted.com https:\/\/mycharttest.novanthealth.org https:\/\/premier.trustcommerce.com\/ https:\/\/stagepremier.trustcommerce.com https:\/\/uataubrey.carenav.novanthealth.org\/ https:\/\/www.novantmychart.org https:\/\/www.youtube-nocookie.com https:\/\/www.youtube.com;script-src 'nonce-19153d12acd846719b3bc8b14970e7d9' https:\/\/novantmychart.org 'self';img-src https:\/\/* 'self' blob: data:;connect-src 'self' epichttp: https:\/\/*.kaltura.com;style-src https:\/\/novantmychart.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action 'self';media-src https:\/\/* 'self' blob:;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-NDI5MmMyYzctNTQ2Mi00NmQ5LTk2NDAtYWY0MzBkOTk1MmVj' 'strict-dynamic'; style-src 'self' 'unsafe-inline' fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com; style-src-attr 'unsafe-inline'; img-src 'self' blob: data: *.fbcdn.net *.cdninstagram.com *.od.facebook.com www.facebook.com; media-src 'self' blob: data: *.fbcdn.net *.cdninstagram.com; font-src 'self' data: fonts.gstatic.com; connect-src 'self' *.sentry.io *.ingest.sentry.io vitals.vercel-insights.com *.fbcdn.net *.meta.ai; worker-src 'self' blob:; child-src 'self' blob:; frame-src 'self' blob:; frame-ancestors 'none'; form-action 'self'; base-uri 'self'; object-src 'none'; report-uri \/api\/csp-report https:\/\/o4509963614355457.ingest.us.sentry.io\/api\/4509985459404800\/security\/?sentry_key=2f357cf8852a33530d72872e55d86a65; report-to csp; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src 'self' blob:  https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/*.gurenla.com  https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; frame-src 'self' https:\/\/*.noxiaohao.com https:\/\/telegram.org https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/accounts.google.com https:\/\/oauth.telegram.org https:\/\/sgtm.btsgtm.com  https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; script-src 'self' 'nonce-ydUy5sSA7MrnEMoRSp9AEQ==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6\/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh\/v3RIRuG3kMikr5iha+7P\/0TN\/GNA=' https:\/\/*.noxiaohao.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/*.gurenla.com https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/accounts.google.com https:\/\/www.googletagmanager.com https:\/\/fonts.googleapis.com https:\/\/play.google.com https:\/\/analytics.google.com https:\/\/fonts.gstatic.com https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/*.geetest.com https:\/\/*.geevisit.com https:\/\/sgtm.btsgtm.com https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; connect-src 'self' https:\/\/stats.g.doubleclick.net https:\/\/analytics.google.com https:\/\/*.noxiaohao.com wss:\/\/*.noxiaohao.com wss: https:\/\/www.turingfraud.net https:\/\/play.google.com https:\/\/accounts.google.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/*.gurenla.com https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/static.geetest.com https:\/\/static.geevisit.com wss:\/\/stream.bitget.cloud https:\/\/www.google.com https:\/\/sgtm.btsgtm.com  https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; worker-src 'self' blob:; img-src 'self' data: blob: https:\/\/img.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/img.bitgetimg.com https:\/\/img.gurenla.com https:\/\/*.bgbstatic.com https:\/\/lh3.googleusercontent.com https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/static-web.jjdsn.vip https:\/\/cdn.bitkeep.vip https:\/\/www.google.co.jp https:\/\/bin.wangsustatic.com https:\/\/sgtm.btsgtm.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net  https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; style-src 'self' 'unsafe-inline' https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/accounts.google.com https:\/\/fonts.googleapis.com https:\/\/static.bgbstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/*.gurenla.com  https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; font-src 'self' data: https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/fonts.gstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/static.zzrrv.com https:\/\/*.gurenla.com  https:\/\/*.bitget.site https:\/\/*.bitgetpro.site https:\/\/*.bitget.live https:\/\/*.bitget.vin https:\/\/static.wangsustatic.xyz https:\/\/static.wangsustatic.vip ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri \/v1\/buried\/log\/cspSecurity \/v1\/monitor\/csp?appId=d4b6df7d;","count":1},{"content-security-policy-report-only":" script-src 'strict-dynamic' 'nonce-Cz\/iTnpq1NWblGfVwOsqAQ=='","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cdn.jsdelivr.net cdn.almapay.com https:\/\/fonts.gstatic.com https:\/\/ws.colissimo.fr *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https:\/\/cdnjs.cloudflare.com 'self' data: static.sensefuel.live data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.sips-services.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com https:\/\/www.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.getalma.eu *.almapay.com\/ *.stripe.com\/ *.checkout.com\/ *.adyen.com\/ *.truefitcorp.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com *.weltpixel.com https:\/\/form.typeform.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.google.com\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net *.afd.co.uk t.powerreviews.com assets-manager.abtasty.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/ws.colissimo.fr https:\/\/*.tile.openstreetmap.fr https:\/\/*.onyourmap.com https:\/\/google.fr https:\/\/www.magezon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud ebizmarts-website.s3.amazonaws.com *.openstreetmap.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com maps.googleapis.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.afd.co.uk cdn.jsdelivr.net js-agent.newrelic.com party.spockee.io app.ekoo.co ui.powerreviews.com *.truefitcorp.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https:\/\/maps.googleapis.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/ws.colissimo.fr https:\/\/api.mapbox.com https:\/\/*.typeform.com widget.proximis.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https:\/\/cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com maps.googleapis.com *.gstatic.com https:\/\/www.googletagmanager.com tagmanager.google.com  tag.search.sensefuel.live pdata.damart.fr try.abtasty.com                  'self' 'unsafe-eval' 'nonce-ZW1sd3AxOXEwdjEyb2UydGtmb2NkNDcxMnNmaGk1OTY=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k\/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY\/CkTMBhjNhwPvglpYumjx31B4fjkY8='; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net ui.powerreviews.com cdn-mobile.actito.com https:\/\/fonts.googleapis.com https:\/\/ws.colissimo.fr https:\/\/api.mapbox.com https:\/\/*.typeform.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https:\/\/cdnjs.cloudflare.com assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com tag.search.sensefuel.live 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afd.co.uk *.getalma.eu *.almapay.com api.spockee.io backoffice-api.spockee.io ui.powerreviews.com display.powerreviews.com app.ekoo.co maps.googleapis.com cdn-mobile.actito.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https:\/\/ws.colissimo.fr https:\/\/maps.googleapis.com https:\/\/nominatim.openstreetmap.org https:\/\/*.onyourmap.com https:\/\/*.mapbox.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.openstreetmap.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com c.search.sensefuel.live 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; report-uri \/csp-violation","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com *.affilitizer.com *.googleusercontent.com *.jsdelivr.net https:\/\/widgets.trustedshops.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com bid.g.doubleclick.net js.mollie.com *.cookiebot.com *.doubleclick.net *.google.com *.googletagmanager.com *.jobrad.org www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https:\/\/www.mollie.com *.authorized.by *.cookiebot.com *.doubleclick.net *.google.com *.googleapis.com *.googleusercontent.com *.gstatic.com *.trustedshops.com www.google.ae www.google.al www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.by www.google.ca www.google.ch www.google.cl www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ma www.google.co.nz www.google.co.th www.google.co.uk www.google.co.uz www.google.com.ar www.google.com.bd www.google.com.br www.google.com.co www.google.com.eg www.google.com.hk www.google.com.jm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.pa www.google.com.ph www.google.com.pk www.google.com.sg www.google.com.tr www.google.com.ua www.google.com.vn www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hr www.google.hu www.google.ie www.google.im www.google.is www.google.it www.google.jo www.google.kz www.google.li www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mv www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.tg www.google.tn https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com www.xtento.com cdn.xtento.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com app.authorized.by player.vimeo.com js.mollie.com *.authorized.by *.cloudflare.com *.cookiebot.com *.google.com *.googleapis.com *.googletagmanager.com *.jsdelivr.net *.trustedshops.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com www.xtento.com cdn.xtento.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.authorized.by *.googleapis.com *.gstatic.com *.jsdelivr.net https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src *.cookiebot.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com app.authorized.by api.friendlycaptcha.com eu-api.friendlycaptcha.eu *.adm-services.goog *.affilitizer.com *.cookiebot.com *.doubleclick.net *.googleapis.com www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.by www.google.ca www.google.ch www.google.co.in www.google.co.jp www.google.co.ma www.google.co.nz www.google.co.th www.google.co.uk www.google.com.ar www.google.com.bd www.google.com.br www.google.com.co www.google.com.eg www.google.com.mx www.google.com.ng www.google.com.pk www.google.com.tr www.google.com.ua www.google.com.vn www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.gr www.google.hr www.google.hu www.google.ie www.google.it www.google.li www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mk www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.tn *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/9d149a5d-cd44-43a1-b850-cd1f930c5061.sansec.watch\/; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:; report-uri \/report-csp-violation; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' *.artfut.com *.bootstrapcdn.com *.clarity.ms *.cloudfront.net *.criteo.com *.facebook.com *.fullstory.com *.gstatic.com *.google-analytics.com *.google.com *.googleapis.com *.jsdelivr.net *.livechatinc.com *.moengage.com *.onetrust.com *.razorpay.com *.tatadigital.com *.trackier.com *.unbxdapi.com c.amazon-adsystem.com connect.facebook.net googleads.g.doubleclick.net sc-static.net tr.snapchat.com www.googleadservices.com www.googletagmanager.com; style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.googleapis.com *.jsdelivr.net *.onetrust.com www.gstatic.com; img-src 'self' data: https:; connect-src 'self' aax-eu.amazon-adsystem.com ad.doubleclick.net analytics.google.com api.fastrackeyewear.com apac-recommendations.unbxd.io ara.paa-reporting-advertising.amazon connect.facebook.net d3995ea24pmi7m.cloudfront.net google.com *.amazon.in *.clarity.ms *.criteo.com *.facebook.com *.fullstory.com *.google.com *.googleapis.com *.livechatinc.com *.moengage.com *.onetrust.com *.paytm.in *.phonepe.com *.razorpay.com *.tatadigital.com *.titaneyeplus.com *.unbxdapi.com s.amazon-adsystem.com search.unbxd.io secure.paytmpayments.com stats.g.doubleclick.net tr.snapchat.com tr6.snapchat.com www.google-analytics.com www.google.co.in www.google.com www.googleadservices.com; font-src 'self' *.amazon-adsystem.com *.gstatic.com *.google.co.in *.onetrust.com *.unbxd.io ad.doubleclick.net ara.paa-reporting-advertising.amazon google.com stats.g.doubleclick.net www.google-analytics.com www.googleadservices.com; frame-src 'self' *;","count":1},{"content-security-policy-report-only":" default-src 'self' data:; frame-ancestors *.weirdfish.co.uk *.adyen.com *.amazon.com *.paypal.com *.google.com *.exponea.com *.monetate.net; connect-src * data:; font-src * data:; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' data:;","count":1},{"content-security-policy-report-only":" default-src *.pharm24.gr *.skroutz.gr static.zdassets.com data:; frame-src *.pharm24.gr virtual-assistants.gr *.googletagmanager.com *.skroutz.gr *.hotjar.com *.checkout.com *.dco.gr *.disqus.com *.linkwi.se *.adsrvr.org *.google.com *.googlesyndication.com *.agkn.com *.facebook.net *.facebook.com *.youtube.com *.cookiebot.com *.aimtell.com; img-src * data: *.pharm24.gr *.youtube.com *.facebook.com trustmark.gr; script-src 'self' 'unsafe-inline' *.pharm24.gr *.skroutz.gr *.google.com *.debugbear.com virtual-assistants.gr secure.dcomodo.net *.vc-portal.com *.skroutz.gr *.gstatic.com *.checkout.com salesmanago.com *.salesmanago.com *.saleago.com bat.bing.com *.clarity.ms *.adman.gr *.hotjar.com *.googleapis.com *.google.com *.cloudflareinsights.com *.cloudflare.com *.disquscdn.com *.shareaholic.com *.shareaholic.net *.stackpathcdn.com *.cloudfront.net *.adsrvr.org *.instagram.com *.ampproject.org *.googlesyndication.com *.disqus.com *.cookiebot.com trustmark.gr *.agkn.com *.zdassets.com *.trustmark.gr *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.facebook.com connect.facebook.net *.facebook.net googleads.g.doubleclick.net *.doubleclick.net *.zopim.com *.linkwi.se s3.amazonaws.com *.amazonaws.com *.aimtell.com cdn-cfdnp.nitrocdn.com 'unsafe-inline' 'unsafe-eval' blob: data: gap:; style-src 'self' *.googleapis.com *.googletagmanager.com *.pharm24.gr *.vc-portal.com *.bootstrapcdn.com cdn-cfdnp.nitrocdn.com 'unsafe-inline'; worker-src 'self' *.aimtell.com blob: data: gap:; font-src 'self' *.hotjar.com *.stats.pharm24.gr *.pharm24.gr *.vc-portal.com *.gstatic.com *.bootstrapcdn.com *.stackpathcdn.com *.zopim.com cdn-cfdnp.nitrocdn.com data:; connect-src *.debugbear.com google.com *.googletagmanager.com *.checkout.com *.cookiebot.com *.zendesk.com *.saleago.com *.salesmanago.com *.salesmanago.pl *.getnitropack.com *.adman.gr *.hotjar.com *.googlesyndication.com *.trustmark.gr *.ampproject.org *.google.com *.google.gr *.disqus.com *.shareaholic.com *.shareaholic.net backup.pharm24.gr:* *.pharm24.gr *.doubleclick.net *.google-analytics.com *.agkn.com *.zdassets.com  *.amazonaws.com *.zopim.com bat.bing.com a.clarity.ms *.facebook.com *.aimtell.com wss:\/\/widget-mediator.zopim.com wss:\/\/ws6.hotjar.com\/api\/v2\/client\/ws","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com maxcdn.bootstrapcdn.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com x.klarnacdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.bird.eu flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.adobedtm.com dev.visualwebsiteoptimizer.com *.exacttarget.com google.it\/pagead\/1p-conversion self data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.avada.io maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.cardinalcommerce.com *.authorize.net *.ccdc02.com *.googleadservices.com *.paypalobjects.com  *.braintreegateway.com   *.paypal.com   *.ytimg.com www.gstatic.com\/recaptcha www.google.com\/recaptcha *.js-agent.newrelic.com unpkg.com\/@googlemaps\/markerclusterer\/dist\/index.min.js self *.criteo.com *.yandex.com *.yandex.ru *.teads.tv *.mainadv.com *.bing.com *.clarity.ms *.pinterest.com *.amazon-adsystem.com *.quantserve.com 'sha256-g\/qbQ8sW5eJ9JO8sQzRJ1OvARbUyKpJXFeof9SLw1eI=' 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.stripe.network *.stripecdn.com *.amazon.com service.force.com x.klarnacdn.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com https:\/\/get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.adobe.com assets.adobedtm.com *.googletagmanager.com *.authorize.net *.ccdc02.com *.googleadservices.com *.paypalobjects.com  *.braintreegateway.com   *.paypal.com   *.ytimg.com *.vimeocdn.com www.gstatic.com\/recaptcha www.google.com\/recaptcha *.google.bg unpkg.com\/@googlemaps\/markerclusterer\/dist\/index.min.js unpkg.com\/@googlemaps\/markerclusterer\/dist\/* self consentcdn.cookiebot.com dev.visualwebsiteoptimizer.com js.klarna.com na.klarnaevt.com trustpilot.com googleads.g.doubleclick.net bam.nr-data.net *.criteo.com *.yandex.com *.yandex.ru *.teads.tv *.mainadv.com *.bing.com *.clarity.ms *.pinterest.com *.amazon-adsystem.com *.quantserve.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bam.nr-data.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" font-src *.googleapis.com *.gstatic.com *.fontawesome.com fonts.googleapis.com https:\/\/fonts.bunny.net local.parfu.com local.eprivee.com uat.pftesting.com.ar d1b5xw6abur5xs.cloudfront.net pfhyva.66ecommerce.com dev.pftesting.com.ar pfprod.66ecommerce.com epuat.66ecommerce.com eptesting.66ecommerce.com epprod.66ecommerce.com parfumerie.com.ar www.parfumerie.com.ar parfubot.cortassaws.com d3cdlnm7te7ky2.cloudfront.net editionprivee.com www.editionprivee.com d28dzyqv2ij3aj.cloudfront.net diorassets.blob.core.windows.net player.freecaster.com cdn.parfumerie.com.ar data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com https:\/\/seo.mageplaza.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.despegar.com *.koin.com.br *.googletagmanager.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: ai.66ecommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.despegar.com *.koin.com.br *.googletagmanager.com maps.googleapis.com chart.googleapis.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/mobbex.com *.weltpixel.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/images.unsplash.com *.googleapis.com *.gstatic.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.adobedtm.com *.despegar.com *.koin.com.br *.googletagmanager.com fonts.googleapis.com *.gocuotas.com https:\/\/firebasestorage.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com res.sugaway.io local.parfu.com local.eprivee.com uat.pftesting.com.ar d1b5xw6abur5xs.cloudfront.net pfhyva.66ecommerce.com dev.pftesting.com.ar pfprod.66ecommerce.com epuat.66ecommerce.com eptesting.66ecommerce.com epprod.66ecommerce.com parfumerie.com.ar www.parfumerie.com.ar parfubot.cortassaws.com d3cdlnm7te7ky2.cloudfront.net static.whatsapp.net editionprivee.com www.editionprivee.com d28dzyqv2ij3aj.cloudfront.net c.clarity.ms www.google.com.ar www.mercadopago.com.ar c.bing.com diorassets.blob.core.windows.net player.freecaster.com cdn.parfumerie.com.ar maps.gstatic.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.gstatic.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.despegar.com *.koin.com.br *.googletagmanager.com maps.googleapis.com chart.googleapis.com *.gocuotas.com *.avada.io *.shopify.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com local.parfu.com local.eprivee.com uat.pftesting.com.ar d1b5xw6abur5xs.cloudfront.net pfhyva.66ecommerce.com dev.pftesting.com.ar pfprod.66ecommerce.com epuat.66ecommerce.com eptesting.66ecommerce.com epprod.66ecommerce.com parfumerie.com.ar www.parfumerie.com.ar parfubot.cortassaws.com d3cdlnm7te7ky2.cloudfront.net editionprivee.com www.editionprivee.com d28dzyqv2ij3aj.cloudfront.net js-agent.newrelic.com www.clarity.ms maps.google.com live.decidir.com fpcdn.io assets-cdn.woowup.com diorassets.blob.core.windows.net player.freecaster.com cdn.parfumerie.com.ar https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/merchants.playdigital.com.ar\/ https:\/\/merchants.preprod.playdigital.com.ar\/ https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https:\/\/fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com local.parfu.com local.eprivee.com uat.pftesting.com.ar d1b5xw6abur5xs.cloudfront.net pfhyva.66ecommerce.com dev.pftesting.com.ar pfprod.66ecommerce.com epuat.66ecommerce.com eptesting.66ecommerce.com epprod.66ecommerce.com parfumerie.com.ar www.parfumerie.com.ar parfubot.cortassaws.com d3cdlnm7te7ky2.cloudfront.net editionprivee.com www.editionprivee.com d28dzyqv2ij3aj.cloudfront.net cdn.jsdelivr.net diorassets.blob.core.windows.net player.freecaster.com cdn.parfumerie.com.ar https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ 'self' 'unsafe-inline'; object-src maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com local.parfu.com local.eprivee.com uat.pftesting.com.ar d1b5xw6abur5xs.cloudfront.net pfhyva.66ecommerce.com dev.pftesting.com.ar pfprod.66ecommerce.com epuat.66ecommerce.com eptesting.66ecommerce.com epprod.66ecommerce.com parfumerie.com.ar www.parfumerie.com.ar parfubot.cortassaws.com d3cdlnm7te7ky2.cloudfront.net static.whatsapp.net editionprivee.com www.editionprivee.com d28dzyqv2ij3aj.cloudfront.net diorassets.blob.core.windows.net player.freecaster.com cdn.parfumerie.com.ar 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.googleapis.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.despegar.com *.googletagmanager.com maps.googleapis.com chart.googleapis.com *.gocuotas.com https:\/\/get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com local.parfu.com local.eprivee.com uat.pftesting.com.ar d1b5xw6abur5xs.cloudfront.net pfhyva.66ecommerce.com dev.pftesting.com.ar pfprod.66ecommerce.com epuat.66ecommerce.com eptesting.66ecommerce.com epprod.66ecommerce.com parfumerie.com.ar www.parfumerie.com.ar d3cdlnm7te7ky2.cloudfront.net editionprivee.com www.editionprivee.com parfubot.cortassaws.com d28dzyqv2ij3aj.cloudfront.net google.com i.clarity.ms n.clarity.ms z.clarity.ms parfumerie.zendesk.com pod-20.zendesk.com bam.nr-data.net api.fpjs.io rum-collector-2.pingdom.net events.woowup.com diorassets.blob.core.windows.net player.freecaster.com cdn.parfumerie.com.ar https:\/\/merchants.playdigital.com.ar\/ https:\/\/merchants.preprod.playdigital.com.ar\/ https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self';         script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;         style-src 'self' 'unsafe-inline' https:;         img-src 'self' data: https:;         font-src 'self' data: https:;         connect-src 'self' https:;         frame-ancestors 'self';         worker-src 'self' blob:;         object-src 'none';         base-uri 'self';         upgrade-insecure-requests;","count":1},{"content-security-policy-report-only":" default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https:\/\/pay-staging.instamed.com https:\/\/pay.instamed.com;script-src 'nonce-72743f7da3e74980814bb0c2d904b561' https:\/\/myhealthatvanderbilt.com 'self';img-src https:\/\/* 'self' blob: data:;connect-src 'self' epichttp:;style-src https:\/\/myhealthatvanderbilt.com 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https:\/\/central.mychart.org\/MyChart\/ 'self';media-src https:\/\/* 'self' blob:;","count":1},{"content-security-policy-report-only":" report-uri https:\/\/www.yelp.com\/csp_report_only?id=89041905073d1839&page=csp_report_frame_directives%2Cfull_site_ssl_csp_report_directives&policy_hash=41d0c45536d2a082f11d1cd0e00fde7f&site=www&timestamp=1788497516; frame-ancestors 'self' https:\/\/*.yelp.com; default-src https:; img-src https: data: blob:; script-src https: data: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' data:; font-src data: https:; child-src https: yelp-webview:\/\/* yelp:\/\/* data:; object-src 'none'; worker-src blob: https:; base-uri 'self'; form-action https:","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.clarity.ms https:\/\/securepubads.g.doubleclick.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:\/\/api.fxblue.com https:\/\/*.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/*.clarity.ms wss:\/\/mtis-shared.fxbluelabs.com:9101 wss:\/\/mtis-shared.fxbluelabs.com:9111; frame-src 'self' https:\/\/figaro.fxbluelabs.com https:\/\/www.youtube-nocookie.com https:\/\/www.youtube.com https:\/\/securepubads.g.doubleclick.net https:\/\/api.fxblue.com https:\/\/www.fxblue.com; worker-src 'self' blob:; report-uri \/api\/csp-report; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" default-src 'none'; script-src 'self' https:\/\/challenges.cloudflare.com; script-src-attr 'none'; style-src 'self'; img-src 'self' https:\/\/challenges.cloudflare.com data:; connect-src 'self' https:\/\/challenges.cloudflare.com; frame-src 'self' https:\/\/challenges.cloudflare.com blob:; child-src 'self' https:\/\/challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/accounts.google.com https:\/\/cdn.ampproject.org https:\/\/cdn.izooto.com https:\/\/cdn.onesignal.com https:\/\/connect.facebook.net https:\/\/onesignal.com https:\/\/pagead2.googlesyndication.com https:\/\/platform.twitter.com https:\/\/securepubads.g.doubleclick.net https:\/\/ssl.google-analytics.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/www.googlesyndication.com https:\/\/www.instagram.com https:\/\/www.metype.com https:\/\/www.tiktok.com; style-src 'self' 'unsafe-inline' https:\/\/assets.fortuneindia.com https:\/\/fonts.googleapis.com https:\/\/media.fortuneindia.com https:\/\/platform.twitter.com https:\/\/ton.twimg.com; img-src 'self' blob: https:\/\/accounts.google.com https:\/\/assets.fortuneindia.com https:\/\/cdn.ampproject.org https:\/\/cdn.izooto.com https:\/\/googleads.g.doubleclick.net https:\/\/i.ytimg.com https:\/\/lh3.googleusercontent.com https:\/\/lh5.googleusercontent.com https:\/\/lh6.googleusercontent.com https:\/\/media.fortuneindia.com https:\/\/pagead2.googlesyndication.com https:\/\/pbs.twimg.com https:\/\/securepubads.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/stg-quintype-dropbox.s3-accelerate.amazonaws.com https:\/\/thumbor-stg.assettype.com https:\/\/ton.twimg.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com https:\/\/www.shutterstock.com; font-src 'self' https:\/\/assets.fortuneindia.com https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/accounts.google.com https:\/\/api-uat.fortuneindiaapp.com https:\/\/cdn.izooto.com https:\/\/onesignal.com https:\/\/pagead2.googlesyndication.com https:\/\/podcast-uat.fortuneindiaapp.com https:\/\/securepubads.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.googleapis.com https:\/\/www.googletagmanager.com; frame-src 'self' https:\/\/accounts.google.com https:\/\/cdn.ampproject.org https:\/\/fortuneindia-rpsg-beta.quintype.io https:\/\/fortuneindia-rpsg-uat.quintype.io https:\/\/fortuneindia-rpsg2-beta.quintype.io https:\/\/fortuneindia-rpsg2-uat.quintype.io https:\/\/googleads.g.doubleclick.net https:\/\/platform.twitter.com https:\/\/securepubads.g.doubleclick.net https:\/\/tpc.googlesyndication.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.instagram.com https:\/\/www.tiktok.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com; worker-src 'self' blob: https:\/\/cdn.izooto.com https:\/\/cdn.onesignal.com; media-src 'self' blob: https:\/\/media.fortuneindia.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src *; script-src data: http: https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' data: 'unsafe-inline' https: *.bootstrapcdn.com; img-src * 'self' data: blob:; font-src *; connect-src https:; media-src *; object-src 'none'; frame-src *; report-uri https:\/\/www.hsag.com\/_csp;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'report-sample' https:\/\/*.csidetm.com https:\/\/*.csidefd.com https:\/\/simonwijckmans.com https:\/\/*.simonwijckmans.com https:\/\/js.hsforms.net; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; img-src 'self' data: https:; font-src 'self' data:; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/api.vector.co https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/meetings.hubspot.com; report-uri https:\/\/edge.csidetm.com\/csp; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/media.pharmaciedesdrakkars.com; script-src 'self' 'unsafe-inline' https:\/\/media.pharmaciedesdrakkars.com https:\/\/cdn.usefathom.com https:\/\/rs.clic2buy.com https:\/\/widget.trustpilot.com https:\/\/cdn.doofinder.com https:\/\/eu1-config.doofinder.com; style-src 'self' 'unsafe-inline' https:\/\/media.pharmaciedesdrakkars.com https:\/\/cdn.doofinder.com; img-src 'self' data: https:\/\/media.pharmaciedesdrakkars.com https:\/\/widget.trustpilot.com; font-src 'self' data: https:\/\/media.pharmaciedesdrakkars.com; connect-src 'self' https:\/\/cdn.usefathom.com https:\/\/eu1-api.doofinder.com https:\/\/widget.trustpilot.com https:\/\/nominatim.openstreetmap.org; frame-src https:\/\/widget.trustpilot.com https:\/\/www.paypal.com https:\/\/clicandpay.groupecdn.fr https:\/\/payment.cawl-solutions.fr; base-uri 'self'; form-action 'self' https:\/\/www.paypal.com https:\/\/clicandpay.groupecdn.fr https:\/\/payment.cawl-solutions.fr","count":1},{"content-security-policy-report-only":" child-src 'self' https:\/\/maps.googleapis.com; connect-src 'self' http:\/\/localhost:49755 https:\/\/*.dna.ip-only.net https:\/\/02d22c83a39531f497f8176997802343-httpcache0-80501-cacheod0.dna.ip-only.net https:\/\/177f070ca788ce3aac4d391fb312464c-httpcache0-80501-httpcache0.dna.ip-only.net https:\/\/analytics.qbrick.com https:\/\/api.checkin.no https:\/\/api.curator.io https:\/\/cdn.jsdelivr.net https:\/\/consentcdn.cookiebot.com https:\/\/esp-eu.aptrinsic.com https:\/\/fotball.formstack.com https:\/\/js.monitor.azure.com https:\/\/maps.googleapis.com https:\/\/matomo.fotball.no https:\/\/notifications.fotball.no https:\/\/play2.qbrick.com https:\/\/servedbyadbutler.com https:\/\/static.checkin.no https:\/\/static.formstack.com https:\/\/video.qbrick.com https:\/\/westeurope-5.in.applicationinsights.azure.com wss:\/\/notification.qbrick.com wss:\/\/ws.checkin.no; font-src 'self' data: https:\/\/*.cloudfront.net\/graphik\/ https:\/\/*.cloudfront.net\/lato\/ https:\/\/*.typekit.net https:\/\/cdn.jsdelivr.net https:\/\/fonts.gstatic.com https:\/\/fotball.formstack.com https:\/\/play2.qbrick.com https:\/\/r2cdn.perplexity.ai https:\/\/static.formstack.com https:\/\/vjs.zencdn.net https:\/\/www.fotball.no; frame-src 'self' https:\/\/akilles.h5p.com\/ https:\/\/app.bwz.se\/ https:\/\/app.powerbi.com https:\/\/calendar.google.com https:\/\/cdn.knightlab.com https:\/\/consentcdn.cookiebot.com https:\/\/forms.office.com https:\/\/fotball-iv.azurewebsites.net https:\/\/imagevault.fotball.no https:\/\/m.facebook.com https:\/\/maps.googleapis.com https:\/\/norges-fotballforbund.campaign.playable.com https:\/\/open.spotify.com https:\/\/play2.qbrick.com https:\/\/player.vimeo.com https:\/\/servedbyadbutler.com https:\/\/video.qbrick.com https:\/\/vimeo.com\/ https:\/\/w.soundcloud.com https:\/\/www.facebook.com https:\/\/www.instagram.com https:\/\/www.youtube.com; img-src 'self' data: https:\/\/*.dna.ip-only.net https:\/\/curator-assets.b-cdn.net https:\/\/dam.fotball.no https:\/\/fonts.gstatic.com https:\/\/httpcache0-80501-cachedown0.dna.ip-only.net https:\/\/i.ytimg.com https:\/\/images.fotball.no https:\/\/imgsct.cookiebot.com https:\/\/khms0.googleapis.com https:\/\/khms1.googleapis.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/matomo.fotball.no https:\/\/play2.qbrick.com https:\/\/s3.amazonaws.com https:\/\/servedbyadbutler.com https:\/\/translate.google.com https:\/\/vimeo.com\/ https:\/\/www.fotball.no https:\/\/www.google-analytics.com; script-src-elem 'self' 'unsafe-inline' https:\/\/akilles.h5p.com https:\/\/app.playable.com https:\/\/cdn.curator.io https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/code.jquery.com https:\/\/connect.facebook.net https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/e.issuu.com https:\/\/files.cdn.leadfamly.com https:\/\/fotball.formstack.com https:\/\/js.monitor.azure.com https:\/\/maps.googleapis.com https:\/\/matomo.fotball.no https:\/\/maxcdn.bootstrapcdn.com https:\/\/play2.qbrick.com https:\/\/player.vimeo.com https:\/\/registration.checkin.no https:\/\/servedbyadbutler.com https:\/\/static.formstack.com https:\/\/web-sdk-eu.aptrinsic.com https:\/\/www.instagram.com https:\/\/www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/cdn.curator.io https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/code.jquery.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/files.cdn.leadfamly.com https:\/\/fotball.formstack.com https:\/\/js.monitor.azure.com https:\/\/maps.googleapis.com https:\/\/matomo.fotball.no https:\/\/maxcdn.bootstrapcdn.com https:\/\/play2.qbrick.com https:\/\/servedbyadbutler.com https:\/\/static.formstack.com https:\/\/web-sdk-eu.aptrinsic.com https:\/\/www.fotball.no; style-src-elem 'self' 'unsafe-inline' https:\/\/*.typekit.net https:\/\/cdn.jsdelivr.net https:\/\/fonts.googleapis.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/play2.qbrick.com https:\/\/registration.checkin.no https:\/\/use.typekit.net https:\/\/vjs.zencdn.net https:\/\/web-sdk-eu.aptrinsic.com https:\/\/www.gstatic.com; style-src 'self' 'unsafe-inline' https:\/\/*.typekit.net https:\/\/fonts.googleapis.com https:\/\/maps.googleapis.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/play2.qbrick.com https:\/\/use.typekit.net https:\/\/vjs.zencdn.net https:\/\/www.fotball.no; style-src-attr 'unsafe-inline'; default-src 'none'; base-uri https:\/\/play2.qbrick.com https:\/\/www.fotball.no; media-src blob: https:\/\/0190b0b31b8dd17a1463ce1a6d517637-httpcache0-80501-cacheod0.dna.ip-only.net https:\/\/104ca5673faec03f15eefd6f0ab056f2-httpcache0-80501-cacheod0.dna.ip-only.net https:\/\/4b26957422d55a62b16b4379c74cf8a0-httpcache0-80501-httpcache0.dna.ip-only.net https:\/\/77c6108b1f24550417860e13b5402c99-httpcache0-80501-cacheod0.dna.ip-only.net https:\/\/curator-assets.b-cdn.net https:\/\/httpcache0-80501-cachedown0.dna.ip-only.net https:\/\/maps.googleapis.com https:\/\/play2.qbrick.com https:\/\/vimeo.com\/ https:\/\/www.fotball.no; object-src https:\/\/maps.googleapis.com; manifest-src https:\/\/www.fotball.no; worker-src blob:; script-src-attr https:\/\/cdn.curator.io; report-to stott-security-endpoint;","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https:\/\/geowidget.easypack24.net static.payu.com maxcdn.bootstrapcdn.com *.spotify.com *.cepd.tech *.drogerienatura.pl 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https:\/\/geowidget-app.inpost.pl\/ secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com\/ *.addthis.com *.spotify.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com *.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com https:\/\/geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org static.payu.com credit-widget-config.payu.com\/ magefan.com cm.magefan.com *.disqus.com https:\/\/img.youtube.com *.spotify.com *.cepd.tech *.drogerienatura.pl *.syndigo.cloud trustmate.io cdn.cookiesaur.com google.pl *.google.pl visitor.omnitagjs.com sync.addlv.smt.docomo.ne.jp hbx.media.net *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.googleapis.com *.gstatic.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googletagmanager.com tagmanager.google.com https:\/\/geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org secure.payu.com secure.snd.payu.com static.payu.com credit-widget-config.payu.com\/ pay.google.com applepay.cdn-apple.com *.disqus.com *.addthis.com https:\/\/z.moatads.com https:\/\/v1.addthisedge.com *.jsdelivr.net https:\/\/scripts.luigisbox.tech https:\/\/cdn.luigisbox.tech https:\/\/live.luigisbox.tech https:\/\/api.luigisbox.tech *.spotify.com *.cookiesaur.com *.cloudflare.com *.syndigo.com *.cepd.tech *.drogerienatura.pl trustmate.io static.hotjar.com tags.creativecdn.com connect.facebook.net s2.adform.net script.hotjar.com track.adform.net *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com tagmanager.google.com fonts.google.com https:\/\/geowidget.easypack24.net https:\/\/geowidget.inpost.pl https:\/\/cdn.jsdelivr.net https:\/\/scripts.luigisbox.tech https:\/\/cdn.luigisbox.tech https:\/\/live.luigisbox.tech https:\/\/api.luigisbox.tech maxcdn.bootstrapcdn.com *.spotify.com *.cloudflare.com *.cepd.tech *.drogerienatura.pl trustmate.io *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https:\/\/geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googletagmanager.com *.easypack24.net *.inpost.pl *.openstreetmap.org secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com\/ https:\/\/scripts.luigisbox.tech https:\/\/cdn.luigisbox.tech https:\/\/live.luigisbox.tech https:\/\/api.luigisbox.tech *.spotify.com *.cookiesaur.com *.syndigo.com trustmate.io *.cepd.tech *.drogerienatura.pl ams.creativecdn.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-sKmC5lnB183CfGVadRVt6Q' 'unsafe-inline' 'unsafe-eval' https:\/\/*.msauth.net https:\/\/*.msftauth.net https:\/\/*.msftauthimages.net https:\/\/*.msauthimages.net https:\/\/*.msidentity.com https:\/\/*.microsoftonline-p.com https:\/\/*.microsoftazuread-sso.com https:\/\/*.azureedge.net https:\/\/*.outlook.com https:\/\/*.office.com https:\/\/*.office365.com https:\/\/*.microsoft.com https:\/\/*.bing.com 'report-sample'; report-uri https:\/\/csp.microsoft.com\/report\/ESTS-UX-All","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net data: fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.despegar.com *.koin.com.br *.googletagmanager.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com cdn.dnky.co amc.demdex.net www.google.com www.facebook.com youtube.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.despegar.com *.koin.com.br *.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net maps.gstatic.com maps.googleapis.com accounts.google.com www.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.despegar.com *.koin.com.br *.googletagmanager.com fonts.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-datasolutions.com cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net player.vimeo.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https:\/\/live.decidir.com\/ *.despegar.com *.koin.com.br *.googletagmanager.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/www.google.com *.gstatic.com https:\/\/maps.googleapis.com https:\/\/merchants.playdigital.com.ar\/ https:\/\/merchants.preprod.playdigital.com.ar\/ https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ live.decidir.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdn.dnky.co *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.googleapis.com *.gstatic.com https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.magento-datasolutions.com *.magento-ds.com maps.googleapis.com api.comapi.com bam.nr-data.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.despegar.com *.googletagmanager.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com https:\/\/merchants.playdigital.com.ar\/ https:\/\/merchants.preprod.playdigital.com.ar\/ https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ *.decidir.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.transbank.cl 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https:\/\/construmart-help.freshchat.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/www.clarity.ms https:\/\/c.clarity.ms https:\/\/construmart-help.freshchat.com https:\/\/www.construmart.cl https:\/\/bat.bing.com https:\/\/c.bing.com https:\/\/www.facebook.com https:\/\/www.google.com.ar *.pubmatic.com maps.gstatic.com maps.googleapis.com https:\/\/maps.gstatic.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page https:\/\/www.clarity.ms https:\/\/scripts.clarity.ms https:\/\/construmart-help.freshchat.com https:\/\/bat.bing.com https:\/\/connect.facebook.net https:\/\/scripts.icommkt.online https:\/\/web-sdk.smartlook.com *.pubmatic.com www.google.com www.gstatic.com maps.googleapis.com https:\/\/maps.googleapis.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/construmart-help.freshchat.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https:\/\/construmartpro.cl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/www.clarity.ms https:\/\/scripts.clarity.ms https:\/\/l.clarity.ms https:\/\/construmart-help.freshchat.com *.doubleclick.net *.facebook.com *.smartlook.cloud *.pubmatic.com maps.googleapis.com https:\/\/maps.googleapis.com https:\/\/www.google.com\/recaptcha\/ *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" font-src *.oct8ne.com *.salesforce-sites.com *.lightning.force.com *.syndigo.com fonts.gstatic.com *.azureedge.net *.doofinder.com *.typekit.net *.googleapis.com data: 'self' 'unsafe-inline'; frame-ancestors *.storyblok.com 'self'; style-src *.doofinder.com *.salesforce-sites.com *.lightning.force.com *.syndigo.com *.photoslurp.com *.nosto.com *.klaviyo.com *.typekit.net *.storyblok.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.salesforce-sites.com *.lightning.force.com *.storyblok.com *.zdassets.com *.doofinder.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; form-action https:\/\/www.facebook.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; img-src https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/www.facebook.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https:\/\/images.unsplash.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.doofinder.com *.oct8ne.com *.salesforce-sites.com *.lightning.force.com https:\/\/sandbox.sequracdn.com https:\/\/live.sequracdn.com *.syndigo.com *.syndigo.cloud www.googletagmanager.com *.facebook.com *.google.com *.google.es widgets.trustedshops.com *.twitter.com t.co *.azureedge.net *.pinterest.com *.bing.com *.storyblok.com data: 'self' 'unsafe-inline'; frame-src https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.facebook.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.awin1.com *.zenaps.com *.fls.doubleclick.net *.oct8ne.com *.salesforce-sites.com *.lightning.force.com https:\/\/sandbox.sequracdn.com https:\/\/live.sequracdn.com www.googletagmanager.com *.hotjar.com *.pinterest.com *.doofinder.com *.empathybroker.com *.empathy.co *.criteo.com 'self' 'unsafe-inline'; script-src https:\/\/analytics.tiktok.com\/ https:\/\/ui.swogo.net\/ https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/maps.googleapis.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com lantern.roeyecdn.com *.doofinder.com *.oct8ne.com *.salesforce-sites.com *.lightning.force.com https:\/\/sandbox.sequracdn.com https:\/\/live.sequracdn.com *.syndigo.com www.googletagmanager.com *.googleoptimize.com widgets.trustedshops.com static-eu.oct8ne.com static.zdassets.com *.facebook.net *.tradedoubler.com *.doubleclick.net *.hotjar.com *.ads-twitter.com smct.co *.bsmartdata.com *.retargeted.co *.bing.com *.clarity.ms *.smartsuppcdn.com *.smartsuppchat.com *.smartsupp.com *.connectif.cloud *.klaviyo.com *.photoslurp.com *.pinimg.com *.nosto.com *.empathybroker.com *.unpkg.com *.storyblok.com 'self' 'unsafe-inline' 'unsafe-eval'; connect-src https:\/\/analytics.tiktok.com\/ https:\/\/tracking.swogo.net\/ https:\/\/api.swogo.net\/ https:\/\/api.trustedshops.com\/ https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.facebook.com https:\/\/connect.facebook.net www.google-analytics.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com *.doofinder.com wss:\/\/*.doofinder.com *.oct8ne.com *.salesforce-sites.com *.lightning.force.com https:\/\/sandbox.sequracdn.com https:\/\/live.sequracdn.com *.syndigo.com *.syndigo.cloud www.googletagmanager.com *.zendesk.com *.zopim.com *.doubleclick.net *.hotjar.com *.hotjar.io *.clarity.ms *.smartsuppcdn.com *.googleapis.com *.gstatic.com *.google-analytics.com *.google.es *.connectif.cloud *.klaviyo.com *.photoslurp.com *.zdassets.com *.pinterest.com *.nosto.com *.empathybroker.com *.empathy.co 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/sdk.privacy-center.org https:\/\/tag.aticdn.net https:\/\/*.xiti.com; object-src 'none'; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:\/\/*.gstatic.com https:\/\/www.google-analytics.com https:\/\/*.xiti.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/player.vimeo.com; frame-ancestors 'self'; font-src 'self' https:\/\/fonts.gstatic.com data:; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/*.xiti.com; report-uri \/report-csp-violation; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" object-src 'none'; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net cdnjs.cloudflare.com unpkg.com cdn3.theuaelottery.ae cdn3.uat-uaenl.ae www.gstatic.com;report-uri https:\/\/muddy-meadow-fb56.swang-203.workers.dev\/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self'; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=XS1M5FMjCvM4C.0XC_ADFaonB4CMd0w5Qsi1K4UEzIQ-1788512488.4848697-1.0.1.1-iEXKgpYD0pXQ90fQd634LR6FUDe5WZUmG8EaVLJG505CdUYcJXP.cC6QBa5qJyc2Om3tURXZAL4wQiQEO1Qvt4EPJBdlaa7KMIyt2Kp8V1VpoEQkKW0RbOieEa6jhVDqNZwhuDOaQB45Pe2Ne_k_Pxvoz01l.RMiepAFjXp0QzWCSiXyRgeQULBxavqqGa74; report-to cf-ejpfhwuusaayqrnz","count":1},{"content-security-policy-report-only":" default-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com; connect-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" script-src 'self' cdn.robinhood.com cdn.pdst.fm\/ping.min.js *.google-analytics.com *.googletagmanager.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ tagmanager.google.com connect.facebook.net sc-static.net d.impactradius-event.com www.redditstatic.com analytics.tiktok.com boards.greenhouse.io bat.bing.com www.googleadservices.com googleads.g.doubleclick.net pagead2.googlesyndication.com web-sdk-cdn.singular.net\/singular-gtm-interface\/latest\/singular-gtm-interface.js web-sdk-cdn.singular.net\/singular-sdk\/latest\/singular-sdk.js static.ads-twitter.com s.yimg.com *.usercentrics.eu snap.licdn.com collector-47804.us.tvsquared.com\/tv2track.js js.stripe.com public.flourish.studio\/resources\/embed.js csi.gstatic.com cdn.parsely.com *.doubleclick.net *.googlesyndication.com *.googletagservices.com platform.twitter.com\/ platform.x.com\/ platform.instagram.com\/ www.instagram.com\/embed.js www.threads.net\/embed.js www.tiktok.com\/embed.js lf16-tiktok-web.tiktokcdn-us.com\/ www.facebook.com\/ www.youtube.com\/ ak.sail-horizon.com *.celtra.com *.doubleverify.com *.infogram.com cdn.concert.io *.adtrafficquality.google hymnal-prod.vox-cdn.com www.documentcloud.org\/notes\/loader.js truthsocial.com\/embed.js embed.reddit.com\/widgets.js embed.bsky.app\/static\/embed.js *.permutive.app 'unsafe-eval' 'unsafe-eval' ; report-uri https:\/\/o62437.ingest.us.sentry.io\/api\/4511655832846336\/security\/?sentry_key=2c2d794d57d1a3cb8f62530c00238b7a","count":1},{"content-security-policy-report-only":" base-uri 'self'; object-src 'none'; script-src 'nonce-ZbaZLffLbAX4cOo1WRdvBwAUS' 'strict-dynamic' 'wasm-unsafe-eval'; worker-src 'self' blob:; frame-ancestors 'self'; manifest-src 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.uship.com https:\/\/api.uship.com https:\/\/api-web.uship.com https:\/\/login.uship.com https:\/\/about.uship.com https:\/\/api-reviews.uship.com https:\/\/collect.uship.com https:\/\/content.uship.com https:\/\/go.uship.com https:\/\/help.uship.com https:\/\/ship.uship.com https:\/\/static.uship.com https:\/\/tm.uship.com https:\/\/track.uship.com https:\/\/login.okta.com https:\/\/www.ushipcdn.cloud https:\/\/t.ushipcdn.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.analytics.google.com https:\/\/ajax.googleapis.com https:\/\/fonts.googleapis.com https:\/\/maps.googleapis.com https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/www.youtube.com https:\/\/cdn.cookielaw.org https:\/\/geolocation.onetrust.com https:\/\/privacyportal.onetrust.com https:\/\/cdn.optimizely.com https:\/\/logx.optimizely.com https:\/\/rum.optimizely.com https:\/\/eum.instana.io https:\/\/eum-red-saas.instana.io https:\/\/app-sj21.marketo.com https:\/\/544-zar-489.mktoresp.com https:\/\/munchkin.marketo.net https:\/\/js.stripe.com https:\/\/bat.bing.com https:\/\/www.bing.com https:\/\/bat.bing.net https:\/\/edge.fullstory.com https:\/\/rs.fullstory.com https:\/\/d.adroll.com https:\/\/ipv4.d.adroll.com https:\/\/s.adroll.com https:\/\/aorta.clickagy.com https:\/\/hemsync.clickagy.com https:\/\/tags.clickagy.com https:\/\/pixels.spotify.com https:\/\/file-paa.zoom.us https:\/\/log-gateway.zoom.us https:\/\/us01apizva.zoom.us https:\/\/us01campaign.zoom.us https:\/\/us01ccistatic.zoom.us https:\/\/p.yotpo.com https:\/\/staticw2.yotpo.com https:\/\/cdn-widgetsrepository.yotpo.com https:\/\/bzrcdn.openai.com https:\/\/unpkg.com https:\/\/ajax.cloudflare.com https:\/\/cdnjs.cloudflare.com https:\/\/vjs.zencdn.net https:\/\/static.cloudflareinsights.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/snap.licdn.com https:\/\/px.ads.linkedin.com https:\/\/pixel.byspotify.com https:\/\/ct.pinterest.com https:\/\/d.impactradius-event.com https:\/\/d.impct.site https:\/\/fast.ssqt.io https:\/\/googleads.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/lex.33across.com https:\/\/insight.adsrvr.org https:\/\/js.adsrvr.org https:\/\/match.adsrvr.org https:\/\/tags.tiqcdn.com https:\/\/collect.tealiumiq.com https:\/\/cdn.mxpnl.com https:\/\/api-js.mixpanel.com https:\/\/js.zi-scripts.com https:\/\/ws.zoominfo.com https:\/\/widget.trustpilot.com https:\/\/player.vimeo.com https:\/\/app-sj21.marketo.com https:\/\/ekr.zdassets.com https:\/\/static.zdassets.com https:\/\/ushipaibot.zendesk.com; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:\/\/www.uship.com https:\/\/api.uship.com https:\/\/api-web.uship.com https:\/\/login.uship.com https:\/\/about.uship.com https:\/\/api-reviews.uship.com https:\/\/collect.uship.com https:\/\/content.uship.com https:\/\/go.uship.com https:\/\/help.uship.com https:\/\/ship.uship.com https:\/\/static.uship.com https:\/\/tm.uship.com https:\/\/track.uship.com https:\/\/login.okta.com https:\/\/www.ushipcdn.cloud https:\/\/t.ushipcdn.com https:\/\/ajax.googleapis.com https:\/\/fonts.googleapis.com https:\/\/maps.googleapis.com https:\/\/p.yotpo.com https:\/\/staticw2.yotpo.com https:\/\/cdn-widgetsrepository.yotpo.com https:\/\/unpkg.com https:\/\/ajax.cloudflare.com https:\/\/cdnjs.cloudflare.com https:\/\/vjs.zencdn.net https:\/\/static.cloudflareinsights.com https:\/\/fonts.gstatic.com https:\/\/use.fontawesome.com; img-src 'self' data: https:\/\/www.uship.com https:\/\/api.uship.com https:\/\/api-web.uship.com https:\/\/login.uship.com https:\/\/about.uship.com https:\/\/api-reviews.uship.com https:\/\/collect.uship.com https:\/\/content.uship.com https:\/\/go.uship.com https:\/\/help.uship.com https:\/\/ship.uship.com https:\/\/static.uship.com https:\/\/tm.uship.com https:\/\/track.uship.com https:\/\/login.okta.com https:\/\/www.ushipcdn.cloud https:\/\/t.ushipcdn.com https:\/\/s.ushipcdn.com https:\/\/resources.awsuship.com https:\/\/d2i7mi0re7cgbq.cloudfront.net https:\/\/proof-of-delivery-prod.s3.us-east-1.amazonaws.com https:\/\/uship-legacy-resources-prod.s3.us-east-1.amazonaws.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.analytics.google.com https:\/\/ajax.googleapis.com https:\/\/fonts.googleapis.com https:\/\/maps.googleapis.com https:\/\/fonts.gstatic.com https:\/\/maps.gstatic.com https:\/\/www.gstatic.com https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/www.youtube.com https:\/\/cdn.cookielaw.org https:\/\/geolocation.onetrust.com https:\/\/privacyportal.onetrust.com https:\/\/cdn.optimizely.com https:\/\/logx.optimizely.com https:\/\/rum.optimizely.com https:\/\/eum.instana.io https:\/\/eum-red-saas.instana.io https:\/\/bat.bing.com https:\/\/www.bing.com https:\/\/bat.bing.net https:\/\/edge.fullstory.com https:\/\/rs.fullstory.com https:\/\/d.adroll.com https:\/\/ipv4.d.adroll.com https:\/\/s.adroll.com https:\/\/aorta.clickagy.com https:\/\/hemsync.clickagy.com https:\/\/tags.clickagy.com https:\/\/p.yotpo.com https:\/\/staticw2.yotpo.com https:\/\/cdn-widgetsrepository.yotpo.com https:\/\/bzr.openai.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/snap.licdn.com https:\/\/px.ads.linkedin.com https:\/\/pixel.byspotify.com https:\/\/ct.pinterest.com https:\/\/d.impactradius-event.com https:\/\/d.impct.site https:\/\/fast.ssqt.io https:\/\/googleads.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/lex.33across.com https:\/\/insight.adsrvr.org https:\/\/js.adsrvr.org https:\/\/match.adsrvr.org https:\/\/*.online-metrix.net https:\/\/cdn.sanity.io https:\/\/notify.bugsnag.com https:\/\/app.jazz.co https:\/\/t.vibe.co; font-src 'self' data: https:\/\/www.uship.com https:\/\/api.uship.com https:\/\/api-web.uship.com https:\/\/login.uship.com https:\/\/about.uship.com https:\/\/api-reviews.uship.com https:\/\/collect.uship.com https:\/\/content.uship.com https:\/\/go.uship.com https:\/\/help.uship.com https:\/\/ship.uship.com https:\/\/static.uship.com https:\/\/tm.uship.com https:\/\/track.uship.com https:\/\/login.okta.com https:\/\/www.ushipcdn.cloud https:\/\/t.ushipcdn.com https:\/\/p.yotpo.com https:\/\/staticw2.yotpo.com https:\/\/cdn-widgetsrepository.yotpo.com https:\/\/fonts.gstatic.com https:\/\/use.fontawesome.com https:\/\/unpkg.com https:\/\/ajax.cloudflare.com https:\/\/cdnjs.cloudflare.com https:\/\/vjs.zencdn.net https:\/\/static.cloudflareinsights.com https:\/\/api.radar.io https:\/\/static.radar.com; connect-src 'self' https:\/\/www.uship.com https:\/\/api.uship.com https:\/\/api-web.uship.com https:\/\/login.uship.com https:\/\/about.uship.com https:\/\/api-reviews.uship.com https:\/\/collect.uship.com https:\/\/content.uship.com https:\/\/go.uship.com https:\/\/help.uship.com https:\/\/ship.uship.com https:\/\/static.uship.com https:\/\/tm.uship.com https:\/\/track.uship.com https:\/\/login.okta.com https:\/\/www.ushipcdn.cloud https:\/\/t.ushipcdn.com https:\/\/proof-of-delivery-prod.s3.us-east-1.amazonaws.com https:\/\/uship-legacy-resources-prod.s3.us-east-1.amazonaws.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.analytics.google.com https:\/\/ajax.googleapis.com https:\/\/fonts.googleapis.com https:\/\/maps.googleapis.com https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/www.youtube.com https:\/\/cdn.cookielaw.org https:\/\/geolocation.onetrust.com https:\/\/privacyportal.onetrust.com https:\/\/cdn.optimizely.com https:\/\/logx.optimizely.com https:\/\/rum.optimizely.com https:\/\/eum.instana.io https:\/\/eum-red-saas.instana.io https:\/\/app-sj21.marketo.com https:\/\/544-zar-489.mktoresp.com https:\/\/munchkin.marketo.net https:\/\/bat.bing.com https:\/\/www.bing.com https:\/\/bat.bing.net https:\/\/edge.fullstory.com https:\/\/rs.fullstory.com https:\/\/d.adroll.com https:\/\/ipv4.d.adroll.com https:\/\/s.adroll.com https:\/\/aorta.clickagy.com https:\/\/hemsync.clickagy.com https:\/\/tags.clickagy.com https:\/\/pixels.spotify.com https:\/\/file-paa.zoom.us https:\/\/log-gateway.zoom.us https:\/\/us01apizva.zoom.us https:\/\/us01campaign.zoom.us https:\/\/us01ccistatic.zoom.us https:\/\/p.yotpo.com https:\/\/staticw2.yotpo.com https:\/\/cdn-widgetsrepository.yotpo.com https:\/\/bzr.openai.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/snap.licdn.com https:\/\/px.ads.linkedin.com https:\/\/pixel.byspotify.com https:\/\/ct.pinterest.com https:\/\/d.impactradius-event.com https:\/\/d.impct.site https:\/\/fast.ssqt.io https:\/\/googleads.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/lex.33across.com https:\/\/insight.adsrvr.org https:\/\/js.adsrvr.org https:\/\/match.adsrvr.org https:\/\/tags.tiqcdn.com https:\/\/collect.tealiumiq.com https:\/\/cdn.mxpnl.com https:\/\/api-js.mixpanel.com https:\/\/js.zi-scripts.com https:\/\/ws.zoominfo.com https:\/\/api.radar.io https:\/\/static.radar.com https:\/\/ekr.zdassets.com https:\/\/static.zdassets.com https:\/\/ushipaibot.zendesk.com; media-src 'self' data: https:\/\/www.uship.com https:\/\/api.uship.com https:\/\/api-web.uship.com https:\/\/login.uship.com https:\/\/about.uship.com https:\/\/api-reviews.uship.com https:\/\/collect.uship.com https:\/\/content.uship.com https:\/\/go.uship.com https:\/\/help.uship.com https:\/\/ship.uship.com https:\/\/static.uship.com https:\/\/tm.uship.com https:\/\/track.uship.com https:\/\/login.okta.com https:\/\/www.ushipcdn.cloud; frame-src 'self' https:\/\/www.uship.com https:\/\/api.uship.com https:\/\/api-web.uship.com https:\/\/login.uship.com https:\/\/about.uship.com https:\/\/api-reviews.uship.com https:\/\/collect.uship.com https:\/\/content.uship.com https:\/\/go.uship.com https:\/\/help.uship.com https:\/\/ship.uship.com https:\/\/static.uship.com https:\/\/tm.uship.com https:\/\/track.uship.com https:\/\/login.okta.com https:\/\/www.ushipcdn.cloud https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.youtube.com https:\/\/cdn.cookielaw.org https:\/\/geolocation.onetrust.com https:\/\/privacyportal.onetrust.com https:\/\/cdn.optimizely.com https:\/\/logx.optimizely.com https:\/\/rum.optimizely.com https:\/\/js.stripe.com https:\/\/connect.stripe.com https:\/\/bat.bing.com https:\/\/www.bing.com https:\/\/bat.bing.net https:\/\/aorta.clickagy.com https:\/\/hemsync.clickagy.com https:\/\/tags.clickagy.com https:\/\/file-paa.zoom.us https:\/\/log-gateway.zoom.us https:\/\/us01apizva.zoom.us https:\/\/us01campaign.zoom.us https:\/\/us01ccistatic.zoom.us https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/snap.licdn.com https:\/\/px.ads.linkedin.com https:\/\/pixel.byspotify.com https:\/\/ct.pinterest.com https:\/\/d.impactradius-event.com https:\/\/d.impct.site https:\/\/fast.ssqt.io https:\/\/googleads.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/lex.33across.com https:\/\/insight.adsrvr.org https:\/\/js.adsrvr.org https:\/\/match.adsrvr.org https:\/\/*.online-metrix.net https:\/\/widget.trustpilot.com https:\/\/player.vimeo.com https:\/\/app-sj21.marketo.com; worker-src 'self' blob:; child-src 'self'; manifest-src 'self' https:\/\/www.ushipcdn.cloud; object-src 'none'; frame-ancestors 'self'; block-all-mixed-content; report-uri https:\/\/uship.report-uri.com\/r\/t\/csp\/reportOnly; report-to csp","count":1},{"content-security-policy-report-only":" default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https:\/\/*.altondoctors.com https:\/\/*.bjc.org https:\/\/*.instamed.com https:\/\/*.kaltura.com https:\/\/*.missouribaptist.org https:\/\/*.patientco.com https:\/\/*.payconex.net https:\/\/*.paymentfusion.com https:\/\/*.personalphysicianstl.com https:\/\/*.trustcommerce.com https:\/\/*.usaepay.com https:\/\/*.wustl.edu https:\/\/altondoctors.com https:\/\/epicproxy.et0965.epichosted.com https:\/\/usaepay.com;script-src 'nonce-d5aa6e02e8f645088643c9bcb690ed9f' https:\/\/mychart.et0965.epichosted.com 'self';img-src https:\/\/* 'self' blob: data: http:\/\/altondoctors.com http:\/\/doctors.bjc.org;connect-src 'self' epichttp: https:\/\/*.kaltura.com;style-src https:\/\/mychart.et0965.epichosted.com 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https:\/\/central.mychart.org\/MyChart\/ 'self' http:\/\/127.0.0.1 https:\/\/localhost.lambdatest.com https:\/\/mychart-np.et0965.epichosted.com https:\/\/scheduling-dev.bjc.org https:\/\/scheduling-test.bjc.org https:\/\/scheduling.bjc.org https:\/\/www.mypatientchart.org;media-src https:\/\/* 'self' blob:;","count":1},{"content-security-policy-report-only":" script-src 'nonce-kQPvJ8Y0aLd25n+a4sPqeA==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri \/_\/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self' https:\/\/my.functionhealth.com https:\/\/www.zeropartyforms.com; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.lightboxcdn.com https:\/\/www.zeropartyforms.com https:\/\/global.ketchcdn.com https:\/\/cdn.ketchjs.com https:\/\/metrics.functionhealth.com https:\/\/*.functionhealth.com https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.googletagservices.com https:\/\/*.googleadservices.com https:\/\/*.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.mxpnl.com https:\/\/*.mixpanel.com https:\/\/*.intercom.io https:\/\/*.intercomcdn.com https:\/\/*.statsig.com https:\/\/*.ketchcdn.com https:\/\/*.facebook.net https:\/\/*.tiktokcdn.com; connect-src 'self' https:\/\/ip-lookup-kappa.vercel.app https:\/\/global.ketchcdn.com https:\/\/metrics.functionhealth.com https:\/\/ipv4-cdn.oursprivacy.com https:\/\/statsig.functionhealth.com https:\/\/api-js.mixpanel.com https:\/\/*.functionhealth.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.doubleclick.net https:\/\/*.mxpnl.com https:\/\/*.mixpanel.com https:\/\/*.intercom.io https:\/\/*.intercomcdn.com https:\/\/*.statsig.com https:\/\/*.featuregates.org https:\/\/*.prodregistryv2.org https:\/\/*.ketchcdn.com https:\/\/*.facebook.com https:\/\/*.tiktok.com wss:\/\/*.intercom.io; img-src 'self' data: blob: https:; media-src 'self' blob: https:\/\/*.public.blob.vercel-storage.com https:\/\/cdn.sanity.io; style-src 'self' 'unsafe-inline' https:\/\/www.zeropartyforms.com https:\/\/fonts.googleapis.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/*.intercomcdn.com; frame-src 'self' https:\/\/*.youtube.com https:\/\/*.youtube-nocookie.com https:\/\/*.vimeo.com https:\/\/*.intercom.io https:\/\/*.doubleclick.net; worker-src 'self' blob:; manifest-src 'self'","count":1},{"content-security-policy-report-only":" default-src https:\/\/*.s4c.cymru https:\/\/s4c.cymru; img-src 'self' data: https:\/\/*.s4c.cymru https:\/\/s4c.cymru https:\/\/cdn-cookieyes.com https:\/\/i.ytimg.com https:\/\/*.google.com\/cse https:\/\/clients1.google.com https:\/\/*.gstatic.com; font-src 'self' data: https:\/\/*.s4c.cymru https:\/\/s4c.cymru https:\/\/fonts.gstatic.com https:\/\/cloud.typography.com; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn-cookieyes.com https:\/\/*.googletagmanager.com https:\/\/*.google.com\/cse https:\/\/*.hotjar.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/cloud.typography.com https:\/\/*.s4c.cymru https:\/\/s4c.cymru https:\/\/*.google.com\/cse; connect-src https:\/\/*.s4c.cymru https:\/\/s4c.cymru https:\/\/cdn-cookieyes.com https:\/\/log.cookieyes.com https:\/\/*.google-analytics.com; object-src 'none'; frame-ancestors 'none'; frame-src 'self' https:; report-uri https:\/\/csp.s4c.cymru\/report; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https:\/\/*.kaltura.com https:\/\/apps.mywvuchart.com https:\/\/doctors.wvumedicine.org\/ https:\/\/mychart.personapay.com https:\/\/wvumedicine.org;script-src 'nonce-fdb46f8b7bc84e40aa0ca8e7c5f277c6' https:\/\/mywvuchart.com 'self' https:\/\/doctors.wvumedicine.org\/ https:\/\/wvumedicine.org\/ https:\/\/wvumedicinestg.local\/ https:\/\/wvumedicinestg.wpenginepowered.com\/ https:\/\/www.wvumedicine.org\/;img-src https:\/\/* 'self' blob: data:;connect-src 'self' epichttp:;style-src https:\/\/mywvuchart.com 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https:\/\/central.mychart.org\/MyChart\/ 'self';media-src https:\/\/* 'self' blob:;","count":1},{"content-security-policy-report-only":" default-src 'none'; script-src 'self' 'nonce-0JfiZO2VaAYVI3e1'; style-src 'self' 'nonce-YZoOq7XesIFARzIX' https:\/\/p.typekit.net; img-src 'self' https:\/\/images.squarespace-cdn.com; font-src 'self'; media-src 'self'; ","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/code.jquery.com https:\/\/www.googletagmanager.com https:\/\/pxl-csumbedu.terminalfour.net https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/cbe.capturehighered.net https:\/\/s.adroll.com https:\/\/d.adroll.com https:\/\/www.google.com https:\/\/cse.google.com https:\/\/www.gstatic.com https:\/\/siteimproveanalytics.com https:\/\/bot.io.gravyty.com 'unsafe-inline'; style-src 'self' https:\/\/fonts.googleapis.com https:\/\/pxl-csumbedu.terminalfour.net https:\/\/www.google.com https:\/\/www.csuci.edu 'unsafe-inline'; font-src 'self' https:\/\/fonts.gstatic.com https:\/\/pxl-csumbedu.terminalfour.net data:; img-src 'self' https:\/\/www.csuci.edu https:\/\/pxl-csumbedu.terminalfour.net https:\/\/40230.global.siteimproveanalytics.io data:; media-src 'self' https:\/\/player.vimeo.com https:\/\/vimeocdn.com; connect-src 'self' https:\/\/region1.google-analytics.com https:\/\/content.hotjar.io wss:\/\/ws.hotjar.com https:\/\/bot.io.gravyty.com; frame-src 'self' https:\/\/www.google.com; frame-ancestors 'self'; object-src 'none'; base-uri 'none';","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-7vq-Ru0471x4HO-9clIOwA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/*.amarstock.com https:\/\/accounts.google.com https:\/\/apis.google.com https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/www.google-analytics.com https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/code.jquery.com https:\/\/*.posthog.com https:\/\/player.vimeo.com https:\/\/embed.tawk.to https:\/\/*.tawk.to; style-src 'self' 'unsafe-inline' https:\/\/*.amarstock.com https:\/\/accounts.google.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/cdnjs.cloudflare.com https:\/\/fonts.googleapis.com; font-src 'self' data: https:\/\/*.amarstock.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/fonts.gstatic.com; img-src 'self' data: blob: https:\/\/*.amarstock.com https:\/\/*.posthog.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/*.g.doubleclick.net https:\/\/www.google.com https:\/\/*.google.com.bd https:\/\/play.google.com https:\/\/*.googleusercontent.com https:\/\/www.gstatic.com https:\/\/i.ytimg.com https:\/\/img.youtube.com https:\/\/*.vimeocdn.com https:\/\/tools.applemediaservices.com https:\/\/toolbox.marketingtools.apple.com https:\/\/*.tawk.to; connect-src 'self' blob: https:\/\/*.amarstock.com wss:\/\/*.amarstock.com https:\/\/*.posthog.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/*.g.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/accounts.google.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/*.tawk.to wss:\/\/*.tawk.to https:\/\/vimeo.com https:\/\/player.vimeo.com https:\/\/*.vimeocdn.com; frame-src 'self' blob: https:\/\/*.amarstock.com https:\/\/accounts.google.com https:\/\/apis.google.com https:\/\/content.googleapis.com https:\/\/www.google.com https:\/\/recaptcha.google.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/td.doubleclick.net; media-src 'self' data: blob: https:\/\/*.amarstock.com; worker-src 'self' blob:; child-src 'self' blob: https:\/\/*.amarstock.com; frame-ancestors 'self' https:\/\/*.amarstock.com; object-src 'none'; base-uri 'self'","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self'  cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/unpkg.com platform.twitter.com; script-src-attr 'self'; style-src 'self' fonts.googleapis.com https:\/\/cdnjs.cloudflare.com https:\/\/fonts.googleapis.com https:\/\/unpkg.com https:\/\/www.w3schools.com; style-src-attr 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-2a155cbc-edb8-44c3-a94a-7283486cb470' 'unsafe-eval' https:\/\/pagead2.googlesyndication.com https:\/\/securepubads.g.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/connect.facebook.net https:\/\/cdn.ad.plus https:\/\/www.gstatic.com https:\/\/www.google.com https:\/\/*.criteo.com https:\/\/*.criteo.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/www.googletagmanager.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com; connect-src 'self' blob: https: wss:; media-src 'self' blob: https:; frame-src 'self' https:\/\/*.googlesyndication.com https:\/\/*.doubleclick.net https:\/\/*.google.com https:\/\/*.googleadservices.com https:\/\/*.gstatic.com https:\/\/*.adtrafficquality.google https:\/\/*.ad.plus https:\/\/*.facebook.com https:\/\/*.facebook.net https:\/\/*.pubmatic.com https:\/\/*.indexexchange.com https:\/\/*.casalemedia.com https:\/\/*.rubiconproject.com https:\/\/*.media.net https:\/\/*.onetag.com https:\/\/*.rhythmone.com https:\/\/*.unrulymedia.com https:\/\/*.sovrn.com https:\/\/*.lijit.com https:\/\/*.criteo.com https:\/\/*.criteo.net; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/www.google.com https:\/\/www.facebook.com; worker-src 'self' blob:; upgrade-insecure-requests; report-uri \/api\/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self';base-uri 'self';frame-ancestors 'self' https:\/\/cancercarespecialists.org\/mychart\/ https:\/\/osfhealthcare.org\/ https:\/\/sthcares.org\/mychart\/ https:\/\/www.cancercarespecialists.org\/mychart\/ https:\/\/www.osfhealthcare.org\/ https:\/\/www.sthcares.org\/mychart\/;frame-src 'self' epichttp: https:\/\/*.appcues.com https:\/\/*.dermengine.com https:\/\/*.gyantts.com\/ https:\/\/*.intranet.osfnet.org\/ https:\/\/*.kyruus.com\/ https:\/\/*.mixpanel.com https:\/\/*.neurotrack.com\/ https:\/\/*.neurotrack.io\/ https:\/\/*.osfhealthcare.org\/ https:\/\/*.skin.app https:\/\/*.stripe.com https:\/\/*.zipnosis.com\/ https:\/\/cdnapisec.kaltura.com\/ https:\/\/d2y285dhddzdli.cloudfront.net https:\/\/integrations-core.fabrichealth.com https:\/\/integrations-core.stage.fabrichealth.com https:\/\/mychart-stg.personapay.com https:\/\/mychart.personapay.com https:\/\/pay.instamed.com https:\/\/premier.trustcommerce.com https:\/\/s3.amazonaws.com\/assets.gyant.com\/ https:\/\/securecheckout-test.onplanprocessing.com https:\/\/securecheckout.onplanprocessing.com https:\/\/ssproxy.osfhealthcare.org https:\/\/stagepremier.trustcommerce.com wss:\/\/*.gyantts.com\/;script-src 'nonce-d043bd933b154c74bfd301cb4fff425e' https:\/\/www.osfmychart.org 'self' https:\/\/*.appcues.com https:\/\/*.dermengine.com https:\/\/*.gyantts.com\/ https:\/\/*.intranet.osfnet.org\/ https:\/\/*.kyruus.com\/ https:\/\/*.mixpanel.com https:\/\/*.neurotrack.com\/ https:\/\/*.neurotrack.io\/ https:\/\/*.osfhealthcare.org\/ https:\/\/*.skin.app https:\/\/*.stripe.com https:\/\/d2y285dhddzdli.cloudfront.net https:\/\/s3.amazonaws.com\/assets.gyant.com\/ https:\/\/siteimproveanalytics.com\/ wss:\/\/*.gyantts.com\/;img-src https:\/\/* 'self' blob: data: https:\/\/*.appcues.com https:\/\/*.dermengine.com https:\/\/*.gyantts.com\/ https:\/\/*.intranet.osfnet.org\/ https:\/\/*.kyruus.com\/ https:\/\/*.mixpanel.com https:\/\/*.neurotrack.com\/ https:\/\/*.neurotrack.io\/ https:\/\/*.osfhealthcare.org\/ https:\/\/*.skin.app https:\/\/*.stripe.com https:\/\/d2y285dhddzdli.cloudfront.net https:\/\/s3.amazonaws.com\/assets.gyant.com\/ wss:\/\/*.gyantts.com\/;connect-src 'self' epichttp: https:\/\/*.appcues.com https:\/\/*.dermengine.com https:\/\/*.gyantts.com\/ https:\/\/*.intranet.osfnet.org\/ https:\/\/*.kaltura.com https:\/\/*.kyruus.com\/ https:\/\/*.mixpanel.com https:\/\/*.neurotrack.com\/ https:\/\/*.neurotrack.io\/ https:\/\/*.osfhealthcare.org\/ https:\/\/*.skin.app https:\/\/*.stripe.com https:\/\/d2y285dhddzdli.cloudfront.net https:\/\/s3.amazonaws.com\/assets.gyant.com\/ wss:\/\/*.gyantts.com\/;style-src https:\/\/www.osfmychart.org 'self' 'unsafe-inline' https:\/\/*.appcues.com https:\/\/*.dermengine.com https:\/\/*.gyantts.com\/ https:\/\/*.intranet.osfnet.org\/ https:\/\/*.kyruus.com\/ https:\/\/*.mixpanel.com https:\/\/*.neurotrack.com\/ https:\/\/*.neurotrack.io\/ https:\/\/*.osfhealthcare.org\/ https:\/\/*.skin.app https:\/\/*.stripe.com https:\/\/d2y285dhddzdli.cloudfront.net https:\/\/s3.amazonaws.com\/assets.gyant.com\/ wss:\/\/*.gyantts.com\/;manifest-src 'self' https:\/\/*.appcues.com https:\/\/*.dermengine.com https:\/\/*.gyantts.com\/ https:\/\/*.intranet.osfnet.org\/ https:\/\/*.kyruus.com\/ https:\/\/*.mixpanel.com https:\/\/*.neurotrack.com\/ https:\/\/*.neurotrack.io\/ https:\/\/*.osfhealthcare.org\/ https:\/\/*.skin.app https:\/\/*.stripe.com https:\/\/d2y285dhddzdli.cloudfront.net https:\/\/s3.amazonaws.com\/assets.gyant.com\/ wss:\/\/*.gyantts.com\/;worker-src 'self' blob: https:\/\/*.appcues.com https:\/\/*.dermengine.com https:\/\/*.gyantts.com\/ https:\/\/*.intranet.osfnet.org\/ https:\/\/*.kyruus.com\/ https:\/\/*.mixpanel.com https:\/\/*.neurotrack.com\/ https:\/\/*.neurotrack.io\/ https:\/\/*.osfhealthcare.org\/ https:\/\/*.skin.app https:\/\/*.stripe.com https:\/\/d2y285dhddzdli.cloudfront.net https:\/\/s3.amazonaws.com\/assets.gyant.com\/ wss:\/\/*.gyantts.com\/;child-src 'self' blob: https:\/\/*.appcues.com https:\/\/*.dermengine.com https:\/\/*.gyantts.com\/ https:\/\/*.intranet.osfnet.org\/ https:\/\/*.kyruus.com\/ https:\/\/*.mixpanel.com https:\/\/*.neurotrack.com\/ https:\/\/*.neurotrack.io\/ https:\/\/*.osfhealthcare.org\/ https:\/\/*.skin.app https:\/\/*.stripe.com https:\/\/d2y285dhddzdli.cloudfront.net https:\/\/s3.amazonaws.com\/assets.gyant.com\/ wss:\/\/*.gyantts.com\/;font-src 'self' https:\/\/*.appcues.com https:\/\/*.dermengine.com https:\/\/*.gyantts.com\/ https:\/\/*.intranet.osfnet.org\/ https:\/\/*.kyruus.com\/ https:\/\/*.mixpanel.com https:\/\/*.neurotrack.com\/ https:\/\/*.neurotrack.io\/ https:\/\/*.osfhealthcare.org\/ https:\/\/*.skin.app https:\/\/*.stripe.com https:\/\/d2y285dhddzdli.cloudfront.net https:\/\/s3.amazonaws.com\/assets.gyant.com\/ wss:\/\/*.gyantts.com\/;object-src 'self' https:\/\/*.appcues.com https:\/\/*.dermengine.com https:\/\/*.gyantts.com\/ https:\/\/*.intranet.osfnet.org\/ https:\/\/*.kyruus.com\/ https:\/\/*.mixpanel.com https:\/\/*.neurotrack.com\/ https:\/\/*.neurotrack.io\/ https:\/\/*.osfhealthcare.org\/ https:\/\/*.skin.app https:\/\/*.stripe.com https:\/\/d2y285dhddzdli.cloudfront.net https:\/\/s3.amazonaws.com\/assets.gyant.com\/ wss:\/\/*.gyantts.com\/;form-action https:\/\/central.mychart.org\/MyChart\/ 'self' https:\/\/*.appcues.com https:\/\/*.dermengine.com https:\/\/*.fabrichealth.com https:\/\/*.gyantts.com\/ https:\/\/*.intranet.osfnet.org\/ https:\/\/*.kyruus.com\/ https:\/\/*.mixpanel.com https:\/\/*.neurotrack.com\/ https:\/\/*.neurotrack.io\/ https:\/\/*.osfhealthcare.org\/ https:\/\/*.skin.app https:\/\/*.stripe.com https:\/\/*.zipnosis.com\/ https:\/\/d2y285dhddzdli.cloudfront.net https:\/\/s3.amazonaws.com\/assets.gyant.com\/ wss:\/\/*.gyantts.com\/;media-src https:\/\/* 'self' blob: https:\/\/*.appcues.com https:\/\/*.dermengine.com https:\/\/*.gyantts.com\/ https:\/\/*.intranet.osfnet.org\/ https:\/\/*.kyruus.com\/ https:\/\/*.mixpanel.com https:\/\/*.neurotrack.com\/ https:\/\/*.neurotrack.io\/ https:\/\/*.osfhealthcare.org\/ https:\/\/*.skin.app https:\/\/*.stripe.com https:\/\/d2y285dhddzdli.cloudfront.net https:\/\/s3.amazonaws.com\/assets.gyant.com\/ wss:\/\/*.gyantts.com\/;","count":1},{"content-security-policy-report-only":" default-src 'self';base-uri 'self';frame-ancestors 'self' https:\/\/*.epic.com https:\/\/*.geisinger.edu https:\/\/*.geisinger.org https:\/\/*.mycarecompass.edu https:\/\/*.mycarecompass.org https:\/\/*.mygeisinger.org https:\/\/geisinger.org https:\/\/www.geisinger.org;frame-src 'self' epichttp: https:\/\/*.geisinger.edu https:\/\/cdnapisec.kaltura.com\/ https:\/\/geisapi.geisinger.edu https:\/\/pay.instamed.com https:\/\/paymentsafe.experianhealth.com;script-src https:\/\/mychart.mycarecompass.org 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/*.geisinger.edu https:\/\/*.geisinger.org https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.jquery.com https:\/\/*.mycarecompass.org https:\/\/*.virtualearth.net https:\/\/ajax.microsoft.com https:\/\/mycarecompass.org https:\/\/twemoji.maxcdn.com https:\/\/unpkg.com https:\/\/www.gstatic.com;img-src https:\/\/* 'self' blob: data:;connect-src 'self' epichttp: https:\/\/*.amazonaws.com https:\/\/*.kaltura.com;style-src https:\/\/mychart.mycarecompass.org 'self' 'unsafe-inline' https:\/\/*.geisinger.edu https:\/\/*.geisinger.org https:\/\/*.mycarecompass.org https:\/\/mycarecompass.org https:\/\/s3.amazonaws.com;worker-src 'self' blob:;child-src 'self' blob:;font-src 'self' https:\/\/s3.amazonaws.com;form-action https:\/\/central.mychart.org\/MyChart\/ 'self';media-src https:\/\/* 'self' blob:;","count":1},{"content-security-policy-report-only":" font-src https:\/\/fonts.gstatic.com\/ https:\/\/fonts.googleapis.com\/ https:\/\/www.google.com\/ https:\/\/www.gstatic.com\/ https:\/\/maps.googleapis.com\/ https:\/\/www.google-analytics.com\/ https:\/\/static.cloudflareinsights.com\/ data: https:\/\/maps.gstatic.com https:\/\/credomatic.compassmerchantsolutions.com\/ *.core.windows.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com self *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * secure.nmi.com secure.networkmerchants.com collectcheckout.com  'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ https:\/\/*.doubleclick.net\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * secure.nmi.com secure.networkmerchants.com collectcheckout.com  'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https:\/\/kalicr.com https:\/\/www.google.co.cr\/ https:\/\/www.facebook.com\/ https:\/\/almaceneselrey.com\/ https:\/\/www.google.com\/ https:\/\/www.gstatic.com\/ https:\/\/maps.googleapis.com\/ https:\/\/www.google-analytics.com\/ https:\/\/static.cloudflareinsights.com\/ https:\/\/maps.gstatic.com https:\/\/fonts.googleapis.com\/ https:\/\/credomatic.compassmerchantsolutions.com\/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.core.windows.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ data: https:\/\/connect.facebook.net\/ https:\/\/applepay.cdn-apple.com https:\/\/www.google.com\/ https:\/\/www.gstatic.com\/ https:\/\/maps.googleapis.com\/ https:\/\/www.google-analytics.com\/ https:\/\/static.cloudflareinsights.com\/ https:\/\/maps.gstatic.com https:\/\/fonts.googleapis.com\/ https:\/\/credomatic.compassmerchantsolutions.com\/ s7.addthis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.core.windows.net secure.nmi.com secure.networkmerchants.com collectcheckout.com  'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https:\/\/credomatic.compassmerchantsolutions.com\/ https:\/\/fonts.gstatic.com\/ https:\/\/fonts.googleapis.com\/ https:\/\/googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ data: https:\/\/secure.networkmerchants.com\/ https:\/\/www.google.com\/ https:\/\/www.gstatic.com\/ https:\/\/maps.googleapis.com\/ https:\/\/www.google-analytics.com\/ https:\/\/static.cloudflareinsights.com\/ https:\/\/maps.gstatic.com unsafe-inline assets.braintreegateway.com *.core.windows.net secure.nmi.com  'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.core.windows.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/credomatic.compassmerchantsolutions.com\/ https:\/\/googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ https:\/\/*.doubleclick.net\/ data: https:\/\/www.facebook.com\/ https:\/\/places.googleapis.com\/ https:\/\/www.google.co.cr https:\/\/www.google.com\/ https:\/\/www.gstatic.com\/ https:\/\/maps.googleapis.com\/ https:\/\/www.google-analytics.com\/ https:\/\/static.cloudflareinsights.com\/ https:\/\/maps.gstatic.com https:\/\/fonts.googleapis.com\/ ekr.zdassets.com\/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.core.windows.net secure.nmi.com secure.networkmerchants.com collectcheckout.com  'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'none'; connect-src 'self' https:\/\/*.icfcdn.com https:\/\/www.google.com https:\/\/cdn.plyr.io https:\/\/*.gstatic.com; script-src 'nonce-b9ca5fc005d13ea8fb459641bdb0eaf35a6949253a6d3c5d67df9f6818c59c5f' 'strict-dynamic' 'report-sample' 'self' https:\/\/*.icfcdn.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/*.googleapis.com; style-src 'self' 'nonce-b9ca5fc005d13ea8fb459641bdb0eaf35a6949253a6d3c5d67df9f6818c59c5f' 'report-sample' https:\/\/fonts.googleapis.com; style-src-elem 'unsafe-inline' 'report-sample' https:\/\/fonts.googleapis.com; style-src-attr 'unsafe-inline' 'report-sample'; font-src https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com; img-src 'self' blob: https:\/\/*.gstatic.com https:\/\/*.nsimg.net https:\/\/*.icfcdn.com; media-src 'self' data: https:\/\/cdn.plyr.io https:\/\/*.nsimg.net https:\/\/live.metamediafonts.com; frame-src https:; frame-ancestors 'self'; base-uri 'self'; report-to report-only; report-uri \/reporting\/cspReport?reportOnly","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/vlibras.gov.br https:\/\/*.vlibras.gov.br; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/unpkg.com; font-src 'self' https:\/\/fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/*.vlibras.gov.br; frame-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'","count":1},{"content-security-policy-report-only":" script-src 'nonce-V3hgCqXy7kLM2HJP68yJmw' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https:\/\/csp.withgoogle.com\/csp\/static-on-bigtable; base-uri 'none'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/static.cloudflareinsights.com https:\/\/static.contactlab.it https:\/\/ingestion.webanalytics.italia.it https:\/\/www.youtube.com; object-src 'none'; style-src 'self' 'unsafe-inline' https:\/\/static.cineca.it; img-src 'self' data: https:; media-src 'self'; frame-src 'self'; frame-ancestors 'self'; child-src 'self'; font-src 'self' data: https:\/\/static.cineca.it; connect-src 'self' https:\/\/static.cloudflareinsights.com https:\/\/ingestion.webanalytics.italia.it https:\/\/www.youtube.com; report-uri \/report-csp-violation","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.payu.in https:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' *.payu.in www.facebook.com *.apitest.payu.in *.google.com *.clarity.ms 'self' 'unsafe-inline'; frame-ancestors 'self' *.payu.in 'self'; frame-src fast.amc.demdex.net https:\/\/*.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net https:\/\/*.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https:\/\/*.facebook.com *.criteo.com\/ *.sandbox.paypal.com *.paypalobjects.com *.criteo.net *.apitest.payu.in https:\/\/fast.amc.demdex.net https:\/\/geostag.cardinalcommerce.com https:\/\/geo.cardinalcommerce.com https:\/\/1eafstag.cardinalcommerce.com https:\/\/1eaf.cardinalcommerce.com https:\/\/centinelapistag.cardinalcommerce.com https:\/\/centinelapi.cardinalcommerce.com https:\/\/bid.g.doubleclick.net https:\/\/*.demdex.net https:\/\/*.youtube-nocookie.com https:\/\/www.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/pilot-payflowlink.paypal.com https:\/\/www.paypalobjects.com https:\/\/player.vimeo.com https:\/\/www.google.com https:\/\/*.braintreegateway.com https:\/\/*.paypal.com https:\/\/www.googletagmanager.com https:\/\/*.criteo.com https:\/\/*.criteo.net https:\/\/*.apitest.payu.in https:\/\/*.payu.in https:\/\/api.razorpay.com https:\/\/*.pickrr.com https:\/\/*.shiprocket.in https:\/\/cdn.lightwidget.com cdn.lightwidget.com *.clarity.ms 'self' *.payu.in api.razorpay.com *.pickrr.com *.shiprocket.in 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net maps.gstatic.com *.muftijeans.in *.google.co.in *.google.com *.bing.com *.pinterest.com *.criteo.com *.bidswitch.net *.doubleclick.net *.adnxs.com *.socdm.com *.casalemedia.com *.adingo.jp *.360yield.com *.rlcdn.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.smartadserver.com *.taboola.com *.teads.tv *.clmbtech.com *.3lift.com *.1rx.io *.media.net *.unrulymedia.com *.www.googleadservices.com *.www.google.com *.facebook.com *.cloudfront.net *.dmxleo.com *.facebook.net *.agkn.com cdn.lightwidget.com *.clarity.ms https:\/\/firebasestorage.googleapis.com flagpedia.net *.payu.in cdn.razorpay.com *.pickrr.com *.netlify.app aa.agkn.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.youtube.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page maps.googleapis.com *.gstatic.com *.facebook.com *.criteo.com *.criteo.net https:\/\/www.google.com\/recaptcha\/api2\/webworker.js *.muftijeans.in *.hotjar.com https:\/\/static.hotjar.com *.googleapis.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.vimeo.com https:\/\/www.googletagmanager.com *.smartlook.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.google.co.in *.www.google.co.in *.facebook.net cdn.lightwidget.com *.clarity.ms *.avada.io *.shopify.com *.payu.in checkout.razorpay.com *.pickrr.com *.netlify.app *.shiprocket.in https:\/\/otpless.com *.shiprocket.com connect.facebook.net *.adobedtm.com sc-static.net tr.snapchat.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.coolzcloud.com *.amazonaws.com *.googletagmanager.com cdn.lightwidget.com *.clarity.ms *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.payu.in *.pickrr.com *.netlify.app *.shiprocket.com https:\/\/fonts.googleapis.com 'self' 'unsafe-inline'; object-src *.muftijeans.in *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.clarity.ms 'self' 'unsafe-inline'; media-src *.adobe.com *.muftijeans.in 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.doubleclick.net *.facebook.com *.googleapis.com *.criteo.com *.pinterest.com *.facebook.net *.hotjar.com *.hotjar.io wss:\/\/ws.hotjar.com *.sandbox.paypal.com *.paypalobjects.com *.google.co.in *.www.google.co.in *.clarity.ms https:\/\/get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.payu.in lumberjack.razorpay.com lumberjack-metrics.razorpay.com *.pickrr.com *.netlify.app *.fastrr.com *.shiprocket.in https:\/\/cred.club *.razorpay.com tr.snapchat.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'   https:\/\/www.betpassion.info   https:\/\/www.googletagmanager.com   https:\/\/www.google-analytics.com   https:\/\/connect.facebook.net   https:\/\/js-eu1.hs-scripts.com   https:\/\/js-eu1.hscollectedforms.net   https:\/\/js-eu1.hs-banner.com   https:\/\/js-eu1.hs-analytics.net   https:\/\/an.gr-wcon.com   https:\/\/us-an.gr-cdn.com   https:\/\/microgame.askmesuite.com   https:\/\/cdn.jsdelivr.net   https:\/\/cdnjs.cloudflare.com   https:\/\/cdn.cookielaw.org   https:\/\/s.go-mpulse.net   https:\/\/www.datadoghq-browser-agent.com   https:\/\/www.gstatic.com   https:\/\/secure.safecharge.com   https:\/\/cdn.safecharge.com   https:\/\/googleads.g.doubleclick.net;  style-src 'self' 'unsafe-inline'   https:\/\/fonts.googleapis.com   https:\/\/cdn.cookielaw.org;  font-src 'self' data: https:\/\/fonts.gstatic.com; img-src 'self' blob: data:   https:\/\/www.googletagmanager.com   https:\/\/www.google.com   https:\/\/www.google.it   https:\/\/www.google.de   https:\/\/www.google.fr   https:\/\/www.google.es   https:\/\/www.google.co.uk   https:\/\/www.google.ch   https:\/\/www.google.at   https:\/\/www.google.be   https:\/\/www.facebook.com   https:\/\/connect.facebook.net   https:\/\/*.amazonaws.com   https:\/\/microgame.askmesuite.com   https:\/\/*.betpassion.it   https:\/\/betpassion.info   https:\/\/*.gstatic.com   https:\/\/translate.google.com;  media-src 'self'   https:\/\/microgame.askmesuite.com;  worker-src blob:; connect-src 'self'   https:\/\/www.google.com   https:\/\/www.google.it   https:\/\/region1.analytics.google.com   https:\/\/region1.google-analytics.com   https:\/\/analytics.google.com   https:\/\/www.googletagmanager.com   https:\/\/www.google-analytics.com   https:\/\/www.googleadservices.com   https:\/\/ad.doubleclick.net   https:\/\/stats.g.doubleclick.net   https:\/\/translate.googleapis.com   https:\/\/connect.facebook.net   https:\/\/www.facebook.com   https:\/\/js-eu1.hs-scripts.com   https:\/\/js-eu1.hscollectedforms.net   https:\/\/js-eu1.hs-analytics.net   https:\/\/betpassion.info   https:\/\/*.akstat.io   https:\/\/*.go-mpulse.net   https:\/\/*.akamaihd.net   https:\/\/browser-intake-datadoghq.eu   https:\/\/microgame.askmesuite.com   wss:\/\/microgame.askmesuite.com   https:\/\/webapi.microgame.it   https:\/\/mpc2-prod-25-is5qnl632q-wl.a.run.app   https:\/\/firestore.googleapis.com   https:\/\/mainwebapi.papigames.bet.br   https:\/\/*.ecs.us-east-1.on.aws   https:\/\/m3.aircash.eu;  frame-src 'self' intent:   https:\/\/*.safecharge.com   https:\/\/acs.nexigroup.com   https:\/\/3ds.nexigroup.com   https:\/\/paye.netsgroup.com   https:\/\/www.paypal.com   https:\/\/www.googletagmanager.com   https:\/\/*.betpassion.it   https:\/\/*.poste.it   https:\/\/web.vaservices.eu   https:\/\/mywallet-sandbox.admiralpay.it   https:\/\/*.sportradar.com   https:\/\/*.microgame.it   https:\/\/*.skrill.com   https:\/\/*.giocodigitale.it   https:\/\/*.evo-games.com   https:\/\/www.facebook.com   https:\/\/casinotournamentsmodule-release-prod-betpassion.g3x.io   https:\/\/game-box-v2-master.888drafts.com;  frame-ancestors 'self' https:\/\/mokabingo3.giocodigitale.it; object-src 'none'; base-uri 'self'; form-action 'self'   https:\/\/*.safecharge.com   https:\/\/resources.betpassion.it   https:\/\/www.facebook.com;  report-uri https:\/\/csp-report.microgamenewbos.it\/csp-report;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.googleapis.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/connect.facebook.net https:\/\/js.arcgis.com blob:; style-src 'self' 'unsafe-inline' https:\/\/js.arcgis.com https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https: http:; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/js.arcgis.com; connect-src 'self' data: https:\/\/www.axon-testing-dnssec-enabled.com https: http: wss: ws:; frame-src 'self' https:\/\/*.evidence.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.google.com https:\/\/www.facebook.com https:\/\/*.dronesense.com https:\/\/*.dronesense.co.uk https:\/\/*.dronesense.ca https:\/\/*.dronesense.eu https:\/\/*.dronesense.se; media-src 'self' blob: https: http:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'none';","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.adtrafficquality.google https:\/\/pagead2.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/partner.googleadservices.com https:\/\/adservice.google.com https:\/\/www.gstatic.com https:\/\/www.googleapis.com https:\/\/apis.google.com https:\/\/js.stripe.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https: https:\/\/gifftme-pull.b-cdn.net; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/www.gstatic.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/*.googleapis.com https:\/\/*.firebaseio.com https:\/\/*.firebasedatabase.app https:\/\/securetoken.googleapis.com https:\/\/identitytoolkit.googleapis.com https:\/\/firebaseinstallations.googleapis.com https:\/\/firebaseappcheck.googleapis.com https:\/\/firestore.googleapis.com https:\/\/fonts.gstatic.com https:\/\/api.stripe.com https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/gifftme-pull.b-cdn.net; frame-src 'self' https:\/\/js.stripe.com https:\/\/hooks.stripe.com https:\/\/*.google.com https:\/\/*.adtrafficquality.google https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com; worker-src 'self' blob:; manifest-src 'self'; media-src 'self' blob: https: https:\/\/gifftme-pull.b-cdn.net; form-action 'self' https:\/\/checkout.stripe.com;","count":1},{"content-security-policy-report-only":" base-uri 'none'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-pbiGk09tqFTE\/QcIWht3RQ=='","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klarnacdn.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.vaude.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.klarna.com js.mollie.com td.doubleclick.net app.usercentrics.eu web.cmp.usercentrics.eu v1.api.service.cmp.usercentrics.eu production.neocomapp.com agent.api.production.neocomapp.com *.outtra.com *.googletagmanager.com *.fls.doubleclick.net *.amazon-adsystem.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com magefan.com cm.magefan.com *.disqus.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https:\/\/img.youtube.com https:\/\/www.mollie.com *.hsforms.net *.hsforms.com 'self' data: www.vaude.com vaude.localhost https:\/\/vaude.localhost\/ www.google.de app.usercentrics.eu web.cmp.usercentrics.eu v1.api.service.cmp.usercentrics.eu uct.service.usercentrics.eu *.equalweb.com production.neocomapp.com cdn.neocomapp.com *.weglot.com ad.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.disqus.com https:\/\/cdn.jsdelivr.net *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com js.mollie.com *.hsforms.net *.hsforms.com *.gstatic.com *.abtasty.com ion.vaude.com id.vaude.com analytics.vaude.com js-agent.newrelic.com vaude.matomo.cloud app.usercentrics.eu web.cmp.usercentrics.eu v1.api.service.cmp.usercentrics.eu api.usercentrics.eu graphql.usercentrics.eu privacy-proxy.usercentrics.eu *.scarabresearch.com *.equalweb.com cdn.matomo.cloud cdn.scarabresearch.com static.scarabresearch.com webchannel-content.eservice.emarsys.net production.neocomapp.com cdn.neocomapp.com https:\/\/vaude.homepagerecruiter.de https:\/\/cdn.tailwindcss.com https:\/\/production.neocomapp.com *.weglot.com *.outtra.com *.amazon-adsystem.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/cdn.jsdelivr.net *.klarnacdn.net *.googleapis.com *.gstatic.com *.equalweb.com production.neocomapp.com *.weglot.com *.outtra.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.abtasty.com analytics.vaude.com bam.nr-data.net pagead2.googlesyndication.com vaude.matomo.cloud app.usercentrics.eu web.cmp.usercentrics.eu v1.api.service.cmp.usercentrics.eu api.usercentrics.eu graphql.usercentrics.eu privacy-proxy.usercentrics.eu aggregator.service.usercentrics.eu consent-api.service.consent.usercentrics.eu *.scarabresearch.com *.equalweb.com cdn.matomo.cloud cdn.scarabresearch.com static.scarabresearch.com webchannel-content.eservice.emarsys.net production.neocomapp.com api.neocomapp.com agent.api.production.neocomapp.com https:\/\/production.neocomapp.com https:\/\/prompts.api.production.neocomapp.com *.weglot.com https:\/\/cdn-api-weglot.com *.outtra.com *.amazon-adsystem.com *.paa-reporting-advertising.amazon 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss:; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:;","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss: blob:; frame-src 'self' https: blob:; worker-src 'self' blob:; media-src 'self' https: blob:; upgrade-insecure-requests;","count":1},{"content-security-policy-report-only":" default-src 'self';  script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/events.framer.com\/script https:\/\/framer.com https:\/\/framerusercontent.com https:\/\/www.googletagmanager.com\/gtm.js https:\/\/www.googletagmanager.com\/gtag\/js;  style-src 'report-sample' 'self' 'unsafe-inline';  object-src 'none';  base-uri 'self';  connect-src 'self' https:\/\/events.framer.com https:\/\/lottie.host https:\/\/region1.google-analytics.com https:\/\/website-data-beta.vercel.app https:\/\/www.google-analytics.com;  font-src 'self' https:\/\/cdnjs.cloudflare.com https:\/\/framerusercontent.com;  frame-src 'self' https:\/\/embeds.beehiiv.com https:\/\/framer.com;  img-src 'self' data: https:\/\/framerusercontent.com https:\/\/www.googletagmanager.com https:\/\/yastatic.net;  manifest-src 'self';  media-src 'self' https:\/\/framerusercontent.com;  worker-src 'none';  frame-ancestors 'self';  report-uri https:\/\/68af03dee39705929f59b2eb.endpoint.csper.io?builder=true&v=9;","count":1},{"content-security-policy-report-only":" base-uri 'self'; connect-src 'self' https:\/\/*.google.com https:\/\/boards-api.greenhouse.io https:\/\/images.prismic.io https:\/\/o43253.ingest.sentry.io https:\/\/pagead2.googlesyndication.com https:\/\/www.gstatic.com https:\/\/bat.bing.com https:\/\/*.clarity.ms; default-src 'self'; font-src 'self'; form-action 'none'; frame-ancestors 'none'; frame-src https:\/\/*.enterprise.ada.com https:\/\/boards.greenhouse.io https:\/\/insight.adsrvr.org https:\/\/td.doubleclick.net https:\/\/tpc.googlesyndication.com https:\/\/www.youtube-nocookie.com; img-src 'self' data: https:\/\/adahealth.cdn.prismic.io https:\/\/assets.ada.com https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net https:\/\/images.prismic.io https:\/\/prismic-io.s3.amazonaws.com https:\/\/www.facebook.com https:\/\/pagead2.googlesyndication.com https:\/\/adservice.google.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/bat.bing.com https:\/\/*.clarity.ms; manifest-src 'self'; media-src 'self' https:\/\/adahealth.cdn.prismic.io; script-src 'self' 'unsafe-inline' https:\/\/boards.greenhouse.io https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net https:\/\/js.adsrvr.org https:\/\/tpc.googlesyndication.com https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/bat.bing.com https:\/\/www.clarity.ms; style-src 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.farziengineer.co https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/connect.facebook.net https:\/\/*.cloudfront.net https:\/\/*.clevertap.com https:\/\/*.clevertap-prod.com https:\/\/*.gokwik.co https:\/\/*.razorpay.com https:\/\/checkout.razorpay.com https:\/\/*.otpless.com https:\/\/*.quinn.live https:\/\/*.fwcdn3.com https:\/\/admin.revenuehunt.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.juspay.in https:\/\/apis.google.com https:\/\/s3.ap-south-1.amazonaws.com https:\/\/s3-eu-west-1.amazonaws.com https:\/\/capi-automation.s3.us-east-2.amazonaws.com https:\/\/*.limechat.ai https:\/\/pagead2.googlesyndication.com https:\/\/adservice.google.com https:\/\/*.hotstar.com https:\/\/*.clarity.ms https:\/\/bat.bing.com https:\/\/cdn.jsdelivr.net https:\/\/translate.googleapis.com https:\/\/translate.google.com https:\/\/static.wizrocket.com https:\/\/*.n7.io https:\/\/*.adtrafficquality.google; connect-src 'self' https:\/\/*.farziengineer.co https:\/\/api.wizzy.ai https:\/\/*.quinn.live https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/www.google.com https:\/\/*.googleadservices.com https:\/\/*.doubleclick.net https:\/\/eu1.api.clevertap.com https:\/\/in1.api.clevertap.com https:\/\/*.clevertap.com https:\/\/*.clevertap-prod.com https:\/\/*.razorpay.com https:\/\/api.razorpay.com https:\/\/*.gokwik.co https:\/\/*.gokwik.io https:\/\/*.vwo.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.fireworktv.com https:\/\/*.fwpixel.com https:\/\/*.otpless.com https:\/\/*.juspay.in https:\/\/*.limechat.ai https:\/\/pagead2.googlesyndication.com https:\/\/adservice.google.com https:\/\/*.hotstar.com https:\/\/*.clarity.ms https:\/\/bat.bing.com https:\/\/*.adtrafficquality.google https:\/\/mpc2-prod-26-is5qnl632q-uc.a.run.app https:\/\/translate.googleapis.com https:\/\/*.n7.io https:\/\/*.togethr.club; img-src 'self' data: blob: https:\/\/*.farziengineer.co https:\/\/images.plixlife.com https:\/\/*.imgix.net https:\/\/assets.snapmint.com https:\/\/s3.ap-south-1.amazonaws.com https:\/\/thank-you-banner-images.s3.eu-north-1.amazonaws.com https:\/\/cdn.shopify.com https:\/\/www.facebook.com https:\/\/*.doubleclick.net https:\/\/www.google-analytics.com https:\/\/*.google.co.in https:\/\/*.googleadservices.com https:\/\/*.adtrafficquality.google https:\/\/*.fireworktv.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.vwo.com https:\/\/*.gokwik.co https:\/\/*.hotstar.com https:\/\/bat.bing.com https:\/\/*.clarity.ms https:\/\/*.togethr.club; frame-src 'self' https:\/\/checkout.razorpay.com https:\/\/api.razorpay.com https:\/\/*.razorpay.com https:\/\/*.gokwik.co https:\/\/*.otpless.com https:\/\/*.quinn.live https:\/\/*.fireworktv.com https:\/\/*.juspay.in https:\/\/www.google.com https:\/\/www.facebook.com https:\/\/*.doubleclick.net https:\/\/*.adtrafficquality.google; style-src 'self' 'unsafe-inline' https:\/\/*.farziengineer.co https:\/\/fonts.googleapis.com https:\/\/use.typekit.net; font-src 'self' data: https:\/\/*.farziengineer.co https:\/\/fonts.gstatic.com https:\/\/use.typekit.net https:\/\/*.typekit.net; media-src 'self' blob: https:\/\/*.farziengineer.co https:\/\/*.quinn.live https:\/\/*.fireworktv.com https:\/\/*.fwcdn3.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self';","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com self data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * https:\/\/store.plumrocket.com pal-test.adyen.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ * self *.doubleclick.net *.criteo.com *.easydmp.net *.snapchat.com https:\/\/store.plumrocket.com https:\/\/accounts.google.com checkoutshopper-test.adyen.com pal-test.adyen.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * self *.bing.com *.paypal.com *.google.fr *.electrodepot.fr *.electrodepot.be *.electrodepot.es *.cookielaw.org *.snapchat.com checkoutshopper-test.adyen.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com self sc-static.net *.abtasty.com *.jsdelivr.net *.gstatic.com *.facebook.net *.tiktok.com *.googleapis.com *.easydmp.net *.vzbl.eu *.aticdn.net *.m1by1.com *.woosmap.com *.doubleclick.net *.cookielaw.org *.snapchat.com *.valiuz.com *.mediarithmics.com *.prediggo.services https:\/\/accounts.google.com checkoutshopper-test.adyen.com 'self' 'unsafe-eval' 'nonce-MW92MjFiczh5YXV6cXlwYWJsNzVhbXdrdHR0a2hlMzg=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k\/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY\/CkTMBhjNhwPvglpYumjx31B4fjkY8='; style-src *.adobe.com fonts.googleapis.com *.cash.app self *.gstatic.com *.electrodepot.fr *.electrodepot.be *.electrodepot.es *.snapchat.com https:\/\/accounts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * self *.snapchat.com *.cookielaw.org *.abtasty.com *.googleapis.com *.vzbl.eu *.criteo.com *.easydmp.net *.paypal.com *.xiti.com *.valiuz.com *.doubleclick.net *.mediarithmics.com https:\/\/accounts.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.electrodepot.fr *.electrodepot.be *.electrodepot.es *.bing.com *.criteo.net *.snapchat.com *.netvigie.com *.xiti.com *.valiuz.com *.googletagmanager.com *.google.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-9esTsxq9gJvXLFXtaiUwAQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.shockmedia.com.ar https:\/\/www.youtube.com https:\/\/s.ytimg.com https:\/\/platform.twitter.com https:\/\/connect.facebook.net https:\/\/www.instagram.com https:\/\/*.gatekeeperconsent.com https:\/\/*.ezojs.com https:\/\/ezoicanalytics.com https:\/\/*.ezoic.net https:\/\/*.ezodn.com https:\/\/pagead2.googlesyndication.com https:\/\/securepubads.g.doubleclick.net https:\/\/www.googletagservices.com https:\/\/www.googletagmanager.com https:\/\/*.adtrafficquality.google https:\/\/fundingchoicesmessages.google.com https:\/\/*.cleverwebserver.com https:\/\/*.clvrads.com https:\/\/cads.adsboosters.xyz https:\/\/static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; font-src 'self' data: https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/imbtgnvsoydhotevzcfu.supabase.co wss:\/\/imbtgnvsoydhotevzcfu.supabase.co https:\/\/*.shockmedia.com.ar https:\/\/*.gatekeeperconsent.com https:\/\/*.ezojs.com https:\/\/ezoicanalytics.com https:\/\/*.ezoic.net https:\/\/*.ezodn.com https:\/\/pagead2.googlesyndication.com https:\/\/securepubads.g.doubleclick.net https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com https:\/\/*.adtrafficquality.google https:\/\/csi.gstatic.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/cloudflareinsights.com https:\/\/fundingchoicesmessages.google.com https:\/\/*.cleverwebserver.com https:\/\/*.clvrads.com https:\/\/cads.adsboosters.xyz; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/www.facebook.com https:\/\/www.instagram.com https:\/\/platform.twitter.com https:\/\/t.me https:\/\/*.ezodn.com https:\/\/googleads.g.doubleclick.net https:\/\/*.doubleclick.net https:\/\/tpc.googlesyndication.com https:\/\/*.googlesyndication.com https:\/\/*.adtrafficquality.google https:\/\/www.google.com https:\/\/*.cleverwebserver.com https:\/\/*.clvrads.com https:\/\/cleveradvertising.com","count":1},{"content-security-policy-report-only":" default-src 'self'; img-src 'self' *.taiko-p.jp data: https:\/\/www.googletagmanager.com\/ https:\/\/www.google.co.jp\/ https:\/\/cdn-au.onetrust.com\/; style-src 'self' 'unsafe-inline'; script-src 'self' 'nonce-6a9a87bc2ff8b' *\/gtm.js https:\/\/www.googletagmanager.com\/ https:\/\/cdn-au.onetrust.com\/; connect-src *\/ajax\/ https:\/\/stats.g.doubleclick.net\/ https:\/\/cdn-au.onetrust.com\/ https:\/\/www.google-analytics.com https:\/\/geolocation.onetrust.com\/ https:\/\/privacyportal-au.onetrust.com\/ https:\/\/analytics.google.com\/ https:\/\/www.google.co.jp\/; report-uri csp_report.php;","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https:\/\/t.diffchecker.com https:\/\/accounts.google.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/assets.calendly.com https:\/\/cloudimanage.com https:\/\/js.braintreegateway.com https:\/\/assets.braintreegateway.com https:\/\/*.paypal.com https:\/\/www.paypalobjects.com https:\/\/songbird.cardinalcommerce.com https:\/\/*.cardinaltrusted.com; style-src 'self' 'unsafe-inline' https:\/\/accounts.google.com https:\/\/assets.calendly.com https:\/\/assets.braintreegateway.com https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:\/\/use.typekit.net https:\/\/fonts.gstatic.com; connect-src 'self' blob: https:\/\/api.diffchecker.com https:\/\/t.diffchecker.com https:\/\/replay-proxy.diffchecker.com wss:\/\/replay-proxy.diffchecker.com https:\/\/harper-bucket.diffchecker.com https:\/\/ocr-models.diffchecker.com https:\/\/*.r2.cloudflarestorage.com https:\/\/sentry.io https:\/\/accounts.google.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/srv.buysellads.com https:\/\/www.google.com https:\/\/www.google.ad https:\/\/www.google.ae https:\/\/www.google.com.af https:\/\/www.google.com.ag https:\/\/www.google.al https:\/\/www.google.am https:\/\/www.google.co.ao https:\/\/www.google.com.ar https:\/\/www.google.as https:\/\/www.google.at https:\/\/www.google.com.au https:\/\/www.google.az https:\/\/www.google.ba https:\/\/www.google.com.bd https:\/\/www.google.be https:\/\/www.google.bf https:\/\/www.google.bg https:\/\/www.google.com.bh https:\/\/www.google.bi https:\/\/www.google.bj https:\/\/www.google.com.bn https:\/\/www.google.com.bo https:\/\/www.google.com.br https:\/\/www.google.bs https:\/\/www.google.bt https:\/\/www.google.co.bw https:\/\/www.google.by https:\/\/www.google.com.bz https:\/\/www.google.ca https:\/\/www.google.cd https:\/\/www.google.cf https:\/\/www.google.cg https:\/\/www.google.ch https:\/\/www.google.ci https:\/\/www.google.co.ck https:\/\/www.google.cl https:\/\/www.google.cm https:\/\/www.google.cn https:\/\/www.google.com.co https:\/\/www.google.co.cr https:\/\/www.google.com.cu https:\/\/www.google.cv https:\/\/www.google.com.cy https:\/\/www.google.cz https:\/\/www.google.de https:\/\/www.google.dj https:\/\/www.google.dk https:\/\/www.google.dm https:\/\/www.google.com.do https:\/\/www.google.dz https:\/\/www.google.com.ec https:\/\/www.google.ee https:\/\/www.google.com.eg https:\/\/www.google.es https:\/\/www.google.com.et https:\/\/www.google.fi https:\/\/www.google.com.fj https:\/\/www.google.fm https:\/\/www.google.fr https:\/\/www.google.ga https:\/\/www.google.ge https:\/\/www.google.gg https:\/\/www.google.com.gh https:\/\/www.google.com.gi https:\/\/www.google.gl https:\/\/www.google.gm https:\/\/www.google.gr https:\/\/www.google.com.gt https:\/\/www.google.gy https:\/\/www.google.com.hk https:\/\/www.google.hn https:\/\/www.google.hr https:\/\/www.google.ht https:\/\/www.google.hu https:\/\/www.google.co.id https:\/\/www.google.ie https:\/\/www.google.co.il https:\/\/www.google.im https:\/\/www.google.co.in https:\/\/www.google.iq https:\/\/www.google.is https:\/\/www.google.it https:\/\/www.google.je https:\/\/www.google.com.jm https:\/\/www.google.jo https:\/\/www.google.co.jp https:\/\/www.google.co.ke https:\/\/www.google.com.kh https:\/\/www.google.ki https:\/\/www.google.kg https:\/\/www.google.co.kr https:\/\/www.google.com.kw https:\/\/www.google.kz https:\/\/www.google.la https:\/\/www.google.com.lb https:\/\/www.google.li https:\/\/www.google.lk https:\/\/www.google.co.ls https:\/\/www.google.lt https:\/\/www.google.lu https:\/\/www.google.lv https:\/\/www.google.com.ly https:\/\/www.google.co.ma https:\/\/www.google.md https:\/\/www.google.me https:\/\/www.google.mg https:\/\/www.google.mk https:\/\/www.google.ml https:\/\/www.google.com.mm https:\/\/www.google.mn https:\/\/www.google.com.mt https:\/\/www.google.mu https:\/\/www.google.mv https:\/\/www.google.mw https:\/\/www.google.com.mx https:\/\/www.google.com.my https:\/\/www.google.co.mz https:\/\/www.google.com.na https:\/\/www.google.com.ng https:\/\/www.google.com.ni https:\/\/www.google.ne https:\/\/www.google.nl https:\/\/www.google.no https:\/\/www.google.com.np https:\/\/www.google.nr https:\/\/www.google.nu https:\/\/www.google.co.nz https:\/\/www.google.com.om https:\/\/www.google.com.pa https:\/\/www.google.com.pe https:\/\/www.google.com.pg https:\/\/www.google.com.ph https:\/\/www.google.com.pk https:\/\/www.google.pl https:\/\/www.google.pn https:\/\/www.google.com.pr https:\/\/www.google.ps https:\/\/www.google.pt https:\/\/www.google.com.py https:\/\/www.google.com.qa https:\/\/www.google.ro https:\/\/www.google.ru https:\/\/www.google.rw https:\/\/www.google.com.sa https:\/\/www.google.com.sb https:\/\/www.google.sc https:\/\/www.google.se https:\/\/www.google.com.sg https:\/\/www.google.sh https:\/\/www.google.si https:\/\/www.google.sk https:\/\/www.google.com.sl https:\/\/www.google.sn https:\/\/www.google.so https:\/\/www.google.sm https:\/\/www.google.sr https:\/\/www.google.st https:\/\/www.google.com.sv https:\/\/www.google.td https:\/\/www.google.tg https:\/\/www.google.co.th https:\/\/www.google.com.tj https:\/\/www.google.tl https:\/\/www.google.tm https:\/\/www.google.tn https:\/\/www.google.to https:\/\/www.google.com.tr https:\/\/www.google.tt https:\/\/www.google.com.tw https:\/\/www.google.co.tz https:\/\/www.google.com.ua https:\/\/www.google.co.ug https:\/\/www.google.co.uk https:\/\/www.google.com.uy https:\/\/www.google.co.uz https:\/\/www.google.com.vc https:\/\/www.google.co.ve https:\/\/www.google.co.vi https:\/\/www.google.com.vn https:\/\/www.google.vu https:\/\/www.google.ws https:\/\/www.google.rs https:\/\/www.google.co.za https:\/\/www.google.co.zm https:\/\/www.google.co.zw https:\/\/www.google.cat https:\/\/www.gstatic.com https:\/\/calendly.com https:\/\/*.braintreegateway.com https:\/\/*.braintree-api.com https:\/\/*.paypal.com https:\/\/*.cardinalcommerce.com https:\/\/*.cardinaltrusted.com https:\/\/kg668dbov0.execute-api.us-east-1.amazonaws.com; frame-src 'self' https:\/\/accounts.google.com https:\/\/www.google.com https:\/\/calendly.com https:\/\/assets.braintreegateway.com https:\/\/*.paypal.com https:\/\/*.cardinalcommerce.com; worker-src 'self' blob:; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https:\/\/api-gw-v4.dev.gokwik.io https:\/\/sandbox.pdp.gokwik.co https:\/\/pdp.gokwik.co *.adobe.com *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.jsdelivr.net unpkg.com *.kapturecrm.com *.wizzy.ai *.gozayaan.com *.googletagmanager.com *.supabase.co *.hotjar.com swopstore.com script.google.com *.facebook.net *.matomo.cloud *.soch.com *.bing.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.jsdelivr.net unpkg.com *.kapturecrm.com *.wizzy.ai *.gozayaan.com *.googletagmanager.com *.supabase.co *.hotjar.com swopstore.com script.google.com *.facebook.net *.matomo.cloud *.soch.com *.bing.com api.razorpay.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com * 'self' 'unsafe-inline'; img-src *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com https:\/\/api-gw-v4.dev.gokwik.io https:\/\/sandbox.pdp.gokwik.co https:\/\/pdp.gokwik.co *.adtrafficquality.google *.clarity.ms *.cardinalcommerce.com *.ccdc02.com *.jsdelivr.net unpkg.com *.kapturecrm.com *.wizzy.ai *.gozayaan.com *.googletagmanager.com *.supabase.co *.hotjar.com swopstore.com script.google.com *.facebook.net *.matomo.cloud *.soch.com *.bing.com cdn.razorpay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.magento-datasolutions.com *.googleapis.com *.gstatic.com http:\/\/sp-kf-collector.dev.gokwik.io https:\/\/api-gw-v4.dev.gokwik.io https:\/\/sandbox.pdp.gokwik.co https:\/\/pdp.gokwik.co *.lightwidget.com *.artfut.com *.adtrafficquality.google *.googlesyndication.com s3-ap-southeast-1.amazonaws.com *.cloudflare.com *.clarity.ms *.vimeo.com *.mxpnl.com *.bing.com *.cardinalcommerce.com *.ccdc02.com *.jsdelivr.net unpkg.com *.kapturecrm.com *.wizzy.ai *.gozayaan.com *.googletagmanager.com *.supabase.co *.hotjar.com swopstore.com script.google.com *.facebook.net *.matomo.cloud *.soch.com cdn.jsdelivr.net checkout.razorpay.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.jsdelivr.net unpkg.com *.kapturecrm.com *.wizzy.ai *.gozayaan.com *.googletagmanager.com *.supabase.co *.hotjar.com swopstore.com script.google.com *.facebook.net *.matomo.cloud *.soch.com *.bing.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com http:\/\/sp-kf-collector.dev.gokwik.io https:\/\/api-gw-v4.dev.gokwik.io https:\/\/sandbox.pdp.gokwik.co https:\/\/pdp.gokwik.co *.onedirect.in *.adtrafficquality.google *.clarity.ms *.mixpanel.com *.adobe.com *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.jsdelivr.net unpkg.com *.kapturecrm.com *.wizzy.ai *.gozayaan.com *.googletagmanager.com *.supabase.co *.hotjar.com swopstore.com script.google.com *.facebook.net *.matomo.cloud *.soch.com *.bing.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com wss:\/\/sockets.wizzy.ai *.wizsearch.in wss:\/\/sockets.wizsearch.in 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: https:\/\/*.hubspot.com https:\/\/*.hubapi.com https:\/\/*.hsforms.com https:\/\/*.hs-scripts.com https:\/\/*.hscollectedforms.net https:\/\/*.hs-banner.com https:\/\/*.hubspotusercontent.com https:\/\/*.hubspotusercontent-eu1.net https:\/\/js.hs-analytics.net https:\/\/js.hsforms.net https:\/\/api.hsforms.com https:\/\/api.hubapi.com https:\/\/*.hsleadflows.net https:\/\/*.hsadspixel.net https:\/\/*.hs-web-analytics.net https:\/\/static.hsappstatic.net https:\/\/cdn2.hubspot.net https:\/\/cdn.hubspot.com https:\/\/*.cloudfront.net https:\/\/cdn.jsdelivr.net https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/stats.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/cdn.cookielaw.org https:\/\/www.youtube.com; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' https: data: blob:; font-src 'self' https: data:; frame-src 'self' https: data:; connect-src 'self' https: wss: https:\/\/www.cadburydessertscorner.com; media-src 'self' https: data: blob:; worker-src 'self' https: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' https:\/\/*.hubspot.com;","count":1},{"content-security-policy-report-only":" script-src 'self' *.fallcoweb.it fallcoweb.it *.portalenotarile.it portalenotarile.it 'unsafe-eval' 'nonce-qrrX+ZTQFTsDGrzZdcGbOEhPxmdVJNVLvjAcqn9GCds=' 'strict-dynamic' 'report-sample';  script-src-attr 'unsafe-inline' 'report-sample';  img-src http: https: data: blob: ;  object-src 'self' firma.fallcoweb.it firma-test.fallcoweb.it;  base-uri 'self';  frame-ancestors 'self' *.fallcoweb.it fallcoweb.it *.portalenotarile.it portalenotarile.it;  report-uri https:\/\/o4510754677194752.ingest.de.sentry.io\/api\/4510872859639888\/security\/?sentry_key=67749a8c401880af5dd5dacefaff505d;","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com fonts.googleapis.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com *.weltpixel.com https:\/\/*.google.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.wesupply.xyz https:\/\/wesupplylabs.com guarantee-cdn.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com *.doubleclick.net www.xtento.com *.yotpo.com https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com maps.googleapis.com maps.gstatic.com guarantee-cdn.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com *.yotpo.com dhv2ziothpgrr.cloudfront.net https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.certcapture.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com maps.googleapis.com get.geojs.io *.cloudflare.com guarantee-cdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net www.xtento.com cdn.xtento.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net https:\/\/cdn-scripts.signifyd.com https:\/\/cdn-scripts.signifyd.com\/api\/script-tag.js https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com https:\/\/static.klaviyo.com *.fontawesome.com https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.googleapis.com *.addtoany.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.yotpo.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com maps.googleapis.com http:\/\/dpm.demdex.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; media-src 'self' https: blob:; connect-src 'self' https: wss:; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" script-src 'nonce-X63S+VzoZk7LMGNmIuLwkA==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https:\/\/events.mercadolibre.com\/csp\/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=a7eeea49-8b79-4ad8-af3a-582d4fbd6007; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https:\/\/http2.mlstatic.com\/ https:\/\/mlstaticquic-a.akamaihd.net\/; frame-ancestors 'self' https:\/\/*.mercadolibre.cl:* https:\/\/*.mercadolibre.com:* https:\/\/*.mercadolibre.com.ve:* https:\/\/*.mercadolibre.com.ar:* https:\/\/*.mercadolivre.com.br:* https:\/\/*.mercadolibre.com.co:* https:\/\/*.mercadolibre.com.ec:* https:\/\/*.mercadolibre.com.mx:* https:\/\/*.mercadolibre.com.pe:* https:\/\/*.mercadolibre.com.uy:* https:\/\/*.mercadopago.cl:* https:\/\/*.mercadopago.com.ar:* https:\/\/*.mercadopago.com.br:* https:\/\/*.mercadopago.com.co:* https:\/\/*.mercadopago.com.mx:* https:\/\/*.mercadopago.com.pe:* https:\/\/*.mercadopago.com.uy:* https:\/\/*.mercadopago.com.ve:* https:\/\/*.mercadopago.com:* https:\/\/*.adminml.com:* https:\/\/*.mercadolibre.co.cr:* https:\/\/*.mercadolibre.com.pa:* https:\/\/*.mercadolibre.com.do:* https:\/\/*.mercadolibre.com.bo:* https:\/\/*.mercadolibre.com.py:* https:\/\/*.mercadolibre.com.gt:* https:\/\/*.mercadolibre.com.hn:* https:\/\/*.mercadolibre.com.ni:* https:\/\/*.mercadolibre.com.sv:* https:\/\/*.mercadopago.com.ec:* https:\/\/*.portalinmobiliario.com:* https:\/\/*.mercadolivre.com:*","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.iubenda.com cdn.iubenda.com www.googletagmanager.com *.googletagmanager.com www.google-analytics.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.googletagservices.com www.google.com accounts.google.com www.gstatic.com apis.google.com connect.facebook.net cdn.firstpromoter.com firstpromoter.com cdn-4.convertexperiments.com t.undetectable.ai analytics.aweber.com cdn.cgb.la public.reduxpayments.com va.vercel-scripts.com static.cloudflareinsights.com bat.bing.com bat.bing.net www.youtube.com s.ytimg.com googleads.g.doubleclick.net capi-automation.s3.us-east-2.amazonaws.com sc-static.net *.snapchat.com bzrcdn.openai.com bzr.openai.com static.hotjar.com script.hotjar.com *.hotjar.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.iubenda.com accounts.google.com static.hotjar.com script.hotjar.com; font-src 'self' data: fonts.gstatic.com *.iubenda.com script.hotjar.com; img-src 'self' data: blob: *.iubenda.com www.facebook.com *.facebook.com www.google-analytics.com *.google-analytics.com google.com www.google.com *.google.com *.google.com.br google.com.br *.google.de google.de *.google.fr google.fr *.google.es google.es *.google.it google.it *.google.nl google.nl *.google.pl google.pl *.google.pt google.pt *.google.co.uk google.co.uk *.google.co.jp google.co.jp *.google.co.kr google.co.kr *.google.co.in google.co.in *.google.co.id google.co.id *.google.com.mx google.com.mx *.google.com.au google.com.au *.google.com.ar google.com.ar *.google.ca google.ca www.googletagmanager.com *.googleadservices.com *.googlesyndication.com lh3.googleusercontent.com *.googleusercontent.com image.undetectable.ai static.undetectable.ai www.gstatic.com t.undetectable.ai cdn-4.convertexperiments.com analytics.aweber.com bat.bing.com bat.bing.net i.ytimg.com *.doubleclick.net sc-static.net *.snapchat.com bzrcdn.openai.com bzr.openai.com capig.stape.chat *.hotjar.com script.hotjar.com; connect-src 'self' *.iubenda.com www.google-analytics.com *.google-analytics.com region1.google-analytics.com analytics.google.com accounts.google.com google.com www.google.com *.google.com *.google.com.br google.com.br *.google.de google.de *.google.fr google.fr *.google.es google.es *.google.it google.it *.google.nl google.nl *.google.pl google.pl *.google.pt google.pt *.google.co.uk google.co.uk *.google.co.jp google.co.jp *.google.co.kr google.co.kr *.google.co.in google.co.in *.google.co.id google.co.id *.google.com.mx google.com.mx *.google.com.au google.com.au *.google.com.ar google.com.ar *.google.ca google.ca www.gstatic.com apis.google.com www.googleadservices.com graph.facebook.com *.facebook.com t.undetectable.ai cdn.firstpromoter.com firstpromoter.com cdn-4.convertexperiments.com analytics.aweber.com api.chargeblast.com vitals.vercel-insights.com vitals.vercel-analytics.com *.vercel-scripts.com static.cloudflareinsights.com bat.bing.com bat.bing.net *.doubleclick.net capi-automation.s3.us-east-2.amazonaws.com sc-static.net *.snapchat.com bzrcdn.openai.com bzr.openai.com capig.stape.chat *.hotjar.com *.hotjar.io wss:\/\/*.hotjar.com; frame-src 'self' *.iubenda.com cdn.iubenda.com www.googletagmanager.com td.doubleclick.net www.facebook.com accounts.google.com www.youtube.com www.youtube-nocookie.com *.snapchat.com sc-static.net bzrcdn.openai.com bzr.openai.com vars.hotjar.com *.hotjar.com; worker-src 'self' blob:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com *.googleapis.com fonts.googleapis.com *.fontawesome.com https:\/\/fonts.bunny.net https:\/\/cdnjs.cloudflare.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * https:\/\/plumrocket.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.instagram.com https:\/\/plumrocket.com *.dotdigital-pages.com *.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.trustpilot.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.cdninstagram.com *.googleapis.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com *.trackedlink.net magefan.com cm.magefan.com https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.cookielaw.org *.facebook.com *.google.fr data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.instagram.com *.googleapis.com *.gstatic.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.avada.io https:\/\/cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https:\/\/paul-marius.my.join-stories.com *.hsforms.net *.hsforms.com https:\/\/genki.paulmarius.fr https:\/\/genki.paulmarius.de https:\/\/genki.paulmarius.es https:\/\/genki.paulmarius.it https:\/\/genki.paulmarius.nl https:\/\/genki.paulmarius.com https:\/\/genki.paulmarius.us https:\/\/genki.paulmarius.co.uk *.bing.com *.clarity.ms https:\/\/js.klarna.com *.trustpilot.com *.cookielaw.org *.cookieless-data.com *.paulmarius.fr *.googlesyndication.com *.doubleclick.net *.apicit.net *.clickintext.net *.facebook.net *.googletagmanager.com apicit.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.fontawesome.com https:\/\/fonts.bunny.net https:\/\/fonts.googleapis.com https:\/\/cdnjs.cloudflare.com assets.braintreegateway.com *.googleapis.com *.gstatic.com https:\/\/x.klarnacdn.net *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.googleapis.com maps.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.cookielaw.org *.googlesyndication.com *.db-ip.com *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https:\/\/*.paribu.com https:\/\/*.blackswan.run https:\/\/www.googletagmanager.com; style-src 'self' 'unsafe-inline' https:\/\/*.paribu.com https:\/\/*.blackswan.run; img-src 'self' data: blob: https:\/\/*.paribu.com https:\/\/*.blackswan.run https:\/\/cdn.v5.maximus.team https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com; font-src 'self' data: https:\/\/*.paribu.com; connect-src 'self' https:\/\/*.paribu.com https:\/\/*.blackswan.run wss:\/\/*.paribu.com wss:\/\/*.blackswan.run https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com; worker-src 'self' blob:; frame-src https:\/\/www.googletagmanager.com; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self'","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-omOZ3TdrH9slLgMBQ5ANfw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" frame-ancestors 'self' https:\/\/www.lbma.org.uk; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.crazyegg.com *.googletagmanager.com *.clickdimensions.com https:\/\/prices.lbma.org.uk\/precious-metal-prices\/js\/app.js https:\/\/prices.lbma.org.uk\/precious-metal-prices\/js\/chunk-vendors.js player.vimeo.com https:\/\/cdn.jsdelivr.net\/npm\/fuse.js@6.4.3 https:\/\/code.jquery.com\/jquery-3.5.1.min.js *.cookiebot.com https:\/\/34izj6oc0dlymb5gp-1.a1.typesense.net https:\/\/lbma.ddev.site:3001; style-src 'self' 'unsafe-inline' *.typekit.net https:\/\/p.typekit.net *.lbma.org.uk https:\/\/code.highcharts.com\/css\/highcharts.css *.googleapis.com https:\/\/cdn.jsdelivr.net\/npm\/instantsearch.css@8.5.1\/themes\/satellite-min.css https:\/\/lbma.ddev.site:3001; worker-src 'self' blob:; img-src 'self' data: cdn.lbma.org.uk *.ads.linkedin.com *.doubleclick.net *.vod-progressive.akamaized.net  *.googletagmanager.com lbma.ams3.digitaloceanspaces.com i.vimeocdn.com *.cookiebot.com; media-src 'self' *.vimeo.com *.youtube.com  *.vod-progressive.akamaized.net *.lbma.org.uk; connect-src 'self' *.google-analytics.com px.ads.linkedin.com *.lbma.org.uk *.lpmcl.com *.crazyegg.com *.cookiebot.com 34izj6oc0dlymb5gp-1.a1.typesense.net; frame-src 'self' *.vimeo.com *.youtube.com *.doubleclick.net https:\/\/www.google.com\/ cdn.lbma.org.uk https:\/\/cdn.knightlab.com *.cookiebot.com; font-src 'self' use.typekit.net fonts.gstatic.com prices.lbma.org.uk;","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:;","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri https:\/\/csp.withgoogle.com\/csp\/uxe-owners-acl\/wallet_google","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com d1cwup7r903a1d.cloudfront.net https:\/\/embed.tawk.to https:\/\/acsbapp.com https:\/\/cdnjs.cloudflare.com\/ *.klaviyo.com\/ *.smartwaiver.com\/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.affirm.com *.affirm.ca connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https:\/\/plumrocket.com *.criteo.com https:\/\/static.criteo.net https:\/\/www.xtento.com *.divers-supply.com https:\/\/cdn.routeapp.io\/ *.tawk.to *.smartwaiver.com\/ https:\/\/smartwaiver.com\/ *.enterpriseapplicationdevelopers.com www.xtento.com https:\/\/*.online-metrix.net https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.affirm.com *.affirm.ca connect.bolt.com connect-sandbox.bolt.com s3-us-west-1.amazonaws.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ magefan.com cm.magefan.com *.disqus.com https:\/\/firebasestorage.googleapis.com *.google.com *.googleadservices.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.targetbay.com *.criteo.com *.criteo.net www.xtento.com https:\/\/www.catchmarketingservices.com www.google-analytics.com *.divers-supply.com https:\/\/targetbay.s3.amazonaws.com https:\/\/www.google.co.in *.routeapp.io *.yahoo.com https:\/\/criteo-sync.teads.tv https:\/\/cm.g.doubleclick.net https:\/\/s.ad.smaato.net https:\/\/ad.360yield.com https:\/\/r.casalemedia.com https:\/\/ups.analytics.yahoo.com https:\/\/eb2.3lift.com *.adnxs.com https:\/\/x.bidswitch.net https:\/\/sync-criteo.ads.yieldmo.com https:\/\/cdn.aralego.net https:\/\/ade.clmbtech.com https:\/\/simage2.pubmatic.com https:\/\/sync.outbrain.com https:\/\/c.bing.com https:\/\/exchange.mediavine.com https:\/\/idsync.rlcdn.com https:\/\/cs.adingo.jp https:\/\/adx.dable.io *.socdm.com https:\/\/sync-t1.taboola.com https:\/\/rtb-csync.smartadserver.com https:\/\/match.sharethrough.com https:\/\/pixel.rubiconproject.com https:\/\/contextual.media.net https:\/\/ads.stickyadstv.com https:\/\/sync.aralego.com https:\/\/bat.bing.com https:\/\/googleads.g.doubleclick.net *.emxdgt.com\/ https:\/\/tawk.link https:\/\/img-msg.tb-list.com *.googleapis.com *.bayengage.com https:\/\/acsbapp.com https:\/\/cm.adgrx.com\/ https:\/\/aa.agkn.com\/ https:\/\/tags.bluekai.com\/ https:\/\/trends.revcontent.com\/ https:\/\/jadserve.postrelease.com\/ https:\/\/i.liadm.com\/ https:\/\/matching.ivitrack.com\/ https:\/\/visitor.omnitagjs.com\/ https:\/\/partner.mediawallahscript.com\/ *.amazonaws.com *.tawk.to https:\/\/pixel.iceweb.io\/ *.yahoo.net https:\/\/public-prod-dspcookiematching.dmxleo.com https:\/\/c1.adform.net\/ https:\/\/d3k81ch9hvuctc.cloudfront.net\/ *.klaviyo.com\/ *.krxd.net\/ *.smartwaiver.com\/ https:\/\/smartwaiver.com\/ https:\/\/image-msg.tb-list.com\/ *.bolt.com\/ *.cloudflare.com *.enterpriseapplicationdevelopers.com *.figpii.com cdn.xtento.com https:\/\/imgs.signifyd.com https:\/\/*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.affirm.com *.affirm.ca connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.disqus.com *.avada.io *.shopify.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com cdn.routeapp.io fonts.googleapis.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com protect-lightning-bolt-widget.route.com d3od5si8vgcekb.cloudfront.net ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com *.divers-supply.com *.bayengage.com https:\/\/www.google-analytics.com https:\/\/embed.tawk.to https:\/\/acsbapp.com https:\/\/acsbap.com *.googleapis.com *.criteo.net *.criteo.com *.targetbay.com https:\/\/googleads.g.doubleclick.net https:\/\/cdn.jsdelivr.net *.bing.com https:\/\/polyfill.io\/ https:\/\/route-cdn.s3.amazonaws.com\/ https:\/\/pixel.iceweb.io\/ *.klaviyo.com\/ *.smartwaiver.com\/ https:\/\/smartwaiver.com\/ *.enterpriseapplicationdevelopers.com *.figpii.com *.fontawesome.com www.xtento.com cdn.xtento.com https:\/\/cdn-scripts.signifyd.com https:\/\/cdn-scripts.signifyd.com\/api\/script-tag.js https:\/\/imgs.signifyd.com https:\/\/h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/static.klaviyo.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com d1cwup7r903a1d.cloudfront.net 'self' 'unsafe-inline' https:\/\/www.divers-supply.com\/ https:\/\/embed.tawk.to https:\/\/route-cdn.s3.amazonaws.com\/ https:\/\/cdnjs.cloudflare.com\/ *.targetbay.com\/ *.klaviyo.com\/ *.smartwaiver.com\/ https:\/\/smartwaiver.com\/ *.enterpriseapplicationdevelopers.com *.figpii.com 'self' 'unsafe-inline'; object-src connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.affirm.com *.affirm.ca connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com sessions.bugsnag.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/get.geojs.io *.avada.io *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com api.route.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com d3od5si8vgcekb.cloudfront.net protect-lightning-bolt-widget.route.com ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com https:\/\/www.divers-supply.com *.bayengage.com *.acsbapp.com *.targetbay.com *.tawk.to wss:\/\/*.tawk.to *.googleapis.com https:\/\/www.google-analytics.com *.criteo.com https:\/\/geolocation-db.com\/ *.ipapi.com https:\/\/acsbapp.com\/ *.klaviyo.com\/ *.smartwaiver.com\/ https:\/\/smartwaiver.com\/ https:\/\/api.rollbar.com\/ https:\/\/prodregistryv2.org\/ https:\/\/featureassets.org\/ *.enterpriseapplicationdevelopers.com *.figpii.com wss:\/\/*.figpii.com *.facebook.com https:\/\/imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.craft.cloud https:\/\/tlt-cdn.prd.teamleader.eu https:\/\/cdn.segment.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/js.hsforms.net https:\/\/js.hs-scripts.com https:\/\/js.hs-analytics.net https:\/\/js.hscta.net https:\/\/js.usemessages.com https:\/\/fast.wistia.com; style-src 'self' 'unsafe-inline' https:\/\/cdn.craft.cloud; font-src 'self' https:\/\/cdn.craft.cloud; img-src 'self' data: blob: https:\/\/cdn.craft.cloud https:\/\/fast.wistia.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/stats.g.doubleclick.net https:\/\/track.hubspot.com https:\/\/forms.hsforms.com; connect-src 'self' https:\/\/tlt-cdn.prd.teamleader.eu https:\/\/api.segment.io https:\/\/cdn.segment.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/region1.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/js.hsforms.net https:\/\/api.hubspot.com https:\/\/forms.hubspot.com https:\/\/track.hubspot.com https:\/\/js.hs-analytics.net https:\/\/js.usemessages.com https:\/\/fast.wistia.com https:\/\/embedwistia-a.akamaihd.net; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/fast.wistia.com https:\/\/js.hsforms.net https:\/\/forms.hsforms.com https:\/\/meetings.hubspot.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com; worker-src 'self' blob:; media-src 'self' https:\/\/fast.wistia.com https:\/\/embedwistia-a.akamaihd.net blob:; manifest-src 'self'; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/forms.hubspot.com https:\/\/forms.hsforms.com; upgrade-insecure-requests ; report-uri https:\/\/teamleader.uriports.com\/reports\/report; report-to default;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/js.stripe.com https:\/\/client.crisp.chat https:\/\/*.crisp.chat; style-src 'self' 'unsafe-inline' https:\/\/api.mapbox.com https:\/\/*.crisp.chat; img-src 'self' data: blob: https:\/\/lh3.googleusercontent.com https:\/\/pbs.twimg.com https:\/\/images.unsplash.com https:\/\/logos-world.net https:\/\/cdn.jsdelivr.net https:\/\/d1aebdcemlt4l7.cloudfront.net https:\/\/*.mapbox.com https:\/\/*.crisp.chat; font-src 'self' data: https:\/\/*.crisp.chat; connect-src 'self' https:\/\/datafa.st https:\/\/*.datafa.st https:\/\/api.mapbox.com https:\/\/events.mapbox.com https:\/\/*.mapbox.com https:\/\/*.crisp.chat wss:\/\/*.crisp.chat https:\/\/vitals.vercel-insights.com; frame-src 'self' https:\/\/js.stripe.com https:\/\/hooks.stripe.com https:\/\/*.crisp.chat; object-src 'none'; base-uri 'self'; form-action 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' blob: https:\/\/cdn.prod.website-files.com https:\/\/www.googletagmanager.com https:\/\/widget.intercom.io https:\/\/smartpass.referralrock.com https:\/\/js.navattic.com https:\/\/js.hs-scripts.com https:\/\/global.localizecdn.com https:\/\/js.intercomcdn.com https:\/\/js.refiner.io https:\/\/embed.lu.ma https:\/\/app.posthog.com https:\/\/static.cloudflareinsights.com https:\/\/smartpass.instatus.com; style-src 'self' https:\/\/cdn.prod.website-files.com https:\/\/embed.lu.ma https:\/\/fonts.googleapis.com https:\/\/rsms.me\/inter\/ 'unsafe-inline'; font-src 'self' https:\/\/rsms.me\/inter\/font-files\/ https:\/\/fonts.gstatic.com; img-src 'self' data: https:\/\/smartpass.app https:\/\/*.smartpass.app https:\/\/cdn.prod.website-files.com https:\/\/storage.googleapis.com\/sp-img-cdn\/ https:\/\/global.localizecdn.com https:\/\/www.googletagmanager.com https:\/\/widget.intercom.io https:\/\/smartpass.referralrock.com https:\/\/js.navattic.com https:\/\/js.hs-scripts.com; connect-src 'self' https:\/\/smartpass.app wss:\/\/smartpass.app https:\/\/global.localizecdn.com https:\/\/firebaseinstallations.googleapis.com https:\/\/fcmregistrations.googleapis.com https:\/\/*.ingest.sentry.io https:\/\/cdn.prod.website-files.com https:\/\/www.googletagmanager.com https:\/\/*.intercom.io wss:\/\/*.intercom.io https:\/\/smartpass.referralrock.com https:\/\/js.navattic.com https:\/\/js.hs-scripts.com  https:\/\/*.refiner.io https:\/\/api.instatus.com; frame-src 'self' https:\/\/js.refiner.io","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'nonce-1638929931' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; base-uri 'none';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-src https:\/\/www.google.com; object-src 'none'; base-uri 'self'; form-action 'self';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/pagead2.googlesyndication.com https:\/\/ep1.adtrafficquality.google https:\/\/*.doubleclick.net; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' data: https:\/\/fonts.gstatic.com; img-src 'self' data: blob: https:\/\/i.meee.com.tw https:\/\/cdn.meee.com.tw https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/*.r2.cloudflarestorage.com https:\/\/i.meee.com.tw https:\/\/cdn.meee.com.tw https:\/\/pagead2.googlesyndication.com https:\/\/ep1.adtrafficquality.google; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/googleads.g.doubleclick.net https:\/\/*.googlesyndication.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" script-src 'self' https:\/\/rusmeteo.net chrome-extension: https:\/\/pos.gosuslugi.ru https:\/\/counter.rambler.ru https:\/\/cdn.jsdelivr.net 'unsafe-eval' 'unsafe-inline' 'unsafe-inline' https:\/\/st.top100.ru https:\/\/mc.yandex.ru https:\/\/stat.sputnik.ru 127.0.0.1:8182 127.0.0.1:8888 127.0.0.1:5005; frame-src 'self' https:\/\/pos.gosuslugi.ru chrome-extension: https:\/\/mc.yandex.ru https:\/\/mc.yandex.com; object-src 'self'; report-uri \/cspreportonly;","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests; script-src 'strict-dynamic' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:\/\/*.zadig-et-voltaire.com https:\/\/*.z-v.cloud https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/*.algolia.io https:\/\/cognito-idp.eu-west-1.amazonaws.com https:\/\/cognito-identity.eu-west-1.amazonaws.com https:\/\/*.amazoncognito.com https:\/\/maps.googleapis.com https:\/\/addressvalidation.googleapis.com https:\/\/places.googleapis.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.g.doubleclick.net https:\/\/*.adyen.com https:\/\/*.nosto.com https:\/\/*.riskified.com https:\/\/*.nr-data.net https:\/\/*.global-e.com https:\/\/*.bglobale.com https:\/\/*.socloz.com https:\/\/*.abtasty.com https:\/\/*.privacy-center.org https:\/\/*.facil-iti.app https:\/\/*.metav.rs https:\/\/bat.bing.com https:\/\/*.tiktok.com https:\/\/*.tiktokw.us https:\/\/*.snapchat.com https:\/\/*.criteo.com https:\/\/*.creativecdn.com https:\/\/*.outbrain.com https:\/\/*.zemanta.com https:\/\/*.rakuten.com https:\/\/*.linksynergy.com https:\/\/*.adnxs.com https:\/\/*.contentsquare.net https:\/\/*.trackad.ai https:\/\/*.salecycle.com https:\/\/*.pinterest.com https:\/\/*.shopmy.us https:\/\/*.reelevant.com https:\/\/www.googleadservices.com https:\/\/*.listrakbi.com https:\/\/*.listrak.com https:\/\/*.lt02.net https:\/\/*.clarity.ms https:\/\/*.reddit.com; frame-src 'self' https:\/\/*.adyen.com https:\/\/*.global-e.com https:\/\/*.bglobale.com https:\/\/www.google.com https:\/\/recaptcha.google.com https:\/\/www.googletagmanager.com https:\/\/*.socloz.com https:\/\/player.vimeo.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/*.abtasty.com https:\/\/*.snapchat.com https:\/\/*.salecycle.com https:\/\/*.criteo.com https:\/\/*.metav.rs; media-src 'self' blob: data: https:\/\/*.zadig-et-voltaire.com https:\/\/*.imgix.net https:\/\/*.prismic.io; worker-src 'self' blob:; manifest-src 'self'; form-action 'self' https:\/\/*.adyen.com https:\/\/*.global-e.com https:\/\/*.bglobale.com; report-uri https:\/\/helios.zadig-et-voltaire.com\/api\/v1\/csp\/report;","count":1},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/send.hsbrowserreports.com\/csp\/report?resource=website-grader-ui\/static-1.8532\/html\/public-en.html&cfRay=a35acb30cdf3810a-IAD","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.googleadservices.com https:\/\/*.doubleclick.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; form-action 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src 'self'; img-src data: blob: *; script-src-elem 'self' 'strict-dynamic' assets.ubuntu.com www.google-analytics.com www.googletagmanager.com www.youtube.com asciinema.org player.vimeo.com script.crazyegg.com www.googleadservices.com js.zi-scripts.com *.g.doubleclick.net www.google.com www.gstatic.com www.brighttalk.com snap.licdn.com connect.facebook.net maps.googleapis.com www.redditstatic.com munchkin.marketo.net *.googlesyndication.com cdn.jsdelivr.net https:\/\/esm.sh https:\/\/cdn.jsdelivr.net buttons.github.io cdn.livechatinc.com api.livechatinc.com secure.livechatinc.com www.tfaforms.com 'nonce-Vdo5lFRbVuWnjrgXtKCO7g'; font-src 'self' assets.ubuntu.com fonts.google.com cdn.livechatinc.com secure.livechatinc.com; script-src 'self' blob: 'wasm-unsafe-eval' 'nonce-Vdo5lFRbVuWnjrgXtKCO7g'; connect-src 'self' ubuntu.com analytics.google.com www.googletagmanager.com o4510662863749120.ingest.de.sentry.io www.google-analytics.com *.crazyegg.com *.g.doubleclick.net ad.doubleclick.net *.clarity.ms bat.bing.com bat.bing.net www.googleadservices.com js.zi-scripts.com *.google-analytics.com px.ads.linkedin.com ws.zoominfo.com youtube.com google.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cat www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws fonts.google.com maps.googleapis.com pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com https:\/\/esm.sh https:\/\/lottie.host https:\/\/cdn.jsdelivr.net *.analytics.google.com www.facebook.com *.googlesyndication.com *.mktoresp.com assets.ubuntu.com api.github.com raw.githubusercontent.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com web.facebook.com www.tfaforms.com unpkg.com; frame-src 'self' assets.ubuntu.com *.doubleclick.net *.crazyegg.com www.youtube.com\/ asciinema.org player.vimeo.com www.googletagmanager.com www.google.com www.brighttalk.com cdn.livechatinc.com secure.livechatinc.com cdn.livechat-static.com; style-src 'self' cdn.jsdelivr.net www.tfaforms.com 'unsafe-inline'; media-src 'self' res.cloudinary.com assets.ubuntu.com; child-src 'self' blob: youtube.com google.com fonts.google.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com; form-action 'self' https:\/\/pages.ubuntu.com https:\/\/ubuntu.com https:\/\/www.tfaforms.com; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; report-uri \/csp-report;","count":1},{"content-security-policy-report-only":" form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; media-src *.gstatic.com *.google.com capitracking.istore.co.za analytics.twitter.com t.co sp.analytics.yahoo.com cdn1.stamped.io stamped.io *.zdassets.com 'self' 'unsafe-inline'; font-src *.gstatic.com fonts.gstatic.com use.typekit.net *.typekit.net https:\/\/fonts.gstatic.com *.fontawesome.com https:\/\/fonts.bunny.net cdn1.stamped.io stamped.io *.cloudflare.com *.googleapis.com *.klevu.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; style-src *.googleapis.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.fontawesome.com https:\/\/fonts.bunny.net *.nosto.com *.nos.to assets.braintreegateway.com cdn1.stamped.io stamped.io *.cloudflare.com *.klevu.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: 'self' 'unsafe-inline'; connect-src *.googleapis.com *.google.com *.gstatic.com s.yimg.com in.visitors.live dsp-trk.eskimi.com dsp-ap.eskimi.com sslwidget.criteo.com wss:\/\/in.visitors.live analytics.tiktok.com\/* portal.immerss.live *.linkedin.com *.creativecdn.com wss:\/\/ws.hotjar.com *.istore.co.za *.tiktok.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.magento-datasolutions.com *.magento-ds.com *.paypal.com google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/*.ingest.sentry.io sandbox-api.layup.co.za layup.co.za https:\/\/ipinfo.io https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/get.geojs.io *.avada.io *.nosto.com *.nos.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com cdn1.stamped.io stamped.io *.testfreaks.com *.ksearchnet.com *.klevu.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss:\/\/*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.what3words.com vsb111.tawk.to ekr.zdassets.com app.mobicredwidget.co.za wss:\/\/widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: 'self' 'unsafe-inline'; frame-src *.google.com ams.creativecdn.com portal.immerss.live *.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.nosto.com *.nos.to c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; img-src *.googleapis.com *.gstatic.com *.google.com *.googleusercontent.com capitracking.istore.co.za analytics.twitter.com t.co sp.analytics.yahoo.com pixel.rubiconproject.com cm.g.doubleclick.net r.casalemedia.com eb2.3lift.com simage2.pubmatic.com contextual.media.net sync-t1.taboola.com exchange.mediavine.com s.ad.smaato.net match.sharethrough.com jadserve.postrelease.com c.bing.com sync.outbrain.com rtb-csync.smartadserver.com secure.adnxs.com ib.adnxs.com ads.yahoo.com ups.analytics.yahoo.com dis.criteo.com *.doubleclick.net *.linkedin.com *.tribalfusion.com sync.go.sonobi.com istore.co.za cm.adform.net ams.creativecdn.com bh.contextweb.com widgets.magentocommerce.com 'unsafe-inline' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com https:\/\/firebasestorage.googleapis.com *.nosto.com *.nos.to store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: cdn1.stamped.io stamped.io *.cloudflare.com *.google.lv *.google.co.za *.google.com.na *.google.na *.klevu.com *.zopim.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za amcglobal.sc.omtrdc.net media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; script-src *.google.com *.googleapis.com *.gstatic.com capitracking.istore.co.za s.yimg.com platform2.cloud-iq.com static.ads-twitter.com rookdsp.com dsp-media.eskimi.com portal.immerss.live snap.licdn.com tags.creativecdn.com *.tiktok.com *.tribalfusion.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-datasolutions.com *.typekit.net google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/browser.sentry-cdn.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.avada.io *.shopify.com *.nosto.com *.nos.to js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com cdn1.stamped.io stamped.io *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.facebook.com *.what3words.com maps.googleapis.com static.zdassets.com app.mobicredwidget.co.za www.gstatic.com bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network https:\/\/istorepreowned.co.za 'self' 'unsafe-inline' 'unsafe-eval';","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cdnjs.cloudflare.com *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com magento.buildify.shop *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com platform.twitter.com magento.buildify.shop c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https:\/\/www.paypal.com https:\/\/*.paypal.com https:\/\/*.paypalobjects.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com s3.amazonaws.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/tr.lfeeder.com https:\/\/*.lfeeder.com https:\/\/www.google.by https:\/\/*.google.by https:\/\/media.aheadworks.com https:\/\/*.aheadworks.com https:\/\/firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com platform.twitter.com platform.instagram.com apis.google.com magento.buildify.shop https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/www.paypal.com https:\/\/*.paypal.com https:\/\/*.paypalobjects.com *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com cdnjs.cloudflare.com magento.buildify.shop https:\/\/static.klaviyo.com *.fontawesome.com assets.braintreegateway.com https:\/\/fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/www.paypal.com https:\/\/*.paypal.com https:\/\/*.paypalobjects.com https:\/\/get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-EiQZ0uBIdPSTHMNXCTI72Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-\/TBfMbyClgZSsaEKic2QRw==' 'strict-dynamic' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' 'sha256-f9ms\/4u9WrRYV3p93xXv88VDowcvTVxabxYcmCxoxBE=' https:\/\/connect.facebook.net https:\/\/accounts.google.com https:\/\/www.googletagmanager.com https:\/\/cdn.jifo.co https:\/\/s.infogram.com https:\/\/www.youtube.com https:\/\/www.google.com https:\/\/www.google.com.au https:\/\/www.googleadservices.com https:\/\/www.google.co.in https:\/\/www.gstatic.com https:\/\/securepubads.g.doubleclick.net https:\/\/bat.bing.com https:\/\/www.clarity.ms https:\/\/play.google.com https:\/\/can.canstar.com.au https:\/\/graph.canstar.com.au https:\/\/jnn-pa.googleapis.com https:\/\/logx.optimizely.com https:\/\/identitytoolkit.googleapis.com https:\/\/sso.canstar.com.au https:\/\/ad.doubleclick.net https:\/\/adservice.google.com https:\/\/analytics.google.com https:\/\/sdk-02.moengage.com https:\/\/metrics.hotjar.io https:\/\/siteintercept.qualtrics.com https:\/\/collector-px58c3a4zy.perimeterx.net https:\/\/platform.twitter.com https:\/\/syndication.twitter.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/gfonts.jifo.co https:\/\/cdn.jifo.co https:\/\/themes.jifo.co https:\/\/accounts.google.com https:\/\/graph.canstar.com.au https:\/\/platform.twitter.com; style-src-attr 'self' 'unsafe-inline'; script-src-attr 'self' 'unsafe-inline' https:\/\/cns-angular-content-uat-2.freetls.fastly.net https:\/\/cns-angular-content-prod-1.freetls.fastly.net https:\/\/cns-angular-content-prod-2.freetls.fastly.net; img-src 'self' data: blob: https:\/\/graph.canstar.com.au https:\/\/snapshots.uat.canstar.com.au https:\/\/snapshots.canstar.com.au https:\/\/www.youtube.com https:\/\/i.ytimg.com https:\/\/yt3.ggpht.com https:\/\/images.jifo.co https:\/\/www.google.com https:\/\/www.google.com.au https:\/\/www.google.co.in https:\/\/www.gstatic.com https:\/\/www.googletagmanager.com https:\/\/securepubads.g.doubleclick.net https:\/\/bat.bing.com https:\/\/www.clarity.ms https:\/\/play.google.com https:\/\/can.canstar.com.au https:\/\/graph.canstar.com.au https:\/\/jnn-pa.googleapis.com https:\/\/logx.optimizely.com https:\/\/identitytoolkit.googleapis.com https:\/\/sso.canstar.com.au https:\/\/ad.doubleclick.net https:\/\/adservice.google.com https:\/\/analytics.google.com https:\/\/sdk-02.moengage.com https:\/\/fonts.gstatic.com https:\/\/themes.jifo.co https:\/\/gfonts.jifo.co https:\/\/cdn.jifo.co https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/analytics.tiktok.com https:\/\/www.canstarblue.com.au https:\/\/www.canstar.com.au https:\/\/secure.gravatar.com https:\/\/ep1.adtrafficquality.google https:\/\/adtrafficquality.google; font-src 'self' https:\/\/fonts.gstatic.com https:\/\/themes.jifo.co https:\/\/gfonts.jifo.co https:\/\/cdn.jifo.co https:\/\/script.hotjar.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/accounts.google.com https:\/\/e.infogram.com https:\/\/www.googletagmanager.com http:\/\/www.googletagmanager.com https:\/\/10445216.fls.doubleclick.net https:\/\/10420344.fls.doubleclick.net https:\/\/can.canstar.com.au https:\/\/can.canstarblue.com.au https:\/\/securepubads.g.doubleclick.net https:\/\/platform.twitter.com https:\/\/syndication.twitter.com https:\/\/a25480140109.cdn.optimizely.com; connect-src 'self' https:\/\/graph.canstar.com.au https:\/\/can.canstar.com.au https:\/\/can.canstarblue.com.au https:\/\/jnn-pa.googleapis.com https:\/\/www.google-analytics.com https:\/\/bat.bing.com https:\/\/www.clarity.ms https:\/\/sdk-02.moengage.com https:\/\/connect.facebook.net https:\/\/www.facebook.com https:\/\/accounts.google.com https:\/\/www.googletagmanager.com https:\/\/cdn.jifo.co https:\/\/s.infogram.com https:\/\/www.youtube.com https:\/\/www.google.com https:\/\/www.google.com.au https:\/\/www.googleadservices.com https:\/\/www.google.co.in https:\/\/www.gstatic.com https:\/\/securepubads.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/play.google.com https:\/\/logx.optimizely.com https:\/\/identitytoolkit.googleapis.com https:\/\/sso.canstar.com.au https:\/\/ad.doubleclick.net https:\/\/adservice.google.com https:\/\/analytics.google.com https:\/\/clerk.canstar.com.au https:\/\/vital-wasp-63.clerk.accounts.dev https:\/\/faithful-gannet-95.clerk.accounts.dev https:\/\/clerk-telemetry.com https:\/\/analytics.tiktok.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/metrics.hotjar.io https:\/\/surveystats.hotjar.io https:\/\/siteintercept.qualtrics.com https:\/\/collector-px58c3a4zy.perimeterx.net https:\/\/ep1.adtrafficquality.google https:\/\/adtrafficquality.google https:\/\/cns-angular-content-uat-2.freetls.fastly.net https:\/\/cns-angular-content-prod-1.freetls.fastly.net https:\/\/cns-angular-content-prod-2.freetls.fastly.net; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; report-uri https:\/\/graph.canstar.com.au\/csp-report;","count":1},{"content-security-policy-report-only":" default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https:\/\/cdnapisec.kaltura.com https:\/\/pay.instamed.com;script-src 'nonce-9782f2d7a0664c7b94b9f0696421f34f' https:\/\/www.mylghealth.org 'self' http:\/\/fad.Lghealth.org https:\/\/cdc.gov https:\/\/patientportal.natera.com https:\/\/www.healthwise.net https:\/\/www.lancastergeneralhealth.org;img-src https:\/\/* 'self' blob: data: http:\/\/fad.lghealth.org https:\/\/fad.lghealth.org;connect-src 'self' epichttp: https:\/\/acrobat.adobe.com;style-src https:\/\/www.mylghealth.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https:\/\/central.mychart.org\/MyChart\/ 'self';media-src https:\/\/* 'self' blob:;","count":1},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/kidspot.news.com.au\/csp-reports","count":1},{"content-security-policy-report-only":" default-src 'self'; child-src 'none'; connect-src 'self' https:\/\/*.bozar.be https:\/\/*.contentsquare.net https:\/\/*.facebook.com https:\/\/*.google-analytics.com https:\/\/*.onetrust.com https:\/\/*.secutix.com https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.vwo.com https:\/\/o419740.ingest.sentry.io\/api\/5336472\/envelope\/; font-src 'self' https:\/\/fonts.gstatic.com; frame-src 'self' https:\/\/*.googletagmanager.com https:\/\/*.google.com https:\/\/*.matterport.com https:\/\/*.soundcloud.com https:\/\/*.spotify.com https:\/\/*.vimeo.com https:\/\/*.youtube.com; img-src 'self' https:\/\/*.cookielaw.org https:\/\/*.facebook.com https:\/\/*.googletagmanager.com https:\/\/*.vimeocdn.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.bozar.be https:\/\/*.hotjar.com https:\/\/*.cookielaw.org https:\/\/*.contentsquare.net https:\/\/*.googletagmanager.com cdn.jsdelivr.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/script.crazyegg.com https:\/\/unpkg.com https:\/\/www.google.com; script-src-elem 'self' 'unsafe-inline' https:\/\/*.bozar.be https:\/\/*.cookielaw.org https:\/\/*.facebook.net https:\/\/*.googletagmanager.com https:\/\/*.hotjar.com https:\/\/matomojs.trackify.info https:\/\/*.visualwebsiteoptimizer.com https:\/\/*.vwo.com https:\/\/*.youtube.com cdn.jsdelivr.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/script.crazyegg.com https:\/\/unpkg.com https:\/\/www.google.com; style-src 'self' 'report-sample' 'unsafe-inline' https:\/\/unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https:\/\/unpkg.com; worker-src 'self'; base-uri 'none'; form-action 'self'; frame-ancestors 'self' https:\/\/*.bozar.be https:\/\/*.secutix.com; report-uri https:\/\/o419740.ingest.sentry.io\/api\/5336472\/security\/?sentry_key=352ab04e14224ad0804d381177289653&sentry_environment=prod&sentry_release=20260904063241; block-all-mixed-content","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.wesupply.xyz https:\/\/wesupplylabs.com *.sandbox.paypal.com *.paypalobjects.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.swagger.io *.ftcdn.net *.behance.net *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com julio.com *.scene7.com *.doubleclick.net *.google.com *.google-analytics.com *.googleadservices.com *.braintreegateway.com mcusercontent.com www.google.com.co *.sharethis.com *.aplazo.mx *.api.useinsider.com *.sandbox.paypal.com *.paypalobjects.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.reddit.com *.bing.com *.clarity.ms *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.net *.connect.facebook.net https:\/\/smetrics.julio.com *.julio.com *.cardinalcommerce.com unpkg.com cdn.jsdelivr.net *.magento-datasolutions.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.paypal.com *.paypalobjects.com *.bolt.com *.commerce-quick-checkout.com *.online-metrix.net *.cybersource.com *.sharethis.com *.pingdom.net *.hotjar.com *.zdassets.com *.useinsider.com *.usizy.es usizy.com *.cloudflare.com *.sandbox.paypal.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.redditstatic.com *.reddit.com *.tiktok.com *.bing.com *.clarity.ms *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.amazonaws.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com julio.com https:\/\/smetrics.julio.com *.demdex.net *.cardinalcommerce.com *.snplow.net *.pingdom.net *.woorank.com *.adobedc.net *.youtube.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com *.bolt.com *.magento-ds.com *.sharethis.com *.zdassets.com grupojulio.zendesk.com *.usizy.es usizy.com *.hotjar.io *.api.useinsider.com *.useinsider.com *.g.doubleclick.net *.crwdcntrl.net *.sandbox.paypal.com *.paypalobjects.com www.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.bing.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src julio.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' 'unsafe-eval' tags.tiqcdn.com tags.tiqcdn.cn collect.tealiumiq.com *.criteo.com *.criteo.net *.omtrdc.net *.yimg.jp *.yahoo.co.jp prf.hn *.doubleclick.net *.line.me *.google.com *.google.it *.bing.com *.google-analytics.com *.licdn.com *.tiktok.com sc-static.net *.usehero.com *.contentsquare.net *.demdex.net *.facebook.com *.googletagmanager.com *.facebook.net *.googleadservices.com *.teads.tv zegna.d3.sc.omtrdc.net www.google.* *.zegna.com *.measmerize.com *.googlesyndication.com maps.gstatic.com *.riskified.com sandbox.gestpay.net ecomm.sella.it *.online-metrix.net amp.akamaized.net *.snapchat.com *.gstatic.com *.go-mpulse.net cm.everesttech.net *.googleapis.com *.akstat.io *.akamaihd.net *.line-scdn.net *.algolianet.com *.algolia.net *.algolia.com zegna-cloud-media.s3.amazonaws.com zegna-cloud-media.s3.eu-west-1.amazonaws.com zegna-cloud-media.s3-eu-west-1.amazonaws.com livechat.zegna.cn *.baidu.com blob: data: ; font-src 'self' data: *.googleapis.com *.gstatic.com; report-uri \/cgi-bin\/csp_report.cgi","count":1},{"content-security-policy-report-only":" default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'sha256-rpGmXk3NQLo45ldl81BcJ8jtlryCws9E\/NadLKU0Z3A=' 'sha256-mC5tw35wQ7CvlgNEqD4wVhLgMaY0tWtBDwJUfrtxrZk=' 'nonce-1+42r\/Nc23dYQ\/lLAO7+3A=='; style-src 'self' https: 'unsafe-inline'; report-uri \/csp-report","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.jsdelivr.net https:\/\/code.etracker.com www.etracker.de; script-src-elem 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.jsdelivr.net https:\/\/code.etracker.com www.etracker.de; style-src 'self' 'report-sample' 'unsafe-inline' https:\/\/cdn.jsdelivr.net; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/www.bodyandsoul.com.au\/csp-reports","count":1},{"content-security-policy-report-only":" default-src 'self';script-src 'self' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' https: 'nonce-ZOXhYMrKo6Zw1DJpdZl4okQm3kFssfVb';style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/unpkg.com;img-src 'self' data: blob: https:;font-src 'self' data: https:\/\/fonts.gstatic.com;connect-src 'self' https: https:\/\/*.sentry.io https:\/\/analytics.therapistaid.com;frame-src 'self' https: https:\/\/sandtray.therapistaid.com;form-action 'self' https:;base-uri 'none';object-src 'none';media-src 'self' blob: https:;manifest-src 'self'","count":1},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval' cdn2.hubspot.net *.hubspot.com *.hubspotusercontent10.net js.hscollectedforms.net js.hsleadflows.net js.hs-scripts.com js.hsadspixel.net js.hs-analytics.net js.hs-banner.com js.hs-banner.net *.hsforms.net *.hsforms.com static.hsappstatic.net js.hubspotfeedback.com feedback.hubapi.com js.usemessages.com *.vidyard.com cdnjs.cloudflare.com cdnjs.cloudflare.com 10921146.fls.doubleclick.net plausible.io *.hotjar.com *.hotjar.io *.qualified.com bttrack.com *.googletagmanager.com *.force.com *.thycotic.com *.centrify.com *.bidr.io *.rlcdn.cm t.co *.twitter.com burly.io *.clickagy.com *.doubleclck.net *.zoominfo.com lltrck.com facebook.com *.facebook.net *.redditstatic.com *.linkedin.com *.licdn.com *.demandbase.com *.zoominfo.com 'strict-dynamic' 'nonce-N9\/9PlCr3Ex+YiGz+O7A9A=='","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com  *.google-analytics.com www.2checkout.com connect.facebook.net *.google.com www.googletagmanager.com www.gstatic.com *.amazon-adsystem.com; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com; img-src 'self' data: librarika.com covers.librarika.com:8443 storage101.lon3.clouddrive.com *.ssl.cf3.rackcdn.com *.media-amazon.com *.ssl-images-amazon.com *.amazon-adsystem.com *.amazon.com  *.gstatic.com *.google-analytics.com *.google.com; font-src 'self' data: fonts.gstatic.com; frame-src *.librarika.com www.2checkout.com *.facebook.com *.google.com *.amazon-adsystem.com *.youtube.com; connect-src 'self' *.google.com www.google-analytics.com; object-src 'none'; report-uri https:\/\/5e5aa7c5f482dc373380fd2db250ce83.report-uri.com\/r\/d\/csp\/enforce","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com www.xtento.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.googleapis.com *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com www.xtento.com cdn.xtento.com *.trackedlink.net *.ddlnk.net *.stripe.com *.stripe.network ebizmarts-website.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.feefo.com flagpedia.net maps.googleapis.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.googleapis.com *.gstatic.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com www.xtento.com cdn.xtento.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.sagepay.com *.opayo.eu.elavon.com *.feefo.com maps.googleapis.com assets.shipperhq.com *.trustpilot.com https:\/\/www.builderdepot.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.feefo.com maxcdn.bootstrapcdn.com assets.shipperhq.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.feefo.com www.gstatic.com maps.googleapis.com rms.shipperhq.com https:\/\/rms.shipperhq.com wss:\/\/rms.shipperhq.com ovs.shipperhq.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; connect-src 'self' https:; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https:\/\/cdnapisec.kaltura.com\/ https:\/\/content.d-h.org\/ https:\/\/content.dev.dhsandbox.org\/ https:\/\/edhwebportal.hitchcock.org https:\/\/premier.trustcommerce.com https:\/\/stagepremier.trustcommerce.com;script-src 'nonce-f57d9b173619497f812604ed20449560' https:\/\/portal.mydh.org 'self';img-src https:\/\/* 'self' blob: data:;connect-src 'self' epichttp: https:\/\/*.kaltura.com;style-src https:\/\/portal.mydh.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https:\/\/central.mychart.org\/MyChart\/ 'self';media-src https:\/\/* 'self' blob:;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.curator.io *.elfsight.com *.hotjar.com *.facebook.net *.cloudfront.net *.micpn.com *.searchstax.com *.wisepops.com wisepops.com *.wisepops.net wisepops.net *.sentry-cdn.com *.thehotelsnetwork.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.fonts.net *.myfonts.net *.doubleclick.net *.curator.io; img-src 'self' data: blob: *.google.co.uk *.facebook.com *.doubleclick.net *.google-analytics.com *.micpn.com *.googleapis.com *.gstatic.com *.cloudfront.net *.curator.io *.tripadvisor.com; connect-src 'self' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.micpn.com *.facebook.com *.mapbox.com *.curator.io *.wisepops.net *.wisepops.com wisepops.net wisepops.com *.thehotelsnetwork.com; font-src 'self' data: *.fonts.net *.myfonts.net *.gstatic.com; worker-src 'self' blob:; child-src 'self' blob: *.google.com *.googleapis.com *.googletagmanager.com *.doubleclick.net; frame-src 'self' *.google.com *.doubleclick.net *.facebook.com; media-src 'self'; object-src 'none'; base-uri 'self'; report-uri https:\/\/3chillies.report-uri.com\/r\/d\/csp\/reportOnly;","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.authorize.net *.google.com cdnjs.cloudflare.com cdn.rawgit.com maps.googleapis.com rw1.marchex.io connect.facebook.net googleads.g.doubleclick.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com cdn.jsdelivr.net *.youtube.com *.vimeo.com s.ytimg.com *.googlesyndication.com *.hotjar.com unpkg.com *.googleapis.com investors.danaher.com cdn.cookielaw.org *.onetrust.com *.marketingcloudfx.com *.leadmanagerfx.com *.usefathom.com *.decibelinsight.net *.decibel.com *.medallia.com; object-src *.oembed.com *.vimeo.com *.youtube.com; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com tagmanager.google.com *.gstatic.com *.typekit.net *.jsdelivr.net maxcdn.bootstrapcdn.com investors.danaher.com *.onetrust.com; img-src 'self' 'unsafe-inline' data: maps.googleapis.com px.marchex.io *.facebook.com *.google.com *.gstatic.com cdn.rawgit.com raw.githubusercontent.com *.g.doubleclick.net *.google-analytics.com *.googletagmanager.com zensource-salisbury.s3.amazonaws.com chat.mcsoftware.com *.timevaluecalculators.com *.ytimg.com cdn.cookielaw.org *.vimeocdn.com *.usefathom.com; media-src *.vimeo.com *.youtube.com *.spotify.com *.vimeocdn.com 'self'; frame-src 'self' 'unsafe-inline' *.doubleclick.net *.google.com players.brightcove.net *.youtube.com *.googletagmanager.com vars.hotjar.com *.spotify.com *.vimeo.com player.vimeo.com; font-src data: 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com cdnjs.cloudflare.com *.onetrust.com; connect-src 'self' 'unsafe-inline' *.authorize.net *.facebook.com *.onetrust.com stats.addtoany.com *.google-analytics.com cdn.cookielaw.org *.hotjar.com:* *.hotjar.com:* vc.hotjar.io:* wss:\/\/*.hotjar.com stats.g.doubleclick.net *.clarity.ms privacyportal-de.onetrust.com *.marketingcloudfx.com  *.leadmanagerfx.com *.decibelinsight.net *.decibel.com *.medallia.com; report-uri \/report-csp-violation","count":1},{"content-security-policy-report-only":" default-src 'self' *.bbcearth.com *.bbc.com *.bbc.co.uk *.bbci.co.uk https:\/\/cloud.email.bbc.com *.zscalertwo.net *.**.bbc.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bbcearth.com *.bbc.com *.bbc.co.uk *.bbci.co.uk https:\/\/cloud.email.bbc.com *.zscalertwo.net *.**.bbc.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.googlesyndication.com *.google.com *.googleadservices.com *.youtube.com *.youtube-nocookie.com *.google *.the-ozone-project.com *.optimizely.com *.go-mpulse.net *.quantserve.com *.quantcount.com tag.aticdn.net cdn.shopify.com cdn.jsdelivr.net scripts.webcontentassessor.com *.wayin.com static.xx.fbcdn.net\/; style-src 'self' 'unsafe-inline' *.bbcearth.com *.bbc.com *.bbc.co.uk *.bbci.co.uk https:\/\/cloud.email.bbc.com *.zscalertwo.net *.**.bbc.com fonts.googleapis.com fonts.gstatic.com *.typekit.net; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.typekit.net; img-src 'self' data: blob: https: http: *.bbcearth.com *.bbc.com *.bbc.co.uk *.bbci.co.uk https:\/\/cloud.email.bbc.com *.zscalertwo.net *.**.bbc.com; connect-src 'self' *.bbcearth.com *.bbc.com *.bbc.co.uk *.bbci.co.uk https:\/\/cloud.email.bbc.com *.zscalertwo.net *.**.bbc.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.googlesyndication.com *.google.com *.googleadservices.com *.youtube.com *.youtube-nocookie.com *.google *.the-ozone-project.com *.optimizely.com *.go-mpulse.net *.quantserve.com *.quantcount.com cdn.jsdelivr.net; frame-src 'self' *.bbcearth.com *.bbc.com *.bbc.co.uk *.bbci.co.uk https:\/\/cloud.email.bbc.com *.zscalertwo.net *.**.bbc.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.googlesyndication.com *.google.com *.googleadservices.com *.youtube.com *.youtube-nocookie.com *.google *.brightcove.com *.brightcove.net *.sajari.com *.akstat.io *.the-ozone-project.com *.optimizely.com *.go-mpulse.net *.quantserve.com *.quantcount.com; media-src 'self' data: *.bbcearth.com *.bbc.com *.bbc.co.uk *.bbci.co.uk https:\/\/cloud.email.bbc.com *.zscalertwo.net *.**.bbc.com *.brightcove.com *.brightcove.net *.sajari.com *.akstat.io; object-src 'none'","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com 'self' data: use.fontawesome.com *.antartica.cl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com webpay3g.transbank.cl webpay3gint.transbank.cl *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com tracking.bciplus.cl www.google.com wchat.freshchat.com *.antartica.cl www.mercadopago.cl www.mercadolibre.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.trackedlink.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.hsforms.net *.hsforms.com 'self' data: www.facebook.com www.google.cl *.antartica.cl www.gstatic.com www.mercadolibre.com www.mercadopago.cl *.google.com.ar antartica.cl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.fw-cdn.com\/ *.freshchat.com\/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.hsforms.net *.hsforms.com *.gstatic.com *.mercadopago.cl *.googletagmanager.com *.facebook.net *.hotjar.com unpkg.com tracking.krip.cl r2-t.trackedlink.net magento-recs-sdk.adobe.net www.clarity.ms static.trackedweb.net js-agent.newrelic.com wchat.freshchat.com static.zdassets.com *.antartica.cl sdk.mercadopago.com http2.mlstatic.com https:\/\/fw-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com webchat.dotdigital.com webchat.staging.dotdigital.com assets.braintreegateway.com https:\/\/*.freshchat.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.googleapis.com *.gstatic.com use.fontawesome.com *.antartica.cl www.mercadopago.cl www.gstatic.com *.googletagmanager.com *.cookielaw.org 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com t.elasticsuite.io *.hsforms.net *.hsforms.com analytics.google.com api.bciplus.cl www.google-analytics.com ekr.zdassets.com libreriaantartica.zendesk.com wchat.freshchat.com bam.nr-data.net *.antartica.cl api.mercadopago.com www.mercadolibre.com events.mercadopago.com *.hotjar.com *.hotjar.io *.clarity.ms *.doubleclick.net *.cookielaw.org 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com www.google.com bam.nr-data.net r2.trackedweb.net commerce.adobedc.net *.antartica.cl 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.ototoy.jp; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:\/\/*.ototoy.jp https:\/\/bccks.jp https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/jquery.bootstrapvalidator\/ https:\/\/connect.facebook.net https:\/\/platform.instagram.com https:\/\/www.instagram.com https:\/\/code.jquery.com https:\/\/scdn.line-apps.com https:\/\/d.line-scdn.net https:\/\/embed.nicovideo.jp https:\/\/platform.twitter.com https:\/\/syndication.twitter.com https:\/\/player.vimeo.com https:\/\/platform.vine.co https:\/\/static-fe.payments-amazon.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.google.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com; style-src 'self' 'unsafe-inline' https:\/\/*.ototoy.jp https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/font-awesome\/ https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/jquery.bootstrapvalidator\/ https:\/\/fonts.googleapis.com; img-src 'self' data: blob: *; font-src 'self' data: https:\/\/*.ototoy.jp https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/font-awesome\/ https:\/\/fonts.gstatic.com; connect-src 'self' data: blob: https:\/\/*.ototoy.jp https:\/\/payments-fe.amazon.com https:\/\/api3.veritrans.co.jp https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com https:\/\/*.google.ad https:\/\/*.google.ae https:\/\/*.google.com.af https:\/\/*.google.com.ag https:\/\/*.google.al https:\/\/*.google.am https:\/\/*.google.co.ao https:\/\/*.google.com.ar https:\/\/*.google.as https:\/\/*.google.at https:\/\/*.google.com.au https:\/\/*.google.az https:\/\/*.google.ba https:\/\/*.google.com.bd https:\/\/*.google.be https:\/\/*.google.bf https:\/\/*.google.bg https:\/\/*.google.com.bh https:\/\/*.google.bi https:\/\/*.google.bj https:\/\/*.google.com.bn https:\/\/*.google.com.bo https:\/\/*.google.com.br https:\/\/*.google.bs https:\/\/*.google.bt https:\/\/*.google.co.bw https:\/\/*.google.by https:\/\/*.google.com.bz https:\/\/*.google.ca https:\/\/*.google.cd https:\/\/*.google.cf https:\/\/*.google.cg https:\/\/*.google.ch https:\/\/*.google.ci https:\/\/*.google.co.ck https:\/\/*.google.cl https:\/\/*.google.cm https:\/\/*.google.cn https:\/\/*.google.com.co https:\/\/*.google.co.cr https:\/\/*.google.com.cu https:\/\/*.google.cv https:\/\/*.google.com.cy https:\/\/*.google.cz https:\/\/*.google.de https:\/\/*.google.dj https:\/\/*.google.dk https:\/\/*.google.dm https:\/\/*.google.com.do https:\/\/*.google.dz https:\/\/*.google.com.ec https:\/\/*.google.ee https:\/\/*.google.com.eg https:\/\/*.google.es https:\/\/*.google.com.et https:\/\/*.google.fi https:\/\/*.google.com.fj https:\/\/*.google.fm https:\/\/*.google.fr https:\/\/*.google.ga https:\/\/*.google.ge https:\/\/*.google.gg https:\/\/*.google.com.gh https:\/\/*.google.com.gi https:\/\/*.google.gl https:\/\/*.google.gm https:\/\/*.google.gr https:\/\/*.google.com.gt https:\/\/*.google.gy https:\/\/*.google.com.hk https:\/\/*.google.hn https:\/\/*.google.hr https:\/\/*.google.ht https:\/\/*.google.hu https:\/\/*.google.co.id https:\/\/*.google.ie https:\/\/*.google.co.il https:\/\/*.google.im https:\/\/*.google.co.in https:\/\/*.google.iq https:\/\/*.google.is https:\/\/*.google.it https:\/\/*.google.je https:\/\/*.google.com.jm https:\/\/*.google.jo https:\/\/*.google.co.jp https:\/\/*.google.co.ke https:\/\/*.google.com.kh https:\/\/*.google.ki https:\/\/*.google.kg https:\/\/*.google.co.kr https:\/\/*.google.com.kw https:\/\/*.google.kz https:\/\/*.google.la https:\/\/*.google.com.lb https:\/\/*.google.li https:\/\/*.google.lk https:\/\/*.google.co.ls https:\/\/*.google.lt https:\/\/*.google.lu https:\/\/*.google.lv https:\/\/*.google.com.ly https:\/\/*.google.co.ma https:\/\/*.google.md https:\/\/*.google.me https:\/\/*.google.mg https:\/\/*.google.mk https:\/\/*.google.ml https:\/\/*.google.com.mm https:\/\/*.google.mn https:\/\/*.google.com.mt https:\/\/*.google.mu https:\/\/*.google.mv https:\/\/*.google.mw https:\/\/*.google.com.mx https:\/\/*.google.com.my https:\/\/*.google.co.mz https:\/\/*.google.com.na https:\/\/*.google.com.ng https:\/\/*.google.com.ni https:\/\/*.google.ne https:\/\/*.google.nl https:\/\/*.google.no https:\/\/*.google.com.np https:\/\/*.google.nr https:\/\/*.google.nu https:\/\/*.google.co.nz https:\/\/*.google.com.om https:\/\/*.google.com.pa https:\/\/*.google.com.pe https:\/\/*.google.com.pg https:\/\/*.google.com.ph https:\/\/*.google.com.pk https:\/\/*.google.pl https:\/\/*.google.pn https:\/\/*.google.com.pr https:\/\/*.google.ps https:\/\/*.google.pt https:\/\/*.google.com.py https:\/\/*.google.com.qa https:\/\/*.google.ro https:\/\/*.google.ru https:\/\/*.google.rw https:\/\/*.google.com.sa https:\/\/*.google.com.sb https:\/\/*.google.sc https:\/\/*.google.se https:\/\/*.google.com.sg https:\/\/*.google.sh https:\/\/*.google.si https:\/\/*.google.sk https:\/\/*.google.com.sl https:\/\/*.google.sn https:\/\/*.google.so https:\/\/*.google.sm https:\/\/*.google.sr https:\/\/*.google.st https:\/\/*.google.com.sv https:\/\/*.google.td https:\/\/*.google.tg https:\/\/*.google.co.th https:\/\/*.google.com.tj https:\/\/*.google.tl https:\/\/*.google.tm https:\/\/*.google.tn https:\/\/*.google.to https:\/\/*.google.com.tr https:\/\/*.google.tt https:\/\/*.google.com.tw https:\/\/*.google.co.tz https:\/\/*.google.com.ua https:\/\/*.google.co.ug https:\/\/*.google.co.uk https:\/\/*.google.com.uy https:\/\/*.google.co.uz https:\/\/*.google.com.vc https:\/\/*.google.co.ve https:\/\/*.google.co.vi https:\/\/*.google.com.vn https:\/\/*.google.vu https:\/\/*.google.ws https:\/\/*.google.rs https:\/\/*.google.co.za https:\/\/*.google.co.zm https:\/\/*.google.co.zw https:\/\/*.google.cat; frame-src 'self' https:\/\/bandcamp.com https:\/\/m.facebook.com https:\/\/mobile.facebook.com https:\/\/web.facebook.com https:\/\/www.facebook.com https:\/\/www.instagram.com https:\/\/social-plugins.line.me https:\/\/embed.nicovideo.jp https:\/\/w.soundcloud.com https:\/\/open.spotify.com https:\/\/platform.twitter.com https:\/\/syndication.twitter.com https:\/\/player.vimeo.com https:\/\/www.youtube.com https:\/\/secure2.arcot.com https:\/\/secure4.arcot.com https:\/\/dig-acs2.cafis-paynet.jp https:\/\/dig3ds.cafis-paynet.jp https:\/\/geoissuer.cardinalcommerce.com https:\/\/acs-jcn.dnp-cdms.jp https:\/\/api.veritrans.co.jp https:\/\/*.google.com https:\/\/td.doubleclick.net; report-uri \/csp-report.php?v=3","count":1},{"content-security-policy-report-only":" script-src 'unsafe-inline' 'unsafe-eval' 'self' *.sleekplan.com *.mspbackups.com https:\/\/unpkg.com\/ionicons@4.5.10-0\/dist\/ionicons\/ d1f8f9xcsvx3ha.cloudfront.net posthog.mon.mspbackups.com https:\/\/salesiq.zohopublic.com https:\/\/static.zohocdn.com https:\/\/js.zohocdn.com https:\/\/momentjs.com\/downloads\/moment-timezone-with-data.min.js https:\/\/momentjs.com\/downloads\/moment.js https:\/\/code.jquery.com\/jquery-3.5.1.min.js https:\/\/accounts.google.com\/gsi\/client https:\/\/alcdn.msauth.net\/browser\/2.28.1\/js\/msal-browser.min.js; report-uri \/csp-violation-report-endpoint\/","count":1},{"content-security-policy-report-only":" script-src-elem data: 'self' 'unsafe-inline' 'report-sample' 'unsafe-eval' https:\/\/web-sdk.aptrinsic.com https:\/\/s7.addthis.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/host.hotjar.com https:\/\/www.google.com https:\/\/assets.adobedtm.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/analytics.google.com https:\/\/www.googletagmanager.com https:\/\/www.googleapis.com https:\/\/*.newrelic.com https:\/\/*.nr-data.net https:\/\/geostag.cardinalcommerce.com https:\/\/1eafstag.cardinalcommerce.com https:\/\/geoapi.cardinalcommerce.com https:\/\/1eafapi.cardinalcommerce.com https:\/\/songbird.cardinalcommerce.com https:\/\/www.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/www.paypalobjects.com https:\/\/t.paypal.com https:\/\/vimeo.com https:\/\/www.vimeo.com https:\/\/*.vimeocdn.com https:\/\/*.youtube.com https:\/\/use.typekit.net https:\/\/*.typekit.net https:\/\/*.magento-ds.com https:\/\/*.cloudflare.com https:\/\/*.gstatic.com https:\/\/js.braintreegateway.com https:\/\/assets.braintreegateway.com https:\/\/api.braintreegateway.com https:\/\/api.sandbox.braintreegateway.com https:\/\/client-analytics.braintreegateway.com https:\/\/client-analytics.sandbox.braintreegateway.com https:\/\/checkout.razorpay.com https:\/\/*.facebook.net https:\/\/*.avada.io; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.cloudflare.com maxcdn.bootstrapcdn.com https:\/\/maxcdn.bootstrapcdn.com\/ https:\/\/maxcdn.bootstrapcdn.com *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com 'self' data: play.google.com api.razorpay.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net https:\/\/cm.everesttech.net https:\/\/*.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com https:\/\/*.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self'  https:\/\/www.magecomp.com https:\/\/assets.adobedtm.com https:\/\/amcglobal.sc.omtrdc.net https:\/\/dpm.demdex.net https:\/\/widgets.magentocommerce.com https:\/\/www.googleadservices.com https:\/\/www.google.co.in https:\/\/www.google-analytics.com https:\/\/googleads.g.doubleclick.net https:\/\/www.google.com https:\/\/bid.g.doubleclick.net https:\/\/analytics.google.com https:\/\/www.googletagmanager.com https:\/\/*.ftcdn.net https:\/\/*.behance.net https:\/\/www.paypal.com https:\/\/www.paypalobjects.com https:\/\/fpdbs.paypal.com https:\/\/fpdbs.sandbox.paypal.com https:\/\/*.vimeocdn.com https:\/\/p.typekit.net https:\/\/*.gstatic.com https:\/\/validator.swagger.io https:\/\/cdn.razorpay.com https:\/\/*.facebook.com https:\/\/firebasestorage.googleapis.com https:\/\/assets.braintreegateway.com https:\/\/checkout.paypal.com cdn.razorpay.com *.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ 'self' data: 'report-sample' 'unsafe-inline' 'unsafe-eval' https:\/\/*.cloudflare.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/assets.adobedtm.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com tagmanager.google.com https:\/\/*.facebook.net https:\/\/js.braintreegateway.com https:\/\/checkout.razorpay.com checkout.razorpay.com *.googletagmanager.com *.facebook.net *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com 'self' data: 'report-sample' *.cloudflare.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/www.bunnycart.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com 'self' data: *.hotjar.io wss:\/\/ws.hotjar.com https:\/\/*.hotjar.io https:\/\/*.facebook.com https:\/\/www.facebook.com https:\/\/www.facebook.com\/*\/ https:\/\/lumberjack-cx.razorpay.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com *.google-analytics.com https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com https:\/\/www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" font-src *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.reviews.io *.reviews.co.uk *.paymentexpress.com *.windcave.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app https:\/\/static.addtoany.com\/ *.instagram.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.reviews.io *.reviews.co.uk *.weltpixel.com *.paymentexpress.com *.windcave.com https:\/\/www.googleadservices.com https:\/\/www.gstatic.com https:\/\/www.google.com https:\/\/popup.laybuy.com https:\/\/td.doubleclick.net https:\/\/placement-api.sandbox.afterpay.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.cdninstagram.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/maps.gstatic.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.paymentexpress.com *.windcave.com https:\/\/stats.g.doubleclick.net https:\/\/www.facebook.com https:\/\/www.google.co.nz https:\/\/www.google.com https:\/\/integration-assets.laybuy.com 'self' data: t.zip.co static.zipmoney.com.au static.zip.co *.gstatic.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app https:\/\/static.addtoany.com\/ *.instagram.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/maps.googleapis.com cdn.jsdelivr.net *.reviews.io *.reviews.co.uk *.paymentexpress.com *.windcave.com https:\/\/chimpstatic.com https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/bpi.zip.co static.zipmoney.com.au static.zip.co zip.co *.googletagmanager.com *.googleadservices.com *.google.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app https:\/\/static.klaviyo.com *.fontawesome.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com https:\/\/stats.addtoany.com\/menu www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/maps.googleapis.com *.cloudfront.net *.reviews.io *.reviews.co.uk https:\/\/www.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/google.com https:\/\/www.googletagmanager.com https:\/\/bpi.zip.co *.google-analytics.com *.analytics.google.com *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-Qf39+C1LqIiwoHMDj4yeYQ==' 'sha256-7PAskhS3cHXXYcT9zKDcOhYxpwJo4loI0JngjVANGCU=' 'strict-dynamic' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/js.hs-scripts.com https:\/\/js-eu1.hs-scripts.com https:\/\/js.hsforms.net https:\/\/js.hscollectedforms.net https:\/\/js-eu1.hs-analytics.net https:\/\/js-eu1.hs-banner.com https:\/\/js-eu1.hscta.net https:\/\/js-eu1.usemessages.com https:\/\/static.hsappstatic.net https:\/\/challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/region1.google-analytics.com https:\/\/pagead2.googlesyndication.com https:\/\/api.hubapi.com https:\/\/api-eu1.hubapi.com https:\/\/api-eu1.hubspot.com https:\/\/api.hsforms.com https:\/\/cta-eu1.hubspot.com https:\/\/track-eu1.hubspot.com https:\/\/forms.hscollectedforms.net https:\/\/forms-eu1.hscollectedforms.net https:\/\/exceptions-eu1.hubspot.com https:\/\/js-eu1.hs-banner.com https:\/\/js-eu1.hscta.net wss:\/\/js-eu1.usemessages.com https:\/\/challenges.cloudflare.com; frame-src 'self' https:\/\/www.googletagmanager.com https:\/\/challenges.cloudflare.com https:\/\/www.loom.com https:\/\/cdn.loom.com https:\/\/www.youtube-nocookie.com https:\/\/www.youtube.com https:\/\/meetings-eu1.hubspot.com https:\/\/app-eu1.hubspot.com https:\/\/js-eu1.usemessages.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; report-uri \/api\/csp-report; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudflare.com *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.facebook.com *.twitter.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com *.cloudfront.net *.baen.com *.twitter.com *.twimg.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflare.com *.twitter.com *.twimg.com *.fontawesome.com *.facebook.net *.authorize.net *.simpli.fi js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.gstatic.com *.twitter.com *.twimg.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.authorize.net *.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self';               script-src 'self'                'unsafe-inline' 'unsafe-eval'                 https:\/\/www.googletagmanager.com                 https:\/\/*.google-analytics.com                 https:\/\/www.gstatic.com                 https:\/\/maps.googleapis.com                 https:\/\/static.hotjar.com                 https:\/\/script.hotjar.com                 https:\/\/s.ytimg.com                 https:\/\/*.googlesyndication.com                 https:\/\/*.jsdelivr.net                 https:\/\/*.linkedin.net                 https:\/\/*.linkedin.com                 https:\/\/*.securesitetray.com                 https:\/\/*.livechatinc.com                 https:\/\/*.xg4ken.com                 https:\/\/*.cudasvc.com                 https:\/\/*.facebook.net                 https:\/\/*.facebook.com                 https:\/\/*.youtube.com                 https:\/\/securesitetray.com                 https:\/\/api.ipstack.com                 https:\/\/*.cloudflare.com                 https:\/\/*.scene7.com                 https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com                 https:\/\/*.salesforce.com                 https:\/\/www.beian.suzhou.gov.cn                 https:\/\/*.bdimg.com                 https:\/\/*.baidu.com                 https:\/\/*.bing.com                 https:\/\/*.bing.net                 https:\/\/*.clarity.ms                 https:\/\/*.marchex.io                 https:\/\/*.licdn.com                 https:\/\/*.plavxml.com                 https:\/\/*.cookielaw.org                 https:\/\/*.onetrust.com                 https:\/\/*.adsrvr.org                 https:\/\/*.adform.net                 https:\/\/*.gammaplatform.com;               style-src 'self' https:\/\/fonts.googleapis.com https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/*.scene7.com https:\/\/*.cookielaw.org https:\/\/*.onetrust.com https:\/\/*.googletagmanager.com 'unsafe-inline';               font-src 'self' https:\/\/fonts.gstatic.com https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/*.cookielaw.org https:\/\/*.onetrust.com;               img-src 'self' data:                 https:\/\/*.google-analytics.com                 https:\/\/maps.googleapis.com                 https:\/\/maps.gstatic.com                 https:\/\/*.hotjar.com                 https:\/\/i.ytimg.com                 https:\/\/*.linkedin.net                 https:\/\/*.linkedin.com                 https:\/\/*.facebook.com                 https:\/\/*.googletagmanager.com                 https:\/\/*.scene7.com                 https:\/\/*.facebook.net                 https:\/\/*.crown.com                 https:\/\/*.salesforce.com                 https:\/\/*.bdimg.com                 https:\/\/*.baidu.com                 https:\/\/*.gammaplatform.com                 https:\/\/*.doubleclick.net                 https:\/\/*.googlesyndication.com                 https:\/\/*.bing.net                 https:\/\/*.bing.com                 https:\/\/*.seadform.net                 https:\/\/*.clarity.ms                 https:\/\/*.cookielaw.org                 https:\/\/*.onetrust.com                 https:\/\/www.beian.suzhou.gov.cn;               connect-src 'self'                 https:\/\/*.google-analytics.com                 https:\/\/region1.analytics.google.com                 https:\/\/*.hotjar.com                 https:\/\/*.hotjar.io                 wss:\/\/ws.hotjar.com                 https:\/\/*.salesforce.com                 https:\/\/maps.googleapis.com                 https:\/\/*.google.com                 https:\/\/*.googlesyndication.com                 https:\/\/*.googletagmanager.com                 https:\/\/*.jsdelivr.net                 https:\/\/*.youtube.com                 https:\/\/*.linkedin.net                 https:\/\/*.linkedin.com                 https:\/\/*.crown.com                 https:\/\/*.facebook.com                 https:\/\/api.caeiox1tx-crownequi1-s1-public.model-t.cc.commerce.ondemand.com                 https:\/\/api.caeiox1tx-crownequi1-d1-public.model-t.cc.commerce.ondemand.com                 https:\/\/*.googleapis.com                 https:\/\/linkprotect.cudasvc.com                 https:\/\/*.scene7.com                 https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com                 https:\/\/*.baidu.com                 https:\/\/*.livechatinc.com                 https:\/\/api.ipstack.com                 https:\/\/*.googleadservices.com                 https:\/\/*.doubleclick.net                 https:\/\/*.cookielaw.org                 https:\/\/*.onetrust.com                 https:\/\/*.bing.com                 https:\/\/*.bing.net                 https:\/\/*.clarity.ms                 https:\/\/*.adsrvr.org                 https:\/\/*.adform.net                 https:\/\/*.google.com.gt;               frame-src 'self'                 https:\/\/www.googletagmanager.com                 https:\/\/*.google-analytics.com                 https:\/\/www.google.com                 https:\/\/maps.googleapis.com                 https:\/\/*.hotjar.com                 https:\/\/*.salesforce.com                 https:\/\/*.crown.com                 https:\/\/*.facebook.com                 https:\/\/www.youtube.com                 https:\/\/*.livechatinc.com                 https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com                 https:\/\/*.baidu.com                 https:\/\/www.youtube-nocookie.com                 https:\/\/*.cookielaw.org                 https:\/\/*.onetrust.com                 https:\/\/*.adsrvr.org                 https:\/\/*.adform.net                 https:\/\/*.doubleclick.net;               object-src 'none';               base-uri 'self';               form-action 'self' https:\/\/*.facebook.com https:\/\/*.salesforce.com;               frame-ancestors 'self';               upgrade-insecure-requests;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-JV7UF1e5-vVITT-gGu525w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/dte.maharashtra.gov.in\/; script-src 'self' https:\/\/dte.maharashtra.gov.in\/; style-src 'self' https:\/\/dte.maharashtra.gov.in\/; img-src 'self' data: https:\/\/dte.maharashtra.gov.in\/; connect-src 'self' https:\/\/dte.maharashtra.gov.in\/; font-src 'self' https:\/\/dte.maharashtra.gov.in\/; media-src 'self' https:\/\/dte.maharashtra.gov.in\/; frame-ancestors 'self'; frame-src 'none' https:\/\/dte.maharashtra.gov.in\/; worker-src https:\/\/dte.maharashtra.gov.in\/; manifest-src https:\/\/dte.maharashtra.gov.in\/","count":1},{"content-security-policy-report-only":" frame-ancestors 'self' www.kuntarekrytointi.fi; script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com apis.google.com use.typekit.net cdn.ontame.io eu.posthog.com eu-assets.i.posthog.com consentcdn.cookiebot.com consent.cookiebot.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com use.typekit.net; font-src 'self' fonts.gstatic.com use.typekit.net; img-src 'self' data: blob: p.typekit.net i.ytimg.com dreambroker.com","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; manifest-src 'self'; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https:\/\/*.leakshaven.com https:\/\/*.egirlshaven.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/static.cloudflareinsights.com https:\/\/challenges.cloudflare.com https:\/\/www.clarity.ms https:\/\/*.clarity.ms; style-src 'self' 'unsafe-inline' https:\/\/cdn.jsdelivr.net https:\/\/www.gstatic.com; img-src 'self' data: blob: https:\/\/*.leakshaven.com https:\/\/*.egirlshaven.com https:\/\/*.imgcrate.com https:\/\/ts.buzzheavier.com https:\/\/cdn.jsdelivr.net https:\/\/placehold.co https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com https:\/\/*.g.doubleclick.net https:\/\/www.google.com https:\/\/www.google.de https:\/\/www.google.co.uk https:\/\/www.google.fr https:\/\/www.google.es https:\/\/www.google.it https:\/\/www.google.nl https:\/\/www.google.pl https:\/\/www.google.se https:\/\/www.google.ch https:\/\/www.google.at https:\/\/www.google.be https:\/\/www.google.dk https:\/\/www.google.no https:\/\/www.google.fi https:\/\/www.google.ie https:\/\/www.google.pt https:\/\/www.google.cz https:\/\/www.google.gr https:\/\/www.google.ca https:\/\/www.google.com.au https:\/\/www.google.com.br https:\/\/www.google.com.mx https:\/\/www.google.co.in https:\/\/www.google.co.jp https:\/\/www.google.ru https:\/\/www.clarity.ms https:\/\/*.clarity.ms https:\/\/c.bing.com; font-src 'self' data: https:\/\/www.gstatic.com; media-src 'self' blob: data: https:\/\/*.leakshaven.com https:\/\/*.egirlshaven.com https:\/\/*.imgcrate.com https:\/\/ts.buzzheavier.com; connect-src 'self' https:\/\/*.leakshaven.com https:\/\/*.egirlshaven.com https:\/\/*.syntheticacloud.com https:\/\/*.imgcrate.com https:\/\/ts.buzzheavier.com https:\/\/cdn.jsdelivr.net https:\/\/placehold.co https:\/\/photon.komoot.io https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.g.doubleclick.net https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/static.cloudflareinsights.com https:\/\/cloudflareinsights.com https:\/\/challenges.cloudflare.com https:\/\/www.clarity.ms https:\/\/*.clarity.ms https:\/\/c.bing.com wss:\/\/*.leakshaven.com wss:\/\/*.egirlshaven.com; frame-src 'self' https:\/\/*.leakshaven.com https:\/\/*.egirlshaven.com https:\/\/www.google.com https:\/\/challenges.cloudflare.com https:\/\/www.googletagmanager.com https:\/\/www.clarity.ms; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src * 'unsafe-inline' data: blob:; report-uri \"https:\/\/leaderpost.com\/wp-json\/pmd\/v1\/csp-report\"; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" child-src blob:; connect-src 'self' blob: data: wss:\/\/*.bayer04.de wss:\/\/*.b04itpg.de https:\/\/*.akamaized.net https:\/\/*.azureedge.net https:\/\/*.b04itpg.de https:\/\/*.bayer04.de https:\/\/*.cmp.usercentrics.eu https:\/\/*.ecn-ldr.de https:\/\/*.econda-monitor.de https:\/\/*.flockler.com https:\/\/*.gstatic.com https:\/\/*.sportradar.com https:\/\/*.sportradar.dev https:\/\/*.usercentrics.eu https:\/\/*.youboranqs01.com https:\/\/cdn.jsdelivr.net https:\/\/eu-api.friendlycaptcha.eu https:\/\/gnsnpaw.com https:\/\/lma.npaw.com https:\/\/widgets.crosssell.info https:\/\/api.collectid.io; default-src 'self' https:\/\/*.bayer04.de https:\/\/*.b04itpg.de; font-src 'self' https:\/\/*.b04itpg.de https:\/\/*.bayer04.de https:\/\/fonts.gstatic.com; frame-ancestors 'self' https:\/\/lr.msprod.phimobile.com file:; frame-src https:\/\/*.b04itpg.de https:\/\/*.bayer04.de https:\/\/*.facebook.com https:\/\/*.flockler.com https:\/\/*.google.com https:\/\/*.matterport.com https:\/\/*.youtube.com https:\/\/bayer04.limesurvey.net https:\/\/copilotstudio.microsoft.com https:\/\/meisterwerk.podigee.io https:\/\/open.spotify.com https:\/\/virtual.bundesliga.com https:\/\/player.podigee-cdn.net; img-src 'self' blob: data: https:\/\/*.azureedge.net https:\/\/*.b04itpg.de https:\/\/*.bayer04.de https:\/\/*.cdninstagram.com https:\/\/*.cmp.usercentrics.eu https:\/\/*.econda-monitor.de https:\/\/*.facebook.com https:\/\/*.facebook.net https:\/\/*.fbcdn.net https:\/\/*.flockler.com https:\/\/*.sportradar.com https:\/\/*.sportradar.dev https:\/\/*.tiktokcdn-eu.com https:\/\/*.usercentrics.eu https:\/\/*.wt-safetag.com https:\/\/b04mediastorageprod.blob.core.windows.net https:\/\/fbc.wcfbc.net https:\/\/fl-cdn.scdn1.secure.raxcdn.com https:\/\/flockler.com https:\/\/social-proxy.flocklr.com https:\/\/*.twimg.com; media-src 'self' blob: data: https:\/\/*.akamaized.net https:\/\/*.b04itpg.de https:\/\/*.bayer04.de https:\/\/*.rndfnk.com https:\/\/*.cdninstagram.com https:\/\/*.radioho.st; report-to posthog; report-uri https:\/\/us.i.posthog.com\/report\/?token=phc_CCadYkZHJuUEn207lzt5jWutTvVtF9lDjQtkhFQnsSQ&v=1; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https:\/\/*.b04itpg.de https:\/\/*.bayer04.de https:\/\/*.cmp.usercentrics.eu https:\/\/*.ecn-ldr.de https:\/\/*.econda-monitor.de https:\/\/*.facebook.com https:\/\/*.facebook.net https:\/\/*.flockler.com https:\/\/*.gstatic.com https:\/\/*.sportradar.com https:\/\/*.sportradar.dev https:\/\/*.usercentrics.eu https:\/\/*.wt-safetag.com; style-src 'self' 'unsafe-inline' https:\/\/*.b04itpg.de https:\/\/*.bayer04.de https:\/\/*.cmp.usercentrics.eu https:\/\/*.econda-monitor.de https:\/\/*.facebook.com https:\/\/*.facebook.net https:\/\/*.flockler.com https:\/\/*.sportradar.com https:\/\/*.sportradar.dev https:\/\/*.usercentrics.eu https:\/\/*.wt-safetag.com; worker-src blob:;","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/datadryad.org; connect-src 'self' https: https:\/\/blog.datadryad.org https:\/\/*.google-analytics.com https:\/\/cdn.jsdelivr.net https:\/\/*.awswaf.com https:\/\/*.datacite.org https:\/\/*.amazonaws.com https:\/\/doi.org https:\/\/datadryad.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/cdnjs.cloudflare.com https:\/\/www.google.com https:\/\/www.recaptcha.net https:\/\/www.gstatic.com https:\/\/datadryad.org; script-src-elem 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.awswaf.com https:\/\/*.proxy.hfzk.net.cn https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/js.stripe.com https:\/\/www.google.com https:\/\/www.recaptcha.net https:\/\/www.gstatic.com https:\/\/datadryad.org; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/*.googleapis.com https:\/\/datadryad.org; style-src-elem 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/*.googleapis.com https:\/\/datadryad.org; style-src-attr 'unsafe-inline'; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/fonts.gstatic.cn https:\/\/*.googleapis.com chrome-extension: moz-extension: safari-web-extension: https:\/\/*.proxy.hfzk.net.cn https:\/\/cdn.scite.ai https:\/\/datadryad.org; img-src 'self' https: data:; media-src 'self' data: https:\/\/datadryad.org; worker-src 'self' blob: https:\/\/cdnjs.cloudflare.com https:\/\/datadryad.org; child-src blob:; frame-src 'self' https:; object-src 'none'; report-uri \/csp-violation-report-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'nonce-nr4pK0JjZ+a9dIlKtjydqA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri \/Handlers\/CSPHandler.ashx","count":1},{"content-security-policy-report-only":" default-src 'self';     base-uri 'self';     object-src 'none';     frame-ancestors 'self';     upgrade-insecure-requests;     form-action 'self'      https:\/\/accounts.google.com      https:\/\/login.microsoftonline.com      https:\/\/pi.pardot.com;     script-src 'self' 'unsafe-eval'      https:\/\/www.googletagmanager.com      https:\/\/www.google-analytics.com      https:\/\/analytics.google.com      https:\/\/googleads.g.doubleclick.net      https:\/\/www.google.com      https:\/\/scripts.clarity.ms      https:\/\/j.clarity.ms https:\/\/www.clarity.ms      https:\/\/dc.services.visualstudio.com      https:\/\/az416426.vo.msecnd.net      https:\/\/connect.facebook.net      https:\/\/static.ads-twitter.com      https:\/\/snap.licdn.com      https:\/\/px.ads.linkedin.com      https:\/\/js.zi-scripts.com      https:\/\/ws.zoominfo.com      https:\/\/pi.pardot.com      https:\/\/goto.blackbox.com      https:\/\/ok.blackbox.com https:\/\/okt.to      https:\/\/j.6sc.co      https:\/\/scatec.io      https:\/\/t.channeladvisor.com      https:\/\/cdnjs.cloudflare.com      https:\/\/bbcdn1.azureedge.net      https:\/\/www.blackbox.com;     script-src-elem 'self' 'unsafe-inline'      https:\/\/www.googletagmanager.com       https:\/\/www.google-analytics.com       https:\/\/analytics.google.com      https:\/\/googleads.g.doubleclick.net       https:\/\/www.google.com      https:\/\/scripts.clarity.ms       https:\/\/j.clarity.ms       https:\/\/www.clarity.ms      https:\/\/dc.services.visualstudio.com       https:\/\/az416426.vo.msecnd.net      https:\/\/connect.facebook.net       https:\/\/static.ads-twitter.com      https:\/\/snap.licdn.com       https:\/\/px.ads.linkedin.com      https:\/\/js.zi-scripts.com       https:\/\/ws.zoominfo.com       https:\/\/pi.pardot.com      https:\/\/goto.blackbox.com       https:\/\/ok.blackbox.com https:\/\/okt.to      https:\/\/j.6sc.co       https:\/\/scatec.io       https:\/\/t.channeladvisor.com      https:\/\/cdnjs.cloudflare.com       https:\/\/bbcdn1.azureedge.net       https:\/\/www.blackbox.com      https:\/\/ajax.googleapis.com      https:\/\/recaptcha.net      https:\/\/www.gstatic.com      https:\/\/cdn.blackbox.com      https:\/\/content.etilize.com;     script-src-attr 'self' 'unsafe-inline';     connect-src 'self'      https:\/\/www.googletagmanager.com      https:\/\/www.google-analytics.com      https:\/\/analytics.google.com      https:\/\/googleads.g.doubleclick.net      https:\/\/scripts.clarity.ms      https:\/\/j.clarity.ms      https:\/\/www.clarity.ms      https:\/\/dc.services.visualstudio.com      https:\/\/connect.facebook.net      https:\/\/www.facebook.com      https:\/\/static.ads-twitter.com      https:\/\/analytics.twitter.com      https:\/\/t.co      https:\/\/snap.licdn.com      https:\/\/px.ads.linkedin.com      https:\/\/js.zi-scripts.com      https:\/\/ws.zoominfo.com      https:\/\/pi.pardot.com      https:\/\/goto.blackbox.com      https:\/\/ok.blackbox.com       https:\/\/okt.to      https:\/\/j.6sc.co       https:\/\/b.6sc.co       https:\/\/c.6sc.co       https:\/\/ipv6.6sc.co      https:\/\/scatec.io       https:\/\/t.channeladvisor.com      https:\/\/ekr.zdassets.com       https:\/\/static.zdassets.com      https:\/\/ajax.googleapis.com      https:\/\/www.google.com      https:\/\/recaptcha.net      https:\/\/az416426.vo.msecnd.net      https:\/\/bbcdn1.azureedge.net;     style-src 'self' 'unsafe-inline'       https:\/\/fonts.googleapis.com;     font-src 'self' https:      https:\/\/fonts.gstatic.com;     img-src 'self' data:      https:\/\/cdn.blackbox.com       https:\/\/*.azureedge.net       https:\/\/*.azurefd.net      https:\/\/bbcdn1.azureedge.net       https:\/\/bbnscdn.azureedge.net      https:\/\/bbpimassetsp-aza7efghcfa8c2dh.a03.azurefd.net      https:\/\/b.6sc.co       https:\/\/t.co       https:\/\/www.google.com      https:\/\/googleads.g.doubleclick.net       https:\/\/px.ads.linkedin.com       https:\/\/recaptcha.net      https:\/\/www.googletagmanager.com;     frame-src 'self'      https:\/\/recaptcha.net       https:\/\/www.google.com       https:\/\/www.gstatic.com      https:\/\/www.googletagmanager.com","count":1},{"content-security-policy-report-only":" default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: https:\/\/*.hubspot.com https:\/\/*.hubapi.com https:\/\/*.hsforms.com https:\/\/*.hs-scripts.com https:\/\/*.hscollectedforms.net https:\/\/*.hs-banner.com https:\/\/*.hubspotusercontent.com https:\/\/*.hubspotusercontent-eu1.net https:\/\/js.hs-analytics.net https:\/\/js.hsforms.net https:\/\/api.hsforms.com https:\/\/api.hubapi.com https:\/\/*.hsleadflows.net https:\/\/*.hsadspixel.net https:\/\/*.hs-web-analytics.net https:\/\/static.hsappstatic.net https:\/\/cdn2.hubspot.net https:\/\/cdn.hubspot.com https:\/\/*.cloudfront.net https:\/\/cdn.jsdelivr.net https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/stats.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/cdn.cookielaw.org https:\/\/www.youtube.com; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' https: data: blob:; font-src 'self' https: data:; frame-src 'self' https: data:; connect-src 'self' https: wss: https:\/\/www.tayyarijeetki.in; media-src 'self' https: data: blob:; worker-src 'self' https: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' https:\/\/*.hubspot.com;","count":1},{"content-security-policy-report-only":" object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-jBcKmT-wfaUt0wINd88WIg' 'unsafe-inline' 'unsafe-eval' https:\/\/*.msauth.net https:\/\/*.msftauth.net https:\/\/*.msftauthimages.net https:\/\/*.msauthimages.net https:\/\/*.msidentity.com https:\/\/*.microsoftonline-p.com https:\/\/*.microsoftazuread-sso.com https:\/\/*.azureedge.net https:\/\/*.outlook.com https:\/\/*.office.com https:\/\/*.office365.com https:\/\/*.microsoft.com https:\/\/*.bing.com 'report-sample'; report-uri https:\/\/csp.microsoft.com\/report\/ESTS-UX-All","count":1},{"content-security-policy-report-only":" default-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' ws: *.nexiuslearning.com *.google-analytics.com *.etitan.hu *.googletagmanager.com *.googleapis.com *.gstatic.com  *.google.com *.bootstrapcdn.com *.extremenet.hu stats.g.doubleclick.net www.youtube-nocookie.com; report-uri https:\/\/etitancsp.azurewebsites.net\/api\/eTitanCSP;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-qV1CUsNN3D7V4F7F1JDeSw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" base-uri self; connect-src self https:\/\/opluswork.com https:\/\/www.opluswork.com https:\/\/api.iconify.design https:\/\/js.hsforms.net https:\/\/api.youcanbook.me https:\/\/storage.googleapis.com https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/*.hscollectedforms.net https:\/\/static.hsappstatic.net https:\/\/www.google.com https:\/\/www.google.co.jp https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/stats.g.doubleclick.net; default-src self; font-src data: self https:\/\/opluswork.com https:\/\/fonts.gstatic.com https:\/\/use.fontawesome.com https:\/\/cdnjs.cloudflare.com https:\/\/storage.googleapis.com; form-action self https:\/\/opluswork.com https:\/\/www.opluswork.com; frame-ancestors none; frame-src self https:\/\/opluswork.com https:\/\/timerex.net https:\/\/www.youtube.com https:\/\/player.vimeo.com https:\/\/oplus-support.youcanbook.me https:\/\/js.hsforms.net https:\/\/js.stripe.com https:\/\/hooks.stripe.com https:\/\/*.hubspot.com https:\/\/*.usemessages.com; img-src data: self https:\/\/opluswork.com https:\/\/filestorage.opluswork.com https:\/\/images.unsplash.com https:\/\/img.youtube.com https:\/\/i.ibb.co https:\/\/storage.googleapis.com https:\/\/www.google.com https:\/\/www.google.co.jp https:\/\/www.googletagmanager.com https:\/\/www.kingtime.jp https:\/\/www.youtube.com https:\/\/translate.google.com https:\/\/*.hubspot.com https:\/\/*.hsforms.com https:\/\/stats.g.doubleclick.net; object-src none; report-uri \/csp-report; script-src self https:\/\/opluswork.com 'nonce-wKc7KnDGkQzNpZvYNb9RLw' https:\/\/ajax.googleapis.com https:\/\/api.iconify.design https:\/\/asset.timerex.net https:\/\/cdn.tailwindcss.com https:\/\/cdnjs.cloudflare.com https:\/\/code.iconify.design https:\/\/code.jquery.com https:\/\/*.hs-scripts.com https:\/\/js.hsforms.net https:\/\/js.stripe.com https:\/\/oss.maxcdn.com https:\/\/stackpath.bootstrapcdn.com https:\/\/static.hsappstatic.net https:\/\/storage.googleapis.com https:\/\/use.fontawesome.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.hubspot.com https:\/\/*.hs-analytics.net https:\/\/*.hs-banner.com https:\/\/*.hscollectedforms.net https:\/\/*.usemessages.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.gstatic.cn https:\/\/www.recaptcha.net; style-src self https:\/\/opluswork.com 'nonce-wKc7KnDGkQzNpZvYNb9RLw' 'unsafe-inline' https:\/\/cdn.jsdelivr.net https:\/\/cdn.tailwindcss.com https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/ https:\/\/fonts.googleapis.com https:\/\/stackpath.bootstrapcdn.com https:\/\/storage.googleapis.com https:\/\/use.fontawesome.com; style-src-attr 'unsafe-inline'; style-src-elem self https:\/\/opluswork.com 'unsafe-inline' https:\/\/cdn.jsdelivr.net https:\/\/cdn.tailwindcss.com https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/ https:\/\/fonts.googleapis.com https:\/\/stackpath.bootstrapcdn.com https:\/\/storage.googleapis.com https:\/\/use.fontawesome.com","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-Ja38Y4rB-Vvw3TLUd45Exw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'https:\/\/checkout.shopflo.co' https:\/\/js.boxx.ai https:\/\/p.cquotient.com https:\/\/connect.facebook.net https:\/\/www.google-analytics.com https:\/\/unpkg.com https:\/\/www.googletagmanager.com https:\/\/cdn.cquotient.com https:\/\/code.jquery.com https:\/\/*.gokwik.co https:\/\/*.netcoresmartech.com https:\/\/*.shopflo.com https:\/\/swopstore.com 'unsafe-inline' 'unsafe-eval';  script-src-elem 'self' https:\/\/checkout.shopflo.co https:\/\/js.boxx.ai https:\/\/p.cquotient.com https:\/\/connect.facebook.net https:\/\/www.google-analytics.com https:\/\/unpkg.com https:\/\/www.googletagmanager.com https:\/\/cdn.cquotient.com https:\/\/code.jquery.com https:\/\/*.gokwik.co https:\/\/*.netcoresmartech.com https:\/\/*.shopflo.com https:\/\/swopstore.com 'unsafe-inline'; style-src 'self' https:\/\/unpkg.com https:\/\/fonts.googleapis.com 'unsafe-inline'; img-src 'self' https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.google-analytics.com https:\/\/*.shopflo.com https:\/\/*.gokwik.co https:\/\/d1pdzcnm6xgxlz.cloudfront.net https:\/\/*.salesforce.com data:; connect-src 'self' https:\/\/checkout.shopflo.co https:\/\/api.shopflo.co https:\/\/loki.boxx.ai https:\/\/wdc.netcoresmartech.com https:\/\/p.cquotient.com https:\/\/www.google-analytics.com https:\/\/*.shopflo.com https:\/\/*.gokwik.co https:\/\/*.netcoresmartech.com https:\/\/d1pdzcnm6xgxlz.cloudfront.net https:\/\/swopstore.com https:\/\/*.facebook.com https:\/\/*.facebook.net; font-src 'self' https:\/\/unpkg.com https:\/\/fonts.gstatic.com data:; manifest-src 'self' https:\/\/checkout.shopflo.co https:\/\/wdc.netcoresmartech.com; media-src 'self' https:\/\/*.shopflo.com https:\/\/*.gokwik.co https:\/\/*.netcoresmartech.com https:\/\/d1pdzcnm6xgxlz.cloudfront.net https:\/\/swopstore.com; frame-src 'self' https:\/\/*.shopflo.com https:\/\/*.gokwik.co https:\/\/*.netcoresmartech.com https:\/\/d1pdzcnm6xgxlz.cloudfront.net https:\/\/swopstore.com; report-uri \/on\/demandware.store\/Sites-MIRAI-Site\/default\/CSP-Report;","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.tagcommander.com https:\/\/cdnjs.cloudflare.com https:\/\/instant.page https:\/\/use.fontawesome.com; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' http:\/\/pero.securite-routiere.gouv.fr https:\/\/www.gstatic.com https:\/\/www.youtube.com https:\/\/s2.adform.net\/banners\/scripts\/st\/trackpoint-async.js https:\/\/server.adform.net\/Serving\/TrackPoint\/ https:\/\/cstatic.weborama.fr cdn.trustcommander.net www.googletagmanager.com https:\/\/api.dmcdn.net https:\/\/*.criteo.com https:\/\/connect.facebook.net https:\/\/cdn.tagcommander.com https:\/\/cdnjs.cloudflare.com https:\/\/instant.page https:\/\/use.fontawesome.com; style-src 'self' 'unsafe-inline' code.ionicframework.com https:\/\/cdnjs.cloudflare.com https:\/\/fonts.googleapis.com https:\/\/maxcdn.bootstrapcdn.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-qKcvu1o5oIoUrBEG-_Cd6g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-ETO1cssN7PGskoOycz9sMA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" block-all-mixed-content; report-uri \/csp\/report","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/pagead2.googlesyndication.com https:\/\/securepubads.g.doubleclick.net https:\/\/tpc.googlesyndication.com https:\/\/cdn.cookielaw.org https:\/\/connect.facebook.net https:\/\/platform.twitter.com https:\/\/www.instagram.com https:\/\/www.tiktok.com https:\/\/open.spotify.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:\/\/cdn.sanity.io https:\/\/*.googleusercontent.com https:\/\/www.google-analytics.com https:\/\/pagead2.googlesyndication.com; font-src 'self'; connect-src 'self' https:\/\/*.sanity.io https:\/\/www.google-analytics.com https:\/\/*.algolia.net https:\/\/*.algolianet.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.instagram.com https:\/\/www.tiktok.com https:\/\/open.spotify.com https:\/\/player.vimeo.com https:\/\/players.brightcove.net https:\/\/securepubads.g.doubleclick.net https:\/\/tpc.googlesyndication.com https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com https:\/\/console.googletagservices.com https:\/\/cm.g.doubleclick.net https:\/\/*.safeframe.googlesyndication.com https:\/\/ep2.adtrafficquality.google https:\/\/www.google.com https:\/\/vercel.live; media-src 'self' https:\/\/cdn.sanity.io; object-src 'none'; base-uri 'self'","count":1},{"content-security-policy-report-only":" connect-src 'self' *.amap.com:* *.amemv.com:* *.baidu.com:* *.byted-static.com *.bytedance.com *.bytedance.net *.bytednsdoc.com *.bytefcdn.com:* *.bytefcdnrd.com:* *.bytegoofy.com *.byteimg.com *.bytescm.com *.bytetcc.com *.bytetos.com *.ibytedapm.com *.shidianguji.com *.snssdk.com *.yhgfb-cn-static.com *.zijieapi.com bytescm.com bytetos.com huatuo.cn.goofy.app ibytedapm.com shidianguji.com; script-src 'nonce-fdb2187d651aaa462b80bb96de8a1b7a-argus' 'report-sample' 'self' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' *.amap.com *.amemv.com *.baidu.com *.byted-static.com *.bytedance.com *.bytedance.net *.bytednsdoc.com *.bytegecko.com *.bytegoofy.com *.bytescm.com *.bytetos.com *.ibytedapm.com *.pstatp.com *.shidianguji.com *.snssdk.com *.yhgfb-cn-static.com *.zijieapi.com bytedance.net shidianguji.com; frame-ancestors 'self' *.yongledadian.com.cn shidianguji.com *.shidianguji.com *.bytedance.net; upgrade-insecure-requests ; report-to slardar-endpoint; report-uri https:\/\/mon.zijieapi.com\/monitor_browser\/collect\/batch\/security\/?bid=welfare_book_fe; require-trusted-types-for 'script';","count":1},{"content-security-policy-report-only":" script-src 'nonce-2PcBrZQ\/Zj671qZm9jgYWA==' 'self' 'unsafe-eval' cdn.orsted.com *.googletagmanager.com *.app.cookieinformation.com cdn.appdynamics.com *.googletagmanager.com *.gstatic.com *.googleoptimize.com www.googleadservices.com *.googleapis.com *.bing.com *.doubleclick.net *.t.co *.pardot.com *.youtube.com *.linkedin.com *.twitter.com *.globenewswire.com *.23video.com delivery.twentythree.com orsted.containers.piwik.pro orsted.piwik.pro *.crazyegg.com unpkg.com cs.lf-discover.com *.puzzel.com *.arcgis.com code.jquery.com *.lfeeder.com orsted-global-graduate-programme.simplecast.com omny.fm cdnjs.cloudflare.com *.bootstrapcdn.com *.defgo.com *.defgo.net *.vimeo.com presscloud.com *.ritzau.dk *.simplecast.com *.elnet.danskenergi.dk *.sli.do *.audioboom.com *.licdn.com *.adsrvr.org *.soundcloud.com *.google.com *.google.com.my *.google.nl *.google.dk *.facebook.net;       style-src 'nonce-2PcBrZQ\/Zj671qZm9jgYWA==' 'self' cdn.orsted.com fonts.googleapis.com;       style-src-attr 'unsafe-inline' cdn.orsted.com;       img-src 'self' data: cdn.orsted.com *.azureedge.net *.youtube.com *.23video.com delivery.twentythree.com www.googletagmanager.com *.lfeeder.com *.linkedin.com *.doubleclick.net *.pardot.com;       media-src 'self' blob: cdn.orsted.com *.youtube.com *.23video.com delivery.twentythree.com;       font-src 'self' data: fonts.gstatic.com cdn.orsted.com;       frame-src 'self' *.app.cookieinformation.com *.youtube.com *.23video.com delivery.twentythree.com *.google.com *.google.nl *.googletagmanager.com *.doubleclick.net *.pardot.com;       connect-src 'self' *.app.cookieinformation.com *.euroland.com *.eum-appdynamics.com *.googletagmanager.com *.google.com *.doubleclick.net *.googleadservices.com *.crazyegg.com *.linkedin.com orsted.piwik.pro *.pardot.com *.signalfx.com;       worker-src 'self';","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri \/api\/csp-report","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-eval' 'unsafe-inline' *.thomann.fi *.thomann.de app.storyblok.com connect.facebook.net analytics.tiktok.com *.adform.net www.google-analytics.com sc-static.net s.pinimg.com www.youtube.com challenges.cloudflare.com *.payments-amazon.com www.googleadservices.com userlike-cdn-umm.b-cdn.net bat.bing.com www.googletagmanager.com www.googletagservices.com tr.snapchat.com ct.pinterest.com js.appboycdn.com *.g.doubleclick.net widgets.trustedshops.com tpc.googlesyndication.com *.clarity.ms cdn.avo.app maps.googleapis.com pagead2.googlesyndication.com ep2.adtrafficquality.google www.paypal.com; frame-src 'self' *.thomann.fi *.thomann.de *.g.doubleclick.net *.safeframe.googlesyndication.com challenges.cloudflare.com ct.pinterest.com td.doubleclick.net tpc.googlesyndication.com tr.snapchat.com www.facebook.com www.google.com www.youtube-nocookie.com www.googletagmanager.com ep2.adtrafficquality.google www.paypal.com; frame-ancestors 'self' app.storyblok.com; object-src 'none'; report-uri \/cspReport.php","count":1},{"content-security-policy-report-only":" default-src 'self' https: ; base-uri 'self' ; img-src 'self' data: https: https:\/\/px.ads.linkedin.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/s.gravatar.com https:\/\/cdn.auth0.com ; font-src 'self' data: https: ; connect-src 'self' https: https:\/\/e.vector.com https:\/\/www.etracker.de https:\/\/px.ads.linkedin.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https: ; frame-ancestors 'self' ; child-src 'self' https: ; frame-src 'self' https: https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/consent.youtube.com https:\/\/td.doubleclick.net ; worker-src 'self' blob: https: ; manifest-src 'self' https: ; object-src 'none' ; form-action 'self' ; media-src 'self' https: youtube.com ; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/e.vector.com https:\/\/code.etracker.com https:\/\/snap.licdn.com https:\/\/www.googletagmanager.com https:\/\/www.googleadservices.com https:\/\/www.gstatic.com https:\/\/*.azureedge.net https:\/\/www.google.com https:\/\/cdn.jsdelivr.net ; script-src-elem 'self' 'unsafe-inline' https:\/\/e.vector.com https:\/\/code.etracker.com https:\/\/snap.licdn.com https:\/\/www.googletagmanager.com https:\/\/www.googleadservices.com https:\/\/www.gstatic.com https:\/\/*.azureedge.net https:\/\/www.google.com https:\/\/cdn.jsdelivr.net ; upgrade-insecure-requests ;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; media-src 'self' blob: https:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:","count":1},{"content-security-policy-report-only":" default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'nonce-b2ee8166-61c0-4ab1-8e69-9f46d00330e9' 'self' 'strict-dynamic'; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/*.aptrinsic.com https:\/\/*.bevylabs.com https:\/\/*.osano.com https:\/\/*.brainfi.sh; font-src 'self' data: https:\/\/*.bevylabs.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/res.cloudinary.com https:\/\/consent.trustarc.com https:\/\/*.brainfi.sh; img-src 'self' data: blob: https:\/\/unpkg.com https:\/\/*.aptrinsic.com https:\/\/*.bevylabs.com https:\/\/*.cloudinary.com https:\/\/*.facebook.com https:\/\/*.google-analytics.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/storage.googleapis.com https:\/\/*.googleusercontent.com https:\/\/*.googletagmanager.com https:\/\/px.ads.linkedin.com https:\/\/www.googletagmanager.com https:\/\/www.startupgrind.com https:\/\/image.mux.com https:\/\/img.youtube.com https:\/\/i.ytimg.com https:\/\/*.vidyard.com https:\/\/i.vimeocdn.com https:\/\/cdn.bizible.com https:\/\/*.lrkt-in.com https:\/\/*.litix.io https:\/\/consent.trustarc.com https:\/\/cdn.prod.website-files.com https:\/\/*.brainfi.sh https:\/\/*.adroll.com https:\/\/ml314.com https:\/\/x.bidswitch.net https:\/\/pixel.tapad.com https:\/\/pixel.rubiconproject.com https:\/\/ps.eyeota.net https:\/\/idsync.rlcdn.com https:\/\/dsum-sec.casalemedia.com https:\/\/us-u.openx.net https:\/\/sync.outbrain.com https:\/\/sync.taboola.com https:\/\/eb2.3lift.com https:\/\/image2.pubmatic.com https:\/\/ib.adnxs.com https:\/\/secure.adnxs.com https:\/\/match.adsrvr.org https:\/\/t.co https:\/\/*.twitter.com https:\/\/*.ads-twitter.com https:\/\/*.reddit.com https:\/\/*.redditstatic.com https:\/\/alb.reddit.com https:\/\/*.hubspot.com https:\/\/*.hubapi.com https:\/\/track.hubspot.com https:\/\/www.google.com.mx https:\/\/www.google.com.ph https:\/\/www.google.co.uk https:\/\/www.google.fr https:\/\/www.google.nl https:\/\/www.google.es https:\/\/www.google.it https:\/\/www.google.pt https:\/\/www.google.co.cr https:\/\/www.google.co.ke https:\/\/www.google.com.ar https:\/\/www.google.com.co https:\/\/www.google.com.eg https:\/\/www.google.com.pe https:\/\/www.google.sk https:\/\/www.google.kg; frame-src 'self' https:\/\/*.cloud.looker.com https:\/\/www.google.com\/maps\/embed\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/recaptcha.google.com\/recaptcha\/ https:\/\/*.osano.com https:\/\/*.youtube.com https:\/\/*.youtube-nocookie.com https:\/\/*.exceedlms.com https:\/\/embed-cdn.spotifycdn.com https:\/\/exceedlms.com https:\/\/js.stripe.com\/ https:\/\/player.vimeo.com https:\/\/static.elfsight.com\/platform\/platform.js https:\/\/td.doubleclick.net\/ https:\/\/www.slideshare.net\/ https:\/\/bevywidgets.com https:\/\/play.vidyard.com https:\/\/*.googletagmanager.com https:\/\/stream.mux.com https:\/\/*.brainfi.sh; connect-src 'self' blob: data: wss: https:\/\/*.algolia.io https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/*.aptrinsic.com https:\/\/*.bevylabs.com https:\/\/*.cloudinary.com https:\/\/*.google-analytics.com https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.lr-ingest.io https:\/\/*.logrocket.io https:\/\/*.lrkt-in.com https:\/\/*.mux.com https:\/\/*.litix.io https:\/\/*.osano.com https:\/\/*.posthog.com https:\/\/*.rollbar.com https:\/\/*.stripe.com https:\/\/*.zdassets.com https:\/\/*.zendesk.com https:\/\/*.daily.co https:\/\/*.googleapis.com https:\/\/*.pluot.blue https:\/\/chat.stream-io-api.com https:\/\/px.ads.linkedin.com https:\/\/stats.g.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/*.mktoresp.com https:\/\/*.fides-cdn.ethyca.com https:\/\/*.ethyca.com https:\/\/*.adroll.com https:\/\/*.brainfi.sh wss:\/\/*.brainfi.sh https:\/\/*.reddit.com https:\/\/*.redditstatic.com https:\/\/*.hubspot.com https:\/\/*.hubapi.com https:\/\/*.hs-scripts.com https:\/\/*.hsadspixel.net https:\/\/*.hs-banner.com https:\/\/*.hs-analytics.net https:\/\/*.hotjar.com https:\/\/*.hotjar.io https:\/\/*.googlesyndication.com https:\/\/www.google.com.mx https:\/\/www.google.com.ph https:\/\/www.google.co.uk https:\/\/www.google.fr https:\/\/www.google.nl https:\/\/www.google.es https:\/\/www.google.it https:\/\/www.google.pt https:\/\/www.google.co.cr https:\/\/www.google.co.ke https:\/\/www.google.com.ar https:\/\/www.google.com.co https:\/\/www.google.com.eg https:\/\/www.google.com.pe https:\/\/www.google.sk https:\/\/www.google.kg; media-src 'self' blob: https:\/\/*.mux.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https:\/\/*.bevy.com; upgrade-insecure-requests; report-uri \/api\/csp-report\/","count":1},{"content-security-policy-report-only":" script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/ajax.googleapis.com\/ajax\/libs\/jquery\/3.5.1\/jquery.min.js https:\/\/apis.google.com\/js\/api.js https:\/\/assets.revenuehero.io\/scheduler.min.js https:\/\/bat.bing.com\/bat.js https:\/\/bat.bing.com\/p\/action\/ https:\/\/bcrw.apple.com https:\/\/cdn.amplitude.com\/libs\/amplitude-4.2.1-min.gz.js https:\/\/cdn.heapanalytics.com\/js\/heap-3300992513.js https:\/\/cdn.jsdelivr.net\/npm\/emoji-picker-element@%5E1\/ https:\/\/cdn.omniconvert.com https:\/\/connect.facebook.net\/en_US\/fbevents.js https:\/\/connect.facebook.net\/signals\/config\/911812568926572 https:\/\/ct.capterra.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/googleads.g.doubleclick.net\/pagead\/viewthroughconversion\/936719971\/ https:\/\/heymarket.chilipiper.com\/concierge-js\/cjs\/concierge.js https:\/\/hubspot.clearbit.com\/v1\/forms\/pk_a581c4d2aac522c5c0c5eaf9046b399d\/forms.js https:\/\/play.vidyard.com\/ https:\/\/reveal.clearbit.com\/v1\/companies\/reveal https:\/\/snap.licdn.com\/li.lms-analytics\/insight.min.js https:\/\/snap.licdn.com\/li.lms-analytics\/insight.old.min.js https:\/\/stackpath.bootstrapcdn.com https:\/\/tag.clearbitscripts.com\/v1\/pk_a581c4d2aac522c5c0c5eaf9046b399d\/ https:\/\/widget.heymarket.com\/heymk-widget.bundle.js https:\/\/www.clickcease.com\/monitor\/stat.js https:\/\/www.googletagmanager.com\/gtm.js https:\/\/www.googletagmanager.com\/gtag\/ https:\/\/x.clearbitjs.com https:\/\/*.clarity.ms\/ https:\/\/*.contentsquare.net\/ https:\/\/*.hs-analytics.net https:\/\/*.hs-banner.com\/v2\/9234745\/banner.js https:\/\/*.hs-scripts.com\/9234745.js https:\/\/*.hscollectedforms.net\/ https:\/\/*.hsforms.com\/ https:\/\/*.hsforms.net\/forms\/v2.js; connect-src 'self' https:\/\/ad.doubleclick.net https:\/\/api.amplitude.com https:\/\/app.clearbit.com https:\/\/app.omniconvert.com https:\/\/app.revenuehero.io\/ https:\/\/bat.bing.com https:\/\/bcrw.apple.com https:\/\/cdn.jsdelivr.net https:\/\/ct.capterra.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/heapanalytics.com https:\/\/hubspot-forms-static-embed.s3.amazonaws.com\/prod\/ https:\/\/px.ads.linkedin.com https:\/\/www.facebook.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/*.clarity.ms https:\/\/*.contentsquare.net\/ https:\/\/*.heymarket.com wss:\/\/*.heymarket.com https:\/\/*.hscollectedforms.net https:\/\/*.hsforms.com; img-src 'self' data: https:\/\/bat.bing.com https:\/\/cdn.vidyard.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/embrace-uploads-mms.s3.us-west-1.amazonaws.com https:\/\/heapanalytics.com https:\/\/play.vidyard.com https:\/\/px.ads.linkedin.com https:\/\/secure.gravatar.com https:\/\/tracking.g2crowd.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.google.ca https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/www.linkedin.com\/px\/li_sync https:\/\/*.clarity.ms\/ https:\/\/*.contentsquare.net\/ https:\/\/*.heymarket.com https:\/\/*.hsforms.com https:\/\/*.hubspot.com; default-src 'self'; style-src 'report-sample' 'self' 'unsafe-inline' https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/font-awesome\/ https:\/\/stackpath.bootstrapcdn.com; object-src 'none'; base-uri 'self'; font-src 'self' data: https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/font-awesome\/ https:\/\/stackpath.bootstrapcdn.com; frame-src 'self' https:\/\/heymarket.chilipiper.com https:\/\/play.vidyard.com https:\/\/td.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/*.heymarket.com; frame-ancestors 'self' https:\/\/*.heymarket.com; manifest-src 'self'; media-src 'self' https:\/\/app.heymarket.com; worker-src 'self' blob:; form-action 'self' https:\/\/api.hsforms.com https:\/\/webto.salesforce.com; report-uri https:\/\/www.heymarket.com\/wp-json\/heymarket\/v1\/csp-report;","count":1},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/www.themercury.com.au\/csp-reports","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https:\/\/embed.tawk.to https:\/\/va.tawk.to assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha https:\/\/www.google.com\/recaptcha amcglobal.sc.omtrdc.net *.magento-ds.com *.google.com *.cdn-apple.com https:\/\/maps.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com https:\/\/cdn.jsdelivr.net *.klarna.com *.klarnacdn.net *.klarnaevt.com *.cloudflare.com *.bootstrapcdn.com data: *.livechatinc.com *.stripe.com klarna.com *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https:\/\/embed.tawk.to https:\/\/va.tawk.to assets.adobedtm.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/www.gstatic.com\/recaptcha https:\/\/www.google.com\/recaptcha amcglobal.sc.omtrdc.net *.magento-ds.com *.typekit.net *.cdn-apple.com https:\/\/maps.googleapis.com js.braintreegateway.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com https:\/\/cdn.jsdelivr.net *.klarna.com *.klarnacdn.net *.klarnaevt.com *.trustpilot.com *.hotjar.com *.livechatinc.com *.doubleclick.net *.facebook.com *.addthis.com giphy.com gfycat.com *.stripe.com klarna.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https:\/\/images.unsplash.com validate.fishpig.co.uk https:\/\/www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/embed.tawk.to https:\/\/va.tawk.to *.googleadservices.com www.google-analytics.com analytics.google.com *.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com https:\/\/www.gstatic.com\/recaptcha https:\/\/www.google.com\/recaptcha *.magento-ds.com *.google.com *.cdn-apple.com https:\/\/maps.googleapis.com js.mollie.com js.braintreegateway.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com https:\/\/cdn.jsdelivr.net *.klarna.com *.klarnacdn.net *.klarnaevt.com *.cloudflare.com *.ytimg.com *.adsymptotic.com *.bing.com *.linkedin.com *.facebook.com *.facebook.net *.google.co.in *.slideteam.net *.slidegeeks.com slidegeeks.com *.livechatinc.com *.pinterest.com *.doubleclick.net *.gravatar.com *.resultspage.com *.resultsdemo.com *.giphy.com *.clarity.ms *.quora.com *.lfeeder.com *.livechat-files.com https:\/\/slide-appai.s3.us-west-1.amazonaws.com *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/maps.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/va.tawk.to *.tawk.to https:\/\/embed.tawk.to wss:\/\/*.tawk.to 'self' 'unsafe-inline' *.googleadservices.com *.googletagmanager.com https:\/\/www.gstatic.com\/recaptcha https:\/\/www.google.com\/recaptcha https:\/\/cdn.jsdelivr.net *.klarna.com *.klarnacdn.net *.klarnaevt.com *.cloudflare.com *.scarabresearch.com *.trustpilot.com *.bing.com *.licdn.com *.resultspage.com *.googleoptimize.com *.hotjar.com *.facebook.net *.doubleclick.net *.livechatinc.com *.addthis.com *.addthisedge.com *.formisimo.com *.moatads.com *.2checkout.com *.pinterest.com *.gravatar.com *.clarity.ms *.jquery.com *.resultsdemo.com *.quora.com *.lfeeder.com www.gstatic.com *.stripe.com klarna.com *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com https:\/\/embed.tawk.to https:\/\/va.tawk.to assets.adobedtm.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com *.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha https:\/\/www.google.com\/recaptcha amcglobal.sc.omtrdc.net *.magento-ds.com *.typekit.net *.google.com *.cdn-apple.com https:\/\/maps.googleapis.com js.mollie.com js.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com https:\/\/cdn.jsdelivr.net *.klarna.com *.klarnacdn.net *.klarnaevt.com *.cloudflare.com *.bootstrapcdn.com *.resultspage.com *.resultsdemo.com data: *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.livechatinc.com *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https:\/\/maps.googleapis.com https:\/\/player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/va.tawk.to *.tawk.to https:\/\/embed.tawk.to wss:\/\/*.tawk.to 'self' 'unsafe-inline' assets.adobedtm.com *.adobe.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha https:\/\/www.google.com\/recaptcha *.magento-ds.com *.typekit.net *.cdn-apple.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com https:\/\/cdn.jsdelivr.net *.klarna.com *.klarnacdn.net *.klarnaevt.com *.cloudflare.com *.scarabresearch.com *.emarsys.net *.doubleclick.net *.addthis.com *.addthisedge.com *.livechatinc.com *.2checkout.com *.trustpilot.com *.hotjar.com *.bing.com *.clarity.ms *.quora.com wss:\/\/*.hotjar.com https:\/\/prodai.slideteam.net wss:\/\/prodai.slideteam.net *.stripe.com klarna.com *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https:\/\/www.clarity.ms https:\/\/scripts.clarity.ms https:\/\/www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/translate.google.com https:\/\/translate.googleapis.com https:\/\/translate-pa.googleapis.com https:\/\/static.addtoany.com https:\/\/connect.facebook.net https:\/\/addtocalendar.com https:\/\/js-agent.newrelic.com https:\/\/cse.google.com https:\/\/www.google.com https:\/\/partner.googleadservices.com https:\/\/ep2.adtrafficquality.google https:\/\/cdn.knightlab.com https:\/\/unpkg.com\/@googlemaps\/markerclustererplus\/dist\/index.min.js; object-src 'none'; style-src 'self' 'unsafe-inline' https:\/\/addtocalendar.com https:\/\/translate.googleapis.com https:\/\/fonts.googleapis.com https:\/\/use.fontawesome.com https:\/\/www.gstatic.com https:\/\/www.google.com https:\/\/cdn.knightlab.com; img-src 'self' s3: data: https:\/\/files.chicagoparkdistrict.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/www.gstatic.com https:\/\/ssl.gstatic.com https:\/\/static.addtoany.com https:\/\/www.google.com https:\/\/fonts.gstatic.com https:\/\/clients1.google.com https:\/\/ep1.adtrafficquality.google https:\/\/stats.g.doubleclick.net https:\/\/cdn.jsdelivr.net https:\/\/i.vimeocdn.com https:\/\/i.ytimg.com; media-src 'self' s3: https:\/\/files.chicagoparkdistrict.com https:\/\/ssl.gstatic.com; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/static.addtoany.com https:\/\/cse.google.com https:\/\/syndicatedsearch.goog https:\/\/ep2.adtrafficquality.google https:\/\/chiparks.maps.arcgis.com https:\/\/arcg.is https:\/\/w.soundcloud.com https:\/\/app.powerbigov.us; frame-ancestors 'self'; child-src 'self' https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/static.addtoany.com https:\/\/cse.google.com https:\/\/syndicatedsearch.goog https:\/\/ep2.adtrafficquality.google https:\/\/chiparks.maps.arcgis.com https:\/\/arcg.is https:\/\/w.soundcloud.com https:\/\/app.powerbigov.us; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/use.fontawesome.com https:\/\/cdn.knightlab.com; connect-src 'self' https:\/\/data.cityofchicago.org https:\/\/maps.googleapis.com https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/translate.googleapis.com https:\/\/translate-pa.googleapis.com https:\/\/region1.analytics.google.com https:\/\/bam.nr-data.net https:\/\/js-agent.newrelic.com https:\/\/*.clarity.ms https:\/\/report.clarity.ms https:\/\/ep1.adtrafficquality.google https:\/\/syndicatedsearch.goog https:\/\/stats.g.doubleclick.net https:\/\/www.google.com https:\/\/www.googletagmanager.com; report-uri \/report-csp-violation","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'nonce-Wz3iOhy0jR3GqMo\/6\/TnuA==' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; base-uri 'none'","count":1},{"content-security-policy-report-only":" script-src 'nonce-DEL4i6bNEggeR0B7kRCBDw==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https:\/\/events.mercadolibre.com\/csp\/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=1fe00665-1093-41cd-82e7-e583ed0d1d72; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https:\/\/http2.mlstatic.com\/ https:\/\/mlstaticquic-a.akamaihd.net\/; frame-ancestors 'self' https:\/\/*.mercadolibre.cl:* https:\/\/*.mercadolibre.com:* https:\/\/*.mercadolibre.com.ve:* https:\/\/*.mercadolibre.com.ar:* https:\/\/*.mercadolivre.com.br:* https:\/\/*.mercadolibre.com.co:* https:\/\/*.mercadolibre.com.ec:* https:\/\/*.mercadolibre.com.mx:* https:\/\/*.mercadolibre.com.pe:* https:\/\/*.mercadolibre.com.uy:* https:\/\/*.mercadopago.cl:* https:\/\/*.mercadopago.com.ar:* https:\/\/*.mercadopago.com.br:* https:\/\/*.mercadopago.com.co:* https:\/\/*.mercadopago.com.mx:* https:\/\/*.mercadopago.com.pe:* https:\/\/*.mercadopago.com.uy:* https:\/\/*.mercadopago.com.ve:* https:\/\/*.mercadopago.com:* https:\/\/*.adminml.com:* https:\/\/*.mercadolibre.co.cr:* https:\/\/*.mercadolibre.com.pa:* https:\/\/*.mercadolibre.com.do:* https:\/\/*.mercadolibre.com.bo:* https:\/\/*.mercadolibre.com.py:* https:\/\/*.mercadolibre.com.gt:* https:\/\/*.mercadolibre.com.hn:* https:\/\/*.mercadolibre.com.ni:* https:\/\/*.mercadolibre.com.sv:* https:\/\/*.mercadopago.com.ec:* https:\/\/*.portalinmobiliario.com:* https:\/\/*.mercadolivre.com:*","count":1},{"content-security-policy-report-only":" default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' https:\/\/*.thomascook.in https:\/\/*.sotc.in","count":1},{"content-security-policy-report-only":" default-src 'self';base-uri 'self';frame-ancestors 'self' www.columbiadoctors.org www.nyp.org;frame-src 'self' epichttp: https:\/\/*.columbia.edu https:\/\/*.cornell.edu https:\/\/*.epichosted.com https:\/\/*.nyp.org https:\/\/*.personapay.com https:\/\/*.trustcommerce.com https:\/\/*.zoom.com https:\/\/*.zoom.us https:\/\/*.zoomapp.cloud https:\/\/*.zoomstatus.com https:\/\/cdnapisec.kaltura.com\/ https:\/\/columbia.edu https:\/\/cornell.edu https:\/\/epicproxy-np.et1089.epichosted.com https:\/\/epicproxy-pub-np.et1089.epichosted.com https:\/\/epicproxy-pub.et1089.epichosted.com https:\/\/epicproxy.et1089.epichosted.com https:\/\/nyp.org https:\/\/personapay.com https:\/\/premier.trustcommerce.com https:\/\/safe.menlosecurity.com https:\/\/stagepremier.trustcommerce.com https:\/\/trustcommerce.com https:\/\/zoom.com https:\/\/zoom.us https:\/\/zoomapp.cloud https:\/\/zoomstatus.com;script-src 'nonce-bf110ee639eb43d79fc1712f09cd58c1' https:\/\/www.myconnectnyc.org 'self' https:\/\/*.columbia.edu https:\/\/*.cornell.edu https:\/\/*.nyp.org https:\/\/*.personapay.com https:\/\/*.trustcommerce.com https:\/\/personapay.com https:\/\/trustcommerce.com;img-src https:\/\/* 'self' blob: data: https:\/\/*.columbia.edu https:\/\/*.cornell.edu https:\/\/*.nyp.org https:\/\/*.personapay.com https:\/\/*.trustcommerce.com https:\/\/personapay.com https:\/\/trustcommerce.com;connect-src 'self' epichttp: https:\/\/*.columbia.edu https:\/\/*.cornell.edu https:\/\/*.kaltura.com https:\/\/*.nyp.org https:\/\/*.personapay.com https:\/\/*.trustcommerce.com https:\/\/personapay.com https:\/\/trustcommerce.com;style-src https:\/\/www.myconnectnyc.org 'self' 'unsafe-inline' https:\/\/*.columbia.edu https:\/\/*.cornell.edu https:\/\/*.nyp.org https:\/\/*.personapay.com https:\/\/*.trustcommerce.com https:\/\/personapay.com https:\/\/trustcommerce.com;manifest-src 'self' https:\/\/*.columbia.edu https:\/\/*.cornell.edu https:\/\/*.nyp.org https:\/\/*.personapay.com https:\/\/*.trustcommerce.com https:\/\/personapay.com https:\/\/trustcommerce.com;prefetch-src 'self' https:\/\/*.columbia.edu https:\/\/*.cornell.edu https:\/\/*.nyp.org https:\/\/*.personapay.com https:\/\/*.trustcommerce.com https:\/\/personapay.com https:\/\/trustcommerce.com;worker-src 'self' blob: https:\/\/*.columbia.edu https:\/\/*.cornell.edu https:\/\/*.nyp.org https:\/\/*.personapay.com https:\/\/*.trustcommerce.com https:\/\/personapay.com https:\/\/trustcommerce.com;child-src 'self' blob: https:\/\/*.columbia.edu https:\/\/*.cornell.edu https:\/\/*.nyp.org https:\/\/*.personapay.com https:\/\/*.trustcommerce.com https:\/\/personapay.com https:\/\/trustcommerce.com;font-src 'self' https:\/\/*.columbia.edu https:\/\/*.cornell.edu https:\/\/*.nyp.org https:\/\/*.personapay.com https:\/\/*.trustcommerce.com https:\/\/personapay.com https:\/\/trustcommerce.com;object-src 'self' https:\/\/*.columbia.edu https:\/\/*.cornell.edu https:\/\/*.nyp.org https:\/\/*.personapay.com https:\/\/*.trustcommerce.com https:\/\/personapay.com https:\/\/trustcommerce.com;form-action https:\/\/central.mychart.org\/MyChart\/ 'self' https:\/\/*.columbia.edu https:\/\/*.cornell.edu https:\/\/*.epichosted.com https:\/\/*.nyp.org https:\/\/*.personapay.com https:\/\/*.trustcommerce.com https:\/\/central.mychart.org https:\/\/mychart-np.et4084.epichosted.com https:\/\/personapay.com https:\/\/trustcommerce.com;media-src https:\/\/* 'self' blob: https:\/\/*.columbia.edu https:\/\/*.cornell.edu https:\/\/*.nyp.org https:\/\/*.personapay.com https:\/\/*.trustcommerce.com https:\/\/personapay.com https:\/\/trustcommerce.com;","count":1},{"content-security-policy-report-only":" font-src fonts.googleapis.com fonts.gstatic.com *.fontawesome.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de api.bazaarvoice.com stg.api.bazaarvoice.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com accounts.google.com *.google.com https:\/\/www.youtube.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.addthis.com *.pinterest.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com maps.googleapis.com maps.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.facebook.com https:\/\/www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com https:\/\/cdn.klarna.com https:\/\/s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.googletagmanager.com *.facebook.net *.avada.io accounts.google.com *.google.com\/ assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com display.ugc.bazaarvoice.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com accounts.google.com unsafe-inline *.googleapis.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.google-analytics.com https:\/\/get.geojs.io *.avada.io accounts.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https:\/\/graph.instagram.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" font-src *.sitejabber.com *.smartcustomer.com *.gstatic.com *.nexcesscdn.net https:\/\/fonts.gstatic.com *.klarnacdn.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com https:\/\/plumrocket.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.facebook.com td.doubleclick.net https:\/\/plumrocket.com *.weltpixel.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.amazonaws.com *.postcodeanywhere.co.uk *.cloudfront.net *.godaddy.com *.sitejabber.com *.smartcustomer.com *.edesk.com *.securitymetrics.com *.sixityauto.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.googlesyndication.com *.facebook.com *.bing.com *.bing.net *.analytics.yahoo.com *.wistia.com *.nexcesscdn.net google.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.trackedlink.net https:\/\/helloextend-static-assets.s3.amazonaws.com *.klarna.com *.klarnaevt.com *.klarnacdn.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.googletagmanager.com *.google-analytics.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de data.stats.tools *.googleadservices.com *.googlesyndication.com *.g.doubleclick.net *.googleapis.com *.google.com *.sitejabber.com *.smartcustomer.com *.xsellco.com *.newrelic.com *.nr-data.net *.searchspring.net *.capredict.com *.pcapredict.com *.godaddy.com *.addressy.com *.bing.com *.bing.net *.facebook.net *.yimg.com *.pepperjam.com *.wistia.com *.sentry-cdn.com *.clarity.ms *.nexcesscdn.net *.gstatic.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com https:\/\/*.helloextend.com *.klarna.com *.klarnacdn.net *.klarnaservices.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.addressy.com *.sitejabber.com *.smartcustomer.com *.xsellco.com *.searchspring.net *.googleapis.com *.nexcesscdn.net webchat.dotdigital.com webchat.staging.dotdigital.com https:\/\/fonts.googleapis.com *.klarnacdn.net *.fontawesome.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.wistia.com *.sixityauto.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.addressy.com *.searchspring.io *.sitejabber.com *.smartcustomer.com *.xsellco.com *.newrelic.com *.nr-data.net *.bing.net *.googletagmanager.com *.googleadservices.com *.googlesyndication.com *.g.doubleclick.net google.com *.google.com *.analytics.google.com *.yimg.com *.wistia.com *.litix.io *.amazonaws.com *.clarity.ms *.bing.com *.nexcesscdn.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https:\/\/*.helloextend.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com https:\/\/www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" worker-src blob:; sandbox *.425.degree *.425degree.com 425degree.com www.425degree.com https:\/\/www.facebook.com *.facebook.com *.facebook.net *.tiktok.com https:\/\/browser-intake-datadoghq.com *.datadoghq.com; font-src *.cloudflare.com *.425degree.com *.fontawesome.com *.typekit.net *.trustedshops.com https:\/\/browser-intake-datadoghq.com *.datadoghq.com *.googleapis.com https:\/\/www.gstatic.com fonts.gstatic.com *.kxcdn.com maxcdn.bootstrapcdn.com https:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action www.facebook.com https:\/\/browser-intake-datadoghq.com *.datadoghq.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.doubleclick.net *.infogram.com *.facebook.com *.googleadservices.com *.googlesyndication.com https:\/\/www.google.co.th *.kasikornbank.com *.googletagmanager.com *.pinterest.com *.425.degree *.425degree.com https:\/\/browser-intake-datadoghq.com *.datadoghq.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com https:\/\/www.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com *.cloudflare.com https:\/\/cdn.klarna.com *.425degree.com *.425.degree https:\/\/www.trustmarkthai.com\/ https:\/\/t.co https:\/\/www.google.co.th *.doubleclick.net *.facebook.com *.pinterest.com https:\/\/www.googletagmanager.com\/ *.googleadservices.com *.paypal.com *.vimeocdn.com https:\/\/s.ytimg.com *.usercentrics.eu *.clarity.ms www.clarity.ms *.bing.com https:\/\/browser-intake-datadoghq.com *.datadoghq.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com *.cdninstagram.com *.kxcdn.com *.twitter.com *.google.com *.fbcdn.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.cloudflare.com https:\/\/www.trustmarkthai.com\/ https:\/\/chimpstatic.com\/ *.twitter.com *.ads-twitter.com *.425.degree *.425degree.com https:\/\/googleads.g.doubleclick.net *.infogram.com *.facebook.com *.newrelic.com *.nr-data.net *.pinimg.com www.google-analytics.com *.googlesyndication.com *.trustedshops.com *.usercentrics.eu *.tiktok.com *.fullstory.com *.clarity.ms www.clarity.ms *.bing.com https:\/\/browser-intake-datadoghq.com *.datadoghq.com www.googleadservices.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.googleapis.com https:\/\/www.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.kasikornbank.com www.facebook.com graph.facebook.com business.facebook.com twitter.com https:\/\/www.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cloudflare.com *.425degree.com *.fontawesome.com *.typekit.net *.trustedshops.com *.usercentrics.eu https:\/\/browser-intake-datadoghq.com *.datadoghq.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com downloads.mailchimp.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.425.degree *.425degree.com https:\/\/browser-intake-datadoghq.com *.datadoghq.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.cloudflare.com *.pinterest.com *.paypal.com *.tiktok.com *.fullstory.com *.clarity.ms www.clarity.ms *.bing.com https:\/\/browser-intake-datadoghq.com *.datadoghq.com https:\/\/www.trustmarkthai.com\/ https:\/\/t.co *.425.degree *.nr-data.net www.facebook.com www.google-analytics.com *.doubleclick.net www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com https:\/\/www.paypal.com\/xoplatform\/logger\/api\/logger cdn.ampproject.org *.kxcdn.com *.instagram.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/csp-reporting-service.com\/my-project\/endpoint; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/connect.facebook.net https:\/\/analytics.tiktok.com https:\/\/www.googletagmanager.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' https:\/\/fonts.gstatic.com; connect-src 'self' https:; img-src 'self' https: data: blob:; frame-src 'none'; object-src 'none'; base-uri 'self'; form-action 'self'","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-xGT0LrYWG8ugzT-DjK7dZw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'nonce-bcfol2tOKohcPJFkkKuGCg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri \/Handlers\/CSPHandler.ashx","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.afterpay.com *.klevu.com *.yotpo.com *.livechatinc.com *.vimeo.com *.pixlee.com *.pxlecdn.com *.pixlee.co *.jst.ai *.jsdelivr.net *.klaviyo.com *.elev.io *.zdassets.com *.cartfulsolutions.com *.cloudmaestro.com *.freshchat.com *.visualwebsiteoptimizer.com *.cloudflare.com polyfill.io *.cartsave.io *.paypal.com *.braintree-api.com data: *.greatlakesskipper.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.ksearchnet.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.cybersource.com *.freshchat.com *.visualwebsiteoptimizer.com *.cloudflare.com polyfill.io *.cartsave.io *.braintree-api.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com *.braintreegateway.com *.paypal.com google.com *.google.com *.criteo.net *.criteo.com *.livechatinc.com *.wufoo.com *.yotpo.com *.vimeo.com *.pixlee.com *.pxlecdn.com *.pixlee.co *.jst.ai *.jsdelivr.net getshogun.com *.klaviyo.com *.facebook.com *.cybersource.com insight.adsrvr.com insight.adsrvr.org *.frstre.com *.cloudfront.net *.g.doubleclick.net *.twitter.com *.cloudmaestro.com *.elev.io *.freshchat.com *.visualwebsiteoptimizer.com *.cloudflare.com polyfill.io *.cartsave.io *.braintree-api.com *.addthis.com *.recaptcha.net *.freshdesk.com airtable.com *.paypalobjects.com *.kaptcha.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https:\/\/plumrocket.com *.wesupply.xyz https:\/\/wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: landofcoder.com *.yotpo.com *.vimeo.com *.pixlee.com *.pixlee.co *.pxlecdn.co *.jst.ai *.jsdelivr.net *.pxlecdn.com *.klaviyo.com *.facebook.com *.facebook.net *.google.com *.bing.com *.choozle.com s3.amazon.com s3.amazonaws.com *.g.doubleclick.net *.adsrvr.org *.twitter.com *.swagger.io *.cloudfront.net *.godaddy.com *.cartfulsolutions.com *.cloudmaestro.com *.trustwave.com\/ *.taboola.com *.media.net *.3lift.com *.rubiconproject.com *.adnxs.com *.outbrain.com *.adform.net *.360yield.com *.yieldmo.com *.bidswitch.net *.yahoo.com *.smartadserver.com *.advertising.com *.stickyadstv.com *.fwmrm.net *.adscale.de *.teads.tv *.postrelease.com *.sharethrough.com *.ivitrack.com *.casalemedia.com *.smaato.net *.pubmatic.com *.omnitagjs.com *.criteo.com *.mediawallahscript.com *.mgid.com *.addthis.com *.revcontent.com *.liadm.com *.rlcdn.com *.turn.com *.krxd.net *.google.com.ar *.freshchat.com *.visualwebsiteoptimizer.com *.cloudflare.com polyfill.io *.cartsave.io *.braintree-api.com *.bazaarvoice.com *.klevu.com *.greatlakesskipper.com *.clmbtech.com *.tapad.com *.openx.net *.dmxleo.com *.tremorhub.com *.kargo.com *.tpmn.co.kr *.agkn.com *.amanad.adtdp.com *.bluekai.com *.mathtag.com *.zemanta.com *.bnmla.com *.stackadapt.com *.simpli.fi *.admanmedia.com *.loopme.me *.digitaleast.mobi *.yieldlab.net *.lemmatechnologies.com *.avct.cloud *.deepintent.com *.dotomi.com *.creative-serving.com *.twiago.com *.amazon-adsystem.com *.mediavine.com *.socdm.com *.octillion.tv *.bidr.io.tv *.everesttech.net *.w55c.net *.emxdgt.com *.adgrx.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.reddit.com *.googletagmanager.com *.doubleclick.net *.trackedlink.net *.ksearchnet.com magefan.com cm.magefan.com *.disqus.com https:\/\/img.youtube.com https:\/\/firebasestorage.googleapis.com quickchart.io img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ www.google.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page *.klevu.com *.cloudflare.com *.klaviyo.com acsbapp.com *.acsbap.com acsbap.com *.online-metrix.net *.criteo.net *.criteo.com *.trustwave.com *.livechatinc.com *.wufoo.com *.fontawesome.com *.yotpo.com *.vimeo.com *.pixlee.com *.pxlecdn.com *.pixlee.co *.jst.ai *.gstatic.com *.jsdelivr.net *.justuno.com *.getshogun.com *.zdassets.com *.elev.io *.facebook.net *.zopim.com *.govx.com govxconnect.com *.pinimg.com *.bing.com *.tapfiliate.com *.cloudfront.net *.pepperjam.net *.pepperjam.com *.g.doubleclick.net *.ensighten.com *.bestworlds.com *.cartsave.io *.twitter.com *.swagger.io *.payments-amazon.com *.amazon.com *.godaddy.com *.cartfulsolutions.com *.cybersource.com *.cloudmaestro.com *.freshchat.com *.visualwebsiteoptimizer.com polyfill.io *.oribi.io *.paypal.com *.cloudflareinsights.com *.braintree-api.com *.greatlakesskipper.com *.trackedweb.net *.emxdgt.com *.uptrendsdata.com *.noibu.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.googleapis.com *.googletagmanager.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.trackedlink.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.ksearchnet.com *.disqus.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https:\/\/js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.klevu.com *.fontawesome.com *.yotpo.com *.vimeo.com *.pixlee.com *.pxlecdn.com *.pixlee.co *.jst.ai *.jsdelivr.net *.klaviyo.com *.bestworlds.com *.cartsave.io *.cloudmaestro.com *.freshchat.com *.visualwebsiteoptimizer.com *.cloudflare.com polyfill.io *.paypal.com *.braintree-api.com apps.bazaarvoice.com *.greatlakesskipper.com *.googleapis.com https:\/\/static.klaviyo.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.tagmanager.google.com *.googletagmanager.com webchat.dotdigital.com webchat.staging.dotdigital.com *.ksearchnet.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com fonts.gstatic.com assets.braintreegateway.com https:\/\/statsjs.klevu.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.vimeo.com *.pixlee.com *.pxlecdn.com *.pixlee.co *.jst.ai *.jsdelivr.net *.klaviyo.com *.zdassets.com *.cloudmaestro.com agentcore.s3.amazonaws.com *.freshchat.com *.cloudflare.com polyfill.io *.cartsave.io *.paypal.com *.braintree-api.com *.livechatinc.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.yotpo.com *.vimeo.com *.pixlee.com *.pxlecdn.com *.pixlee.co *.klaviyo.com *.jst.ai *.acsbapp.com acsbapp.com *.jsdelivr.net *.zdassets.com *.zendesk.com *.facebook.com *.elev.io *.zopim.com wss:\/\/*.zopim.com *.google-analytics.com *.g.doubleclick.net *.pinterest.com *.bestworlds.com *.cartsave.io *.bing.com *.amazon.com *.cartfulsolutions.com *.cloudmaestro.com adapter.aivo.co *.agentbot.net *.oribi.io *.hotjar.com *.freshchat.com *.visualwebsiteoptimizer.com *.cloudflare.com polyfill.io *.ksearchnet.com *.trackedweb.net *.googleadservices.com *.google.com.ar *.uptrendsdata.com *.noibu.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.twitter.com *.twimg.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.trackedlink.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klevu.com https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.klaviyo.com *.cloudmaestro.com *.visualwebsiteoptimizer.com *.cloudflare.com polyfill.io *.cartsave.io *.paypal.com *.braintree-api.com *.greatlakesskipper.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http:\/\/csp-reporting-service.com\/my-project\/endpoint; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" base-uri; default-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/ssl.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/ajax.googleapis.com https:\/\/teket.jp\/organizer data:; connect-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/ssl.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/ajax.googleapis.com https:\/\/teket.zendesk.com https:\/\/zendesk-eu.my.sentry.io https:\/\/static.zdassets.com https:\/\/ekr.zdassets.com https:\/\/api.smooch.io wss:\/\/api.smooch.io https:\/\/s.clarity.ms https:\/\/teket.jp\/organizer; form-action; frame-src https:\/\/www.google.com\/ https:\/\/p01.mul-pay.jp; img-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/ssl.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/ajax.googleapis.com https:\/\/teket.zendesk.com https:\/\/zendesk-eu.my.sentry.io https:\/\/static.zdassets.com https:\/\/ekr.zdassets.com https:\/\/api.smooch.io wss:\/\/api.smooch.io https:\/\/teket.jp\/organizer data:; object-src; script-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/ssl.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/ajax.googleapis.com https:\/\/teket.zendesk.com https:\/\/zendesk-eu.my.sentry.io https:\/\/static.zdassets.com https:\/\/ekr.zdassets.com https:\/\/api.smooch.io wss:\/\/api.smooch.io https:\/\/p01.mul-pay.jp 'unsafe-inline' 'unsafe-eval' blob:; script-src-elem 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/ssl.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/ajax.googleapis.com https:\/\/teket.zendesk.com https:\/\/zendesk-eu.my.sentry.io https:\/\/static.zdassets.com https:\/\/ekr.zdassets.com https:\/\/api.smooch.io wss:\/\/api.smooch.io https:\/\/www.clarity.ms https:\/\/cdnjs.cloudflare.com https:\/\/code.jquery.com https:\/\/connect.facebook.net 'unsafe-inline' blob:; style-src 'self' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/ssl.google-analytics.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/ajax.googleapis.com https:\/\/teket.zendesk.com https:\/\/zendesk-eu.my.sentry.io https:\/\/static.zdassets.com https:\/\/ekr.zdassets.com https:\/\/api.smooch.io wss:\/\/api.smooch.io 'unsafe-inline'","count":1},{"content-security-policy-report-only":" style-src-elem cdn.consentmanager.net cdn.honey.io www.bing.com r.bing.com *.hagel-shop.de *.hagel-shop.at 'unsafe-inline' tracking.paqato.com static-tracking.klaviyo.com m2stage-blog.hagel-shop.de www.gstatic.com fonts.googleapis.com; script-src-elem rum.hlx.page tracking.paqato.com platform.instagram.com dynamic.criteo.com www.googletagmanager.com www.dwin1.com kerastase-quiz.vercel.app unpkg.com lantern.roeyecdn.com www.instagram.com commerce.adobedtm.com cdn.consentmanager.net a.delivery.consentmanager.net www.clarity.ms static-eu.payments-amazon.com magento-recs-sdk.adobe.net bat.bing.com player.reetags.com connect.facebook.net analytics.tiktok.com js.mollie.com sslwidget.criteo.com; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com data: *.paypal.com *.paypalobjects.com applepay.cdn-apple.com http:\/\/*.hotjar.com https:\/\/*.hotjar.com http:\/\/*.hotjar.io https:\/\/*.hotjar.io d3dc1lgancj6l0.cloudfront.net maxcdn.bootstrapcdn.com https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com cdn.elev.io media.flixfacts.com static.klaviyo.com tracking.paqato.com account.affilitizer.com at.alicdn.com cdn-uicons.flaticon.com cdn.faceworks.nl cdn.honey.io media.flixcar.com moz-extension: r2cdn.perplexity.ai data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com http:\/\/*.facebook.com https:\/\/*.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.hagel-shop.de 'self' www.hagel-shop.de 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https:\/\/cdn.consentmanager.net https:\/\/delivery.consentmanager.net https:\/\/www.googletagmanager.com\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.sandbox.paypal.com https:\/\/*.hotjar.com http:\/\/*.hotjar.io https:\/\/*.hotjar.io https:\/\/www.google.com\/ http:\/\/*.facebook.com https:\/\/*.facebook.com js.mollie.com www.awin1.com cdn.consentmanager.net *.criteo.com *.criteo.net *.dixa.io *.doubleclick.net *.durchsichtig.xyz *.hagel-shop.de *.hotjar.com media.flixcar.com *.klarinsights.net www.paypalobjects.com www.sovendus-benefits.com www.sovendus-campaign.com www.sovendus-connect.com www.sovendus-network.com bat.bing.com www.instagram.com return.4sellers.de 10.10.10.1:8090 bcsgsrv.com bispadisch.de caclk.com cdn.elev.io cmodul.solutenetwork.com div.show fwwh.werkhaus-bielefeld.de:8091 gateway.zscaler.net gateway.zscloud.net hipodi.com kerastase-quiz.vercel.app oponas.com ptclk.com www.explorr.net www.pricejoe.com gateways.zscloud.net ifw.noel.gv.at 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https:\/\/cdn.consentmanager.net https:\/\/delivery.consentmanager.net validate.fishpig.co.uk https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.sandbox.paypal.com http:\/\/*.hotjar.com https:\/\/*.hotjar.com http:\/\/*.hotjar.io https:\/\/*.hotjar.io http:\/\/*.linkedin.com https:\/\/*.linkedin.com http:\/\/*.facebook.com https:\/\/*.facebook.com http:\/\/www.google.com\/ http:\/\/www.google.de\/ https:\/\/www.google.de\/ https:\/\/www.googletagmanager.com http:\/\/www.googletagmanager.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com https:\/\/widgets.trustedshops.com\/ https:\/\/www.mollie.com https:\/\/api.mapbox.com https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com sync.1rx.io ad.360yield.com eb2.3lift.com *.adnxs.com *.agkn.com www.awin1.com *.bing.com *.bing.net *.bidswitch.net *.casalemedia.com *.cloudfront.net *.consentmanager.net *.criteo.com public-prod-dspcookiematching.dmxleo.com *.doubleclick.net e1.emxdgt.com media.flixcar.com *.flix360.com *.google.com *.google.de *.googletagmanager.com fonts.gstatic.com *.hagel-shop.de id5-sync.com matching.ivitrack.com contextual.media.net exchange.mediavine.com visitor.omnitagjs.com sync.outbrain.com jadserve.postrelease.com simage2.pubmatic.com *.roeye.com pixel.rubiconproject.com match.sharethrough.com rtb-csync.smartadserver.com criteo-sync.teads.tv *.tiktok.com criteo-partners.tremorhub.com a.twiago.com *.taboola.com sync.targeting.unrulymedia.com t.ssl.ak.dynamic.tiles.virtualearth.net www.wepowerconnections.com ad.yieldlab.net sync-criteo.ads.yieldmo.com *.zenaps.com c.clarity.ms assets.paqato.com www.google.hu www.google.es csm.nl3.eu.criteo.net www.google.nl *.hagel-shop.at bat.bing.com blob: client-side-metrics.fr3.eu.criteo.net client-side-metrics.nl3.eu.criteo.net d3k81ch9hvuctc.cloudfront.net google.com hagel-de.ddev.site media.flixfacts.com modular.flix360.io static-eu.payments-amazon.com t0.ssl.ak.dynamic.tiles.virtualearth.net t1.ssl.ak.dynamic.tiles.virtualearth.net www.google.ae www.google.am www.google.at www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.co.il www.google.co.in www.google.co.kr www.google.co.th www.google.co.uk www.google.co.uz www.google.co.za www.google.com.au www.google.com.br www.google.com.eg www.google.com.hk www.google.com.lb www.google.com.mt www.google.com.mx www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.cz www.google.de www.google.dk www.google.ee www.google.fi www.google.fr www.google.gr www.google.hr www.google.ie www.google.it www.google.jo www.google.li www.google.lu www.google.lv www.google.md www.google.mk www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.tn www.zenaps.com www.hagel-shop.at www.googleads.g.doubleckick.net www.google.com.ro data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.googletagmanager.com https:\/\/rum.hlx.page *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de jsd-widget.atlassian.com https:\/\/cdn.consentmanager.net https:\/\/delivery.consentmanager.net https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com https:\/\/connect.facebook.net\/ https:\/\/snap.licdn.com\/li.lms-analytics\/insight.min.js http:\/\/*.hotjar.com https:\/\/*.hotjar.com http:\/\/*.hotjar.io https:\/\/*.hotjar.io unsafe-inline userlike-cdn-widgets.s3-eu-west-1.amazonaws.com d3dc1lgancj6l0.cloudfront.net api.userlike.com http:\/\/www.google.com\/recaptcha\/ https:\/\/widgets.trustedshops.com\/ js.mollie.com https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com *.hagel-shop.de *.hagel-shop.at *.ablyft.com www.awin1.com *.bing.com *.clarity.ms *.consentmanager.net *.criteo.com messenger.dixa.io www.dwin1.com cdn.elev.io prod.flixgvid.flix360.io media.flixcar.com media.flixfacts.com *.google-analytics.com *.googleoptimize.com *.hotjar.com lantern.roeyecdn.com lantern.roeye.com the.sciencebehindecommerce.com *.sovendus.com www.sovendus-benefits.com www.sovendus-campaign.com www.sovendus-connect.com www.sovendus-network.com analytics.tiktok.com *.virtualearth.net www.zeitung-direkt.de tracking.paqato.com rum.hlx.page 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.magento-datasolutions.com *.magento-ds.com https:\/\/static.klaviyo.com maxcdn.bootstrapcdn.com https:\/\/widgets.trustedshops.com https:\/\/integrations.etrusted.com *.bing.com media.flixcar.com *.googletagmanager.com css\/light.theme.css static-tracking.klaviyo.com tracking.paqato.com www.gstatic.com 'unsafe-inline' 'self' 'unsafe-inline'; object-src https:\/\/cdn.consentmanager.net https:\/\/delivery.consentmanager.net data: 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com https:\/\/cdn.consentmanager.net https:\/\/delivery.consentmanager.net http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ *.hagel-shop.de data: mcprod.hagel-shop.de media.flixfacts.com youtube.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de jsd-widget.atlassian.com api-private.atlassian.com https:\/\/cdn.consentmanager.net https:\/\/delivery.consentmanager.net https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.sandbox.paypal.com http:\/\/*.hotjar.com:* https:\/\/*.hotjar.com:* http:\/\/*.hotjar.io https:\/\/*.hotjar.io wss:\/\/*.hotjar.com http:\/\/salesviewer.org\/ userlike-cdn-widgets.s3-eu-west-1.amazonaws.com autocomplete2.postdirekt.de *.trustedshops.com *.etrusted.com *.ablyft.com magento-recs-sdk.adobe.net commerce.adobedtm.com *.bing.com *.bing.net *.clarity.ms *.consentmanager.net *.dixa.io *.criteo.com *.doubleclick.net *.durchsichtig.xyz *.elev.io media.flixcar.com maps.googleapis.com *.google-analytics.com *.google.de *.hagel-shop.de *.hotjar.com *.hotjar.io *.klarinsights.net the.sciencebehindecommerce.com *.sovendus.com analytics.tiktok.com unpkg.com\/@adobe\/ www.wepowerconnections.com tracking.paqato.com api-js.datadome.co api.killadsapi.com api.vid-adblocker.com cmodul.solutenetwork.com data: overbridgenet.com rt.flix360.com static-eu.payments-amazon.com update.adblock360.org www.google.at www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.co.il www.google.co.in www.google.co.kr www.google.co.th www.google.co.uk www.google.com.eg www.google.com.hk www.google.com.mx www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.vn www.google.dk www.google.es www.google.fi www.google.fr www.google.gr www.google.hr www.google.hu www.google.it www.google.lt www.google.lu www.google.mk www.google.nl www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.tn rum.hlx.page analytics-ipv6.tiktokw.us www.google.cz 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com https:\/\/cdn.consentmanager.net https:\/\/delivery.consentmanager.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" report-uri https:\/\/opensociety.report-uri.com\/r\/d\/csp\/reportOnly;base-uri 'self';connect-src 'self' https:\/\/translate.googleapis.com https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.ingest.sentry.io https:\/\/docket.justiceinitiative.org https:\/\/justiceinitiative.piwik.pro https:\/\/justiceinitiative.containers.piwik.pro https:\/\/cdn.matomo.cloud https:\/\/theideasletter.matomo.cloud https:\/\/cdn-cookieyes.com https:\/\/log.cookieyes.com https:\/\/*.cookieyes.com;default-src 'self';form-action 'self';img-src 'self' data: https: https:\/\/www.gstatic.com https:\/\/*.googletagmanager.com https:\/\/osjicontent.imgix.net https:\/\/*.google-analytics.com;object-src 'self';script-src 'self' 'unsafe-eval' https:\/\/translate.googleapis.com https:\/\/www.justiceinitiative.org https:\/\/cdn.plyr.io\/3.4.4\/plyr.polyfilled.js https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/picturefill\/3.0.2\/picturefill.min.js https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/www.youtube.com\/iframe_api https:\/\/www2.osfound.org\/shorten https:\/\/*.ingest.sentry.io https:\/\/docket.justiceinitiative.org https:\/\/justiceinitiative.containers.piwik.pro https:\/\/*.justiceinitiative.org https:\/\/cdn-cookieyes.com https:\/\/log.cookieyes.com https:\/\/*.cookieyes.com https:\/\/cdn.matomo.cloud https:\/\/theideasletter.matomo.cloud 'sha256-fowkKyEQi1SMOmkzKHVR3kVRCxAkb7eITj4LYDwWuwE=' 'sha256-oLlgRvu5927ZsW\/Ke7hqoXyWhVhfjYt888\/If4Yk6Cc=' 'sha256-zTv\/Ocm+3ZUxPK95MsRtR405opnhJuWd8OOOlDOY4jg=' 'sha256-rWd9UEdKeFeLqC7IaJz1wxlZctnoLlCVLl196dQ3XcM=' 'sha256-Wuuo8pjCq8p1DupaB6iKVd7xGXUV2cZ6FNKupyZkqtA=' 'sha256-Yo0rp6K5ZDMBPy3XfvFf6KNJPsyXl4KgVKlu1R1a3xQ=' 'sha256-MM3CG7szGAeVIKY58JGR+X+7xTDccDemqcIY0lQLrX8=' 'sha256-oh6ZTSefRfIBPlcye8dBjlQBkC0A32V1QIb2htJq7ao=' 'sha256-NmZgHsyoB9XJ6Wd+G4VMaoO3gnTIG8KiH+uVcxOeeoc=' 'sha256-qwhoBj+FiypvTPR3eQkqsvLUkSeShbVBRVleFpBWM0g=' 'sha256-ojZToIWnCw4yAO2wwSr0xkCYSoCACGXKKYmr9ZV6u7I=' 'sha256-MK\/1crn2Wl\/TYQNKpPss5ootd4EotbGRxQsmw+4y1gU=' 'sha256-IobZaBCT4PRq1c9DaVhn7w+Z0rXZcBjmuQBfk+M+z64=' 'sha256-DqrJErZI\/7pog0A9GesbTSM9ARg5dFwEiTotQt+PXns=' 'sha256-veJ+ybPvqZmAOLrVwklPodQgAnVnspZnObsF0U42hqo' 'sha256-+fx2G+aE0ETxN+0K\/lnVPgcwJBbC7vQs8fcKUg1eWKc=' 'sha256-lGf\/YZe+HEzkMEOQc5bjVpCG99fBIWrHzKnAn+UsbmE=' 'nonce-g2nXarmIbJXHjgdWet1YrbYIZ1LOXvOW';style-src 'self' 'unsafe-inline' https:;frame-src 'self';font-src 'self' https:;media-src 'self' https:;manifest-src 'self';worker-src 'none'","count":1},{"content-security-policy-report-only":" default-src https: data: wss: 'unsafe-inline' 'unsafe-eval'; worker-src blob:","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:\/\/sso.kau.edu.sa; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https:\/\/cdnjs.cloudflare.com https:\/\/fonts.googleapis.com; img-src 'self' data: blob: https: http:\/\/localhost:* http:\/\/127.0.0.1:*; font-src 'self' data: https:\/\/cdnjs.cloudflare.com https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/kau.edu.sa https:\/\/www.kau.edu.sa http:\/\/localhost:* http:\/\/127.0.0.1:* ws:\/\/localhost:* ws:\/\/127.0.0.1:*; media-src 'self' blob: https:\/\/kau.edu.sa https:\/\/www.kau.edu.sa http:\/\/localhost:* http:\/\/127.0.0.1:*; frame-src 'self' https:\/\/www.youtube.com https:\/\/youtube.com https:\/\/www.google.com https:\/\/maps.google.com https:\/\/www.googletagmanager.com; worker-src 'self' blob:; report-uri \/csp-report","count":1},{"content-security-policy-report-only":" default-src * https: data: blob: 'unsafe-inline' 'unsafe-hashes';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/kit.fontawesome.com\/5f78583775.js https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/jquery\/3.5.1\/jquery.min.js https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/bootstrap\/5.2.2\/js\/bootstrap.bundle.min.js https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/is-in-viewport\/3.0.4\/isInViewport.min.js https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/autosize.js\/5.0.1\/autosize.min.js https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/sharer.js\/0.5.1\/sharer.min.js https:\/\/email.efex.com.au\/resources\/sharing\/embed.js https:\/\/unpkg.com\/@lottiefiles\/lottie-player@1.6.0\/dist\/lottie-player.js https:\/\/www.googletagmanager.com\/gtag\/js https:\/\/unpkg.com\/@lottiefiles\/lottie-interactivity@1.6.2\/dist\/lottie-interactivity.min.js https:\/\/vimeo.com\/api\/oembed.json https:\/\/f.vimeocdn.com\/p\/4.25.13\/js\/player.module.js https:\/\/f.vimeocdn.com\/p\/4.25.13\/js\/vendor.module.js https:\/\/f.vimeocdn.com\/js_opt\/modules\/utils\/vuid.min.js https:\/\/f.vimeocdn.com\/js_opt\/modules\/utils\/vuid.min.js https:\/\/www.googletagmanager.com\/gtm.js https:\/\/www.gstatic.com\/cast\/sdk\/libs\/sender\/1.0\/cast_framework.js https:\/\/www.gstatic.com\/eureka\/clank\/117\/cast_sender.js https:\/\/f.vimeocdn.com\/p\/4.25.13\/js\/player.module.js https:\/\/f.vimeocdn.com\/p\/4.25.13\/js\/vendor.module.js https:\/\/f.vimeocdn.com\/js_opt\/modules\/utils\/vuid.min.js https:\/\/www.gstatic.com\/cv\/js\/sender\/v1\/cast_sender.js https:\/\/www.gstatic.com\/cast\/sdk\/libs\/sender\/1.0\/cast_framework.js  https:\/\/www.gstatic.com\/eureka\/clank\/117\/cast_sender.js https:\/\/email.efex.com.au\/assets\/scripts\/LandingPagesEmbedded1_2 https:\/\/email.efex.com.au\/Resources\/LandingPagesEmbedded\/localised\/strings.js https:\/\/www.googletagmanager.com\/gtm.js https:\/\/unpkg.com\/@lottiefiles\/lottie-interactivity@latest\/dist\/lottie-interactivity.min.js https:\/\/www.vimeo.com\/api\/oembed.json https:\/\/maps.googleapis.com https:\/\/click.efex.com.au\/lp\/assets\/lightning_out_embed\/prod\/en-US\/ https:\/\/click.efex.com.au\/lp\/assets\/scripts\/external-forms-host.min.js https:\/\/click.efex.com.au\/lp\/webruntime\/log\/errors https:\/\/www.google.com\/recaptcha\/api.js https:\/\/www.gstatic.com\/recaptcha\/releases\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/cdn.c360a.salesforce.com\/beacon\/c360a\/ https:\/\/efexgroup.my.site.com\/ESWEFEXWebsiteAgent1774570590343\/assets\/js\/bootstrap.min.js https:\/\/efexgroup.my.site.com\/ESWEFEXWebsiteAgent1774570590343\/assets\/js\/init.min.js https:\/\/efexgroup.my.site.com\/ESWEFEXWebsiteAgent1774570590343\/assets\/js\/rpc-manager.iife.js; style-src 'report-sample' 'self' 'unsafe-inline' https:\/\/p.typekit.net https:\/\/use.typekit.net https:\/\/fonts.googleapis.com https:\/\/kit.fontawesome.com https:\/\/efexgroup.my.site.com; object-src 'none'; base-uri 'self'; connect-src 'self' https:\/\/click.efex.com.au https:\/\/ka-p.fontawesome.com https:\/\/kit-uploads.fontawesome.com https:\/\/www.google-analytics.com https:\/\/maps.googleapis.com https:\/\/cke4.ckeditor.com https:\/\/cdnjs.cloudflare.com https:\/\/www.google.com https:\/\/efexgroup.my.salesforce-scrt.com https:\/\/stats.g.doubleclick.net https:\/\/analytics.google.com; font-src 'self' https:\/\/fonts.gstatic.com https:\/\/use.typekit.net; frame-src 'self' https:\/\/email.efex.com.au https:\/\/click.efex.com.au https:\/\/player.vimeo.com https:\/\/r1.dotdigital-pages.com https:\/\/www.youtube.com https:\/\/www.google.com https:\/\/recaptcha.google.com https:\/\/efexgroup.my.site.com; img-src data: blob: 'self' https:\/\/www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/maps.googleapis.com https:\/\/maps.gstatic.com https:\/\/i.vimeocdn.com https:\/\/lh3.ggpht.com https:\/\/lh3.ggpht.com https:\/\/i.vimeocdn.com https:\/\/www.google.com.au; manifest-src 'self'; media-src 'self'; worker-src 'none'; form-action 'self';","count":1},{"content-security-policy-report-only":" default-src 'self';base-uri 'self';frame-ancestors 'self' https:\/\/communityconnect.essentiahealth.org https:\/\/lintonregionalmedicalcenter.org https:\/\/mychart.ridgeviewmedical.org https:\/\/ridgeview.dev.geonetric.com https:\/\/www.ridgeviewmedical.org;frame-src 'self' epichttp: https:\/\/*.essentiahealth.org https:\/\/cdnapisec.kaltura.com\/ https:\/\/ehr.carecredit.com https:\/\/ehr.carecredit.com\/ https:\/\/m.essentiahealth.org https:\/\/pay.instamed.com https:\/\/premier.trustcommerce.com https:\/\/stagepremier.trustcommerce.com https:\/\/www.essentiahealth.org https:\/\/www.ridgeviewmedical.org;script-src 'nonce-5016e4bf395a4d3182312a98d81cb054' https:\/\/essentiamychart.org 'self' 'sha256-Qkxe1qM2p+AhSSPfmWtjhk7TC0XxKliynZ1DEvWnkxQ=' https:\/\/emyhtst.essentiahealth.org https:\/\/www.google.com https:\/\/www.google.com\/recaptcha\/api.js https:\/\/www.gstatic.com;img-src https:\/\/* 'self' blob: data:;connect-src 'self' epichttp: https:\/\/*.app.st-343.epiccloud.io https:\/\/*.kaltura.com https:\/\/mychart-mychart-chat-mediator.app.st-343.epiccloud.io wss:\/\/*.webpubsub.azure.com;style-src https:\/\/essentiamychart.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https:\/\/central.mychart.org\/MyChart\/ 'self';media-src https:\/\/* 'self' blob:;","count":1},{"content-security-policy-report-only":" img-src 'data' data: https:\/\/assets.eetgroup.com https:\/\/cdne-clientresources-cdn-eet-prod-lcd.azureedge.net https:\/\/content.eetgroup.com https:\/\/content-media.eetgroup.com https:\/\/fonts.gstatic.com https:\/\/img.youtube.com https:\/\/inishop.com https:\/\/media.eetgroup.com https:\/\/product-images.eetgroup.com https:\/\/www.eetgroup.com https:\/\/www.google.dk https:\/\/www.googletagmanager.com; script-src 'eval' 'unsafe-inline' 'wasm-eval'; connect-src https:\/\/api.eetgroup.com https:\/\/cdn.jsdelivr.net https:\/\/cdne-clientresources-cdn-eet-prod-lcd.azureedge.net https:\/\/consentcdn.cookiebot.com https:\/\/content.eetgroup.com https:\/\/func-eetdis-wl-test.azurewebsites.net https:\/\/maps.googleapis.com https:\/\/region1.analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/vimeo.com https:\/\/www.google.com https:\/\/www.google.dk https:\/\/www.googletagmanager.com; font-src https:\/\/cdne-clientresources-cdn-eet-prod-lcd.azureedge.net https:\/\/use.typekit.net; script-src-elem https:\/\/cdne-clientresources-cdn-eet-prod-lcd.azureedge.net https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/storageeetprodlcd.blob.core.windows.net https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com 'inline' 'unsafe-inline'; style-src-elem https:\/\/cdne-clientresources-cdn-eet-prod-lcd.azureedge.net 'inline' 'unsafe-inline'; frame-src https:\/\/consentcdn.cookiebot.com https:\/\/form.jotform.com https:\/\/player.vimeo.com https:\/\/www.google.com; media-src https:\/\/media.eetgroup.com; style-src-attr 'inline'; default-src 'self'; report-uri \/csp-report; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com 'self' data: cdnjs.cloudflare.com fonts.bunny.net cdn.jsdelivr.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https:\/\/www.google.com\/recaptcha\/ servicepoints.sendcloud.sc c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.googletagmanager.com widget.trustpilot.com www.google.com consentcdn.cookiebot.com www.youtube-nocookie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com p.typekit.net validator.swagger.io https:\/\/images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com log.pinterest.com ssl.google-analytics.com maps.googleapis.com maps.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com tacstack.com *.krale-wholesale.com *.krale.shop static.pay.nl 'self' data: www.snapengage.com lh3.ggpht.com imgsct.cookiebot.com krale-tac-beta.b-cdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https:\/\/maps.googleapis.com https:\/\/player.vimeo.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com www.google.com www.gstatic.com t.trackedlink.net assets.pinterest.com maps.googleapis.com ssl.google-analytics.com embed.sendcloud.sc js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net servicepoints.sendcloud.sc widget.trustpilot.com storage.googleapis.com www.snapengage.com static.widget.trengo.eu consent.cookiebot.com consentcdn.cookiebot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com maxcdn.bootstrapcdn.com assets.braintreegateway.com fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.snapengage.com static.widget.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io https:\/\/maps.googleapis.com https:\/\/player.vimeo.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com log.pinterest.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com bam.nr-data.net bam-cell.nr-data.net www.snapengage.com api.widget.trengo.eu ws-eu.pusher.com consentcdn.cookiebot.com *.krale.shop 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.krale-wholesale.com *.krale.shop tacstack.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'none'; report-uri \/api\/sec-csp\/110000764\/report","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self' blob:; frame-src 'self' blob:; media-src 'self' blob:","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' *.bootsopticians.com *.tiktok.com *.facebook.net *.googleapis.com *.abtasty.com *.pinimg.com *.openai.com *.cloudflareinsights.com *.cquotient.com *.googletagmanager.com *.salecycle.com *.contentsquare.net *.cookielaw.org *.unpkg.com; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=hSkb2F_1ucTJ_U_2C0UENwTN3rmmIKf5Ho7F.J4UE90-1788502033.3666666-1.0.1.1-.crin.kP5QV3xOQAAqTIBkuHp6AVBQaCgCgOjlF0FmjOvmxWIJbXXoSRmDsC.jQYfX6EkpjHMo84YB8LG3uOCPSSCUNRdnjW_aXOnyhfS6Qweo6VMAE4c7ORv5YScz1_GeRdPPEEGPNd1m8k0jG_XNUyOrrBLPjTs8xLVVO4Q89F2AxXOBFfPXI8EXrwg96bpBjCse28oT.A7rmfCOG8eA; report-to cf-uokemksjitzjtnom","count":1},{"content-security-policy-report-only":" base-uri 'self'; block-all-mixed-content; default-src 'self'; form-action 'self'; frame-ancestors 'self'; plugin-types 'none'; script-src 'self' 'report-sample' 'unsafe-inline'; style-src 'self' 'report-sample' 'unsafe-inline'; object-src 'none'; worker-src 'none'; report-uri https:\/\/prod.ap.batic.cudasvc.com\/xenios\/api\/v1\/error\/report??paid=151&spid=26980&v=v1.0&payload=OQqrUogt9k7lwV4dxklwb3ac73asuZ5HWxxXQytKO-k54FhQlEFlPcEsJGXIKuLbrTUFBPmeW4GNckCm-1Uu7gnRpgcHqxffP23rSYFyK7OpnkhN_0bdwa3ZLb3dyc8oWLdCGLijoipkL0yWPLA8_ntV3moZNlY-azu0XOxUvRkmLlDtNuvlET1YzxkjUEVuwp8UpOrVLu8wDoO4zxI8Uw==;","count":1},{"content-security-policy-report-only":" script-src 'strict-dynamic' 'nonce-sfgJnZZ13hXDO1C+i2n2IQ=='","count":1},{"content-security-policy-report-only":" default-src 'none'; form-action 'none'; frame-ancestors 'none'; connect-src 'self' web-analytics.intelliscapesolutions.com analytics.intelliscapesolutions.com; font-src 'self' fonts.gstatic.com; frame-src www.google.com; img-src 'self' web-analytics.intelliscapesolutions.com analytics.intelliscapesolutions.com; manifest-src 'self'; script-src-elem 'self' 'unsafe-inline' donorbox.org web-analytics.intelliscapesolutions.com analytics.intelliscapesolutions.com www.google.com www.gstatic.com cdn.jsdelivr.net static.cloudflareinsights.com; script-src 'unsafe-eval' 'self' 'unsafe-inline' donorbox.org web-analytics.intelliscapesolutions.com analytics.intelliscapesolutions.com www.google.com www.gstatic.com; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com; style-src 'self' 'unsafe-eval' 'unsafe-inline' fonts.googleapis.com; report-uri https:\/\/intelliscape.report-uri.com\/r\/d\/csp\/wizard","count":1},{"content-security-policy-report-only":" default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; font-src 'self' https: data:; connect-src 'self' https:;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; report-uri https:\/\/dcc-cspreport.enovation.ie\/csp-report-dccdrupal.php","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline'   https:\/\/*.googlesyndication.com   https:\/\/*.doubleclick.net   https:\/\/googleads.g.doubleclick.net   https:\/\/pagead2.googlesyndication.com   https:\/\/tpc.googlesyndication.com   https:\/\/www.googletagmanager.com   https:\/\/www.google-analytics.com   https:\/\/*.google.com   https:\/\/adservice.google.com https:\/\/adservice.google.co.uk   https:\/\/challenges.cloudflare.com   https:\/\/www.gstatic.com https:\/\/www.recaptcha.net   https:\/\/static.cloudflareinsights.com   https:\/\/*.adtrafficquality.google; connect-src 'self' https:; img-src 'self' data: blob: https:; frame-src 'self'   https:\/\/*.doubleclick.net https:\/\/*.googlesyndication.com   https:\/\/googleads.g.doubleclick.net https:\/\/tpc.googlesyndication.com   https:\/\/fundingchoicesmessages.google.com   https:\/\/*.google.com https:\/\/www.gstatic.com https:\/\/www.recaptcha.net   https:\/\/challenges.cloudflare.com   https:\/\/*.adtrafficquality.google; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' *.theoutbound.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: *.theoutbound.com *.mapbox.com; connect-src 'self' *.theoutbound.com *.mapbox.com; font-src 'self' data:; worker-src 'self' blob:; report-uri \/csp-report; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'none'; report-uri \/next-external\/log\/csp\/violations; report-to csp-violations; connect-src 'self' wss:\/\/www.nordnet.se https:\/\/www.googletagmanager.com https:\/\/analytics.nordnet.se https:\/\/cdn.prod.nntech.io https:\/\/files.nordnet.se https:\/\/api.prod.nntech.io https:\/\/experimentation.public.prod.nntech.io https:\/\/www.google.com https:\/\/storage.googleapis.com https:\/\/www.recaptcha.net https:\/\/relay.prod.nntech.io; font-src 'self' https:\/\/cdn.prod.nntech.io https:\/\/files.nordnet.se; frame-src 'self' https:\/\/analytics.nordnet.se https:\/\/10961666.fls.doubleclick.net https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/w.soundcloud.com https:\/\/embed.acast.com https:\/\/link.tink.com https:\/\/www.tv2.no https:\/\/checkout.trustly.com https:\/\/www.recaptcha.net https:\/\/www.google.com https:\/\/t.email.nordnet.se https:\/\/dashboard.fundrella.com; img-src 'self' https:\/\/www.googletagmanager.com https:\/\/analytics.nordnet.se https:\/\/cdn.prod.nntech.io https:\/\/files.nordnet.se https:\/\/api.prod.nntech.io data: blob: https:\/\/cdn.tink.se https:\/\/images.ctfassets.net https:\/\/i.vimeocdn.com https:\/\/img.youtube.com https:\/\/i.scdn.co https:\/\/www.recaptcha.net; manifest-src 'self'; media-src https:\/\/cdn.prod.nntech.io https:\/\/files.nordnet.se https:\/\/videos.ctfassets.net; object-src 'self'; script-src 'self' 'nonce-b347769b-cec1-4864-96a3-c84f4d8f6389' https:\/\/analytics.nordnet.se https:\/\/cdn.prod.nntech.io https:\/\/files.nordnet.se https:\/\/www.recaptcha.net https:\/\/www.google.com; script-src-attr 'none'; style-src 'unsafe-inline' 'self' https:\/\/cdn.prod.nntech.io https:\/\/files.nordnet.se; worker-src 'none'; base-uri 'none'; form-action 'self' https:\/\/pvu.nets.no https:\/\/pvu.avtalegiro.no https:\/\/online.alandsbanken.fi https:\/\/verkkopankki.danskebank.fi https:\/\/verkkomaksu.handelsbanken.fi https:\/\/epmt.nordea.fi https:\/\/identify.nordea.com https:\/\/verkkomaksu.poppankki.fi https:\/\/verkkomaksu.saastopankki.fi https:\/\/online.s-pankki.fi https:\/\/auth.aktia.fi https:\/\/kirjaudu.aktia.fi https:\/\/ebank.aktia.fi; frame-ancestors 'self' https:\/\/app.contentful.com https:\/\/app.sigmastocks.com;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'report-sample' 'self' 'sha256-BiNyGbGZEG1ZcMWhdKvmZ1DwYSpvZ8xcAxRrIag59sQ=' 'sha256-p96cet82gMKBOah5xqTlTC1NImfgmfwp9xhnLYsv45Q=' 'sha256-K7F5t+0jCUOcvI0w5XCLORVrRe6Cl7fcvsyOhpNlvRA=' 'sha256-osJOIDsvZzKR6jjDkmJzOK\/lCl+6P59lwiMwf2WwwX0=' 'sha256-ech7dK56PGMmo3zLhyCe9XpUu\/4+pGU11bUeBEpq56o=' 'sha256-5aTBNtoMSFGD0AJ9+0YPRibd5APCDzFjjKtA16wQik8=' 'sha256-hV1mihBfiWqmXQxPNANChEuUWIOIlte4D1DUOfqSY2Y=' 'sha256-DHkQzQeawSI3bMDJPOulIinzX\/ih38goNk2cvBZsgPM=' 'sha256-LjOYZt74qQlHixQckZ1K+NyxwGO8jPc\/zUDhd43i7qY=' 'sha256-C6r1Uv+2BkE8Qjrq+iYLyfsjck3nrA\/PhDEE1u7CHtk=' 'sha256-hV1mihBfiWqmXQxPNANChEuUWIOIlte4D1DUOfqSY2Y=' 'sha256-BxUWVs1+UwaUImPFWmLpOCjBDGTFuFcwcXgQwKyVSYU=' https:\/\/www.googletagmanager.com\/gtm.js https:\/\/www.googletagmanager.com\/gtag\/js https:\/\/www.google-analytics.com\/analytics.js https:\/\/www.googleadservices.com\/pagead\/conversion_async.js https:\/\/www.google.com\/recaptcha\/api.js https:\/\/www.gstatic.com\/recaptcha\/releases\/ https:\/\/googleads.g.doubleclick.net\/pagead\/viewthroughconversion\/976618339\/ https:\/\/a.clickcertain.com\/px\/smart\/a\/ https:\/\/a.remarketstats.com\/px\/smart\/; style-src 'report-sample' 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'; connect-src 'self' https:\/\/stats.g.doubleclick.net https:\/\/www.google-analytics.com; font-src 'self'; frame-src 'self' https:\/\/www.google.com https:\/\/a.clickcertain.com\/; img-src 'self' https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.google.pl; manifest-src 'self'; media-src 'self'; worker-src 'none';","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com data: *.fontawesome.com fonts.googleapis.com *.gstatic.com 'self' data: https:\/\/www.e-ver.com.ar\/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.gocuotas.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ cdn.dnky.co amc.demdex.net www.google.com www.facebook.com youtube.com *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.gocuotas.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net maps.gstatic.com maps.googleapis.com accounts.google.com www.facebook.com *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.gocuotas.com *.hsforms.net *.hsforms.com 'self' data: https:\/\/www.e-ver.com.ar\/ https:\/\/www.ver.com.ar\/ https:\/\/api.snappylabs.io\/ https:\/\/storage.snappylabs.io\/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-datasolutions.com *.magento-ds.com cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net player.vimeo.com https:\/\/live.decidir.com\/ *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.gocuotas.com *.hsforms.net *.hsforms.com https:\/\/www.google.com *.gstatic.com *.woowup.com https:\/\/maps.googleapis.com https:\/\/merchants.playdigital.com.ar\/ https:\/\/merchants.preprod.playdigital.com.ar\/ https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ https:\/\/www.e-ver.com.ar\/ https:\/\/static.hotjar.com\/ https:\/\/q.clarity.ms\/ https:\/\/www.clarity.ms\/ https:\/\/snappychat.snappylabs.io\/ https:\/\/api.snappylabs.io\/ *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdn.dnky.co *.googletagmanager.com *.cookielaw.org *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.fontawesome.com *.googleapis.com *.gstatic.com https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ https:\/\/www.e-ver.com.ar\/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https:\/\/snappychat.snappylabs.io\/ https:\/\/www.e-ver.com.ar\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io maps.googleapis.com api.comapi.com bam.nr-data.net https:\/\/developers.decidir.com *.magerocket.com *.cookielaw.org *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https:\/\/mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.gocuotas.com t.elasticsuite.io *.hsforms.net *.hsforms.com https:\/\/merchants.playdigital.com.ar\/ https:\/\/merchants.preprod.playdigital.com.ar\/ https:\/\/ecommerce-modal.modo.com.ar\/ https:\/\/ecommerce-modal.preprod.modo.com.ar\/ https:\/\/www.e-ver.com.ar\/ https:\/\/q.clarity.ms\/ https:\/\/live.decidir.com\/ https:\/\/chat.snappylabs.io\/ https:\/\/o.clarity.ms\/ https:\/\/ws.snappylabs.io\/ https:\/\/sessions.bugsnag.com\/ https:\/\/www.google.com\/ccm\/collect https:\/\/analytics.google.com\/g\/collect 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' cdn.plaid.com js.stripe.com www.googletagmanager.com connect.facebook.net utt.impactcdn.com www.redditstatic.com googleads.g.doubleclick.net q.quora.com cdn-cookieyes.com widget.intercom.io js.intercomcdn.com 'unsafe-inline'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self' *.joinkudos.com api-iam.intercom.io events.launchdarkly.com app.launchdarkly.com o1336925.ingest.sentry.io clientstream.launchdarkly.com cognito-idp.us-east-2.amazonaws.com kudos-upload-prod.s3.us-east-2.amazonaws.com trykudos.github.io connect.facebook.net googleads.g.doubleclick.net stats.g.doubleclick.net www.google-analytics.com www.google.com analytics.google.com www.googleadservices.com mpc-prod-24-s6uit34pua-uw.a.run.app www.facebook.com api.mapbox.com app.adjust.com app.adjust.world pixel-config.reddit.com browser-intake-us5-datadoghq.com kudos.sjv.io *.conversionsapigateway.com www.googletagmanager.com cdn-cookieyes.com log.cookieyes.com; font-src 'self' data: use.typekit.net; frame-src cdn.plaid.com trykudos.github.io production.widget.scribeup.io www.googletagmanager.com js.stripe.com; img-src 'self' data: *.joinkudos.com logos.ntropy.com www.google.com googleads.g.doubleclick.net alb.reddit.com www.facebook.com connect.facebook.net googleads.g.doubleclick.net stats.g.doubleclick.net www.googletagmanager.com www.googleadservices.com www.ojrq.net q.quora.com cdn-cookieyes.com; media-src 'self' *.joinkudos.com; worker-src 'self' blob:; report-uri https:\/\/joinkudos.com\/csp-report;","count":1},{"content-security-policy-report-only":" script-src 'nonce-C3YyS6vTLIwUTVi5w42Rhg' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https:\/\/csp.withgoogle.com\/csp\/static-on-bigtable; base-uri 'none'","count":1},{"content-security-policy-report-only":" frame-ancestors 'none'; report-uri \/csp_logger\/;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'nonce-nRlsGwoVAExKotOtrt9tCQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri \/Handlers\/CSPHandler.ashx","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com *.cdn-apple.com https:\/\/fonts.gstatic.com https:\/\/fonts.googleapis.com data: https:\/\/*.tawk.to https:\/\/*.tawk.link *.kueskipay.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.kueskipay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com https:\/\/www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https:\/\/accounts.google.com https:\/\/www.google.com https:\/\/www.recaptcha.net https:\/\/www.facebook.com https:\/\/staticxx.facebook.com https:\/\/www.paypal.com https:\/\/checkout.paypal.com https:\/\/www.sandbox.paypal.com https:\/\/www.mercadopago.com https:\/\/checkout.mercadopago.com https:\/\/www.klaviyo.com https:\/\/embed.tawk.to https:\/\/*.tawk.to https:\/\/*.tawk.link *.google.com\/ *.kueskipay.com *.mercadolibre.com *.sandbox.paypal.com *.paypalobjects.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com https:\/\/www.magezon.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.feedoptimise.com cdn.feedoptimise.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/fonts.gstatic.com https:\/\/googleads.g.doubleclick.net https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/www.google.com.mx https:\/\/www.facebook.com *.fbcdn.net https:\/\/pixel.facebook.com https:\/\/www.paypalobjects.com https:\/\/t.paypal.com https:\/\/http2.mlstatic.com https:\/\/secure.mlstatic.com *.matomo.cloud https:\/\/static.klaviyo.com https:\/\/trk.klaviyo.com https:\/\/a.klaviyo.com https:\/\/bat.bing.com https:\/\/*.tawk.to https:\/\/*.tawk.link https:\/\/s3.amazonaws.com\/tawk-to-pi\/ https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.kueskipay.com *.google.com *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com *.sandbox.paypal.com *.paypalobjects.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.cdn-apple.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com www.feedoptimise.com cdn.feedoptimise.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/apis.google.com https:\/\/accounts.google.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.recaptcha.net https:\/\/googleads.g.doubleclick.net https:\/\/connect.facebook.net https:\/\/graph.facebook.com https:\/\/static.xx.fbcdn.net https:\/\/www.facebook.com https:\/\/pixel.facebook.com https:\/\/www.paypal.com https:\/\/www.paypalobjects.com https:\/\/www.sandbox.paypal.com https:\/\/checkout.paypal.com https:\/\/api.paypal.com https:\/\/api.sandbox.paypal.com https:\/\/sdk.mercadopago.com https:\/\/secure.mercadopago.com https:\/\/api.mercadopago.com https:\/\/http2.mlstatic.com https:\/\/assets.mercadopago.com https:\/\/cdn.matomo.cloud *.matomo.cloud matomo.gdmexico.com.mx https:\/\/static.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/telemetry.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/onsite.klaviyo.com https:\/\/static-tracking.klaviyo.com *.addtoany.com https:\/\/static.addtoany.com *.dico.com.mx https:\/\/bat.bing.com *.hotjar.com https:\/\/analytics.tiktok.com https:\/\/scripts.clarity.ms https:\/\/*.clarity.ms https:\/\/embed.tawk.to https:\/\/*.tawk.to https:\/\/*.tawk.link *.google.com https:\/\/static-forms.klaviyo.com https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.kueskipay.com *.googletagmanager.com *.mxpnl.com *.mlstatic.com *.mercadopago.com *.sandbox.paypal.com *.paypalobjects.com *.hsforms.net *.hsforms.com *.gstatic.com https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com assets.braintreegateway.com downloads.mailchimp.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/www.facebook.com https:\/\/www.paypalobjects.com https:\/\/static.klaviyo.com https:\/\/www.googletagmanager.com https:\/\/*.tawk.to https:\/\/*.tawk.link *.kueskipay.com *.googletagmanager.com *.mxpnl.com *.fontawesome.com *.googleapis.com *.addtoany.com maxcdn.bootstrapcdn.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https:\/\/www.youtube.com *.fbcdn.net https:\/\/*.tawk.to https:\/\/*.tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.cardinaltrusted.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/stats.g.doubleclick.net https:\/\/apis.google.com https:\/\/region1.google-analytics.com https:\/\/graph.facebook.com https:\/\/stats.facebook.com https:\/\/pixel.facebook.com https:\/\/api.paypal.com https:\/\/api.sandbox.paypal.com https:\/\/checkout.paypal.com https:\/\/api.mercadopago.com https:\/\/events.mercadopago.com *.matomo.cloud https:\/\/matomo.gdmexico.com.mx https:\/\/telemetry.klaviyo.com https:\/\/a.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/onsite.klaviyo.com https:\/\/static.klaviyo.com https:\/\/us.creativecdn.com https:\/\/analytics.tiktok.com https:\/\/metrics.hotjar.io https:\/\/centro-gateway.dico.com.mx https:\/\/gateway.moblum.com https:\/\/*.tawk.to https:\/\/*.tawk.link wss:\/\/*.tawk.to https:\/\/*.clarity.ms https:\/\/rqtz6qkarx.us-east-1.awsapprunner.com https:\/\/static-forms.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.kueskipay.com *.doubleclick.net *.mercadopago.com *.mercadolibre.com http:\/\/dpm.demdex.net *.sandbox.paypal.com *.paypalobjects.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self' data: *.deliveryhero.io; connect-src * data: blob: wss:; font-src * data:; frame-src * blob:; img-src * data: blob:; manifest-src *; media-src * data: blob:; object-src 'none'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.grafana.net *.sentry.io *.hotjar.com *.hotjar.io *.api.useinsider.com *.useinsider.com *.qualtrics.com *.siteintercept.qualtrics.com *.px-cloud.net *.px-cdn.net *.pxchk.net *.px-client.net *.perimeterx.net *.botchk.net *.appcues.com *.appcues.net *.youtube.com *.cloudfront.net *.amazonaws.com *.google.com *.gstatic.com *.googleapis.com *.google-analytics.com www.googletagmanager.com; style-src * 'unsafe-inline'; worker-src * blob:; base-uri 'self'; form-action 'self' *.qualtrics.com; frame-ancestors 'self' ops-portal.pedidosya.com; report-uri https:\/\/o516780.ingest.us.sentry.io\/api\/4507300079796224\/security\/?sentry_key=e1e196e276372428a5ecb141664aae68; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app maxcdn.bootstrapcdn.com 'unsafe-inline' data: *.klaviyo.com *.zip.co *.cloudflare.com *.slant.co data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.workscene.com.au *.workscene.co.nz https:\/\/decorate.workscene.com.au *.facebook.com *.kaptcha.com *.zipmoney.com.au *.doubleclick.net https:\/\/9063659.fls.doubleclick.net *.zdassets.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.google.com.au *.google.ro *.google.com *.workscene.com.au *.facebook.com https:\/\/www.facebook.com *.zipmoney.com.au *.afterpay.com *.cloudflareaccess.com https:\/\/workscene.co.nz *.cloudfront.net *.zip.co https:\/\/zip.co *.google.com.vn *.workscene.co.nz *.workscene.co.au *.facebook.net workscene.com.au www.google.co.id www.google.co.in www.google.co.kr www.google.co.nz www.google.co.th www.google.co.uk www.google.com.eg www.google.com.my www.google.com.np www.google.com.ph www.google.com.pk www.google.com.sb www.google.com.sg www.google.com.tw www.google.de www.google.hn www.google.ie www.google.mk www.google.mn www.google.pl *.cloudflare.com www.google.am www.google.at www.google.ba www.google.be www.google.ca www.google.co.ao www.google.co.jp www.google.co.ug www.google.co.za www.google.com.bd www.google.com.br www.google.com.co www.google.com.cy www.google.com.ec www.google.com.gh www.google.com.hk www.google.com.kh www.google.com.mt www.google.com.mx www.google.com.na www.google.com.pg www.google.com.qa www.google.com.sa www.google.com.tr www.google.com.ua www.google.dk www.google.dz www.google.es www.google.fi www.google.fr www.google.hr www.google.ht www.google.it www.google.jo www.google.lk www.google.lt www.google.lv www.google.nl www.google.ru www.google.se www.google.si www.google.so www.google.ws www.google.co.il www.google.com.fj www.google.ae www.google.bg www.google.bs www.google.cl www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.ma www.google.co.ve www.google.co.vi www.google.co.zm www.google.co.zw www.google.com.au www.google.com.bo www.google.com.gi www.google.com.jm www.google.com.ly www.google.com.ng www.google.com.pe www.google.com.sv www.google.com.uy www.google.gy www.google.hu www.google.no www.google.nu www.google.pt www.google.rs www.google.to www.google.tt www.google.al www.google.as www.google.az www.google.bf www.google.bj www.google.bt www.google.by www.google.cd www.google.ch www.google.ci www.google.co.ke www.google.co.ls www.google.co.tz www.google.co.uz www.google.com.ag www.google.com.ar www.google.com.bh www.google.com.bn www.google.com.do www.google.com.et www.google.com.gt www.google.com.kw www.google.com.lb www.google.com.mm www.google.com.ni www.google.com.om www.google.com.pr www.google.cz www.google.dm www.google.ee www.google.ge www.google.gr www.google.im www.google.iq www.google.is www.google.kz www.google.la www.google.lu www.google.md www.google.me www.google.mg www.google.ml www.google.mu www.google.mv www.google.nr www.google.ps www.google.rw www.google.sk www.google.sr www.google.tg www.google.tl www.google.tn www.google.vu *.doubleclick.net *.googletagmanager.com *.tiktok.com google.com workscene.co.nz www.google.co.mz www.google.com.cu www.google.com.pa www.google.com.py www.google.je www.google.sc www.google.sn *.ggpht.com *.tangooserver.com www.google.com.af yastatic.net www.google.com.vc *.googleadservices.com www.google.com.sl s3.amazonaws.com www.google.cg www.google.ki d3k81ch9hvuctc.cloudfront.net www.google.cm www.google.com.bz www.google.gg www.google.kg www.google.tm *.tiktokw.us www.google.td t.zip.co static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.chimpstatic.com https:\/\/chimpstatic.com *.googleapis.com *.zdassets.com *.doubleclick.net *.facebook.net *.gstatic.com *.zipmoney.com.au *.bing.com https:\/\/bat.bing.com *.fullstory.com https:\/\/edge.fullstory.com *.tiktok.com https:\/\/analytics.tiktok.com *.zip.co *.cfjump.com *.retargeted.co *.klaviyo.com localhost *.googletagmanager.com *.tangooserver.com *.workscene.com.au *.cloudflareinsights.com *.googleadservices.com polyfill-fastly.io static.client.cardinaltrusted.com d3aq2u4yw77ivo.cloudfront.net static.zip.co zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app https:\/\/static.klaviyo.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.googleapis.com *.zip.co *.typekit.net *.klaviyo.com *.cloudflare.com *.googletagmanager.com *.gstatic.com *.tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.gstatic.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app cdn.jsdelivr.net api.lab.amplitude.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.doubleclick.net *.zendesk.com *.zdassets.com *.zopim.com wss:\/\/widget-mediator.zopim.com *.zipmoney.com.au *.zip.co https:\/\/zipmoneyau.zendesk.com *.cardinaltrusted.com *.cloudfront.net *.google.com.vn *.google.com.au *.algolia.io *.facebook.com *.retargeted.co localhost www.google.co.in www.google.co.kr www.google.co.nz www.google.co.th www.google.com.pk www.google.de www.google.mk *.datadome.co www.google.am www.google.at www.google.be www.google.ca www.google.co.id www.google.co.jp www.google.co.uk www.google.co.za www.google.com.bd www.google.com.br www.google.com.co www.google.com.gh www.google.com.hk www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.pg www.google.com.ph www.google.com.sb www.google.com.sg www.google.com.tw www.google.fi www.google.it www.google.lt www.google.lv www.google.nl www.google.so www.google.ws www.google.bg www.google.cl www.google.co.ck www.google.co.ug www.google.co.vi www.google.com.fj www.google.com.ly www.google.com.np www.google.fr www.google.nu www.google.rs www.google.ru www.google.tt *.typekit.net www.google.ae www.google.as www.google.ba www.google.bt www.google.cd www.google.ch www.google.co.ao www.google.co.bw www.google.co.il www.google.co.ke www.google.co.ma www.google.co.tz www.google.co.uz www.google.co.ve www.google.co.zm www.google.co.zw www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bn www.google.com.cy www.google.com.eg www.google.com.et www.google.com.gt www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ng www.google.com.pe www.google.com.pr www.google.com.qa www.google.com.sa www.google.com.tr www.google.com.ua www.google.cz www.google.dk www.google.es www.google.gr www.google.hn www.google.hu www.google.ie www.google.iq www.google.is www.google.la www.google.lk www.google.md www.google.me www.google.mg www.google.ml www.google.mn www.google.mu www.google.no www.google.nr www.google.pl www.google.ps www.google.pt www.google.ro www.google.rw www.google.se www.google.si www.google.sk www.google.sr www.google.tg www.google.tl www.google.tn www.google.to www.google.vu *.klaviyo.com *.pangle-ads.com *.tiktokw.us kg668dbov0.execute-api.us-east-1.amazonaws.com www.google.az www.google.bs www.google.co.mz www.google.com.bo www.google.com.do www.google.com.ec www.google.com.py www.google.com.sv www.google.hr www.google.jo www.google.sc zip.co www.google.ge www.google.com.af www.google.com.vc *.googleadservices.com www.google.com.ni *.tiktok.com www.google.bf www.google.com.sl www.google.kz www.google.cg www.google.com.om www.google.com.uy www.google.ki *.gstatic.com www.google.by www.google.ci www.google.gg www.google.sn www.google.com.mm www.google.gy *.googleapis.com *.samsung.com www.google.al www.google.co.cr www.google.com.bh www.google.ee www.google.je *.facebook.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/032d1b56-4a9f-455b-8863-84d9bea84b8f.sansec.watch\/; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' 'report-sample' https:\/\/cdnjs.cloudflare.com https:\/\/static.addtoany.com https:\/\/widgets.flymyairport.com https:\/\/www.google.com https:\/\/www.googletagmanager.com; style-src 'self' 'report-sample' https:\/\/cdnjs.cloudflare.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self' *.irsn.fr *.asnr.fr; script-src 'self' 'unsafe-inline' *.irsn.fr *.asnr.fr cdn.ckeditor.com embed.api.video static.doubleclick.net unpkg.com vod.api.video www.google.com www.gstatic.com www.youtube.com www.youtube-nocookie.com e.infogram.com matomo.asnr.fr; object-src 'none'; style-src 'self' 'unsafe-inline'  *.irsn.fr *.asnr.fr fonts.googleapis.com unpkg.com www.youtube.com www.youtube-nocookie.com; img-src 'self' data:  *.irsn.fr *.asnr.fr i.ytimg.com yt3.ggpht.com *.tile.openstreetmap.org fonts.gstatic.com; media-src 'self' data:  *.irsn.fr *.asnr.fr; frame-src 'self'  *.irsn.fr *.asnr.fr embed.api.video www.youtube.com www.youtube-nocookie.com irsn.libcast.com e.infogram.com irsn.libcast.com open.spotify.com; frame-ancestors 'self'  *.irsn.fr *.asnr.fr; child-src 'self'  *.irsn.fr *.asnr.fr embed.api.video www.youtube.com www.youtube-nocookie.com; font-src 'self' data:  *.irsn.fr *.asnr.fr embed.api.video fonts.gstatic.com themes.googleusercontent.com; connect-src 'self'  *.irsn.fr *.asnr.fr collector.api.video googleads.g.doubleclick.net jnn-pa.googleapis.com vod.api.video www.youtube.com www.youtube-nocookie.com; report-uri \/sa-report-csp-violation; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/challenges.cloudflare.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/challenges.cloudflare.com; frame-src 'self' https:\/\/challenges.cloudflare.com; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/scripts.pubnation.com https:\/\/www.googletagmanager.com https:\/\/us.i.posthog.com https:\/\/us-assets.i.posthog.com; img-src * data:; style-src 'self' 'unsafe-inline'; connect-src *; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.versapay.com *.paynup.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.versapay.com *.paynup.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com *.dotdigital-pages.com *.dotdigital.com *.twitter.com *.paynup.com *.versapay.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: *.certcapture.com *.amazonaws.com *.google.co.in t.co.in t.co *.trackedlink.net *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.versapay.com *.paynup.com magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page *.certcapture.com *.ads-twitter.com *.pinimg.com *.qualtrics.com *.hotjar.com *.pinterest.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.versapay.com *.paynup.com *.datadoghq.com webchat.dotdigital.com webchat.staging.dotdigital.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.versapay.com *.paynup.com webchat.dotdigital.com webchat.staging.dotdigital.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.pinterest.com *.googleapis.com *.qualtrics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net wss:\/\/ws.hotjar.com *.google.co.in *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.cloudflare.com *.twitter.com *.twimg.com *.versapay.com *.paynup.com *.datadoghq.com webchat.dotdigital.com webchat.staging.dotdigital.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http:\/\/127.0.0.1\/magento_os\/; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" script-src 'nonce-yZqs95hogA2grekLETkCZvcs' 'strict-dynamic' 'unsafe-eval'; base-uri 'self'; object-src 'none';","count":1},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' https:\/\/cdn.jsdelivr.net https:\/\/cxppusa1formui01cdnsa01-endpoint.azureedge.net https:\/\/assets-can.mkt.dynamics.com https:\/\/public-can.mkt.dynamics.com\/ https:\/\/bam.nr-data.net https:\/\/region1.google-analytics.com https:\/\/formui-usa1.mkt.dynamics.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com; font-src 'self' https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net https:\/\/fonts.gstatic.com https:\/\/assets-can.mkt.dynamics.com data:; frame-src 'self' https:\/\/www.youtube.com https:\/\/vimeo.com https:\/\/player.vimeo.com\/ https:\/\/www.google.com; img-src 'self' data: https:\/\/6148348.global.siteimproveanalytics.io https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com; object-src 'none'; script-src 'self' 'report-sample' https:\/\/js-agent.newrelic.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/siteimproveanalytics.com https:\/\/cxppusa1formui01cdnsa01-endpoint.azureedge.net https:\/\/www.gstatic.com https:\/\/formui-usa1.mkt.dynamics.com cdn.jsdelivr.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/platform.twitter.com https:\/\/www.google.com; style-src 'self' 'report-sample' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com; style-src-attr 'self' 'report-sample' 'unsafe-inline'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https:\/\/csplog.evolvingweb.net\/api\/v1\/report\/cmmuro47c0000q901qvxd8f5h","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/site-bundle.chibbis.ru; script-src-elem 'self' 'unsafe-inline' blob: data: https:\/\/widget.me-talk.ru wss:\/\/widget.me-talk.ru https:\/\/mc.yandex.ru https:\/\/mc.yandex.com https:\/\/smartcaptcha.yandexcloud.net https:\/\/api-maps.yandex.ru https:\/\/yastatic.net https:\/\/api-maps.yandex.ru https:\/\/lcab.talk-me.ru https:\/\/checkout.cloudpayments.ru https:\/\/site-static.chibbis.ru https:\/\/yandex.ru\/ads\/system\/context.js https:\/\/site-bundle.chibbis.ru https:\/\/sentry.chibbis.ru; style-src 'self' data: 'unsafe-inline' https:\/\/site-bundle.chibbis.ru https:\/\/site-static.chibbis.ru; img-src 'self' data: https:\/\/static-featured-set-actual-production.chibbis.ru https:\/\/static-actual-production.chibbis.ru https:\/\/scdn.chibbis.ru https:\/\/static.me-talk.ru https:\/\/core-renderer-tiles.maps.yandex.net https:\/\/mc.yandex.ru https:\/\/mc.yandex.com https:\/\/mc.yandex.kz https:\/\/mc.yandex.by https:\/\/yandex.ru https:\/\/avatars.mds.yandex.net https:\/\/qr.nspk.ru https:\/\/pic.me-talk.ru https:\/\/site-static.chibbis.ru; font-src 'self' https:\/\/yastatic.net\/s3\/home\/fonts\/ys\/3\/text-variable-full.woff2 https:\/\/site-static.chibbis.ru; manifest-src 'self' https:\/\/yastatic.net\/s3\/home\/fonts\/ys\/3\/text-variable-full.woff2 https:\/\/site-static.chibbis.ru; media-src 'self' https:\/\/widget.me-talk.ru; frame-src 'self' *; connect-src 'self' https:\/\/mc.yandex.ru https:\/\/mc.yandex.com wss:\/\/mc.yandex.ru wss:\/\/mc.yandex.com https:\/\/mc.yandex.kz https:\/\/mc.yandex.by https:\/\/mc.yandex.md https:\/\/yandex.ru https:\/\/yastatic.net https:\/\/log.api-maps.yandex.ru https:\/\/core-renderer-tiles.maps.yandex.net https:\/\/api-maps.yandex.ru https:\/\/geocode-maps.yandex.ru https:\/\/static.me-talk.ru https:\/\/lcab.talk-me.ru https:\/\/widget.me-talk.ru wss:\/\/widget.me-talk.ru https:\/\/checkout.cloudpayments.ru https:\/\/api.cloudpayments.ru https:\/\/sentry.chibbis.ru; worker-src 'self' 'unsafe-inline' blob: data: https:\/\/widget.me-talk.ru wss:\/\/widget.me-talk.ru https:\/\/mc.yandex.ru https:\/\/mc.yandex.com https:\/\/smartcaptcha.yandexcloud.net https:\/\/api-maps.yandex.ru https:\/\/yastatic.net https:\/\/api-maps.yandex.ru https:\/\/lcab.talk-me.ru https:\/\/checkout.cloudpayments.ru https:\/\/site-static.chibbis.ru https:\/\/yandex.ru\/ads\/system\/context.js https:\/\/site-bundle.chibbis.ru https:\/\/sentry.chibbis.ru; base-uri 'self'; report-uri \/health\/csp; report-to default","count":1},{"content-security-policy-report-only":" default-src 'self';script-src 'self' 'unsafe-inline' 'nonce-pDavsONfnBtOl2EDbZoO10rb' 'unsafe-eval' https:\/\/pixel.byspotify.com *.travcorpservices.com https:\/\/www.google.com https:\/\/www.google-analytics.com https:\/\/www.googleoptimize.com https:\/\/www.googletagmanager.com https:\/\/ajax.googleapis.com https:\/\/www.gstatic.com https:\/\/googleads.g.doubleclick.net https:\/\/api.feefo.com https:\/\/register.feefo.com https:\/\/bat.bing.com https:\/\/cdn.evgnet.com https:\/\/connect.facebook.net https:\/\/i.clarity.ms https:\/\/static-ssl.responsetap.com *.hotjar.com https:\/\/tag.simpli.fi https:\/\/unpkg.com https:\/\/www.bugherd.com https:\/\/decagon.ai https:\/\/www.datadoghq-browser-agent.com https:\/\/assetscdn.stackla.com\/media\/js https:\/\/vjs.zencdn.net https:\/\/cdn.amplitude.com\/libs https:\/\/sdk.joinsherpa.io https:\/\/apps.mypurecloud.com https:\/\/consentcdn.cookiebot.com https:\/\/cdnjs.cloudflare.com https:\/\/ttc-contiki.entry.promo https:\/\/cdn.optimizely.com https:\/\/www.riddle.com;style-src 'self' 'unsafe-inline' https:\/\/assetscdn.stackla.com\/media\/components\/stackla-uikit\/dist https:\/\/fonts.googleapis.com https:\/\/p.typekit.net https:\/\/use.typekit.net https:\/\/vjs.zencdn.net https:\/\/apps.mypurecloud.com;img-src 'self' https:\/\/bat.bing.com https:\/\/c.clarity.ms https:\/\/i.ytimg.com https:\/\/www.facebook.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.uplift-platform.com data:;frame-src 'self' https:\/\/10006172.fls.doubleclick.net https:\/\/uplift-cdn-stg.uplift.com https:\/\/vars.hotjar.com https:\/\/widget.stackla.com https:\/\/www.google.com https:\/\/apps.joinsherpa.io https:\/\/www.googletagmanager.com https:\/\/a25408250069.cdn.optimizely.com;font-src 'self' https:\/\/assetscdn.stackla.com https:\/\/fonts.gstatic.com https:\/\/use.typekit.net https:\/\/vjs.zencdn.net https:\/\/apps.mypurecloud.com;connect-src 'self' *.travcorpservices.com *.travcorp.com *.corp.ttc:7443 https:\/\/api.feefo.com https:\/\/bat.bing.com https:\/\/in.hotjar.com https:\/\/ws11.hotjar.com\/api https:\/\/l.clarity.ms https:\/\/metrics.responsetap.com\/infinity https:\/\/noembed.com https:\/\/pm-mrkt.prodgw.uplift-platform.com https:\/\/rum.browser-intake-datadoghq.com https:\/\/session-replay.browser-intake-datadoghq.com https:\/\/ttctravel.germany-2.evergage.com https:\/\/www.facebook.com https:\/\/www.google-analytics.com https:\/\/logx.optimizely.com https:\/\/region1.analytics.google.com https:\/\/ttc.contiki.com","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com *.fontawesome.com https:\/\/fonts.bunny.net fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.youtube.com *.youtube-nocookie.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com js.mollie.com consentcdn.cookiebot.com belenbo-sst-1082904994961.europe-west1.run.app *.addthis.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com https:\/\/images.unsplash.com https:\/\/www.mollie.com consentcdn.cookiebot.com *.clarity.ms belenbo-sst-1082904994961.europe-west1.run.app *.google.be *.doubleclick.net *.bing.com *.contentsquare.net *.openstreetmap.org https:\/\/maps.googleapis.com maps.gstatic.com maps.googleapis.com magefan.com cm.magefan.com *.disqus.com https:\/\/firebasestorage.googleapis.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com js.mollie.com pay.google.com applepay.cdn-apple.com consentcdn.cookiebot.com *.clarity.ms belenbo-sst-1082904994961.europe-west1.run.app *.google.be *.doubleclick.net *.bing.com *.contentsquare.net maps.googleapis.com unpkg.com\/@googlemaps\/markerclusterer\/ *.disqus.com *.addthis.com https:\/\/z.moatads.com https:\/\/v1.addthisedge.com https:\/\/cdn.jsdelivr.net *.avada.io *.shopify.com https:\/\/unpkg.com\/swiper@11.2.5\/swiper-bundle.min.js *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com https:\/\/cdn.jsdelivr.net https:\/\/fonts.bunny.net https:\/\/unpkg.com\/swiper@11.2.5\/swiper-bundle.min.css tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net vimeo.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com consentcdn.cookiebot.com *.clarity.ms belenbo-sst-1082904994961.europe-west1.run.app *.google.be *.doubleclick.net *.bing.com *.contentsquare.net www.google.com *.openstreetmap.org places.googleapis.com *.gstatic.com https:\/\/get.geojs.io *.avada.io *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-MTpvF_wtGnpF2EiH4GdLqA' 'unsafe-inline' 'unsafe-eval' https:\/\/*.msauth.net https:\/\/*.msftauth.net https:\/\/*.msftauthimages.net https:\/\/*.msauthimages.net https:\/\/*.msidentity.com https:\/\/*.microsoftonline-p.com https:\/\/*.microsoftazuread-sso.com https:\/\/*.azureedge.net https:\/\/*.outlook.com https:\/\/*.office.com https:\/\/*.office365.com https:\/\/*.microsoft.com https:\/\/*.bing.com 'report-sample'; report-uri https:\/\/csp.microsoft.com\/report\/ESTS-UX-All","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/webalytix.th-nuernberg.de https:\/\/static.b-ite.com https:\/\/cs-assets.b-ite.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' https:\/\/webalytix.th-nuernberg.de data:; base-uri 'none'; frame-src https:\/\/webalytix.th-nuernberg.de https:\/\/virtuohm.ohmportal.de; connect-src 'self' https:\/\/webalytix.th-nuernberg.de https:\/\/jobs.b-ite.com; style-src 'self' 'unsafe-inline' data: 'report-sample'; object-src 'none'; font-src 'self' data:; report-uri https:\/\/www.th-nuernberg.de\/@http-reporting?csp=report&requestTime=1788491907849744&requestHash=a8a13a2d53e27ffd43b66143d6067ad810aca3cb","count":1},{"content-security-policy-report-only":" default-src 'self' *.googleapis.com *.googletagmanager.com;connect-src 'self' *.gstatic.com *.google.com *.google-analytics.com *.google *.googlesyndication.com *.googletagmanager.com;frame-src 'self' *.google *.doubleclick.net *.google.com *.googlesyndication.com;font-src 'self' data: fonts.gstatic.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com  *.ampproject.org *.facebook.net *.jquery.com *.cloudfront.net *.google *.google.com *.googlesyndication.com *.googletagmanager.com *.googleapis.com;style-src 'self' 'unsafe-inline' 'unsafe-eval' *.jquery.com *.cloudfront.net *.googleapis.com *.cloudflare.com;img-src 'self' data: *.cloudfront.net *.google.com *;report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.klarnacdn.net *.fontawesome.com *.cloudfront.net *.zopim.com *.sfdcstatic.com https:\/\/c1.sfdcstatic.com\/etc\/clientlibs\/sfdc-aem-master\/clientlibs_base\/fonts\/SalesforceSans-Regular.ttf use.fontawesome.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/plumrocket.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com landofcoder.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https:\/\/plumrocket.com www.xtento.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net widgets.automizely.com widgets.automizely.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/img.youtube.com *.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.scosche.com *.google.co.in *.sharethis.com *.adnxs.com *.adsrvr.org *.b1img.com *.amazon.com\/* http:\/\/b1img.com *.force.com *.cloudfront.net www.xtento.com cdn.xtento.com *.yotpo.com swellrewards.com *.swellrewards.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-datasolutions.com *.magento-ds.com ajax.googleapis.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.thecustomproductbuilder.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.klarnacdn.net *.klarnaservices.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.kaptcha.com landofcoder.com s7.addthis.com *.googletagmanager.com *.facebook.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinalcommerce.com g.doubleclick.net *.google.com *.zdassets.com *.nmgassets.com *.expertrec.com *.tiktok.com *.trackedweb.net *.shop.pe *.google.co.in *.sharethis.com *.zopim.com *.adnxs.com *.b1js.com *.cloudfront.net *.hotjar.com *.b1img.com http:\/\/shop.pe *.amazonaws.com http:\/\/b1img.com *.jsdelivr.net *.zendesk.com *.newrelic.com *.force.com https:\/\/service.force.com\/embeddedservice\/5.0\/esw.min.js *.shopbox.ai https:\/\/shopbox-widgets-storybook.pages.dev\/sbmain.min.js https:\/\/d.la1-core1.sfdc-lywfpd.salesforceliveagent.com *.salesforceliveagent.com https:\/\/d41000002lgrjea2.my.salesforce-sites.com *.my.salesforce-sites.com https:\/\/d41000002lgrjea2.my.salesforce.com\/lightning\/lightning.out.js https:\/\/d41000002lgrjea2.my.salesforce.com\/lightning\/lightning.out.delegate.js https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/dompurify\/1.0.10\/purify.js https:\/\/cmp.osano.com\/AzqbnpTQhAyVm3E99\/8df62698-cfde-462e-8a72-94fe3192c7c1\/osano.js https:\/\/s.pinimg.com\/ct\/core.js https:\/\/s.pinimg.com\/ct\/lib\/main.15f60036.js https:\/\/d41000002lgrjea2.my.salesforce-sites.com\/liveAgentSetupFlow\/embeddedService\/sidebarApp.app *.iesnare.com *.pinimg.com *.pinterest.com www.xtento.com cdn.xtento.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com widgets.automizely.com widgets.automizely.io *.klarnacdn.net https:\/\/static.klaviyo.com *.fontawesome.com unsafe-inline assets.braintreegateway.com *.cloudfront.net *.addshoppers.com *.force.com https:\/\/d41000002lgrjea2.my.salesforce-sites.com https:\/\/d.la1-core1.sfdc-lywfpd.salesforceliveagent.com *.salesforceliveagent.com *.my.salesforce-sites.com https:\/\/static-tracking.klaviyo.com\/onsite\/js\/532.fa051703115da6a50763.css *.klaviyo.com *.yotpo.com swellrewards.com *.swellrewards.com maxcdn.bootstrapcdn.com *.googleapis.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.iesnare.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io api.automizely.com api.automizely.io *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.kaptcha.com landofcoder.com ekr.zdassets.com\/ *.google-analytics.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.sharethis.com *.trackedweb.net *.klaviyo.com *.zopim.com *.zendesk.com *.hotjar.io *.shop.pe wss:\/\/widget-mediator.zopim.com wss:\/\/pod-27.zendesk.com *.nr-data.net https:\/\/bam.nr-data.net *.jsdelivr.net *.my.sentry.io *.hotjar.com\/* wss:\/\/ws.hotjar.com *.safeopt.com *.scosche.com *.force.com *.run.app *.a.run.app https:\/\/d.la1-core1.sfdc-lywfpd.salesforceliveagent.com *.salesforceliveagent.com https:\/\/d41000002lgrjea2.my.salesforce-sites.com *.my.salesforce-sites.com *.tiktok.com *.pinterest.com *.googleapis.com *.iesnare.com *.osano.com *.api.osano.com  wss:\/\/mpsnare.iesnare.com\/star *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/piwik.stwk.at https:\/\/code.etracker.com https:\/\/*.etracker.com https:\/\/maps.googleapis.com https:\/\/ajax.googleapis.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/embed.skylinewebcams.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com blob: https:\/\/piwik.stwk.at https:\/\/*.etracker.com https:\/\/*.streamdiver.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.google.com https:\/\/*.googleusercontent.com https:\/\/embed.skylinewebcams.com https:\/\/www.foto-webcam.eu; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https:\/\/*.streamdiver.com https:\/\/www.google.com https:\/\/maps.google.com https:\/\/embed.skylinewebcams.com https:\/\/www.skylinewebcams.com; object-src 'none'; frame-ancestors 'self'; form-action 'self'; style-src 'self' 'unsafe-inline' https:\/\/use.typekit.net https:\/\/p.typekit.net https:\/\/embed.skylinewebcams.com 'report-sample'; font-src 'self' data: https:\/\/use.typekit.net https:\/\/p.typekit.net; connect-src 'self' https:\/\/piwik.stwk.at https:\/\/*.etracker.com https:\/\/*.googleapis.com; media-src 'self' data: blob:; worker-src 'self' blob: 'report-sample'; report-uri https:\/\/www.kufnet.at\/@http-reporting?csp=report&requestTime=1788497277089822&requestHash=d852edbc1e31492731a7e6c75c370245e96be199","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com connect.facebook.net a.clarity.ms *.adobedtm.com *.adobe.com *.facebook.com *.g.doubleclick.net *.clarity.ms scripts.clarity.ms *.google.co.in *.bing.com *.ccavenue.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com connect.facebook.net a.clarity.ms *.adobedtm.com *.facebook.com *.g.doubleclick.net *.clarity.ms scripts.clarity.ms *.google.co.in *.bing.com *.ccavenue.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https:\/\/plumrocket.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io connect.facebook.net a.clarity.ms *.adobedtm.com *.facebook.com *.g.doubleclick.net *.clarity.ms scripts.clarity.ms *.google.co.in *.bing.com geostag.cardinalcommerce.com *.ccavenue.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page connect.facebook.net a.clarity.ms *.adobedtm.com *.facebook.com *.g.doubleclick.net *.clarity.ms scripts.clarity.ms *.google.co.in *.bing.com *.ccavenue.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com connect.facebook.net a.clarity.ms *.adobedtm.com *.adobe.com *.facebook.com *.g.doubleclick.net *.clarity.ms scripts.clarity.ms *.google.co.in *.bing.com *.ccavenue.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self' static.hebban.nl www.hebban.nl browser.sentry-cdn.com *.ingest.us.sentry.io www.google.com consentcdn.cookiebot.com analytics.ahrefs.com region1.google-analytics.com region1.analytics.google.com www.googletagmanager.com *.aso1.net euc-widget.freshworks.com cpnb.freshdesk.com pagead2.googlesyndication.com scripts.simpleanalyticscdn.com queue.simpleanalyticscdn.com;style-src *  'unsafe-inline'; img-src * 'self' data: ;font-src *; frame-src consentcdn.cookiebot.com *.doubleclick.net www.google.com www.googletagmanager.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' hebbandemo.nl www.hebbandemo.nl nieuwsbrieven.cpnb.nl www.gstatic.com google.com www.google.com hebbanstatic.yunademo.nl static.hebban.nl consent.cookiebot.com consentcdn.cookiebot.com js.sentry-cdn.com browser.sentry-cdn.com hebban.yunademo.nl www.hebban.nl *.google-analytics.com *.googletagmanager.com *.chartbeat.com sb.scorecardresearch.com *.hotjar.com track.adform.net connect.facebook.net *.doubleclick.net analytics.ahrefs.com *.aso1.net euc-widget.freshworks.com scripts.simpleanalyticscdn.com;worker-src 'self' blob:;media-src *;frame-ancestors *;","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/eastprodcdn.azureedge.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com landofcoder.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.gstatic.com https:\/\/images.unsplash.com https:\/\/bat.bing.net https:\/\/bat.bing.com https:\/\/d.adroll.com https:\/\/eastprodcdn.azureedge.net https:\/\/forms.hsforms.com https:\/\/cdn.origene.com https:\/\/perf-na1.hsforms.com https:\/\/px.ads.linkedin.com https:\/\/px4.ads.linkedin.com https:\/\/track.hubspot.com https:\/\/www.bizgeniusapp.com https:\/\/www.ncbi.nlm.nih.gov https:\/\/pmc.ncbi.nlm.nih.gov https:\/\/cdn.ncbi.nlm.nih.gov https:\/\/x.bidswitch.net https:\/\/pixel.tapad.com https:\/\/ps.eyeota.net https:\/\/rtb-csync.smartadserver.com https:\/\/ml314.com https:\/\/dsum-sec.casalemedia.com https:\/\/idsync.rlcdn.com https:\/\/sync.outbrain.com https:\/\/us-u.openx.net https:\/\/image2.pubmatic.com https:\/\/eb2.3lift.com https:\/\/sync.taboola.com https:\/\/ib.adnxs.com https:\/\/match.adsrvr.org https:\/\/pixel.rubiconproject.com https:\/\/s.amazon-adsystem.com https:\/\/onetag-sys.com https:\/\/jadserve.postrelease.com https:\/\/secure.adnxs.com https:\/\/ups.analytics.yahoo.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com landofcoder.com https:\/\/bat.bing.com https:\/\/cdn.noibu.com https:\/\/connect.facebook.net https:\/\/d.adroll.com https:\/\/eastprodcdn.azureedge.net https:\/\/galleryuseastprod.blob.core.windows.net https:\/\/js.hs-analytics.net https:\/\/js.hs-banner.com https:\/\/js.hs-scripts.com https:\/\/js.hscollectedforms.net https:\/\/js.hubspot.com https:\/\/js.usemessages.com https:\/\/s.adroll.com https:\/\/scripts.clarity.ms https:\/\/script.hotjar.com https:\/\/snap.licdn.com https:\/\/static.hotjar.com https:\/\/unpkg.com https:\/\/workspace.velaro.com https:\/\/www.bizgeniusapp.com https:\/\/www.clarity.ms https:\/\/cdnjs.cloudflare.com https:\/\/cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/eastprodcdn.azureedge.net https:\/\/galleryuseastprod.blob.core.windows.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com landofcoder.com https:\/\/ad.doubleclick.net https:\/\/api-engagement-us-east.velaro.com https:\/\/api.hubspot.com https:\/\/api-main-us-east.velaro.com https:\/\/api-visitor-us-east.velaro.com https:\/\/bat.bing.net https:\/\/cta-service-cms2.hubspot.com https:\/\/d.adroll.com https:\/\/e.clarity.ms https:\/\/forms.hscollectedforms.net https:\/\/px.ads.linkedin.com https:\/\/stats.g.doubleclick.net https:\/\/u.clarity.ms https:\/\/www.bizgeniusapp.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; img-src 'self' https: data: blob:; connect-src 'self' https:; frame-src https:; frame-ancestors 'none':; base-uri 'self'; form-action https:; object-src 'none'; upgrade-insecure-requests; report-uri https:\/\/api.fwicloud.com\/common\/v1\/csp-reports; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" connect-src 'self' https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.doubleclick.net www.google.co.uk https:\/\/analytics.google.com https:\/\/vc.hotjar.io https:\/\/in.hotjar.com https:\/\/content.hotjar.io https:\/\/csmetrics.hotjar.com metrics.hotjar.io wss:\/\/ws.hotjar.com surveystats.hotjar.io https:\/\/feeds.trac.jobs sentry.issuu.com stats.g.doubleclick.net translate.googleapis.com *.onetrust.com cdn-ukwest.onetrust.com adservice.google.com https:\/\/ask.hotjar.io www.googleadservices.com www.google.com www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.com.ai www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.ie www.google.co.il www.google.im www.google.co.in www.google.iq www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.com.kh www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.ms www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.com.ng www.google.com.ni www.google.ne www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.pl www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.so www.google.sm www.google.sr www.google.st www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tl www.google.tm www.google.tn www.google.to www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.vg www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.rs www.google.co.za www.google.co.zm www.google.co.zw www.google.cat; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample' *.gosh.nhs.uk www.gosh.nhs.uk feeds.trac.jobs *.googletagmanager.com www.cqc.org.uk e.issuu.com 'nonce-FIGL34c8jn8Sm4pOfedyrw=='; object-src 'none'; img-src 'self' data: *.gosh.nhs.uk *.google-analytics.com *.googletagmanager.com i.ytimg.com *.cqc.org.uk *.gstatic.com *.google.com stats.g.doubleclick.net feeds.trac.jobs https:\/\/static.trac.jobs static.trac.jobs healthjobsuk.com services.postcodeanywhere.co.uk dx4nr741tfc02.cloudfront.net www.healthjobsuk.com 'sha384-YephmBv2489Q13yLaARSHqhDtSlHeIs5DEiq8I1fyh4aQcG+nRoz5Y6eWndd5cVz' *.onetrust.com cdn-ukwest.onetrust.com script.hotjar.com survey-images.hotjar.com www.google.com www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.com.ai www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.ie www.google.co.il www.google.im www.google.co.in www.google.iq www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.com.kh www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.ms www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.com.ng www.google.com.ni www.google.ne www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.pl www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.so www.google.sm www.google.sr www.google.st www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tl www.google.tm www.google.tn www.google.to www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.vg www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.rs www.google.co.za www.google.co.zm www.google.co.zw www.google.cat; style-src 'self' 'report-sample' 'unsafe-inline' services.postcodeanywhere.co.uk fonts.googleapis.com feeds.trac.jobs www.cqc.org.uk www.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample' https:\/\/www.googletagmanager.com https:\/\/www.google.co.uk https:\/\/www.google.com https:\/\/feeds.trac.jobs feeds.trac.jobs 'nonce-FIGL34c8jn8Sm4pOfedyrw=='; manifest-src 'self' *.gosh.nhs.uk; font-src 'self' https:\/\/fonts.gstatic.com  script.hotjar.com https:\/\/fonts.googleapis.com data:; frame-src 'self' https:\/\/www.google.com  https:\/\/www.youtube.com https:\/\/vars.hotjar.com www.googletagmanager.com e.issuu.com *.recaptcha.net td.doubleclick.net; media-src 'self' gosh.shorthandstories.com cdn.plyr.io data: media.gosh.nhs.uk ssl.gstatic.com *.s3.amazonaws.com; default-src 'self' *.gosh.nhs.uk; base-uri 'self'; report-uri https:\/\/o516378.ingest.sentry.io\/api\/5622733\/security\/?sentry_key=c5f8a650e74b48a889ccadeaa5014261&sentry_environment=production","count":1},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/www.ntnews.com.au\/csp-reports","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https:\/\/www.googletagmanager.com *.googleapis.com *.zohocdn.com www.shopperapproved.com *.klevu.com *.ksearchnet.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.fonts.googleapis.com data: *.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com www.googletagmanager.com td.doubleclick.net sst.surveillance-video.com googleads.g.doubleclick.net ep2.adtrafficquality.google cerulean-cannoli-8f496c.netlify.app elaborate-capybara-a25bf1.netlify.app salesiq.zohopublic.com *.addthis.com *.pinterest.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.gstatic.com cdn.gtranslate.net css.zohocdn.com www.shopperapproved.com ep1.adtrafficquality.google pagead2.googlesyndication.com d3k81ch9hvuctc.cloudfront.net https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com https:\/\/firebasestorage.googleapis.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.addthis.com *.pinterest.com *.cdninstagram.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https:\/\/www.googletagmanager.com *.googleapis.com *.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https:\/\/api.goaffpro.com https:\/\/static.goaffpro.com pagead2.googlesyndication.com *.hotjar.com prod.benchmarkemail.com monitor.fraudblocker.com salesiq.zoho.com *.zohocdn.com cdn.gtranslate.net www.shopperapproved.com load.sst.surveillance-video.com sst.surveillance-video.com ep2.adtrafficquality.google https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ js.klevu.com *.ksearchnet.com *.avada.io *.shopify.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/www.googletagmanager.com tagmanager.google.com *.googleapis.com *.zohocdn.com *.zohostatic.com *.zohopublic.com www.googletagmanager.com https:\/\/static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zohocdn.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com *.googleapis.com https:\/\/api.goaffpro.com https:\/\/static.goaffpro.com googleads.g.doubleclick.net *.zohopublic.com wss:\/\/vts.zohopublic.com *.hotjar.io wss:\/\/ws.hotjar.com stats.g.doubleclick.net sst.surveillance-video.com ep1.adtrafficquality.google https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com https:\/\/get.geojs.io *.avada.io *.cloudflare.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self' blob:  https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; frame-src 'self' https:\/\/*.noxiaohao.com https:\/\/telegram.org https:\/\/*.bitget.com https:\/\/accounts.google.com https:\/\/oauth.telegram.org https:\/\/sgtm.btsgtm.com ; script-src 'self' 'nonce-qqYPh00aMPqbWY9xXLBT9w==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6\/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh\/v3RIRuG3kMikr5iha+7P\/0TN\/GNA=' https:\/\/*.noxiaohao.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com https:\/\/accounts.google.com https:\/\/www.googletagmanager.com https:\/\/fonts.googleapis.com https:\/\/play.google.com https:\/\/analytics.google.com https:\/\/fonts.gstatic.com https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/*.geetest.com https:\/\/*.geevisit.com https:\/\/sgtm.btsgtm.com; connect-src 'self' wss: https:\/\/stats.g.doubleclick.net https:\/\/analytics.google.com https:\/\/www.google.com wss:\/\/stream.bitget.cloud https:\/\/*.noxiaohao.com wss:\/\/*.noxiaohao.com wss:\/\/*.bitget.com https:\/\/www.turingfraud.net https:\/\/play.google.com https:\/\/accounts.google.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com https:\/\/telegram.org https:\/\/oauth.telegram.org https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/sgtm.btsgtm.com ; worker-src 'self' blob:; img-src 'self' data: blob: https:\/\/www.googletagmanager.com https:\/\/img.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/img.bitgetimg.com https:\/\/img.gurenla.com https:\/\/*.bgbstatic.com https:\/\/lh3.googleusercontent.com https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/static-web.jjdsn.vip https:\/\/cdn.bitkeep.vip https:\/\/www.google.co.jp https:\/\/bin.wangsustatic.com https:\/\/sgtm.btsgtm.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/accounts.google.com https:\/\/fonts.googleapis.com https:\/\/static.bgbstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; font-src 'self' data: https:\/\/static.geetest.com https:\/\/static.geevisit.com https:\/\/fonts.gstatic.com https:\/\/*.bgbstatic.com https:\/\/*.bgstatic.com https:\/\/*.gurenla.com https:\/\/*.bitget.com; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri \/v1\/buried\/log\/cspSecurity \/v1\/monitor\/csp?appId=d4b6df7d;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/securepubads.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/tpc.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/www.google-analytics.com https:\/\/challenges.cloudflare.com https:\/\/accounts.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:\/\/*.seminuevos.com https:\/\/*.latamautos.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.adtrafficquality.google; frame-src 'self' https:\/\/securepubads.g.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/challenges.cloudflare.com https:\/\/accounts.google.com https:\/\/*.seminuevos.com","count":1},{"content-security-policy-report-only":" worker-src *.noibu.com; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com *.googleapis.com www.google.com www.gstatic.com *.bootstrapcdn.com *.paypalobjects.com *.gladly.com *.cookielaw.org data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https:\/\/plumrocket.com *.tilebar-vis.com *.byondxr.com *.cardinalcommerce.com *.cardinaltrusted.com *.facebook.com *.facebook.net *.yotpo.com *.listrakbi.com *.cookielaw.org 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.google.com *.affirm.com *.affirm.ca https:\/\/plumrocket.com *.tilebar-vis.com *.byondxr.com sketchfab.com *.weltpixel.com cdn.cardknox.com *.cardinalcommerce.com *.cardinaltrusted.com pay.google.com *.solapayments.com *.cardknox.com photos.pixlee.co *.facebook.com *.paypalobjects.com *.yotpo.com *.vimeo.com vimeo.com *.googletagmanager.com *.xtento.com *.doubleclick.net *.gladly.com *.optimizely.com *.creativecdn.com *.pinterest.com *.listrakbi.com *.cookielaw.org *.noibu.com c.paypal.com checkout.paypal.com assets.braintreegateway.com * speedsize.com *.speedsize.com www.xtento.com 'self' 'unsafe-inline'; img-src *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app www.apptrian.com *.affirm.com *.affirm.ca www.gstatic.com *.solapayments.com *.cardknox.com wac.edgecastcdn.net *.googleadservices.com *.facebook.com *.yotpo.com *.cdninstagram.com *.google-analytics.com *.google.com *.google.com.vn *.google.co.il *.google.com.sg *.google.co.uk *.google.de *.magentocommerce.com *.paypalobjects.com *.ytimg.com *.web-view.net *.googleapis.com *.nagich.co.il vimeo.com *.vimeo.com *.tilebar.com *.zdassets.com *.pxlecdn.com *.cloudfront.net *.roomvo.com *.tilebar-vis.com *.byondxr.com *.searchspring.net *.gladly.com *.edgecastcdn.net *.doubleclick.net *.bing.com *.pinterest.com *.optimizely.com *.adnxs.com *.pubmatic.com *.adingo.jp *.adingo.com *.creativecdn.com *.yahoo.com *.yahoo.net *.33across.com *.mobon.net *.seedtag.com *.clarity.ms *.brcdn.com *.brsrvr.com *.listrakbi.com *.cookielaw.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/redchamps.com speedsize.com *.speedsize.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ www.apptrian.com *.affirm.com *.affirm.ca *.byondxr.com *.tilebar-vis.com https:\/\/cdn.cardknox.com\/ifields\/3.3.2601.2901\/ifields.min.js https:\/\/cdn.cardknox.com\/sdk-3ds\/1.1.2601.0701\/cardknox-3ds.min.js *.googleapis.com *.gstatic.com cdn.cardknox.com *.cardinalcommerce.com *.cardinaltrusted.com www.gstatic.com *.solapayments.com *.cardknox.com *.turnto.com *.fontawesome.com *.dxpapi.com *.google-analytics.com apis.google.com *.googleadservices.com *.googletagmanager.com *.facebook.net *.doubleclick.net *.analytics.com *.rawgit.com *.nagich.co.il *.luckyorange.com *.xtento.com *.paypal.com *.paypalobjects.com *.forsixty.com *.criteo.com *.searchspring.io *.searchspring.net *.roomvo.io *.roomvo.com *.cloudflareinsights.com *.optimizely.com *.pixlee.com *.pxlecdn.com *.cloudflare.com *.gladly.com *.smooch.io *.bing.com *.creativecdn.com *.pinimg.com *.particularaudience.com *.googletagservices.com *.googlesyndication.com cnstrc.com getrockerbox.com\/ *.adnxs.com *.adingo.jp *.adingo.com *.cnstrc.com *.tilebar.com *.pinterest.com *.callrail.com *.clarity.ms *.algoliaradar.com *.brcdn.com *.listrakbi.com *.cloudfront.net *.cookielaw.org *.noibu.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com speedsize.com *.speedsize.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com\/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com cdn.cardknox.com\/ *.turnto.com *.bootstrapcdn.com *.cloudflare.com *.gladly.com *.brcdn.com *.listrakbi.com *.cookielaw.org *.typekit.net assets.braintreegateway.com speedsize.com *.speedsize.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com speedsize.com *.speedsize.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com www.apptrian.com *.affirm.com *.affirm.ca http:\/\/dpm.demdex.net https:\/\/api.cardknox.com\/threeds\/v1\/jwt\/staging https:\/\/kg668dbov0.execute-api.us-east-1.amazonaws.com\/stag\/log https:\/\/www.google.com https:\/\/www.gstatic.com api.cardknox.com *.cardinalcommerce.com *.cardinaltrusted.com kg668dbov0.execute-api.us-east-1.amazonaws.com pay.google.com play.google.com cdn.cardknox.com\/ *.turnto.com *.dxpapi.com *.doubleclick.net *.analytics.com *.facebook.com *.google-analytics.com *.nagich.co.il player.vimeo.com *.luckyorange.com *.googleapis.com *.visitors.live *.zdassets.com *.searchspring.io *.searchspring.net *.roomvo.io *.roomvo.com cloudflareinsights.com *.cloudflareinsights.com *.optimizely.com *.tilebar-vis.com *.byondxr.com unpkg.com *.unpkg.com *.gladly.com *.smooch.io *.creativecdn.com *.pinimg.com *.particularaudience.com *.googletagservices.com *.googlesyndication.com *.pinterest.com *.cnstrc.com *.cardknox.com *.clarity.ms *.pixlee.com *.algolia.io *.listrakbi.com *.betanetqa.me *.cloudflare.com *.cookielaw.org https:\/\/*.noibu.com wss:\/\/*.noibu.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com speedsize.com *.speedsize.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src speedsize.com *.speedsize.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri \/bnews\/csp\/report; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src * 'unsafe-inline' data: blob:; report-uri \"https:\/\/thestarphoenix.com\/wp-json\/pmd\/v1\/csp-report\"; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self'; base-uri 'self'; object-src 'none';  script-src   'self'   'unsafe-inline'   'unsafe-eval'   https:\/\/www.googletagmanager.com   https:\/\/*.google-analytics.com   https:\/\/www.googleadservices.com   https:\/\/connect.facebook.net https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.eu https:\/\/cdn.cookielaw.org https:\/\/static.cloudflareinsights.com https:\/\/js.monitor.azure.com https:\/\/bat.bing.com https:\/\/*.clarity.ms;  style-src   'self'   'unsafe-inline'   https:\/\/fonts.googleapis.com;  font-src   'self'   https:\/\/fonts.gstatic.com   data:;  img-src   'self'   data:   blob:   https:\/\/assets.skyexpress.gr https:\/\/*.google-analytics.com   https:\/\/www.googletagmanager.com   https:\/\/www.facebook.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.eu https:\/\/ade.googlesyndication.com https:\/\/bat.bing.net;  connect-src   'self'   https:\/\/*.google-analytics.com   https:\/\/analytics.google.com https:\/\/*.applicationinsights.azure.com https:\/\/bat.bing.net https:\/\/www.facebook.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.eu https:\/\/cdn.cookielaw.org https:\/\/*.skyexpress.gr https:\/\/*.clarity.ms;  frame-src   'self'   https:\/\/www.googletagmanager.com   https:\/\/www.facebook.com https:\/\/consentcdn.cookiebot.eu;  frame-ancestors 'none'; form-action 'self'; upgrade-insecure-requests;","count":1},{"content-security-policy-report-only":" require-trusted-types-for 'script'; report-uri \/api\/csp-report\/","count":1},{"content-security-policy-report-only":" default-src 'self' *.air.org; child-src 'self' *.air.org; connect-src 'self' *.sharethis.com *.air.org https:\/\/analytics.google.com https:\/\/fd.cleantalk.org https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/stats.g.doubleclick.net https:\/\/data.stbuttons.click https:\/\/moderate.cleantalk.org https:\/\/region1.analytics.google.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/use.typekit.net https:\/\/views.unsplash.com https:\/\/gateway.shorthand.com https:\/\/www.google.co.in https:\/\/use.fontawesome.com; font-src 'self' *.typekit.net *.fontawesome.com *.gstatic.com *.air.org; frame-src 'self' *.air.org https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/job-boards.greenhouse.io https:\/\/player.vimeo.com https:\/\/public.tableau.com https:\/\/www.google.com https:\/\/support.google.com https:\/\/w.soundcloud.com https:\/\/experience.arcgis.com https:\/\/iframely.shorthand.com *.softr.app; img-src 'self' *.sharethis.com *.knightlab.com *.air.org https:\/\/googleads.g.doubleclick.net https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/air-workspace.shorthandstories.com https:\/\/www.googleadservices.com https:\/\/public.tableau.com data:; manifest-src 'self'; media-src 'self' *.air.org https:\/\/air-workspace.shorthandstories.com; script-src 'self' *.sharethis.com *.air.org https:\/\/www.googletagmanager.com https:\/\/fd.cleantalk.org https:\/\/googleads.g.doubleclick.net https:\/\/www.youtube.com https:\/\/boards.greenhouse.io cdn.jsdelivr.net cdnjs.cloudflare.com chosen.js https:\/\/cdn.ckeditor.com https:\/\/cdn.jsdelivr.net https:\/\/code.jquery.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/moderate.cleantalk.org https:\/\/unpkg.com https:\/\/use.fontawesome.com mdbootstrap.com stackpath.bootstrapcdn.com; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' *.googletagmanager.com *.googleapis.com *.sharethis.com *.typekit.net *.knightlab.com *.air.org https:\/\/googleads.g.doubleclick.net https:\/\/fd.cleantalk.org https:\/\/www.youtube.com https:\/\/boards.greenhouse.io https:\/\/app.icontact.com https:\/\/air-workspace.shorthandstories.com https:\/\/public.tableau.com https:\/\/player.vimeo.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/analytics.shorthand.com https:\/\/platform-api.sharethis.com https:\/\/iframely.shorthand.com https:\/\/www.googletagmanager.com https:\/\/stackpath.bootstrapcdn.com https:\/\/connect.facebook.net https:\/\/moderate.cleantalk.org cdn.jsdelivr.net cdnjs.cloudflare.com chosen.js https:\/\/cdn.ckeditor.com https:\/\/cdn.jsdelivr.net https:\/\/code.jquery.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/unpkg.com https:\/\/use.fontawesome.com mdbootstrap.com stackpath.bootstrapcdn.com; style-src 'self' *.air.org cdn.jsdelivr.net cdnjs.cloudflare.com chosen.css fonts.googleapis.com https:\/\/cdn.jsdelivr.net mdbootstrap.com stackpath.bootstrapcdn.com use.fontawesome.com use.typekit.net; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' *.typekit.net *.knightlab.com *.air.org https:\/\/app.icontact.com cdn.jsdelivr.net cdnjs.cloudflare.com chosen.css fonts.googleapis.com https:\/\/cdn.jsdelivr.net mdbootstrap.com stackpath.bootstrapcdn.com use.fontawesome.com use.typekit.net; webrtc 'block'; base-uri 'self' *.air.org; form-action 'self' *.air.org https:\/\/app.icontact.com; frame-ancestors 'self' https:\/\/www.air.org https:\/\/air.org; report-uri https:\/\/air.org\/log-report-uri\/reportOnly; block-all-mixed-content; trusted-types 'none'","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-Al-nZC5xB2r_5h3aNwfYeA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-I05GgiyEqzIVEVTfJ3Z8qQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn.builder.io https:\/\/cdn.izooto.com https:\/\/cdn.onesignal.com https:\/\/onesignal.com https:\/\/pagead2.googlesyndication.com https:\/\/securepubads.g.doubleclick.net https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/www.googlesyndication.com https:\/\/www.metype.com; style-src 'self' 'unsafe-inline' https:\/\/assets.openthemagazine.com https:\/\/fonts.googleapis.com https:\/\/media.openthemagazine.com; img-src 'self' blob: https:\/\/assets.openthemagazine.com https:\/\/cdn.builder.io https:\/\/cdn.izooto.com https:\/\/googleads.g.doubleclick.net https:\/\/i.ytimg.com https:\/\/lh3.googleusercontent.com https:\/\/lh5.googleusercontent.com https:\/\/media.fortuneindia.com https:\/\/media.openthemagazine.com https:\/\/pagead2.googlesyndication.com https:\/\/securepubads.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/stg-quintype-dropbox.s3-accelerate.amazonaws.com https:\/\/thumbor-stg.assettype.com https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com https:\/\/www.shutterstock.com; font-src 'self' https:\/\/assets.openthemagazine.com https:\/\/fonts.gstatic.com; connect-src 'self' https:\/\/api-uat.openthemagazine.com https:\/\/cdn.izooto.com https:\/\/onesignal.com https:\/\/pagead2.googlesyndication.com https:\/\/podcast-uat.openthemagazine.com https:\/\/securepubads.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/www.googleapis.com https:\/\/www.googletagmanager.com; frame-src 'self' https:\/\/googleads.g.doubleclick.net https:\/\/securepubads.g.doubleclick.net https:\/\/tpc.googlesyndication.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com; worker-src 'self' blob: https:\/\/cdn.izooto.com https:\/\/cdn.onesignal.com; media-src 'self' blob: https:\/\/media.openthemagazine.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; report-uri \/api\/csp-report","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: https:\/\/www.googletagmanager.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.authorize.net *.syfpos.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.authorize.net syf.demdex.net *.syfpos.com *.syf.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.bing.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com magefan.com cm.magefan.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ https:\/\/img.youtube.com store.paradoxlabs.com *.syfpos.com *.syf.com analytics.synchrony.com *.d1.sc.omtrdc.net *.mysynchrony.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com tagmanager.google.com https:\/\/www.googletagmanager.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.bing.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.attn.tv events.attentivemobile.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ s7.addthis.com *.authorize.net *.syfpos.com analytics.synchrony.com *.mysynchrony.com *.syf.com *.tiqcdn.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com unsafe-inline assets.braintreegateway.com https:\/\/www.googletagmanager.com tagmanager.google.com *.googleapis.com https:\/\/static.klaviyo.com *.syfpos.com *.yotpo.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.attn.tv events.attentivemobile.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ ekr.zdassets.com\/ *.authorize.net *.syfpos.com *.syf.com *.d1.sc.omtrdc.net *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/cdn.informz.net https:\/\/snap.licdn.com https:\/\/static.cloudflareinsights.com https:\/\/tags.srv.stackadapt.com https:\/\/googleads.g.doubleclick.net https:\/\/*.asmintl.workers.dev https:\/\/cdn.jsdelivr.net https:\/\/us-assets.i.posthog.com; style-src 'self' 'unsafe-inline' https:\/\/*.asmintl.workers.dev https:\/\/p.typekit.net https:\/\/use.typekit.net https:\/\/tags.srv.stackadapt.com; img-src 'self' data: blob: https: https:\/\/cdn-prd-main.asm-media.cloud; font-src 'self' data: https:\/\/cdn-prd-main.asm-media.cloud https:\/\/use.typekit.net; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/analytics.google.com https:\/\/*.analytics.google.com https:\/\/www.googletagmanager.com https:\/\/cdn.informz.net https:\/\/asminternational.informz.net https:\/\/www.google.com https:\/\/tags.srv.stackadapt.com https:\/\/*.asmintl.workers.dev https:\/\/us.i.posthog.com https:\/\/us-assets.i.posthog.com https:\/\/ad.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com https:\/\/px.ads.linkedin.com; frame-src 'self' https:\/\/challenges.cloudflare.com https:\/\/www.googletagmanager.com; report-uri \/csp-report; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cdn.jsdelivr.net cdn.almapay.com maxcdn.bootstrapcdn.com *.fontawesome.com instantcredit.net test.instantcredit.net *.aplazame.com https:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.paycomet.com api.paycomet.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com localhost:* *.motive.co 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.getalma.eu *.almapay.com\/ *.stripe.com\/ *.checkout.com\/ *.adyen.com\/ www.google.com com.hobbyexpert.es www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net https:\/\/cdn.aplazame.com https:\/\/static.addtoany.com https:\/\/consentcdn.cookiebot.com *.salesmanago.pl *.googletagmanager.com www.facebook.com platform.twitter.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.salesmanago.pl *.salesmanago.es *.salesmanago.com com.hobbyexpert.es instantcredit.net test.instantcredit.net https:\/\/www.google.com https:\/\/www.google.es *.hobbyexpert.es https:\/\/imgsct.cookiebot.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.motive.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn.jsdelivr.net www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.salesmanago.pl *.salesmanago.es *.salesmanago.com com.hobbyexpert.es www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net code.jquery.com *.aplazame.com *.addtoany.com *.cookiebot.com *.facebook.com *.google-analytics.com *.hotjar.com *.hotjar.io *.apisearch.cloud *.clarity.ms *.cloudflareinsights.com connect.facebook.net twitter.com platform.twitter.com *.motive.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.fontawesome.com com.hobbyexpert.es instantcredit.net test.instantcredit.net *.googleapis.com *.addtoany.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.getalma.eu *.almapay.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com com.hobbyexpert.es wss:\/\/com.hobbyexpert.es instantcredit.net *.instantcredit.net https:\/\/www.google-analytics.com https:\/\/consentcdn.cookiebot.com https:\/\/api.aplazame.com *.hotjar.com http:\/\/dpm.demdex.net *.motive.co 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/33c9f1d8-2484-4560-9bbf-aee3f8fa0343.sansec.watch\/; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klarnacdn.net *.klevu.com *.ksearchnet.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.nosto.com *.nos.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.zenaps.com *.fls.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.nosto.com *.nos.to *.klarna.com https:\/\/www.googletagmanager.com\/ js.mollie.com https:\/\/www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.awin1.com *.zenaps.com *.wepowerconnections.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.nosto.com *.nos.to *.klarna.com *.klarnaevt.com *.klarnacdn.net https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ https:\/\/www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com lantern.roeyecdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.nosto.com *.nos.to *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ js.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ js.mollie.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/js.klevu.com https:\/\/www.bakerross.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.nosto.com *.nos.to *.klarnacdn.net https:\/\/static.klaviyo.com *.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.nosto.com *.nos.to *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/20a27546-5165-4716-8e1c-c91dee6f68ae.sansec.watch\/; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-G1RQSlOhPQKCifms5CgfNQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com https:\/\/widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https:\/\/pay.google.com 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ bid.g.doubleclick.net sst.nonpaints.com https:\/\/www.googletagmanager.com\/ *.multisafepay.com https:\/\/pay.google.com 'self' 'unsafe-inline'; img-src cdn.nonpaints.com data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https:\/\/images.unsplash.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ magefan.com cm.magefan.com *.disqus.com https:\/\/img.youtube.com *.multisafepay.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com *.etrusted.com data: https: 'self' 'unsafe-inline'; script-src www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ *.disqus.com https:\/\/cdn.jsdelivr.net *.multisafepay.com https:\/\/pay.google.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https:\/\/cdn.jsdelivr.net *.multisafepay.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ api.addressy.com *.multisafepay.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' c.amazon-adsystem.com *.prod.mplat-ppcprotect.com res4.applovin.com c.albss.com s.axon.ai cdn.attn.tv the.sciencebehindecommerce.com lantern.roeyecdn.com www.dwin1.com *.bing.com bat.bing.net t.contentsquare.net *.scarabresearch.com connect.facebook.net www.facebook.com uktc.fospha.com www.googletagmanager.com maps.googleapis.com pagead2.googlesyndication.com googleads.g.doubleclick.net www.google-analytics.com *.google.com www.gstatic.com *.google-analytics.com heapanalytics.com cdn.heapanalytics.com cdn.huel.io widget.intercom.io js.intercomcdn.com *.intercom.io *.intercomcdn.com app.intercom.io global.localizecdn.com *.clarity.ms *.onetrust.com *.optimizely.com paperplaneslive.com www.paypal.com cdn.pdst.fm d34r8q7sht0t9k.cloudfront.net www.redditstatic.com *.shopify.com cdn.shopify.com sc-static.net tr.snapchat.com pixel.byspotify.com js.stripe.com cdn.studentbeans.com connect.studentbeans.com d2hrivdxn8ekm8.cloudfront.net acdn.adnxs.com action.dstillery.com *.tiktok.com analytics-ipv6.tiktokw.us sf16-website-login.neutral.ttwstatic.com widget.trustpilot.com va.vercel-scripts.com vercel.live b99.yahoo.co.jp s.yimg.jp; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.gstatic.com fonts.gstatic.com cdn.huel.io *.intercom.io *.intercomcdn.com *.onetrust.com cdn.studentbeans.com sf16-website-login.neutral.ttwstatic.com vercel.live; img-src blob: data: 'self' trkn.us match.adsrvr.org ce.lijit.com huel-us.attn.tv events.attentivemobile.com www.awin1.com www.wepowerconnections.com lantern.roeye.com *.bing.com bat.bing.net www.facebook.com connect.facebook.com connect.facebook.net lookaside.fbsbx.com uktc.fospha.com www.googletagmanager.com *.gstatic.com maps.google.com googleads.g.doubleclick.net region1.analytics.google.com stats.g.doubleclick.net *.google-analytics.com pagead2.googlesyndication.com google.com translate.google.com www.googleadservices.com www.google.com www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.ie www.google.co.il www.google.im www.google.co.in www.google.iq www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.com.kh www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.com.ng www.google.com.ni www.google.ne www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.pl www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.so www.google.sm www.google.sr www.google.st www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tl www.google.tm www.google.tn www.google.to www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.rs www.google.co.za www.google.co.zm www.google.co.zw www.google.cat heapanalytics.com cdn.heapanalytics.com cdn.huel.io cdn.shopify.com huel.io us-s2s.huel.com uk-s2s.huel.com huel-assets.s3.eu-west-2.amazonaws.com s3.eu-west-2.amazonaws.com huel.imgix.net huel-crm.imgix.net *.intercom.io *.intercomcdn.com static.intercomassets.com static.intercomassets.eu *.intercomassets.com *.intercomassets.eu downloads.intercomcdn.com downloads.eu.intercomcdn.com global.localizecdn.com *.clarity.ms *.onetrust.com paperplaneslive.com t.paypal.com *.podscribe.com alb.reddit.com cdn.sanity.io tr.snapchat.com segment.prod.bidr.io *.media6degree.com ib.adnxs.com analytics.tiktok.com analytics-ipv6.tiktokw.us vercel.live vercel.com b99.yahoo.co.jp; font-src 'self' data: js.intercomcdn.com fonts.intercomcdn.com *.onetrust.com vercel.live; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' www.facebook.com intercom.help api-iam.intercom.io api-iam.eu.intercom.io; media-src data: blob: 'self' lookaside.fbsbx.com cdn.huel.io js.intercomcdn.com downloads.intercomcdn.com downloads.eu.intercomcdn.com cdn.sanity.io cdn.shopify.com; frame-src 'self' huelus.aftership.com aax-eu.amazon-adsystem.com www.awin1.com www.facebook.com www.googletagmanager.com www.google.com www.gstatic.com *.huel.com huel.com widget.intercom.io *.intercom.io *.intercomcdn.com intercom-sheets.com www.intercom-reporting.com huel-privacy.my.onetrust.com *.optimizely.com tr.snapchat.com js.stripe.com *.studentbeans.com www.tiktok.com widget.trustpilot.com vercel.live *.youtube.com; connect-src 'self' aax-eu.amazon-adsystem.com ara.paa-reporting-advertising.amazon ara.paa-reporting-advertising.amazon.com c.amazon-adsystem.com *.prod.mplat-ppcprotect.com *.applovin.com ttip-ipv4-prod.telemetry.vaultdcr.com ttip-ipv6-prod.telemetry.vaultdcr.com tte-prod.telemetry.vaultdcr.com *.attn.tv events.attentivemobile.com the.sciencebehindecommerce.com www.wepowerconnections.com *.bing.com bat.bing.net webchannel-content.eservice.emarsys.net *.scarabresearch.com www.facebook.com lookaside.fbsbx.com fbcapig.huel.com *.googlesyndication.com *.google-analytics.com *.googleapis.com *.cloudfunctions.net google.com analytics.google.com region1.analytics.google.com stats.g.doubleclick.net googleads.g.doubleclick.net www.googletagmanager.com www.googleadservices.com pagead2.googlesyndication.com www.google.com www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.ie www.google.co.il www.google.im www.google.co.in www.google.iq www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.com.kh www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.com.ng www.google.com.ni www.google.ne www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.pl www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.so www.google.sm www.google.sr www.google.st www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tl www.google.tm www.google.tn www.google.to www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.rs www.google.co.za www.google.co.zm www.google.co.zw www.google.cat heapanalytics.com cdn.heapanalytics.com huel.io *.huel.io *.huel-staging.io huel.com *.huel.com hibble.myshopify.com huelczech.myshopify.com huelpoland.myshopify.com hueleurope.myshopify.com hueldenmark.myshopify.com huelgermany.myshopify.com huelamerica.myshopify.com hueljapan.myshopify.com huelsweden.myshopify.com huel.imgix.net huel-crm.imgix.net api-iam.eu.intercom.io api-iam.intercom.io *.intercom.io *.intercomcdn.com uploads.intercomcdn.com uploads.eu.intercomcdn.com wss:\/\/*.intercom.io *.intercom-messenger.com wss:\/\/*.intercom-messenger.com global.localizecdn.com api.addressy.com *.clarity.ms *.onetrust.com *.optimizely.com paperplaneslive.com *.podscribe.com *.reddit.com www.redditstatic.com *.shopify.com monorail-edge.shopifysvc.com *.snapchat.com pixels.spotify.com *.studentbeans.com ib.adnxs.com *.tiktok.com analytics-ipv6.tiktokw.us vercel.live; upgrade-insecure-requests; report-to csp; report-uri https:\/\/d3u3r2ljnqpfae5wngbn7rhdku0zmrhr.lambda-url.us-west-2.on.aws\/;","count":1},{"content-security-policy-report-only":" default-src 'none';  connect-src 'self' embedr.flickr.com chat-us.libanswers.com resources.bepress.com playback.bepressaws.com cascade2.libchat.com visitor2.constantcontact.com distillery.wistia.com api-iam.intercom.io wss:\/\/nexus-websocket-a.intercom.io yoast.com listgrowth.ctctcdn.com www.facebook.com stats.g.doubleclick.net *.google-analytics.com analytics.google.com *.analytics.google.com *.googleapis.com;  font-src 'self' data: cdn.jsdelivr.net fonts.gstatic.com static.juicer.io fonts.bunny.net;  frame-src 'self' imsa.libanswers.com accounts.google.com admin.helperhelper.com community.imsa.edu v2.libanswers.com docs.google.com calendar.google.com www.youtube.com www.google.com www.facebook.com bbox.blackbaudhosting.com assets.bepress.com *.concept3d.com;  img-src 'self' connect.facebook.net *.gstatic.com live.staticflickr.com www.googletagmanager.com previews.dropbox.com www.google-analytics.com *.imsa.edu s.w.org ps.w.org theeventscalendar.com fast.wistia.com data: embedwistia-a.akamaihd.net cdnjs.cloudflare.com www.paypalobjects.com *.googleapis.com onpointplugins.com secure.gravatar.com cdn.datatables.net *.facebook.com bbox.blackbaudhosting.com cdn.weglot.com localist-images.azureedge.net *.cloudfront.net imsa.edu *.googleusercontent.com *.google.com *.ctctcdn.com *.ytimg.com *.imsa.edu blackfacts.com;  script-src data: 'self' 'unsafe-inline' 'unsafe-eval' assets.bepress.com blackfacts.com imsa.libanswers.com community.imsa.edu pi.pardot.com cdn.jsdelivr.net widget.intercom.io js.intercomcdn.com fast.wistia.com ajax.googleapis.com www.google.com www.gstatic.com cdnjs.cloudflare.com static.ctctcdn.com connect.facebook.net www.facebook.com assets.juicer.io bbox.blackbaudhosting.com bbox.blackbaudhosting.com cdn.datatables.net connect.facebook.net www.google-analytics.com www.googletagmanager.com;  style-src 'self' 'unsafe-inline' www.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com *.googleapis.com static.ctctcdn.com assets.juicer.io bbox.blackbaudhosting.com cdn.datatables.net;  script-src-elem 'self' 'unsafe-inline' imsa.libanswers.com *.googleapis.com assets.bepress.com connect.facebook.net www.gstatic.com *.google.com cdnjs.cloudflare.com static.ctctcdn.com www.google-analytics.com cdn.datatables.net www.googletagmanager.com embedr.flickr.com widgets.flickr.com imsa.enterprise.localist.com *.imsa.edu blackfacts.com;  style-src-elem 'self' 'unsafe-inline' static.ctctcdn.com *.googleapis.com cdn.datatables.net www.gstatic.com *.imsa.edu fonts.bunny.net imsa.enterprise.localist.com;  media-src 'self' blob: ;  worker-src 'self' blob: ;  report-uri https:\/\/app.imsa.edu\/connect\/csp\/report","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' chrome-extension: https:\/\/mc.yandex.ru 'unsafe-eval' https:\/\/smartcaptcha.yandexcloud.net https:\/\/mc.yandex.com 127.0.0.1:8182 127.0.0.1:8888 127.0.0.1:5005; frame-src 'self' https:\/\/mc.yandex.ru chrome-extension: https:\/\/mc.yandex.md https:\/\/mc.yandex.com https:\/\/smartcaptcha.yandexcloud.net; object-src 'self'; report-uri \/cspreportonly;","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https:\/\/www.googletagmanager.com\/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net api.mundipagg.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ magefan.com cm.magefan.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https:\/\/rum.hlx.page api.mundipagg.com http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com api.mundipagg.com http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' https:\/\/t.segger.com\/ https:\/\/segger-corporate-fal-nprd.s3.eu-central-1.amazonaws.com https:\/\/segger-corporate-fal-nprd.s3.amazonaws.com; font-src 'self' 'unsafe-inline' data: ; style-src 'self' 'unsafe-inline' data: ; img-src 'self' data: blob: https:\/\/t.segger.com\/ https:\/\/kb.segger.com\/ https:\/\/i.ytimg.com https:\/\/segger-corporate-fal-nprd.s3.eu-central-1.amazonaws.com https:\/\/segger-corporate-fal-nprd.s3.amazonaws.com; script-src 'self' 'unsafe-inline' https:\/\/t.segger.com\/; script-src-elem 'self' 'unsafe-inline' https:\/\/t.segger.com\/ https:\/\/www.youtube.com\/iframe_api; frame-src https:\/\/www.youtube-nocookie.com 'self'; object-src 'self' data: blob:; media-src 'self'; report-uri https:\/\/sentry.marketing-factory.de\/api\/23\/security\/?sentry_key=c95fa11bd7c34b6757a4f34eca12437f","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' blob: https:; font-src 'self'; connect-src 'self' https:\/\/auth.privy.io https:\/\/*.rpc.privy.systems https:\/\/explorer-api.walletconnect.com wss:\/\/relay.walletconnect.com wss:\/\/relay.walletconnect.org https:\/\/plausible.io wss:\/\/indexer.yuga.com wss:\/\/admin.m2worlds.io; frame-src https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri \/api\/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: wss:\/\/ws.salecycle.com; object-src 'none'; style-src 'self' https: 'unsafe-hashes' 'unsafe-inline' https:\/\/*.aircaraibes.com https:\/\/googletagmanager.com https:\/\/tagmanager.google.com https:\/\/fonts.googleapis.com; img-src 'self' data: https:; media-src 'self'; frame-src 'self' https:\/\/*.aircaraibes.com https:\/\/aircaraibes.qualifioapp.com https:\/\/www.googletagmanager.com\/ https:\/\/*.salecycle.com https:\/\/*.pinterest.com https:\/\/*.criteo.com https:\/\/*.cloudfront.net; frame-ancestors 'self' https:\/\/www.liligo.com https:\/\/www.liligo.fr https:\/\/checkin.si.amadeus.net https:\/\/*.aircaraibes.com; font-src 'self' data: https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/*.finchatbot.com; connect-src 'self' https: wss:\/\/ws.salecycle.com; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-zIiQFDFey9QAeqMqw11GzQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https:\/\/fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: *.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.gstatic.com *.google-analytics.com unpkg.com hq.upment.com embedsocial.com connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https:\/\/fonts.bunny.net assets.braintreegateway.com *.googleapis.com *.gstatic.com embedsocial.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net cash-f.squarecdn.com https:\/\/*.gstatic.com *.fontawesome.com *.gstatic.com 'self' data: static.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.adyen.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com * *.adyen.com www.jsctool.com https:\/\/app.usercentrics.eu https:\/\/app.certcapture.com https:\/\/sbx.certcapture.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net * https:\/\/images.unsplash.com https:\/\/*.gstatic.com *.adyen.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ d.ratepay.com *.hsforms.net *.hsforms.com 'self' data: https:\/\/api.fraud0.com https:\/\/imgs.usercentrics.eu https:\/\/app.certcapture.com https:\/\/sbx.certcapture.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ d.ratepay.com www.jsctool.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com https:\/\/api.fraud0.com https:\/\/app.usercentrics.eu https:\/\/api.usercentrics.eu https:\/\/production.neocomapp.com\/neocom.js https:\/\/app.certcapture.com https:\/\/sbx.certcapture.com bat.bing.com connect.facebook.net s.pinimg.com scripts.clarity.ms www.clarity.ms analytics.tiktok.com capi-automation.s3.us-east-2.amazonaws.com static.klaviyo.com static-tracking.klaviyo.com 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; style-src *.adobe.com fonts.googleapis.com *.cash.app https:\/\/fonts.googleapis.com\/ https:\/\/static.klaviyo.com *.fontawesome.com d.ratepay.com *.googleapis.com *.gstatic.com https:\/\/app.usercentrics.eu https:\/\/app.certcapture.com https:\/\/sbx.certcapture.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * https:\/\/maps.googleapis.com https:\/\/player.vimeo.com *.adyen.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ d.ratepay.com www.jsctool.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https:\/\/api.fraud0.com https:\/\/app.usercentrics.eu https:\/\/api.usercentrics.eu https:\/\/aggregator.service.usercentrics.eu https:\/\/consent-api.service.consent.usercentrics.eu https:\/\/privacy-proxy.usercentrics.eu https:\/\/production.neocomapp.com\/neocom.js https:\/\/app.certcapture.com https:\/\/sbx.certcapture.com https:\/\/ceplogger.avalara.com https:\/\/ceplogger.sbx.avalara.com o.clarity.ms *.clarity.ms static-tracking.klaviyo.com *.klaviyo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self' data: https:\/\/cdn.eye-able.com https:\/\/www.eye-able-cdn.com; script-src 'self' 'nonce-HSPNtqtFr3-kUuqGYrdlg5VPOXp89etmt8QOqqsvc2405OZDu0CEzQ' data: https:\/\/*.openstreetmap.org https:\/\/piwik.westfaelische-hochschule.org https:\/\/*.b-ite.com https:\/\/www.eye-able-cdn.com 'sha256-kpp7jp1G7DKU2k6CPD6k\/asyeO7+E2xEijdXf6SIVBo=' 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https:\/\/*.openstreetmap.org https:\/\/cdn.eye-able.com https:\/\/www.eye-able-cdn.com https:\/\/*.b-ite.com https:\/\/fonts.gstatic.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com; style-src-elem 'self' 'nonce-HSPNtqtFr3-kUuqGYrdlg5VPOXp89etmt8QOqqsvc2405OZDu0CEzQ' https:\/\/cdn.eye-able.com https:\/\/www.eye-able-cdn.com https:\/\/*.b-ite.com https:\/\/www.gstatic.com 'sha256-47DEQpj8HBSa+\/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-ON+MdrZ2dq2tx2UE4WU1JvzaQayLhnhp+UdCmcBUXVA=' 'sha256-evlXprP8aYZfWtGuNDGteVp2szOTXZRCzJSjAs6HoQU=' 'sha256-WMm2rxgrdLbPiNOT3khywmfmX3KBQRnomQ+oL369Sik=' 'sha256-ZVjd2zfSTfAVh1y7eCcNk0SPGUQOP\/H8vzrFJIVgg90=' 'sha256-cLU5\/oMMUHS\/N9urTg6WSPUWPuAZ02hayXsYjoUkva4=' 'sha256-iYqob1vCcitIN4aN8bIKm+LqktmCbhq\/FJKYOIMyJI4=' 'sha256-p08VBe6m5i8+qtXWjnH\/AN3klt1l4uoOLsjNn8BjdQo=' 'report-sample'; connect-src 'self' data: https:\/\/*.openstreetmap.org https:\/\/piwik.westfaelische-hochschule.org https:\/\/*.b-ite.com; font-src 'self' data: https:\/\/cdn.eye-able.com https:\/\/www.eye-able-cdn.com https:\/\/fonts.gstatic.com https:\/\/cdn.scite.ai; style-src 'self' data: https:\/\/cdn.eye-able.com https:\/\/www.eye-able-cdn.com https:\/\/*.b-ite.com 'report-sample'; script-src-elem 'self' 'nonce-HSPNtqtFr3-kUuqGYrdlg5VPOXp89etmt8QOqqsvc2405OZDu0CEzQ' data: https:\/\/*.openstreetmap.org https:\/\/piwik.westfaelische-hochschule.org https:\/\/*.b-ite.com https:\/\/www.eye-able-cdn.com 'sha256-kpp7jp1G7DKU2k6CPD6k\/asyeO7+E2xEijdXf6SIVBo=' https:\/\/cdn.eye-able.com https:\/\/connect.facebook.net 'sha256-Qv\/VPCnMI30bPS9FCon86d6xCsmIBEeK7FUH2g3DSLA=' 'sha256-DHn6qIXxJ7Goiu9HCn2oUxRIiD5CncdiPGVck5LCmSw=' 'sha256-NNTZOCItJc2lwjmx5YPNr6GxN4IApSMqiyET2r1se98=' 'sha256-L1KTRnCkar390nbS9IVhytBi3LCcvlipxKCUQ5Pwh34=' 'sha256-xalV6Dk0W9vOogZ92sSSJKhCykaV2LYzK6On9AJ322o=' 'sha256-p25tvfrhwmHHQYBjAzut79Nba5GtD0Ddk31vVGWslfs=' 'sha256-rtaVU57dLbRdkXCugTr49x7HJRqjTwe5YoVCy2M4dDE=' 'sha256-ZgQOjhfNErc+jFOCITznCiFox3pQHBhC74pqacwXZ3Q=' 'sha256-ZgQOjhfNErc+jFOCITznCiFox3pQHBhC74pqacwXZ3Q=' 'sha256-+6LzFOOApZCAm6cux\/qCcYofBOE+g5eXU6nFCrc0eyA=' 'sha256-ZIbFciq4U8SN2z6C2F3IsHx9XU+6EjoyS1Va9yDsHP4=' 'report-sample'; script-src-attr 'self' data: 'unsafe-inline' 'report-sample'; object-src 'none'; report-uri https:\/\/www.w-hs.de\/@http-reporting?csp=report&requestTime=1788500681826791&requestHash=0d597d6f7ef77345ac57ccba7efd62c0d33d8f66","count":1},{"content-security-policy-report-only":" default-src 'self' https:; base-uri 'self'; connect-src 'self' https: wss:; font-src 'self' https: data:; form-action 'self' https:; frame-src 'self' https:; img-src 'self' https: data: blob:; object-src 'none'; script-src 'self' https: 'nonce-wyn0Q0BdbLxglQtznNLKww=='; style-src 'self' https: 'unsafe-inline'","count":1},{"content-security-policy-report-only":" connect-src 'self' https:\/\/*.analytics.google.com https:\/\/*.aptrinsic.com https:\/\/*.g.doubleclick.net https:\/\/*.google-analytics.com https:\/\/*.google.com https:\/\/*.googletagmanager.com https:\/\/*.sentry.io https:\/\/api.ipgeolocation.io https:\/\/api.triptease.io https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/content.hotjar.io https:\/\/data.flip.to https:\/\/dc.services.visualstudio.com https:\/\/fonts.googleapis.com https:\/\/google.com https:\/\/googleads.g.doubleclick.net https:\/\/maps.googleapis.com https:\/\/mc.yandex.com https:\/\/mc.yandex.ru https:\/\/messages.guest-experience.triptease.io https:\/\/metrics.corinthia.com https:\/\/metrics.hotjar.io https:\/\/onboard.triptease.io https:\/\/p.relay-t.io https:\/\/region1.analytics.google.com https:\/\/sa.flip.to https:\/\/scripts.affilired.com https:\/\/sleeknotestaticcontent.sleeknote.com https:\/\/static-meta.triptease.io https:\/\/stats.g.doubleclick.net https:\/\/sync.srv.stackadapt.com https:\/\/tags.srv.stackadapt.com https:\/\/vc.hotjar.io https:\/\/wl-suppliers.app.cvent.com https:\/\/www.dripuploads.com https:\/\/www.facebook.com https:\/\/www.google.ae https:\/\/www.google.co.uk https:\/\/www.google.com https:\/\/www.menumodo.com https:\/\/www.thehotelsnetwork.com wss:\/\/ws.hotjar.com; default-src 'self' https:\/\/*.adform.net https:\/\/*.adnxs.com https:\/\/*.sentry.io https:\/\/cdn.jsdelivr.net\/npm\/bootstrap@4.6.2\/; font-src 'self' data: https:\/\/*.cloudfront.net\/graphik\/ https:\/\/*.cloudfront.net\/lato\/ https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/fonts.gstatic.com\/s\/barlow\/ https:\/\/fonts.gstatic.com\/s\/lato\/ https:\/\/fonts.gstatic.com\/s\/roboto\/ https:\/\/static.tacdn.com https:\/\/use.typekit.net https:\/\/www.menumodo.com; frame-src 'self' https:\/\/*.adsrvr.org https:\/\/*.fls.doubleclick.net https:\/\/*.speedrfp.com https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/customs.affilired.com https:\/\/mc.yandex.com https:\/\/mc.yandex.ru https:\/\/onboard.triptease.io https:\/\/targeted-messages.triptease.io https:\/\/td.doubleclick.net https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/www.opentable.co.uk https:\/\/www.thehotelsnetwork.com https:\/\/www.youtube-nocookie.com; img-src 'self' blob: data: *.ggpht.com *.googleapis.com *.linkedin.com https:\/\/*.adform.net https:\/\/*.adnxs.com https:\/\/*.adsrvr.org https:\/\/*.analytics.google.com https:\/\/*.g.doubleclick.net https:\/\/*.google-analytics.com https:\/\/*.google.com https:\/\/*.googletagmanager.com https:\/\/*.sojern.com https:\/\/*.speedrfp.com https:\/\/*.youtube.com https:\/\/ad.doubleclick.net https:\/\/bat.bing.com https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/intl-tel-input\/17.0.19\/ https:\/\/cm.g.doubleclick.net\/pixel https:\/\/cms.analytics.yahoo.com https:\/\/d1cmxvrarpztze.cloudfront.net https:\/\/dpm.demdex.net https:\/\/googletagmanager.com https:\/\/i.ytimg.com https:\/\/imgsct.cookiebot.com https:\/\/mc.yandex.com https:\/\/mc.yandex.ru https:\/\/metrics.corinthia.com https:\/\/pubads.g.doubleclick.net https:\/\/region1.analytics.google.com https:\/\/ssl.gstatic.com https:\/\/stackadapt.com https:\/\/static.tacdn.com https:\/\/stats.g.doubleclick.net https:\/\/storage.ghadiscovery.com https:\/\/sync.srv.stackadapt.com https:\/\/tags.srv.stackadapt.com https:\/\/tags.w55c.net https:\/\/www.facebook.com https:\/\/www.google.ae https:\/\/www.google.co.uk https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.menumodo.com https:\/\/www.pages04.net https:\/\/www.tripadvisor.co.uk maps.gstatic.com; manifest-src 'self'; media-src 'self'; script-src-elem 'self' 'unsafe-inline' *.licdn.com https:\/\/*.adsrvr.org https:\/\/*.aptrinsic.com https:\/\/*.google-analytics.com https:\/\/*.google.com https:\/\/*.googletagmanager.com https:\/\/*.sojern.com https:\/\/*.speedrfp.com https:\/\/*.youtube.com https:\/\/ajax.googleapis.com https:\/\/api.getdrip.com https:\/\/bat.bing.com https:\/\/browser.sentry-cdn.com https:\/\/cdn.denomatic.com https:\/\/cdn.flip.to https:\/\/cdn.jsdelivr.net https:\/\/cdn.jsdelivr.net\/npm\/bootstrap@4.6.2\/ https:\/\/cdn.jsdelivr.net\/npm\/bootstrap@5.0.0-beta2\/ https:\/\/cdn.jsdelivr.net\/npm\/bootstrap@5.0.2\/ https:\/\/cdn.jsdelivr.net\/npm\/bootstrap@5.2.3\/ https:\/\/cdn.jsdelivr.net\/npm\/feather-icons\/ https:\/\/cdn.jsdelivr.net\/npm\/ip-geolocation-api-jquery-sdk@1.0.6\/ https:\/\/cdn.jsdelivr.net\/npm\/jquery@3.5.1\/ https:\/\/cdn.jsdelivr.net\/npm\/jquery@3.6.4\/ https:\/\/cdn.jsdelivr.net\/npm\/popper.js@1.16.1\/ https:\/\/cdn.otstatic.com https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/intl-tel-input\/17.0.19\/ https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/popper.js\/1.12.9\/ https:\/\/code.jquery.com\/jquery-3.2.1.slim.min.js https:\/\/components.flip.to https:\/\/connect.facebook.net https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/contentz.mkt941.com https:\/\/customs.affilired.com https:\/\/d16fk4ms6rqz1v.cloudfront.net https:\/\/googleads.g.doubleclick.net https:\/\/integration.flip.to https:\/\/js.monitor.azure.com https:\/\/js.sentry-cdn.com https:\/\/maps.googleapis.com https:\/\/maps.googleapis.com\/maps\/api\/* https:\/\/maxcdn.bootstrapcdn.com\/bootstrap\/4.0.0\/ https:\/\/mc.yandex.com https:\/\/mc.yandex.ru https:\/\/navigator.ink-global.com https:\/\/onboard.triptease.io https:\/\/p.relay-t.io https:\/\/script.crazyegg.com https:\/\/script.hotjar.com https:\/\/sleeknotecustomerscripts.sleeknote.com https:\/\/sleeknotestaticcontent.s3.eu-west-1.amazonaws.com https:\/\/sleeknotestaticcontent.sleeknote.com https:\/\/static-meta.triptease.io https:\/\/static.hotjar.com https:\/\/static.tacdn.com https:\/\/static.x-channel.triptease.io https:\/\/tag.getdrip.com https:\/\/tag.yieldoptimizer.com https:\/\/tagmanager.google.com https:\/\/tags.srv.stackadapt.com\/events.js https:\/\/targeted-messages.triptease.io https:\/\/www.googletagmanager.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.jscache.com https:\/\/www.menumodo.com https:\/\/www.opentable.co.uk https:\/\/www.thehotelsnetwork.com https:\/\/www.tripadvisor.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/*.adsrvr.org https:\/\/*.aptrinsic.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/*.gstatic.com https:\/\/*.sojern.com https:\/\/*.speedrfp.com https:\/\/*.youtube.com https:\/\/ajax.googleapis.com https:\/\/api.getdrip.com https:\/\/bat.bing.com https:\/\/browser.sentry-cdn.com https:\/\/cdn.denomatic.com https:\/\/cdn.flip.to https:\/\/cdn.jsdelivr.net\/npm\/bootstrap@4.6.2\/ https:\/\/cdn.jsdelivr.net\/npm\/bootstrap@5.0.0-beta2\/ https:\/\/cdn.jsdelivr.net\/npm\/bootstrap@5.0.2\/ https:\/\/cdn.jsdelivr.net\/npm\/bootstrap@5.2.3\/ https:\/\/cdn.jsdelivr.net\/npm\/feather-icons@4.29.0\/ https:\/\/cdn.jsdelivr.net\/npm\/feather-icons\/ https:\/\/cdn.jsdelivr.net\/npm\/ip-geolocation-api-jquery-sdk@1.0.6\/ https:\/\/cdn.jsdelivr.net\/npm\/jquery@3.5.1\/ https:\/\/cdn.jsdelivr.net\/npm\/jquery@3.6.4\/ https:\/\/cdn.jsdelivr.net\/npm\/popper.js@1.16.1\/ https:\/\/cdn.otstatic.com https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/intl-tel-input\/17.0.19\/ https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/popper.js\/1.12.9\/ https:\/\/code.jquery.com\/jquery-3.2.1.slim.min.js https:\/\/components.flip.to https:\/\/connect.facebook.net https:\/\/consent.cookiebot.com https:\/\/consentcdn.cookiebot.com https:\/\/contentz.mkt941.com https:\/\/customs.affilired.com https:\/\/d16fk4ms6rqz1v.cloudfront.net https:\/\/googleads.g.doubleclick.net https:\/\/googletagmanager.com https:\/\/integration.flip.to https:\/\/js.monitor.azure.com https:\/\/js.sentry-cdn.com https:\/\/maps.googleapis.com https:\/\/maxcdn.bootstrapcdn.com\/bootstrap\/4.0.0\/ https:\/\/mc.yandex.com https:\/\/mc.yandex.ru https:\/\/navigator.ink-global.com https:\/\/onboard.triptease.io https:\/\/p.relay-t.io https:\/\/script.crazyegg.com https:\/\/script.hotjar.com https:\/\/sleeknotecustomerscripts.sleeknote.com https:\/\/sleeknotestaticcontent.s3.eu-west-1.amazonaws.com https:\/\/sleeknotestaticcontent.sleeknote.com https:\/\/static-meta.triptease.io https:\/\/static.hotjar.com https:\/\/static.tacdn.com https:\/\/tag.getdrip.com https:\/\/tag.yieldoptimizer.com https:\/\/tagmanager.google.com https:\/\/tags.srv.stackadapt.com https:\/\/targeted-messages.triptease.io https:\/\/wl-suppliers.app.cvent.com https:\/\/www.google.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.jscache.com https:\/\/www.opentable.co.uk https:\/\/www.thehotelsnetwork.com https:\/\/www.tripadvisor.co.uk https:\/\/www.tripadvisor.com; style-src-elem 'self' 'unsafe-inline' https:\/\/cdn.jsdelivr.net\/npm\/bootstrap@5.2.3\/dist\/css\/bootstrap.min.css https:\/\/p.typekit.net https:\/\/tags.srv.stackadapt.com\/sa.css https:\/\/use.typekit.net https:\/\/www.menumodo.com; style-src 'self' 'unsafe-inline' data: https:\/\/*.aptrinsic.com https:\/\/*.googletagmanager.com https:\/\/cdn.jsdelivr.net\/npm\/bootstrap@4.6.2\/ https:\/\/cdn.jsdelivr.net\/npm\/bootstrap@5.0.0-beta2\/ https:\/\/cdn.jsdelivr.net\/npm\/bootstrap@5.0.2\/ https:\/\/cdn.jsdelivr.net\/npm\/bootstrap@5.2.3\/ https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/intl-tel-input\/17.0.19\/ https:\/\/fonts.googleapis.com https:\/\/googletagmanager.com https:\/\/maxcdn.bootstrapcdn.com\/bootstrap\/4.0.0\/ https:\/\/p.typekit.net https:\/\/static.tacdn.com https:\/\/tagmanager.google.com https:\/\/use.typekit.net https:\/\/www.menumodo.com; script-src-attr https:\/\/www.menumodo.com;","count":1},{"content-security-policy-report-only":" default-src 'self' *.wistia.com *.wistia.net embedwistia-a.akamaihd.net\/ https:\/\/fonts.googleapis.com\/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/edge.fullstory.com https:\/\/rs.fullstory.com https:\/\/ajax.googleapis.com\/ https:\/\/first.iovation.com\/ https:\/\/mpsnare.iesnare.com\/ https:\/\/128-koi-090.mktoresp.com\/ *.gskydev.net *.gskydev.com https:\/\/auth.prod.greensky.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/code.jquery.com https:\/\/cdn.jsdelivr.net https:\/\/pages.greenskycredit.com https:\/\/www.google.com\/ https:\/\/www.gstatic.com https:\/\/cdnjs.cloudflare.com https:\/\/app-ab27.marketo.com https:\/\/munchkin.marketo.net https:\/\/abrtp1-cdn.marketo.com blob: http:\/\/static.site24x7rum.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com *.wistia.com https:\/\/rtp-static.marketo.com https:\/\/abrtp1.marketo.com https:\/\/js.driftt.com; style-src 'self' 'unsafe-inline' https:\/\/cdnjs.cloudflare.com\/ https:\/\/pages.greenskycredit.com\/ https:\/\/cdn.jsdelivr.net\/ https:\/\/www.greensky.com\/ *.gskydev.com *.gskydev.net https:\/\/use.fontawesome.com\/ https:\/\/pro.fontawesome.com\/ https:\/\/rtp-static.marketo.com\/ https:\/\/fonts.googleapis.com\/ https:\/\/fonts.googleapis.com\/css\/ https:\/\/app-ab27.marketo.com\/ https:\/\/munchkin.marketo.net; font-src 'self' https:\/\/cdnjs.cloudflare.com https:\/\/pro.fontawesome.com\/ data: https:\/\/fonts.gstatic.com https:\/\/fast.wistia.com https:\/\/use.fontawesome.com; img-src 'self' https:\/\/www.googletagmanager.com https:\/\/rs.fullstory.com *.greensky.com\/ *.gskydev.com\/ *.gskydev.net\/ https:\/\/embed-ssl.wistia.com data: https:\/\/www.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/fast.wistia.com https:\/\/greensky.dotcmscloud.com https:\/\/*.greensky.dotcmscloud.com embedwistia-a.akamaihd.net\/ https:\/\/embed-fastly.wistia.com http:\/\/embed.wistia.com\/ https:\/\/www.google.com https:\/\/www.google.de https:\/\/app-ab27.marketo.com https:\/\/pages.greenskycredit.com; media-src 'self' blob: https:\/\/js.driftt.com; frame-src 'self' https:\/\/pages.greenskycredit.com\/ https:\/\/app-ab27.marketo.com\/ https:\/\/www.google.com\/ https:\/\/js.driftt.com; connect-src 'self' https:\/\/analytics.google.com https:\/\/edge.fullstory.com https:\/\/rs.fullstory.com *.gskydev.com\/ *.gskydev.net\/ https:\/\/128-koi-090.mktoresp.com\/ https:\/\/abrtp1.marketo.com https:\/\/*.google-analytics.com https:\/\/stats.g.doubleclick.net *.greensky.dotcmscloud.com https:\/\/greensky.dotcmscloud.com *.greensky.com *.litix.io embedwistia-a.akamaihd.net\/ *.wistia.com https:\/\/128-koi-090.mktoresp.com; object-src 'self' https:\/\/app-ab27.marketo.com\/ ; base-uri 'self';manifest-src 'self'; worker-src 'none'; report-to https:\/\/www.greensky.com","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.clarity.ms https:\/\/cdn.cookielaw.org https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/players.brightcove.net\/ https:\/\/www.recaptcha.net https:\/\/www.gstatic.com https:\/\/js-agent.newrelic.com https:\/\/pi.pardot.com https:\/\/www.youtube.com https:\/\/in2.taskanalytics.com https:\/\/bam.nr-data.net https:\/\/snap.licdn.com https:\/\/googleads.g.doubleclick.net https:\/\/info.weareplanet.com https:\/\/www.googleadservices.com https:\/\/static.hotjar.com https:\/\/script.hotjar.com https:\/\/tag.demandbase.com https:\/\/j.6sc.co https:\/\/tracking.g2crowd.com https:\/\/connect.facebook.net https:\/\/tpc.googlesyndication.com https:\/\/cdn.weglot.com\/weglot.min.js https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com https:\/\/www.google.com; style-src 'self' 'report-sample' https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/unpkg.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" font-src *.oney.io *.staging.oney.io *.fontawesome.com https:\/\/fonts.bunny.net *.revolut.com *.google.com google.com *.cdn-apple.com pay.google.com *.gstatic.com *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com https:\/\/*.hotjar.com https:\/\/static.klaviyo.com https:\/\/surveys-static.survicate.com *.paybyrd.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.facebook.com https:\/\/cosmetis.pt https:\/\/cosmetis.com.br *.paybyrd.com 'self' 'unsafe-inline'; frame-ancestors *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com *.paybyrd.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ google.com *.hipay-tpp.com *.hipay.com *.paypal.com *.klarna.com https:\/\/www.googletagmanager.com\/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.revolut.com *.google.com *.cdn-apple.com *.gstatic.com *.twitter.com https:\/\/www.google.com https:\/\/www.google.co.in https:\/\/www.facebook.com secure.authorize.net test.authorize.net js.stripe.com m.stripe.com x.klarnacdn.net klarna.com *.weltpixel.com vars.hotjar.com https:\/\/api.ebanxpay.com *.doubleclick.net *.paybyrd.com *.stripe.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com *.wesupply.xyz https:\/\/wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.hipay.com google.com *.oney.io *.staging.oney.io *.klarna.com *.klarnaevt.com *.klarnacdn.net https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.revolut.com *.google.com *.cdn-apple.com pay.google.com *.gstatic.com https:\/\/www.cosmetis.pt *.mcusercontent.com *.cloudflare.com *.google.pt *.google.es *.google.co.in https:\/\/www.facebook.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https:\/\/stats.g.doubleclick.net https:\/\/d.adroll.com https:\/\/pixel.advertising.com https:\/\/pixel.rubiconproject.com https:\/\/simage2.pubmatic.com https:\/\/dsum-sec.casalemedia.com https:\/\/ads.yahoo.com https:\/\/eb2.3lift.com https:\/\/sync.outbrain.com https:\/\/trc.taboola.com https:\/\/x.bidswitch.net\/sync https:\/\/ib.adnxs.com https:\/\/idsync.rlcdn.com https:\/\/us-u.openx.net https:\/\/ups.analytics.yahoo.com https:\/\/segments.company-target.com https:\/\/sync.tidaltv.com *.tradetracker.net *.pampanetwork.com *.mailchimp.com *.cloudfront.net ifthenpay.com https:\/\/*.clarity.ms https:\/\/c.bing.com https:\/\/*.hotjar.com https:\/\/content.mercadopago.com https:\/\/cosmetis.boost.propelbon.com https:\/\/static.zdassets.com http:\/\/action.metaffiliation.com *.paybyrd.com *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ apis.google.com *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.paypal.com *.google.com *.oney.io *.staging.oney.io *.klarna.com *.klarnacdn.net x.klarnacdn.net https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.revolut.com *.cdn-apple.com *.gstatic.com *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https:\/\/connect.facebook.net *.paypalobjects.com https:\/\/chimpstatic.com https:\/\/www.googletagmanager.com https:\/\/s.adroll.com https:\/\/d.adroll.com https:\/\/d.adroll.mgr.consensu.org *.bootstrapcdn.com tagmanager.google.com https:\/\/*.hotjar.com 'unsafe-inline' *.zdassets.com *.zendesk.com *.mailchimp.com mc.us6.list-manage.com *.newrelic.com *.nr-data.net *.doubleclick.net *.activehosted.com *.cloudfront.net wss:\/\/*.zopim.com wss:\/\/*.wizzy.ai *.app-us1.com trackcmp.net js.ebanx.com https:\/\/cdn.ebanx.com https:\/\/content.mercadopago.com x.cnt.my *.x.cnt.my citydsp.com https:\/\/*.clarity.ms https:\/\/www.googleoptimize.com https:\/\/survey.survicate.com https:\/\/surveys-static.survicate.com https:\/\/googleads.g.doubleclick.net https:\/\/*.cookie-script.com https:\/\/api6.ipify.org https:\/\/zuc.cosmetis.pt https:\/\/tdj.cosmetis.com.br *.paybyrd.com *.hsforms.net *.hsforms.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.hipay.com *.googleapis.com https:\/\/static.klaviyo.com *.fontawesome.com https:\/\/fonts.bunny.net unsafe-inline assets.braintreegateway.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.youtube.com *.bootstrapcdn.com *.zendesk.com *.mailchimp.com https:\/\/www.googletagmanager.com https:\/\/*.hotjar.com 'unsafe-inline' https:\/\/surveys-static.survicate.com *.paybyrd.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; object-src https:\/\/content.mercadopago.com 'self' 'unsafe-inline'; media-src *.adobe.com data: mpsnare.iesnare.com *.googleapis.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ *.zdassets.com *.paybyrd.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.hipay-tpp.com *.hipay.com wss:\/\/mpsnare.iesnare.com google.com *.oney.io *.staging.oney.io *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com *.revolut.com *.cdn-apple.com pay.google.com *.gstatic.com *.cloudflare.com *.twitter.com *.twimg.com *.google.co.in *.google-analytics.com stats.g.doubleclick.net *.facebook.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com *.zdassets.com *.zendesk.com *.zopim.com wss:\/\/*.zopim.com *.nr-data.net wss:\/\/*.wizzy.ai https:\/\/*.wizzy.ai https:\/\/*.clarity.ms https:\/\/surveystats.hotjar.io https:\/\/content.hotjar.io https:\/\/metrics.hotjar.io https:\/\/vc.hotjar.io wss:\/\/pod-18.zendesk.com *.ebanxpay.com https:\/\/region1.analytics.google.com https:\/\/googleads.g.doubleclick.net https:\/\/gtm.cosmetis.pt https:\/\/gtm.cosmetis.com.br https:\/\/zuc.cosmetis.pt https:\/\/tdj.cosmetis.com.br *.paybyrd.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/84a5a812-f528-4463-ba29-abdbc1fc7d38.sansec.watch\/; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'nonce-rePP+A+WGlMg9OMv73Ft8A==' 'report-sample' 'unsafe-hashes' 'sha256-lfXlPY3+MCPOPb4mrw1Y961+745U3WlDQVcOXdchSQc=' 'sha256-jT+D+kdRwqBci9k8jWtVNp+HR3GntLaboGVzqI\/tkXY=' https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/js.braintreegateway.com https:\/\/code.jquery.com https:\/\/www.redditstatic.com https:\/\/cse.google.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.youtube.com https:\/\/storage.googleapis.com https:\/\/cdn.bachtrack.com; script-src-elem 'self' 'nonce-rePP+A+WGlMg9OMv73Ft8A==' 'report-sample' 'unsafe-hashes' 'sha256-lfXlPY3+MCPOPb4mrw1Y961+745U3WlDQVcOXdchSQc=' 'sha256-jT+D+kdRwqBci9k8jWtVNp+HR3GntLaboGVzqI\/tkXY=' https:\/\/www.googletagmanager.com https:\/\/connect.facebook.net https:\/\/js.braintreegateway.com https:\/\/code.jquery.com https:\/\/www.redditstatic.com https:\/\/cse.google.com https:\/\/www.google.com https:\/\/www.gstatic.com https:\/\/www.youtube.com https:\/\/storage.googleapis.com https:\/\/cdn.bachtrack.com; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/www.gstatic.com https:\/\/storage.googleapis.com https:\/\/cdn.bachtrack.com; img-src 'self' data: https:; font-src 'self' data: https:\/\/fonts.gstatic.com; frame-src 'self' https:\/\/player.vimeo.com https:\/\/www.youtube.com https:\/\/embed.spotify.com https:\/\/open.spotify.com\/embed\/ https:\/\/w.soundcloud.com https:\/\/bandcamp.com https:\/\/www.arte.tv https:\/\/www.google.com https:\/\/www.facebook.com; connect-src 'self' https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/analytics.google.com https:\/\/stats.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/*.reddit.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/places.googleapis.com; object-src 'none'; base-uri 'self'; form-action 'self' https:\/\/www.facebook.com; frame-ancestors 'self'; report-uri \/handler\/view-error-logs\/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/maps.googleapis.com https:\/\/accounts.google.com https:\/\/appleid.cdn-apple.com https:\/\/www.paypal.com https:\/\/widget.intercom.io https:\/\/js.intercomcdn.com https:\/\/cdn.speedcurve.com https:\/\/www.youtube.com https:\/\/connect.facebook.net https:\/\/*.sentry.io; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/js.intercomcdn.com; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; frame-src 'self' https:\/\/www.youtube.com https:\/\/www.google.com https:\/\/maps.google.com https:\/\/www.paypal.com https:\/\/www.facebook.com https:\/\/widget.intercom.io https:\/\/appleid.apple.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self' https:; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https:\/\/hsselite.zendesk.com; connect-src 'self' https: wss: https:\/\/*.zendesk.com https:\/\/*.zdassets.com https:\/\/*.onesignal.com https:\/\/api.onesignal.com; img-src 'self' https: data:; font-src 'self' https: data:; style-src 'self' https: 'unsafe-inline'; script-src 'self' https:\/\/static.zdassets.com https:\/\/*.onesignal.com https:\/\/*.zendesk.com https:\/\/ajax.googleapis.com https:\/\/maxcdn.bootstrapcdn.com https:\/\/cmp.osano.com https:\/\/static.ada.support https:\/\/cdn.onesignal.com https:\/\/www.googletagmanager.com https:\/\/js.go2sdk.com 'unsafe-inline'; worker-src 'self' blob:;","count":1},{"content-security-policy-report-only":" connect-src https:\/\/faq.wadax.ne.jp https:\/\/o11y.sfproxy-core1.sfdc-p1i6qd.svc.sfdcfc.net\/ui-telemetry https:\/\/news.gmocloud.com 'self' https:\/\/payments.salesforce.com\/ https:\/\/stats.g.doubleclick.net https:\/\/www.paypal.com https:\/\/gmocloudcommunity.force.com https:\/\/b99.yahoo.co.jp https:\/\/checkoutshopper-test.adyen.com\/ https:\/\/translation.googleapis.com api.salesforce.com https:\/\/www.google.co.jp https:\/\/www.domainking.jp https:\/\/icl.dns.ishioka.xyz wss:\/\/*.slack.com https:\/\/*.api.salesforce.com https:\/\/demo.arcade.software https:\/\/checkoutshopper-live.adyen.com\/ https:\/\/www.wadax.ne.jp https:\/\/www.youtube.com https:\/\/www.google.com https:\/\/analytics.google.com https:\/\/cdn.content.aws-dev2-uswest2.aws.sfdc.cl\/ https:\/\/gmogshd-ch.my.salesforce-scrt.com https:\/\/fonts.googleapis.com\/css2 *.amazonaws.com https:\/\/app.arcade.software wss:\/\/*.slack-gov-dev.com wss:\/\/*.api.salesforce.com https:\/\/www.google.com\/recaptcha\/ https:\/\/news-tool.gmocloud.com https:\/\/www.sandbox.paypal.com https:\/\/js.stripe.com\/ https:\/\/support.gmocloud.com wss:\/\/api.salesforce.com https:\/\/altus.gmocloud.com https:\/\/dnsck.gmocloud.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com *.salesforce.com https:\/\/cdn.cbweb.code-builder.platform.salesforce.com https:\/\/www.rapidsite.jp *.api.salesforce.com wss:\/\/*.slack-gov.com; report-to sfdc-csp-ep; report-uri https:\/\/gmogshd-ch.lightning.force.com\/_\/ContentDomainCSPNoAuth?tenantId=00D10000000Hq6P&networkId=0DM5F00000001rL&type=communities","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https:\/\/*.clarity.ms https:\/\/www.shoppingsheet.com https:\/\/connect.facebook.net https:\/\/bbox.blackbaudhosting.com https:\/\/www.youvisit.com https:\/\/*.google.com https:\/\/*.uwplatt.edu https:\/\/googleads.g.doubleclick.net https:\/\/8ab0a26cb0027939bcf5-49c99c3c0c9c98b3365b710757036e1b.ssl.cf5.rackcdn.com https:\/\/cdn.jsdelivr.net https:\/\/ep1.adtrafficquality.google https:\/\/ep2.adtrafficquality.google https:\/\/fw.cdn.technolutions.net https:\/\/googleads.g.doubleclick.net https:\/\/libraryh3lp.com https:\/\/mx.technolutions.net https:\/\/partner.googleadservices.com https:\/\/s.yimg.com https:\/\/siteimproveanalytics.com https:\/\/slate-technolutions-net.cdn.technolutions.net https:\/\/slate-uwplatt-edu.cdn.technolutions.net https:\/\/slate.uwplatt.edu https:\/\/*.olark.com https:\/\/unpkg.com https:\/\/www.googletagmanager.com https:\/\/www.googletagmanager.com\/ https:\/\/www.youtube.com https:\/\/youtube.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' data: https:\/\/*.clarity.ms https:\/\/www.shoppingsheet.com https:\/\/connect.facebook.net https:\/\/bbox.blackbaudhosting.com https:\/\/www.youvisit.com https:\/\/*.google.com https:\/\/*.uwplatt.edu https:\/\/googleads.g.doubleclick.net https:\/\/8ab0a26cb0027939bcf5-49c99c3c0c9c98b3365b710757036e1b.ssl.cf5.rackcdn.com https:\/\/cdn.jsdelivr.net https:\/\/ep1.adtrafficquality.google https:\/\/ep2.adtrafficquality.google https:\/\/fw.cdn.technolutions.net https:\/\/googleads.g.doubleclick.net https:\/\/libraryh3lp.com https:\/\/mx.technolutions.net https:\/\/partner.googleadservices.com https:\/\/s.yimg.com https:\/\/siteimproveanalytics.com https:\/\/slate-technolutions-net.cdn.technolutions.net https:\/\/slate-uwplatt-edu.cdn.technolutions.net https:\/\/slate.uwplatt.edu https:\/\/*.olark.com https:\/\/unpkg.com https:\/\/www.googletagmanager.com https:\/\/www.googletagmanager.com\/ https:\/\/www.youtube.com https:\/\/youtube.com; style-src 'self' 'unsafe-inline' https:\/\/www.gstatic.com https:\/\/www.shoppingsheet.com https:\/\/www.google.com https:\/\/cdn.jsdelivr.net https:\/\/fonts.googleapis.com https:\/\/static.olark.com; style-src-elem 'self' 'unsafe-inline' https:\/\/www.gstatic.com https:\/\/www.shoppingsheet.com https:\/\/slate-technolutions-net.cdn.technolutions.net https:\/\/static.olark.com https:\/\/cdn.jsdelivr.net https:\/\/fonts.googleapis.com https:\/\/*.google.com https:\/\/*.uwplatt.edu https:\/\/ep2.adtrafficquality.google https:\/\/slate-uwplatt-edu.cdn.technolutions.net https:\/\/fw.cdn.technolutions.net; object-src 'none'; base-uri 'self'; connect-src 'self' https:\/\/*.clarity.ms https:\/\/ad.doubleclick.net https:\/\/syndicatedsearch.goog https:\/\/www.google-analytics.com https:\/\/cdn-graphql.youvisit.com https:\/\/region1.analytics.google.com https:\/\/knrpc.olark.com https:\/\/www.googleadservices.com https:\/\/googleads.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/libraryh3lp.com https:\/\/6349506.global.r2.siteimproveanalytics.io https:\/\/analytics.google.com https:\/\/mx.technolutions.net https:\/\/s.yimg.com https:\/\/*.uwplatt.edu https:\/\/www.google.com https:\/\/www.googletagmanager.com https:\/\/slate-uwplatt-edu.cdn.technolutions.net https:\/\/ep1.adtrafficquality.google; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/static.olark.com; frame-src 'self' https:\/\/app.powerbi.com https:\/\/cdn2.yoshki.com https:\/\/app.powerbi.com https:\/\/signup.e2ma.net https:\/\/ww2.matchinggifts.com https:\/\/www.youvisit.com https:\/\/www.shoppingsheet.com https:\/\/app.e2ma.net https:\/\/cdn.yoshki.com https:\/\/cdn.youvisit.com https:\/\/www.youtube-nocookie.com https:\/\/static.olark.com https:\/\/libraryh3lp.com https:\/\/e.issuu.com https:\/\/www.googletagmanager.com https:\/\/ep2.adtrafficquality.google https:\/\/syndicatedsearch.goog https:\/\/www.youtube.com https:\/\/*.uwplatt.edu; img-src 'self' data: https:\/\/c.bing.com https:\/\/*.clarity.ms https:\/\/stats.g.doubleclick.net https:\/\/*.gstatic.com https:\/\/se-images.campuslabs.com https:\/\/www.googleadservices.com https:\/\/trck.youvisit.com https:\/\/googleads.g.doubleclick.net\/ https:\/\/se-images.campuslabs.com https:\/\/id.ocelotbot.com https:\/\/image.isu.pub https:\/\/6349506.global.r2.siteimproveanalytics.io https:\/\/*.uwplatt.edu https:\/\/sp.analytics.yahoo.com https:\/\/trkn.us https:\/\/*.google.com https:\/\/log.olark.com https:\/\/www.googletagmanager.com https:\/\/syndicatedsearch.goog https:\/\/ep1.adtrafficquality.google; manifest-src 'self'; media-src 'self' https:\/\/static.olark.com; worker-src 'none'; frame-ancestors 'self' https:\/\/*.uwplatt.edu https:\/\/uwplatt.sharepoint.com https:\/\/uwplatt.quickbase.com; report-uri https:\/\/sentry.uwplatt.edu\/api\/5\/security\/?sentry_key=92e79271e0a535df88c88de202623cf3&sentry_environment=csp_reporting; report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self';font-src 'self' data: https:\/\/fonts.gstatic.com;connect-src 'self' https:\/\/brandportal.uponor.com https:\/\/*.usercentrics.eu https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.linkedin.com https:\/\/*.stackadapt.com https:\/\/*.doubleclick.net https:\/\/*.teads.tv https:\/\/*.clarity.ms https:\/\/*.google-analytics.com https:\/\/*.adobe.io https:\/\/*.hotjar.io wss:\/\/*.hotjar.com https:\/\/*.bing.com https:\/\/uponorna.my.site.com https:\/\/*.lumoa.me https:\/\/*.sharethis.com https:\/\/pixel-config.reddit.com https:\/\/www.redditstatic.com https:\/\/*.google.ee https:\/\/*.google.de https:\/\/*.google.cz https:\/\/*.google.se https:\/\/salesviewer.org https:\/\/*.google.fi https:\/\/bat.bing.net https:\/\/*.facebook.com https:\/\/*.google.is https:\/\/*.google.pl https:\/\/*.google.sk; frame-src https:\/\/*.youtube.com https:\/\/*.googletagmanager.com https:\/\/*.doubleclick.net https:\/\/*.force.com https:\/\/*.google.com https:\/\/*.usercentrics.eu https:\/\/*.teads.tv https:\/\/*.adobe.com https:\/\/*.tfaforms.net https:\/\/*.facebook.com https:\/\/*.bimsmith.com https:\/\/go.eu.uponor.com https:\/\/*.transistor.fm https:\/\/go.uponor.info https:\/\/youtube.com https:\/\/locator.maplet.com\/ https:\/\/uponorna.my.site.com\/; script-src 'self' 'nonce-yFt2IAO8yUuPumBf8XrPQe+7HcOvBOhkoWOLYXs4a9c=' 'strict-dynamic'; img-src 'self' data: https:\/\/brandportal.uponor.com https:\/\/*.usercentrics.eu https:\/\/*.facebook.com https:\/\/*.linkedin.com https:\/\/*.teads.tv https:\/\/bat.bing.com https:\/\/maps.gstatic.com https:\/\/*.google.com https:\/\/*.doubleclick.net https:\/\/d2csxpduxe849s.cloudfront.net https:\/\/*.googletagmanager.com https:\/\/*.clarity.ms https:\/\/img.youtube.com https:\/\/*.sharethis.com https:\/\/*.uponor.com https:\/\/googleapis.com https:\/\/*.krxd.net https:\/\/*.google.lt https:\/\/*.google.hu https:\/\/*.google.dk https:\/\/alb.reddit.com https:\/\/*.google.ca https:\/\/*.google.ee https:\/\/*.google.de https:\/\/*.google.cz https:\/\/*.google.se https:\/\/*.google.co.uk https:\/\/*.google.pt https:\/\/*.globenewswire.com https:\/\/*.google.pl https:\/\/*.google.nl https:\/\/*.google.es https:\/\/*.google.ba https:\/\/cdn.midas-network.com https:\/\/*.google.fr https:\/\/*.google.si https:\/\/*.google.com.uy https:\/\/*.google.fi https:\/\/*.google.sk https:\/\/*.google.co.in https:\/\/*.google.no https:\/\/*.google.ro; style-src 'self' 'unsafe-inline' https:\/\/*.force.com https:\/\/*.usercentrics.eu https:\/\/*.stackadapt.com https:\/\/*.googleapis.com; object-src 'self' https:\/\/*.usercentrics.eu;form-action 'self' https:\/\/*.uponor.com https:\/\/*.tfaforms.net https:\/\/*.facebook.com; base-uri 'self';","count":1},{"content-security-policy-report-only":" default-src 'self';base-uri 'self';font-src 'self' https:\/\/*.audiencemedia.com https:\/\/use.fontawesome.com;form-action 'self';frame-ancestors 'none';img-src 'self' data: blob: https:\/\/*.ziniopro.com https:\/\/*.audiencemedia.com https:\/\/googleads.g.doubleclick.net https:\/\/www.google.com https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com https:\/\/google.com https:\/\/*.paypal.com https:\/\/*.braintreegateway.com https:\/\/discover.zinio.com https:\/\/*.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/www.googletagmanager.com https:\/\/*.kaptcha.com;object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/cdn-web.zinio.com https:\/\/js-agent.newrelic.com https:\/\/*.nr-data.net https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/googleads.g.doubleclick.net https:\/\/pagead2.googlesyndication.com https:\/\/*.paypal.com https:\/\/www.paypalobjects.com https:\/\/*.braintreegateway.com https:\/\/*.cardinalcommerce.com https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/*.googletagmanager.com https:\/\/recaptcha.net https:\/\/www.gstatic.com https:\/\/apis.google.com https:\/\/accounts.google.com\/gsi\/client https:\/\/*.kaptcha.com;script-src-attr 'none';style-src 'self' 'unsafe-inline' https:\/\/*.audiencemedia.com https:\/\/use.fontawesome.com https:\/\/accounts.google.com\/gsi\/style;media-src 'self';connect-src 'self' webpack: https:\/\/*.audiencemedia.com https:\/\/*.ziniopro.com https:\/\/*.nr-data.net https:\/\/googleads.g.doubleclick.net https:\/\/adservice.google.com https:\/\/pagead2.googlesyndication.com https:\/\/www.googleadservices.com https:\/\/google.com https:\/\/cdn.jsdelivr.net https:\/\/*.braintree-api.com https:\/\/*.braintreegateway.com https:\/\/*.cardinalcommerce.com https:\/\/www.paypal.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/analytics.google.com https:\/\/www.google.com https:\/\/*.googletagmanager.com https:\/\/collector.datacloud.zinio.com https:\/\/sdk.iad-07.braze.com https:\/\/use.fontawesome.com https:\/\/accounts.google.com\/gsi\/ https:\/\/*.kaptcha.com collector.datacloud.zinio.com;frame-src 'self' https:\/\/td.doubleclick.net https:\/\/www.googletagmanager.com https:\/\/*.paypal.com https:\/\/*.braintreegateway.com https:\/\/recaptcha.net https:\/\/accounts.google.com\/gsi\/;child-src 'self' https:\/\/*.kaptcha.com","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/www.googletagmanager.com *.googleapis.com *.hsforms.com *.hotjar.com *.google-analytics.com *.google.com *.bing.com * *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.punchout2go.com *.tradecentric.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self' 'unsafe-inline'; frame-ancestors *.hsforms.com *.hotjar.com *.google-analytics.com *.google.com *.bing.com * *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.hsforms.com *.hotjar.com *.google-analytics.com *.bing.com * *.punchout2go.com *.tradecentric.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com maps.gstatic.com *.hsforms.com forms-na1.hsforms.com track.hubspot.com mcstaging.ebhorsman.com icon-phone.png spin.adhq.com *.hubspotusercontent-na1.net *.hotjar.com *.google.com *.bing.com * *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page tagmanager.google.com https:\/\/www.googletagmanager.com *.googleapis.com *.gstatic.com maps.googleapis.com *.hsforms.com js.hsforms.net js-eu1.hsforms.net js-agent.newrelic.com js.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net scripts.sirv.com script.hotjar.com static.hotjar.com *.google-analytics.com *.bing.com * *.punchout2go.com *.tradecentric.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/www.googletagmanager.com tagmanager.google.com *.googleapis.com *.hsforms.com *.hotjar.com cdn.styles.com scripts.sirv.com *.google-analytics.com *.google.com *.bing.com js.usemessages.com * *.fontawesome.com *.punchout2go.com *.tradecentric.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.hsforms.com *.hotjar.com media.example.com *.google-analytics.com *.google.com *.bing.com * 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com *.googleapis.com *.hsforms.com forms.hsforms.com bam.nr-data.net forms.hscollectedforms.net spin.adhq.com stats.sirv.com content.hotjar.io ws.hotjar.com *.hotjar.com *.bing.com api.hubspot.com forms-na1.hubspot.com * *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com maps.googleapis.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https:\/\/www.googletagmanager.com *.googleapis.com https:\/\/www.gstatic.com *.fontawesome.com https:\/\/live.icecat.biz data: https:\/\/googletagmanager.com https:\/\/tagmanager.google.com https:\/\/fonts.gstatic.com locator.uberall.com script.hotjar.com *.hotjar.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com dashboard.trustprofile.com td.doubleclick.net https:\/\/s3-eu-west-1.amazonaws.com\/ https:\/\/td.doubleclick.net https:\/\/google-analytics.com https:\/\/objects.icecat.biz\/ *.trustpilot.com https:\/\/www.google.com trafic-career.talent-soft.com view.publitas.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.doofinder.com magefan.com cm.magefan.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https:\/\/www.mollie.com funtrafic.imgix.net bat.bing.com www.google.be lqip-funtrafic.imgix.net https:\/\/funtrafic-large.imgix.net\/media\/ https:\/\/funtrafic-thumb.imgix.net\/media\/ https:\/\/pdpthumb-funtrafic.imgix.net https:\/\/pdplarge-funtrafic.imgix.net https:\/\/pdpfull-funtrafic.imgix.net https:\/\/content.fun.be https:\/\/adservice.google.com https:\/\/region1.analytics.google.com https:\/\/googletagmanager.com https:\/\/tagmanager.google.com https:\/\/bat.bing.com  https:\/\/pagead2.googlesyndication.com https:\/\/td.doubleclick.net https:\/\/google-analytics.com bat.bing.net catalogmedia.trafic.com funtrafic-thumb.imgix.net joko-mobile-app-media.s3.eu-west-1.amazonaws.com locator.uberall.com magentoadmin.trafic.com www.google.de www.google.fr www.google.lt www.google.lu *.google.com www.trafic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https:\/\/www.googletagmanager.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.googleapis.com https:\/\/www.gstatic.com *.doofinder.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com static.hotjar.com eu1-config.doofinder.com widget.trustpilot.com invitejs.trustpilot.com cdn.doofinder.com script.hotjar.com bat.bing.com js-agent.newrelic.com https:\/\/live.icecat.biz https:\/\/bat.bing.com  https:\/\/js-agent.newrelic.com https:\/\/googletagmanager.com https:\/\/tagmanager.google.com https:\/\/td.doubleclick.net https:\/\/google-analytics.com *.trustpilot.com api.mapbox.com locator.uberall.com view.publitas.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https:\/\/www.googletagmanager.com tagmanager.google.com *.googleapis.com *.doofinder.com *.fontawesome.com cdn.doofinder.com https:\/\/live.icecat.biz blob: https:\/\/googletagmanager.com https:\/\/tagmanager.google.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com *.googleapis.com *.doofinder.com wss:\/\/*.doofinder.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com region1.analytics.google.com eu1-api.doofinder.com bam.eu01.nr-data.net https:\/\/invitejs.trustpilot.com https:\/\/live.icecat.biz https:\/\/magentoadmin.trafic.docker https:\/\/adservice.google.com https:\/\/region1.analytics.google.com https:\/\/www.google.com https:\/\/www.google.be https:\/\/googleads.g.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/td.doubleclick.net https:\/\/google-analytics.com  https:\/\/pagead2.googlesyndication.com api.mapbox.com bat.bing.com bat.bing.net content.hotjar.io events.mapbox.com locator.uberall.com surveystats.hotjar.io vc.hotjar.io *.hotjar.com wss: wss:\/\/ws.hotjar.com www.google.lu *.mapbox.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com bam.eu01.nr-data.net googleads.g.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'           *.ponycanyon.co.jp;         font-src 'self'           *.ponycanyon.co.jp           fonts.gstatic.com           data:;         form-action 'self'           *.ponycanyon.co.jp;         worker-src 'self'           blob:           *.ponycanyon.co.jp           cdnjs.cloudflare.com;         connect-src 'self'           *.ponycanyon.co.jp           *.google-analytics.com           *.analytics.google.com           *.googletagmanager.com           *.g.doubleclick.net           *.google.com           www.google.co.jp \t  *.clarity.ms;         frame-src 'self'           *.ponycanyon.co.jp           www.youtube.com           td.doubleclick.net \t  www.googletagmanager.com           open.spotify.com \t  embed-cdn.spotifycdn.com;         img-src *;         media-src 'self'           blob:           *.ponycanyon.co.jp;         script-src 'self'           'unsafe-inline'           *.ponycanyon.co.jp           ajax.aspnetcdn.com           cdn.jsdelivr.net           cdnjs.cloudflare.com           *.googletagmanager.com           *.google.com           www.google-analytics.com           ad.jp.ap.valuecommerce.com \t  *.clarity.ms \t  embed-cdn.spotifycdn.com;         style-src 'self'           'unsafe-inline'           *.ponycanyon.co.jp           cdn.jsdelivr.net           cdnjs.cloudflare.com           fonts.googleapis.com           tagmanager.google.com;         report-uri https:\/\/csp-log.ponycanyon.co.jp\/;","count":1},{"content-security-policy-report-only":" connect-src 'self' data: wss:\/\/fulltextsearch.org\/flare ka-f.fontawesome.com yoast.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com https:\/\/www.google.pl translate.googleapis.com www.gdpsystem.eu connect.facebook.net; default-src 'self'; font-src 'self' data: https:\/\/fonts.gstatic.com fonts.googleapis.com cdn.jsdelivr.net *.fontawesome.com\/releases\/v5.15.4\/; frame-src 'self' data: uwr.edu.pl *.uwr.edu.pl maps.google.com *.youtube.com youtube.com player.vimeo.com www.google.com; img-src 'self' data: blob: graph.facebook.com *.xx.fbcdn.net s.w.org *.ytimg.com uwr.edu.pl *.uwr.edu.pl *.fna.fbcdn.net secure.gravatar.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com www.google.pl https:\/\/ssl.gstatic.com https:\/\/www.gstatic.com *.vimeocdn.com; object-src 'self'; script-src 'self' cdn.jsdelivr.net https:\/\/*.googletagmanager.com www.youtube.com use.fontawesome.com kit.fontawesome.com ajax.googleapis.com cdn-eu.readspeaker.com polyfill.io code.jquery.com https:\/\/tagmanager.google.com www.googletagmanager.com https:\/\/www.google-analytics.com www.gdpsystem.eu 'unsafe-eval' 'unsafe-inline'; script-src-elem 'self' uwr.edu.pl data: code.jquery.com kit.fontawesome.com polyfill.io cdn-eu.readspeaker.com cdn-eu.readspeaker.com ajax.googleapis.com cdn.jsdelivr.net www.youtube.com\/iframe_api *.www-widgetapi.js www.youtube.com cdnjs.cloudflare.com cdn.datatables.net secure.polldaddy.com connect.facebook.net www.googletagmanager.com www.gdpsystem.eu 'unsafe-inline'; style-src 'self' cdn.jsdelivr.net cdn-eu.readspeaker.com https:\/\/tagmanager.google.com https:\/\/fonts.googleapis.com www.gdpsystem.eu 'unsafe-inline'; style-src-elem 'self' uwr.edu.pl cdn.jsdelivr.net www.youtube.com fonts.googleapis.com cdn-eu.readspeaker.com www.gdpsystem.eu 'unsafe-inline'; worker-src 'self' uwr.edu.pl blob:","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-xrIJ+ECwkEC0jVd+VLT2ig==' https:\/\/*.adyen.com https:\/\/*.adyenpayments.com https:\/\/*.bambuser.com https:\/\/*.cevoid.com https:\/\/*.contentsquare.net https:\/\/*.doubleclick.net https:\/\/*.klarna.com https:\/\/*.klarnacdn.net https:\/\/*.kustom.co https:\/\/*.taboola.com https:\/\/*.usercentrics.eu https:\/\/analytics.tiktok.com https:\/\/api.unifaun.com https:\/\/assets.voyado.com https:\/\/bat.bing.com https:\/\/chat.kindlycdn.com https:\/\/connect.facebook.net https:\/\/ct.pinterest.com https:\/\/gallery.cevoid.com https:\/\/google-analytics.com https:\/\/pay.google.com https:\/\/s.pinimg.com https:\/\/t.contentsquare.net https:\/\/tr.snapchat.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/www.googletagservices.com https:\/\/ad.doubleclick.net https:\/\/modules.ecomid.com https:\/\/*.inretrn.com https:\/\/returnsportal.inretrn.com; style-src 'self' 'unsafe-inline' https: data:; connect-src 'self' https:\/\/*.az.contentsquare.net https:\/\/*.bambuser.com https:\/\/*.cevoid.com https:\/\/*.contentsquare.net https:\/\/*.facebook.com https:\/\/*.google-analytics.com https:\/\/*.google.com https:\/\/www.google.com https:\/\/*.google.se https:\/\/*.klarna.com https:\/\/*.kindly.ai https:\/\/*.kustom.co https:\/\/*.snapchat.com https:\/\/*.taboola.com https:\/\/*.tiktok.com https:\/\/*.usercentrics.eu https:\/\/*.kappahl.com https:\/\/*.newbie.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/api.cevoid.com https:\/\/api.klarna.com https:\/\/api.raygun.io https:\/\/api.screen9.com https:\/\/api.unifaun.com https:\/\/assets.voyado.com https:\/\/bat.bing.com https:\/\/bat.bing.net https:\/\/bot.kindly.ai https:\/\/cdn.raygun.io https:\/\/chat.kindlycdn.com https:\/\/checkout-test.adyen.com https:\/\/checkout.adyen.com https:\/\/checkoutanalytics-test.adyen.com https:\/\/checkoutshopper-test.cdn.adyen.com https:\/\/checkoutshopper-test.cdn.adyen.com\/ https:\/\/checkoutanalytics-live.adyen.com https:\/\/ct.pinterest.com https:\/\/dc.services.visualstudio.com https:\/\/gallery.cevoid.com https:\/\/google.com https:\/\/maps.googleapis.com https:\/\/pagead2.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/pay.google.com https:\/\/qcdn.screen9.com https:\/\/qcnl.tv https:\/\/statsapi.screen9.com https:\/\/t.contentsquare.net https:\/\/t1.voyado.com https:\/\/wapi.lipscore.com https:\/\/www.google.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/www.pinterest.com https:\/\/www.sandbox.paypal.com https:\/\/ad.doubleclick.net https:\/\/stats.g.doubleclick.net https:\/\/modules.ecomid.com https:\/\/events.ecomid.com https:\/\/api.ecomid.com https:\/\/sockjs-eu.pusher.com https:\/\/*.inretrn.com https:\/\/returnsportal.inretrn.com; frame-src 'self' https:\/\/*.adyen.com https:\/\/*.adyenpayments.com https:\/\/*.bambuser.com https:\/\/*.doubleclick.net https:\/\/*.klarna.com https:\/\/*.klarnacdn.net https:\/\/*.kustom.co https:\/\/*.usercentrics.eu https:\/\/checkout.klarna.com https:\/\/ct.pinterest.com https:\/\/pay.google.com https:\/\/*.kappahl.com https:\/\/*.newbie.com https:\/\/tr.snapchat.com https:\/\/www.googletagmanager.com https:\/\/www.sandbox.paypal.com https:\/\/modules.ecomid.com https:\/\/www.facebook.com https:\/\/*.inretrn.com https:\/\/returnsportal.inretrn.com; img-src 'self' data: https: blob:; media-src 'self' blob: data: https:;font-src 'self' https: data:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; report-uri \/csp-report;","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; worker-src 'self' blob:; base-uri 'self'; form-action *; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' https:\/\/*.funnel.io https:\/\/funnel.io https:\/\/*.hsadspixel.net https:\/\/*.hs-analytics.net https:\/\/js.hscta.net https:\/\/js-eu1.hscta.net https:\/\/*.hubspot.com https:\/\/static.hsappstatic.net https:\/\/*.usemessages.com https:\/\/*.hs-banner.com https:\/\/*.hubspotusercontent00.net https:\/\/*.hubspotusercontent10.net https:\/\/*.hubspotusercontent20.net https:\/\/*.hubspotusercontent30.net https:\/\/*.hubspotusercontent40.net https:\/\/*.hubspot.net https:\/\/*.hscollectedforms.net https:\/\/*.hsleadflows.net https:\/\/*.hsforms.net https:\/\/*.hsforms.com https:\/\/*.hs-scripts.com https:\/\/*.hubspotfeedback.com https:\/\/feedback.hubapi.com https:\/\/feedback-eu1.hubapi.com https:\/\/googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/pagead2.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/tags.fullcontact.com https:\/\/bat.bing.com https:\/\/*.tiktok.com https:\/\/tr.snapchat.com https:\/\/tr.capterra.com https:\/\/s.pinimg.com https:\/\/connect.facebook.net https:\/\/snap.licdn.com https:\/\/*.claydar.com https:\/\/*.convertexperiments.com https:\/\/*.fullstory.com https:\/\/funnel-io.github.io https:\/\/analytics.sayprimer.com 'nonce-Xy+O2SM6qJhMYBQeS4ypww=='; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/*.hubspotusercontent-na1.net https:\/\/cdn2.hubspot.net https:\/\/*.hsappstatic.net https:\/\/www.gstatic.com https:\/\/cdnjs.cloudflare.com https:\/\/funnel.io https:\/\/lf16-tiktok-web.tiktokcdn-us.com https:\/\/sf16-website-login.neutral.ttwstatic.com https:\/\/googletagmanager.com https:\/\/tagmanager.google.com; style-src-attr 'unsafe-inline'; connect-src 'self' https:\/\/*.funnel.io https:\/\/funnel.io https:\/\/*.sentry.io https:\/\/*.convertexperiments.com\/ https:\/\/*.hsforms.com https:\/\/*.hubapi.com https:\/\/*.hubspot.com https:\/\/*.fullstory.com https:\/\/api.claydar.com https:\/\/collector.funnel.io https:\/\/idm-api.access.us.funnel.io https:\/\/resolver.confidence.dev https:\/\/googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/wdhengbze2.execute-api.eu-west-1.amazonaws.com https:\/\/vnhkzlu3i8.execute-api.eu-west-1.amazonaws.com https:\/\/js.hsforms.net\/ https:\/\/tr.snapchat.com https:\/\/tr6.snapchat.com https:\/\/bat.bing.com https:\/\/ct.pinterest.com https:\/\/pixel-config.reddit.com https:\/\/px.ads.linkedin.com https:\/\/www.facebook.com https:\/\/connect.facebook.net https:\/\/*.tiktok.com https:\/\/analytics-ipv6.tiktokw.us https:\/\/*.byteoversea.com https:\/\/js.hs-banner.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.doubleclick.net https:\/\/*.clarity.ms https:\/\/pagead2.googlesyndication.com https:\/\/google.com https:\/\/web-script.api.sayprimer.com https:\/\/api.fullcontact.com https:\/\/*.liadm.com https:\/\/tr.capterra.com https:\/\/hubspot-forms-static-embed.s3.amazonaws.com https:\/\/vimeo.com; img-src 'self' data: https:; frame-src 'self' https:\/\/collector.funnel.io https:\/\/*.hubspot.com https:\/\/*.hubspot.net https:\/\/*.hubspotvideo.com https:\/\/*.hsforms.com https:\/\/*.googletagmanager.com https:\/\/safeframe.googlesyndication.com https:\/\/www.youtube.com https:\/\/www.instagram.com https:\/\/ct.pinterest.com https:\/\/tr.snapchat.com https:\/\/www.facebook.com https:\/\/www.tiktok.com https:\/\/vimeo.com https:\/\/player.vimeo.com https:\/\/platform.twitter.com https:\/\/www.linkedin.com https:\/\/funnel.storylane.io https:\/\/www.google.com https:\/\/open.spotify.com https:\/\/app.convert.com https:\/\/*.clients6.google.com https:\/\/*.liadm.com; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/*.funnel.io https:\/\/funnel.io https:\/\/*.hubspotusercontent-na1.net https:\/\/static.hsappstatic.net; media-src 'self' data: https:\/\/funnel.io; base-uri 'self'; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; script-src-elem 'self' 'unsafe-inline' https: blob:; style-src 'self' 'unsafe-inline' https:; style-src-elem 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss: blob:; media-src 'self' blob: data: https:; frame-src 'self' https:; child-src 'self' blob: https:; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri \/internal\/api\/csp-report; report-to csp-endpoint","count":1},{"content-security-policy-report-only":" default-src 'self' https: data: wss: http: umbraco.tv packages.umbraco.org our.umbraco.org; block-all-mixed-content; form-action https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.cloudflare.com static.cloudflareinsights.com umbraco.tv packages.umbraco.org our.umbraco.org code.jquery.com fonts.googleapis.com use.typekit.net unpkg.com cdn.jsdelivr.net ajax.aspnetcdn.com kit.fontawesome.com www.googletagmanager.com www.recaptcha.net www.google.com www.google-analytics.com www.gstatic.com js.authorize.net jstest.authorize.net;font-src 'self' https: data: fonts.gstatic.com use.typekit.net kit-pro.fontawesome.com;img-src 'self' https: data: umbraco.tv packages.umbraco.org our.umbraco.org p.typekit.net www.goole-analytics.com www.gstatic.com www.googletagmanager.com;media-src https: data: umbraco.tv packages.umbraco.org our.umbraco.org p.typekit.net;style-src 'self' 'unsafe-inline' https: data: use.typekit.net p.typekit.net fonts.googleapis.com kit-pro.fontawesome.com unpkg.com cdn.jsdelivr.net;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-Ib9-86HhFxPb_St3zdaxjA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" connect-src 'self' https:\/\/analytics.tiktok.com https:\/\/api.hubspot.com https:\/\/cdn.cookielaw.org https:\/\/cdn.dreamdata.cloud https:\/\/content.hotjar.io https:\/\/cta-service-cms2.hubspot.com https:\/\/forms.hsforms.com https:\/\/px.ads.linkedin.com https:\/\/script.crazyegg.com https:\/\/www.google-analytics.com https:\/\/www.google.com https:\/\/edge.api.brightcove.com https:\/\/bat.bing.com\/ https:\/\/manifest.prod.boltdns.net https:\/\/sdl.brightcovecdn.com https:\/\/logx.optimizely.com https:\/\/*.optimizely.com; default-src 'self'; font-src 'self' data: https:\/\/use.typekit.net https:\/\/*.optimizely.com; frame-ancestors 'none'; frame-src https:\/\/www.googletagmanager.com https:\/\/googleads.g.doubleclick.net https:\/\/cm.g.doubleclick.net https:\/\/www.facebook.com https:\/\/calendly.com https:\/\/forms.hsforms.com https:\/\/a5098497884553216.cdn.optimizely.com https:\/\/a5098497884553216.cdn-pci.optimizely.com; img-src 'self' data: https:\/\/bat.bing.com https:\/\/forms-na1.hsforms.com https:\/\/ib.adnxs.com https:\/\/perf-na1.hsforms.com https:\/\/px.ads.linkedin.com https:\/\/secure.adnxs.com https:\/\/track.accountinsight.cloud https:\/\/track.hubspot.com https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.google.com.ua https:\/\/metrics.brightcove.com https:\/\/www.googletagmanager.com https:\/\/cf-images.us-east-1.prod.boltdns.net https:\/\/cdn.optimizely.com https:\/\/app.optimizely.com; media-src 'self' blob:; script-src 'self' 'nonce-\/zOYeK+R85ShAVBjvHGNog==' https:\/\/a.dpmsrv.com https:\/\/analytics.tiktok.com https:\/\/bat.bing.com https:\/\/cdn.cookielaw.org https:\/\/cdn.dreamdata.cloud https:\/\/cm.g.doubleclick.net https:\/\/connect.facebook.net https:\/\/googleads.g.doubleclick.net https:\/\/ib.adnxs.com https:\/\/js.hs-analytics.net https:\/\/js.hs-banner.com https:\/\/js.hs-scripts.com https:\/\/js.hsforms.net https:\/\/js.hubspot.com https:\/\/js.usemessages.com https:\/\/s.dpmsrv.com https:\/\/script.crazyegg.com https:\/\/script.hotjar.com https:\/\/serve.nrich.ai https:\/\/snap.licdn.com https:\/\/st.getsitecontrol.com https:\/\/static.hotjar.com https:\/\/widgets.getsitecontrol.com https:\/\/www.googletagmanager.com https:\/\/assets.calendly.com https:\/\/static.hsappstatic.net https:\/\/48752163.fs1.hubspotusercontent-na1.net https:\/\/cdnjs.cloudflare.com https:\/\/players.brightcove.net wss:\/\/ws.hotjar.com\/ https:\/\/*.optimizely.com https:\/\/optimizely.s3.amazonaws.com https:\/\/cdn-assets-prod.s3.amazonaws.com 'unsafe-eval'; style-src 'self' 'unsafe-inline' https:\/\/*.typekit.net https:\/\/assets.calendly.com https:\/\/*.optimizely.com https:\/\/app.optimizely.com; worker-src 'self' blob:;","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com data: *.paypal.com *.cloudfront.net https:\/\/static.futureshop.co.uk cash-f.squarecdn.com https:\/\/*.gstatic.com fonts.googleapis.com *.salesfire.co.uk *.klarnacdn.net https:\/\/fonts.gstatic.com *.cdn-apple.com *.fontawesome.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com *.trustedshops.com *.google.com *.cloudfront.net * *.adyen.com https:\/\/plumrocket.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com https:\/\/www.google.co.in https:\/\/www.facebook.com *.trustedshops.com *.cloudfront.net * *.adyen.com www.google.com js.stripe.com https:\/\/plumrocket.com *.salesfire.co.uk *.google.com\/ https:\/\/www.googletagmanager.com\/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.sendcloud.sc www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com *.google.com *.google.co.in https:\/\/www.facebook.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https:\/\/stats.g.doubleclick.net https:\/\/d.adroll.com https:\/\/pixel.advertising.com https:\/\/pixel.rubiconproject.com https:\/\/simage2.pubmatic.com https:\/\/dsum-sec.casalemedia.com https:\/\/ads.yahoo.com https:\/\/eb2.3lift.com https:\/\/sync.outbrain.com https:\/\/trc.taboola.com https:\/\/x.bidswitch.net\/sync https:\/\/ib.adnxs.com https:\/\/idsync.rlcdn.com https:\/\/us-u.openx.net https:\/\/ups.analytics.yahoo.com https:\/\/segments.company-target.com https:\/\/sync.tidaltv.com *.trustedshops.com *.postcodeanywhere.co.uk *.cloudfront.net *.bing.com https:\/\/media.futureshop.co.uk https:\/\/static.futureshop.co.uk https:\/\/c.clarity.ms * https:\/\/*.gstatic.com *.adyen.com https:\/\/images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com https:\/\/redchamps.com https:\/\/www.magezon.com *.salesfire.co.uk http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ https:\/\/www.google.com\/ https:\/\/firebasestorage.googleapis.com https:\/\/meetanshi.com https:\/\/placehold.co flagpedia.net https:\/\/www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.reviews.io *.reviews.co.uk www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https:\/\/connect.facebook.net *.paypalobjects.com *.paypal.com https:\/\/chimpstatic.com *.googletagmanager.com https:\/\/s.adroll.com https:\/\/d.adroll.com https:\/\/d.adroll.mgr.consensu.org *.bootstrapcdn.com *.pcapredict.com *.postcodeanywhere.co.uk *.cloudfront.net https:\/\/cdn.cookielaw.org https:\/\/geolocation.onetrust.com *.bing.com *.doubleclick.net http:\/\/cdn.cookie-script.com https:\/\/cdn.jsdelivr.net https:\/\/consent.cookie-script.com https:\/\/assets.adobedtm.com https:\/\/checkoutanalytics-test.adyen.com *.mastercard.com *.visa.com *.cloudflareinsights.com *.zoho.com *.zohopublic.com https:\/\/geo.cookie-script.com https:\/\/www.futureshop.co.uk https:\/\/infirc.com https:\/\/media.futureshop.co.uk https:\/\/static.futureshop.co.uk https:\/\/overbridgenet.com https:\/\/www.clarity.ms *.adyen.com pay.google.com *.payments-amazon.com *.ratepay.com *.cash.app applepay.cdn-apple.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ js.stripe.com *.salesfire.co.uk *.google.com\/ http:\/\/www.googletagmanager.com\/ https:\/\/www.googletagmanager.com\/ *.etrusted.com *.avada.io *.shopify.com player.vimeo.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.sendcloud.sc www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.youtube.com *.bootstrapcdn.com *.paypal.com *.postcodeanywhere.co.uk *.cloudfront.net https:\/\/media.futureshop.co.uk https:\/\/static.futureshop.co.uk *.cash.app https:\/\/fonts.googleapis.com\/ data: *.salesfire.co.uk https:\/\/fonts.googleapis.com https:\/\/fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http:\/\/www.googleadservices.com\/ http:\/\/www.google-analytics.com\/ https:\/\/www.googleadservices.com\/ https:\/\/www.google-analytics.com\/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.twitter.com *.twimg.com *.google.co.in *.facebook.com *.trustedshops.com *.postcodeanywhere.co.uk *.cloudfront.net *.etrusted.com https:\/\/cdn.cookielaw.org *.bing.com *.doubleclick.net *.adyen.com http:\/\/cdn.cookie-script.com https:\/\/cdn.jsdelivr.net https:\/\/consent.cookie-script.com https:\/\/assets.adobedtm.com https:\/\/checkoutanalytics-test.adyen.com *.zohopublic.com https:\/\/media.futureshop.co.uk https:\/\/static.futureshop.co.uk https:\/\/c.clarity.ms *.clarity.ms * https:\/\/maps.googleapis.com https:\/\/player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com api.addressy.com *.salesfire.co.uk *.smartmetrics.co.uk http:\/\/stats.g.doubleclick.net\/ https:\/\/stats.g.doubleclick.net\/ http:\/\/www.google-analytics.com\/ https:\/\/www.google-analytics.com\/ https:\/\/get.geojs.io *.avada.io www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/matomo.eah-jena.de\/matomo.js https:\/\/*.openstreetmap.org 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https:\/\/*.openstreetmap.org https:\/\/*.googleapis.com https:\/\/*.gstatic.com *.google.com *.googleusercontent.com *.openstreetmap.org https:\/\/*.typo3.org https:\/\/www.studycheck.de\/%2A https:\/\/matomo.eah-jena.de\/matomo.php https:\/\/www.studycheck.de; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com *.google.com https:\/\/www2.hochschulsport.eah-jena.de; connect-src 'self' data: https:\/\/*.openstreetmap.org *.google.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/nominatim.openstreetmap.org blob: https:\/\/matomo.eah-jena.de https:\/\/www.eah-jena.de; font-src 'self' https:\/\/fonts.gstatic.com data:; worker-src 'self' 'nonce-KNqfY67Z5bQT4MGp4XVFDLnJVctuUclBCRpe4rlhG06mJuX1i-oCFQ' data: https:\/\/*.openstreetmap.org blob: 'report-sample'; form-action 'self' https:\/\/katalogplus.bibliothek.eah-jena.de; style-src blob: data: 'self' 'unsafe-inline' 'report-sample'; frame-ancestors 'none'; object-src 'none'; report-uri https:\/\/www.eah-jena.de\/@http-reporting?csp=report&requestTime=1788488050525257&requestHash=4c30e803bbe1198cf0de6d58d64cdf1e67acef17","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/octane.co https:\/\/*.octane.co https:\/\/prequalflex.com https:\/\/www.prequalflex.com https:\/\/ride-static.octane.co https:\/\/ride-api.octane.co https:\/\/octane.co https:\/\/*.octane.co https:\/\/octanelending.com https:\/\/*.octanelending.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.google.com *.vwo.com *.visualwebsiteoptimizer.com *.intercom.io *.intercomcdn.com *.onetrust.com https:\/\/cdn.cookielaw.org; style-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/octane.co https:\/\/*.octane.co https:\/\/prequalflex.com https:\/\/www.prequalflex.com https:\/\/ride-static.octane.co https:\/\/ride-api.octane.co https:\/\/octane.co https:\/\/*.octane.co https:\/\/octanelending.com https:\/\/*.octanelending.com fonts.googleapis.com www.gstatic.com app.vwo.com www.googletagmanager.com translate.googleapis.com; frame-ancestors 'self' https:\/\/polarisxchange.com https:\/\/slingshot.polarisxchange.com https:\/\/indianmotorcycle.polarisxchange.com https:\/\/www.rvs.com https:\/\/rvs.com https:\/\/buy.cycletrader.com https:\/\/www.atvrider.com https:\/\/www.cyclevolta.com https:\/\/www.cycleworld.com https:\/\/www.dirtrider.com https:\/\/www.motorcyclecruiser.com https:\/\/www.motorcyclistonline.com https:\/\/www.utvdriver.com https:\/\/octane.co https:\/\/*.octane.co https:\/\/prequalflex.com https:\/\/www.prequalflex.com https:\/\/ride-static.octane.co https:\/\/ride-api.octane.co https:\/\/octanelending.com https:\/\/*.octanelending.com https:\/\/*.dev-octanelisting.com https:\/\/*.octanelisting.com; worker-src 'self' blob:; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-arChaJbOXZFdzV-0x15FSw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/dig-aboprod.noncd.db.de https:\/\/*.consentmanager.net https:\/\/web-assets-stage.dc.vvs.de https:\/\/web-assets-prod.dc.vvs.de https:\/\/www-assets.vvs.de 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https:\/\/bildermangel.de https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/stats.g.doubleclick.net https:\/\/*.consentmanager.net https:\/\/web-assets-stage.dc.vvs.de https:\/\/web-assets-prod.dc.vvs.de https:\/\/www-assets.vvs.de; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/*.vvs.de https:\/\/vvsjobs.softgarden.io https:\/\/www.paperturn-view.com http:\/\/paperturn-view.com https:\/\/*.paperturn-view.com https:\/\/www.unserebroschuere.de https:\/\/dig-aboprod.noncd.db.de https:\/\/www.googletagmanager.com https:\/\/*.consentmanager.net; font-src 'self' https:\/\/dig-aboprod.noncd.db.de https:\/\/*.consentmanager.net https:\/\/web-assets-stage.dc.vvs.de https:\/\/web-assets-prod.dc.vvs.de https:\/\/www-assets.vvs.de; worker-src 'self' https:\/\/www.googletagmanager.com https:\/\/tagmanager.google.com https:\/\/dig-aboprod.noncd.db.de https:\/\/*.consentmanager.net https:\/\/web-assets-stage.dc.vvs.de https:\/\/web-assets-prod.dc.vvs.de https:\/\/www-assets.vvs.de https:\/\/*.vvs.de; connect-src 'self' https:\/\/apistaging.vvs.de https:\/\/*.vvs.de https:\/\/www.google-analytics.com https:\/\/stats.g.doubleclick.net https:\/\/analytics.google.com https:\/\/www.googletagmanager.com https:\/\/region1.google-analytics.com https:\/\/abo.bahn.de https:\/\/dig-aboprod.noncd.db.de https:\/\/*.consentmanager.net https:\/\/web-assets-stage.dc.vvs.de https:\/\/web-assets-prod.dc.vvs.de https:\/\/www-assets.vvs.de; object-src 'none'; style-src 'self' https:\/\/dig-aboprod.noncd.db.de https:\/\/*.consentmanager.net https:\/\/web-assets-stage.dc.vvs.de https:\/\/web-assets-prod.dc.vvs.de https:\/\/www-assets.vvs.de 'unsafe-inline' 'report-sample'; form-action 'self' https:\/\/dig-aboprod.noncd.db.de https:\/\/abo.bahn.de; script-src-attr 'none' 'report-sample'; report-uri https:\/\/www.vvs.de\/@http-reporting?csp=report&requestTime=1758610862619452&requestHash=37a59644ef9051c8efc5aa5fa70c9054b934deef","count":1},{"content-security-policy-report-only":" default-src 'none'; media-src *; frame-ancestors 'none'; script-src 'self' 'unsafe-inline' 'report-sample' 'nonce-qKR1SQNH0mkQXCjvv0npsw=='; style-src 'unsafe-inline' *; img-src blob: data: *; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io browser.sentry-cdn.com; worker-src 'none'; frame-src demo.arcade.software; base-uri 'none'; font-src 'self' data:; object-src 'none'","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' 'nonce-8333f14e-91b0-4a10-a0b4-e9b17012f292'  *.aaui-879784980514.s3.us-east-2.amazonaws.com *.aauicdnva7.azureedge.net *.adform.net *.app.launchdarkly.com *.awaascicdprodva7.blob.core.windows.net *.d30ln29764hddd.cloudfront.net *.doubleclick.net *.euroland.com *.eurolandir.com *.googletagmanager.com *.jquery.com *.leaddesk.com *.linkedin.com *.omniture.com *.omtrdc.net *.services.adobe.com *.youtube.com http:\/\/maps.google.com\/maps-api-v3\/api\/ http:\/\/maps.google.com\/maps\/api\/ http:\/\/maps.googleapis.com\/maps\/api\/ https:\/\/*.aptrinsic.com https:\/\/*.flockler.com https:\/\/adminconsole.adobe.com https:\/\/adobe.com https:\/\/adobe.io https:\/\/adobe.net https:\/\/adobeid-na1.services.adobe.com https:\/\/ajax.googleapis.com https:\/\/analytics-eu.clickdimensions.com https:\/\/api.emea01.idio.episerver.net https:\/\/app.powerbi.com https:\/\/assets.adobedtm.com https:\/\/assets.adobedtm.com https:\/\/assets2.adobe.com https:\/\/az416426.vo.msecnd.net\/scripts\/a\/ai.0.js https:\/\/cdn.cookielaw.org https:\/\/cdn.jsdelivr.net\/npm\/ https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/popper.js\/ https:\/\/cloudui-emea01.profilestore.episerver.net https:\/\/connect.facebook.net https:\/\/cookie-cdn.cookiepro.com https:\/\/d1igp3oop3iho5.cloudfront.net\/v2\/YTCU__QFgA3N4sqa5K5xQA-eu1\/zaius-min.js https:\/\/d1igp3oop3iho5.cloudfront.net\/v2\/buA6R3hGThUwo2b3jMhdjQ-eu1\/zaius-min.js https:\/\/dl.episerver.net https:\/\/fl-cdn.scdn1.secure.raxcdn.com https:\/\/geolocation.onetrust.com https:\/\/googleads.g.doubleclick.net https:\/\/js.monitor.azure.com\/scripts\/ https:\/\/kuula.co https:\/\/ld-webchat.s3.eu-north-1.amazonaws.com https:\/\/login.microsoftonline.com https:\/\/maps.googleapis.com https:\/\/maxcdn.bootstrapcdn.com\/bootstrap\/ https:\/\/research.innolink.fi https:\/\/s.emea01.idio.episerver.net\/ https:\/\/snap.licdn.com https:\/\/sstats.adobe.com https:\/\/static.ads-twitter.com https:\/\/tpc.googlesyndication.com https:\/\/videolle.viewin360.co https:\/\/www.google.com https:\/\/www.google.com\/recaptcha\/ https:\/\/www.googleadservices.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/youtube.com https:\/\/metsa-virtual-exhibition.netlify.app https:\/\/metsa-virtual-exhibition-two.netlify.app  https:\/\/cxppusa1formui01cdnsa01-endpoint.azureedge.net\/  https:\/\/*.hotjar.com\/ https:\/\/cxppeur1rdrect01sa02cdn.blob.core.windows.net\/ https:\/\/analytics.tiktok.com\/ https:\/\/s.pinimg.com\/ https:\/\/ct.pinterest.com ;  report-uri https:\/\/www.metsagroup.com\/api\/reporting\/;  report-to csp-endpoint;","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-1u2KH3v7D2wRuWO2kp1T5A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" font-src *.bootstrapcdn.com *.trackcmp.net *.hotjar.com *.google-analytics.com *.nr-data.net *.typeform.com fonts.gstatic.com *.yotpo.com *.googleapis.com *.gstatic.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.authorize.net https:\/\/plumrocket.com *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.bolt.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.bolt.com https:\/\/www.google.com\/recaptcha\/ www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google.com *.authorize.net https:\/\/plumrocket.com *.hotjar.com *.addthis.com *.libsyn.com *.locally.com *.sheerid.com *.wayin.com *.newtonsoftware.com https:\/\/recruitingbypaycor.com\/ *.curalate.com *.formstack.com *.trackcmp.net *.google-analytics.com *.nr-data.net data: *.typeform.com *.pagescdn.com *.yextpages.net *.googleapis.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com magefan.com cm.magefan.com store.paradoxlabs.com *.disqus.com *.google.com *.mageside.com mageside.com *.bc0a.com *.curalate.com *.s3.amazonaws.com *.amazonaws.com *.leupold.com *.googleapis.com *.gstatic.com *.trackcmp.net *.hotjar.com *.google-analytics.com *.nr-data.net *.typeform.com *.b0e8.com https:\/\/img.youtube.com maps.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com http:\/\/localhost:8082 https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ polyfill.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/developer.adobe.com https:\/\/assets.armanet.us *.kaptcha.com *.disqus.com *.google.com *.gstatic.com *.authorize.net *.hotjar.com *.curalate.com *.app-us1.com *.avmws.com *.acsbapp.com acsbapp.com *.googleapis.com *.googletagmanager.com *.paypalobjects.com *.sheerid.com *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.cloudfront.net *.locally.com *.wayin.com *.activehosted.com *.newtonsoftware.com recruitingbypaycor.com *.leupold.com *.trackcmp.net *.google-analytics.com trackcmp.net *.vimeo.com *.apptrian.com *.facebook.com *.typeform.com *.sitescdn.net *.yextpages.net *.pagescdn.com *.b0e8.com *.bc0a.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sheerid.com *.bootstrapcdn.com *.trackcmp.net *.hotjar.com *.google-analytics.com *.nr-data.net *.typeform.com *.sitescdn.net *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src *.trackcmp.net *.hotjar.com *.google-analytics.com *.nr-data.net *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.bolt.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https:\/\/srv.armanet.us https:\/\/assets.armanet.us *.kaptcha.com *.authorize.net *.bc0a.com *.hotjar.com wss:\/\/*.hotjar.com *.addthis.com *.googleapis.com *.acsbapp.com *.curalate.com *.hotjar.io *.trackcmp.net *.google-analytics.com *.g.doubleclick.net *.typeform.com *.pagescdn.com *.yext.com *.yext-pixel.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com *.doubleclick.net *.run.app *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" connect-src ;frame-src ;script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/emotivecdn.io *.dev-emotive.com https:\/\/www.googletagmanager.com;default-src 'self';font-src fonts.gstatic.com;img-src 'self' data:;frame-ancestors 'self' *.dev-emotive.com https:\/\/setup-shop.emotiveapp.co *.myshopify.com;style-src 'self' 'unsafe-inline' https:\/\/emotivecdn.io *.dev-emotive.com fonts.googleapis.com","count":1},{"content-security-policy-report-only":" default-src 'self' 'unsafe-inline' data: 'unsafe-eval'; report-uri \/errors\/csp-violation\/","count":1},{"content-security-policy-report-only":" default-src 'self' https:\/\/*.appreciatehub.com *.google-analytics.com *.cloudflare.com https:\/\/*.googleapis.com https:\/\/*.pendo.io https:\/\/*.alamoapp.octanner.io https:\/\/*.api.octanner.net https:\/\/*.salesforce.com *.cloudinary.com *.assets.octanner.com https:\/\/s3.amazonaws.com\/oc-images-api\/* *.doubleclick.net *.octanner.net *.gstatic.com *.jwpcdn.com *.recaptcha.net https:\/\/www.gstatic.com\/recaptcha\/releases\/*  wss:\/\/*.fathomvoice.com *.fathomvoice.com *.fonticons.com *.fortawesome.com 'unsafe-inline' 'unsafe-eval' data:; frame-src 'self' www.google.com www.recaptcha.net https:\/\/res.cloudinary.com *.assets.octanner.com;","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cdn.jsdelivr.net geowidget.easypack24.net *.fontawesome.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.wesupply.xyz https:\/\/wesupplylabs.com secure.payu.com merch-prod.snd.payu.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.google.pl www.facebook.com px.ads.linkedin.com elmark.com.pl www.elmark.com.pl *.clarity.ms *.bing.com geowidget.easypack24.net osm.inpost.pl www.rugged.com.pl elmatic.net magefan.com cm.magefan.com https:\/\/firebasestorage.googleapis.com static.payu.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com snap.licdn.com connect.facebook.net *.clarity.ms pi.pardot.com unpkg.com api.mapbox.com cdn.jsdelivr.net geowidget.easypack24.net info.elmark.com.pl consent.cookiefirst.com *.googlesyndication.com *.cloudflare.com *.avada.io secure.payu.com secure.snd.payu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net geowidget.easypack24.net *.fontawesome.com https:\/\/fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com region1.analytics.google.com px.ads.linkedin.com *.clarity.ms stats.g.doubleclick.net *.googlesyndication.com api-pl-points.easypack24.net *.google-analytics.com https:\/\/get.geojs.io *.avada.io secure.payu.com merch-prod.snd.payu.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.google.com *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; style-src 'self' 'unsafe-inline' https:\/\/*.typekit.net https:\/\/fonts.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/*.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:\/\/*.google.com https:\/\/*.googletagmanager.com https:\/\/*.google-analytics.com https:\/\/*.googleapis.com https:\/\/*.loginwithamazon.com https:\/\/*.doubleclick.net https:\/\/cdn-cookieyes.com https:\/\/js.hs-scripts.com https:\/\/js.hs-banner.com https:\/\/js.usemessages.com https:\/\/js.hsadspixel.net https:\/\/js.hs-analytics.net https:\/\/snap.licdn.com https:\/\/*.zdassets.com https:\/\/*.facebook.net https:\/\/*.c-ctrip.com https:\/\/*.quantummetric.com https:\/\/*.scriptcdn.net https:\/\/*.alipayobjects.com https:\/\/*.navahididi.com https:\/\/cdn.brightwrite.com https:\/\/cdn.brightwrite-staging.com https:\/\/*.fullstory.com https:\/\/fullstory.com https:\/\/*.xcover.com; connect-src 'self' https:\/\/*.sentry.io https:\/\/sentry.io https:\/\/*.amazonaws.com https:\/\/*.amazon.com https:\/\/*.google.com https:\/\/google.com https:\/\/*.google.com.au https:\/\/*.google.com.br https:\/\/*.google.com.co https:\/\/*.google.com.mt https:\/\/*.google.com.mx https:\/\/*.google.com.sg https:\/\/*.google.com.sv https:\/\/*.google.com.ph https:\/\/*.googleapis.com https:\/\/*.google-analytics.com https:\/\/*.google.ae https:\/\/*.google.at https:\/\/*.google.be https:\/\/*.google.ch https:\/\/*.google.cz https:\/\/*.google.de https:\/\/*.google.es https:\/\/*.google.fr https:\/\/*.google.hu https:\/\/*.google.ie https:\/\/*.google.it https:\/\/*.google.nl https:\/\/*.google.no https:\/\/*.google.pl https:\/\/*.google.pt https:\/\/*.google.co.id https:\/\/*.google.co.jp https:\/\/*.google.co.kr https:\/\/*.google.com.my https:\/\/*.google.com.tr https:\/\/*.google.com.tw https:\/\/*.google.co.uk https:\/\/*.google.co.za https:\/\/*.doubleclick.net https:\/\/*.linkedin.com https:\/\/*.hubapi.com https:\/\/*.cookieyes.com https:\/\/cdn-cookieyes.com https:\/\/*.brightwrite.com https:\/\/brightwrite-data.com https:\/\/*.fullstory.com https:\/\/*.hubspot.com https:\/\/*.adyen.com https:\/\/*.zdassets.com https:\/\/*.xcover.com https:\/\/*.covergenius.biz https:\/\/*.zendesk.com https:\/\/*.hsforms.com https:\/\/api.transferwise.com blob: data: https:\/\/browser-intake-datadoghq.eu https:\/\/*.datadoghq.eu https:\/\/*.googlesyndication.com; img-src 'self' https: data: blob:; font-src 'self' https: data:; frame-src 'self' https:\/\/*.google.com https:\/\/*.googletagmanager.com https:\/\/*.amazon.com https:\/\/*.doubleclick.net https:\/\/*.adyen.com https:\/\/*.web.app https:\/\/*.xcover.com; worker-src 'self' blob:; upgrade-insecure-requests; report-uri https:\/\/csp-report.browser-intake-datadoghq.eu\/api\/v2\/logs?dd-api-key=pube2daa5996f2fad21d085fd09ecccdd5d&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Axcover-website%2Ccluster-group%3Axcover%2Cenv%3Aproduction","count":1},{"content-security-policy-report-only":" object-src 'none';base-uri 'self';script-src 'nonce-wa3aLBGf2owArxuXsQLBbg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","count":1},{"content-security-policy-report-only":" default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; media-src 'self' https: data: blob:; frame-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:; upgrade-insecure-requests","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'","count":1},{"content-security-policy-report-only":" script-src 'self' https:\/\/cloud.typography.com\/7315076\/7256812\/css\/fonts.css siteimproveanalytics.com ; object-src 'none'; img-src *.siteimproveanalytics.io","count":1},{"content-security-policy-report-only":" object-src 'none'; script-src 'self' cdn.jsdelivr.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/www.google.com maps.googleapis.com mdbootstrap.com 'sha256-e3OsTH0KIUdK3veWO2CJ9QDxFNgZ4fTPuRsN5mkj7yU=' 'sha256-Le91+7OYQB8mDGwT8a7ohhgxLnj7pEbIyIsCqy2AycY=' 'sha256-Mk1VPQtxz8qtUlboAEAEF57\/5KA2HyZKTQo2BfVSEf4=' 'sha256-Rpvi6xMF257AsTk05m1mKcwS\/+Chfi6ud9QyVvVPUsw=' 'sha256-J2BlRZ5cxigjmZyEY7otnpWUvdOdedhBg4muz0XoGaQ=' 'sha256-Q6HvhRBY4wBN2UirYxuCQzLDL0d2cDvrdfiuD6hJV0Q='; script-src-attr 'self'; script-src-elem 'self' cdn.jsdelivr.net https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com https:\/\/www.google.com maps.googleapis.com mdbootstrap.com 'sha256-e3OsTH0KIUdK3veWO2CJ9QDxFNgZ4fTPuRsN5mkj7yU=' 'sha256-Le91+7OYQB8mDGwT8a7ohhgxLnj7pEbIyIsCqy2AycY=' 'sha256-Mk1VPQtxz8qtUlboAEAEF57\/5KA2HyZKTQo2BfVSEf4=' 'sha256-Rpvi6xMF257AsTk05m1mKcwS\/+Chfi6ud9QyVvVPUsw=' 'sha256-J2BlRZ5cxigjmZyEY7otnpWUvdOdedhBg4muz0XoGaQ=' 'sha256-Q6HvhRBY4wBN2UirYxuCQzLDL0d2cDvrdfiuD6hJV0Q='; style-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com mdbootstrap.com 'sha256-1VTAHS0X+0lgrfu7iW\/2ikIZ\/VIANi00phY6Pqavxdg=' 'sha256-gol7YIWSDJAuuPVuy7CDfvODTfZpdnZDAjxzHF8Q3RQ=' 'sha256-TqQplrOl6sBGQcWy3yrIBeYVuzKxfK8tblQ1bfbwzhI=' 'sha256-0EZqoz+oBhx7gF4nvY2bSqoGyy4zLjNF+SDQXGp\/ZrY=' 'sha256-pEflAPLL74jE+1CxyCx7uJ\/qaKMSgeaGKurIvYB9tOc=' 'sha256-ixVUGs3ai0rMA0pgIVBN0KVlYbQip7\/5SGmnUwJPNqE=' 'sha256-faU7yAF8NxuMTNEwVmBz+VcYeIoBQ2EMHW3WaVxCvnk=' 'sha256-FxaRpFb\/qsrMe0VdEKIdvoXDJdGhfpMk\/vOvkJPTyqw=' 'sha256-wornWxYFbAwLXubOXT3N+rjYVG8hZCO\/ImKrTbdki90=' 'sha256-47DEQpj8HBSa+\/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-9rWG6k1Tr8Xi8liYIjfOLVdgfnWvGD4XMRij1dPZKpw=' 'sha256-8QgCOUffSB4K7v7WmNd1vG695sw8Z0ed68ZgyqpQrII=' 'sha256-RoUQFkGVw7irhiviq8rOxjfuePbTcjBKSFfea361ip4=' 'sha256-gZ6LuPVnY26zpymRfjUnHy6K1lFesemD+Lueifelj48=' 'sha256-FDQXmMn1d8h0bBo5sy1B2jS5nCITOkVm2N+5P+qey9g=' 'sha256-h9xGdwT9aDVMCtTp2tdUKKWQAi3+snoFwKcYcQBerds=' 'sha256-biLFinpqYMtWHmXfkA1BPeCY0\/fNt46SAZ+BBk5YUog=' 'unsafe-hashes' 'sha256-aqNNdDLnnrDOnTNdkJpYlAxKVJtLt9CtFLklmInuUAE=' 'sha256-KHhg+VKos8dDWtW4w5KXBSbUOuM6ejBjyy40oZ\/gNpw=' 'sha256-i7lTJWwQJj4pveauPVpuAh1OBOpNjk872Oyt7fwQ2A4=' 'sha256-QgOcf0A96mLOsYqx1UWukP4se1gxUTXu9j7jXxId1\/A=' 'sha256-a+H1SVa2oQZImOdFYPsJ9ER+rbyms3skVy8l+wZasJM=' 'sha256-BOQuU3IXroqPYrAWR5h4ImeCEjO3hJeRIwp6A9zYvoU=' 'sha256-hKDoxLDb3OpE3Af4HZ+uqErJUCA\/tlXaF4zFm9txGb8=' 'sha256-KWR0UfBVwUihRKDnFDZLXVjkiaAlrgyev\/6WvEY7yYc=' 'sha256-bGUlTsVqSKMBpQsmfoP++Mfq\/Q0pJFwyMl+c4ov5paI=' 'sha256-VLB55+tQRwSWla0o2bi\/RYTp6RhoQlUJLU8CTFedJ\/g='; style-src-attr 'self' 'sha256-biLFinpqYMtWHmXfkA1BPeCY0\/fNt46SAZ+BBk5YUog=' 'unsafe-hashes' 'sha256-aqNNdDLnnrDOnTNdkJpYlAxKVJtLt9CtFLklmInuUAE=' 'sha256-KHhg+VKos8dDWtW4w5KXBSbUOuM6ejBjyy40oZ\/gNpw=' 'sha256-i7lTJWwQJj4pveauPVpuAh1OBOpNjk872Oyt7fwQ2A4=' 'sha256-QgOcf0A96mLOsYqx1UWukP4se1gxUTXu9j7jXxId1\/A=' 'sha256-a+H1SVa2oQZImOdFYPsJ9ER+rbyms3skVy8l+wZasJM=' 'sha256-BOQuU3IXroqPYrAWR5h4ImeCEjO3hJeRIwp6A9zYvoU=' 'sha256-hKDoxLDb3OpE3Af4HZ+uqErJUCA\/tlXaF4zFm9txGb8=' 'sha256-KWR0UfBVwUihRKDnFDZLXVjkiaAlrgyev\/6WvEY7yYc=' 'sha256-bGUlTsVqSKMBpQsmfoP++Mfq\/Q0pJFwyMl+c4ov5paI=' 'sha256-VLB55+tQRwSWla0o2bi\/RYTp6RhoQlUJLU8CTFedJ\/g='; style-src-elem 'self' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https:\/\/cdn.jsdelivr.net https:\/\/cdnjs.cloudflare.com mdbootstrap.com 'sha256-1VTAHS0X+0lgrfu7iW\/2ikIZ\/VIANi00phY6Pqavxdg=' 'sha256-gol7YIWSDJAuuPVuy7CDfvODTfZpdnZDAjxzHF8Q3RQ=' 'sha256-TqQplrOl6sBGQcWy3yrIBeYVuzKxfK8tblQ1bfbwzhI=' 'sha256-0EZqoz+oBhx7gF4nvY2bSqoGyy4zLjNF+SDQXGp\/ZrY=' 'sha256-pEflAPLL74jE+1CxyCx7uJ\/qaKMSgeaGKurIvYB9tOc=' 'sha256-ixVUGs3ai0rMA0pgIVBN0KVlYbQip7\/5SGmnUwJPNqE=' 'sha256-faU7yAF8NxuMTNEwVmBz+VcYeIoBQ2EMHW3WaVxCvnk=' 'sha256-FxaRpFb\/qsrMe0VdEKIdvoXDJdGhfpMk\/vOvkJPTyqw=' 'sha256-wornWxYFbAwLXubOXT3N+rjYVG8hZCO\/ImKrTbdki90=' 'sha256-47DEQpj8HBSa+\/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-9rWG6k1Tr8Xi8liYIjfOLVdgfnWvGD4XMRij1dPZKpw=' 'sha256-8QgCOUffSB4K7v7WmNd1vG695sw8Z0ed68ZgyqpQrII=' 'sha256-RoUQFkGVw7irhiviq8rOxjfuePbTcjBKSFfea361ip4=' 'sha256-gZ6LuPVnY26zpymRfjUnHy6K1lFesemD+Lueifelj48=' 'sha256-FDQXmMn1d8h0bBo5sy1B2jS5nCITOkVm2N+5P+qey9g=' 'sha256-h9xGdwT9aDVMCtTp2tdUKKWQAi3+snoFwKcYcQBerds='; worker-src 'self'; base-uri 'self'; frame-ancestors 'self'","count":1},{"content-security-policy-report-only":" font-src *.typekit.net fonts.gstatic.com use.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com https:\/\/www.gstatic.com https:\/\/fonts.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.affirm.com *.affirm.ca *.google.com\/ https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com https:\/\/*.gstatic.com *.affirm.com *.affirm.ca https:\/\/*.google.com https:\/\/*.googleapis.com https:\/\/*.googleusercontent.com https:\/\/www.magezon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com beacon-audiences.magento-ds.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-ds.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com https:\/\/*.gstatic.com *.affirm.com *.affirm.ca *.google.com\/ https:\/\/*.googleapis.com https:\/\/*.ggpht.com https:\/\/*.googleusercontent.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com https:\/\/challenges.cloudflare.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com beacon-audiences.magento-ds.com fonts.googleapis.com assets.braintreegateway.com https:\/\/fonts.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.fontawesome.com maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net p13n-mr.adobe.io *.adobedc.net *.demdex.net beacon-audiences.magento-ds.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io commerce.adobe.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com qa-api.magedevteam.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.affirm.com *.affirm.ca https:\/\/ipinfo.io https:\/\/*.google.com https:\/\/*.gstatic.com https:\/\/*.googleapis.com https:\/\/hcaptcha.com https:\/\/*.hcaptcha.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" default-src 'self'; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/code.jquery.com\/ui\/ https:\/\/src.mastercard.com\/srci\/integration\/components\/ https:\/\/cdn.jsdelivr.net\/npm\/intl-tel-input@25.3.1\/build\/css\/intlTelInput.css https:\/\/cdn.gotab.io\/static\/; script-src 'self' 'unsafe-eval' 'nonce-3960d9f33976fab3ff0de3490bd18d43' https:\/\/js.stripe.com\/ https:\/\/g.stripe.com\/ https:\/\/hosted.paysafe.com\/request\/ https:\/\/ajax.cloudflare.com https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/moment.js\/ https:\/\/static.cloudflareinsights.com https:\/\/cdn.webrtc-experiment.com\/DetectRTC.min.js https:\/\/code.jquery.com\/ui\/ https:\/\/maps.googleapis.com\/maps\/api\/ https:\/\/challenges.cloudflare.com\/turnstile\/v0\/api.js https:\/\/www.google.com\/recaptcha\/api.js https:\/\/www.datadoghq-browser-agent.com\/datadog-logs-us.js https:\/\/www.datadoghq-browser-agent.com\/datadog-rum-us.js https:\/\/www.datadoghq-browser-agent.com\/datadog-rum-v4.js http:\/\/stats.pusher.com\/timeline\/v2\/jsonp\/ https:\/\/cdn.onesignal.com\/ https:\/\/onesignal.com\/api\/v1\/sync\/ https:\/\/hpoint-cr-binaries-prod.s3.amazonaws.com\/cloud\/sdk\/wrappers\/js\/ https:\/\/cdn.jsdelivr.net\/npm\/intl-tel-input@25.3.1\/build\/js\/intlTelInputWithUtils.min.js https:\/\/src.mastercard.com\/ https:\/\/secure.checkout.visa.com\/checkout-widget\/resources\/js\/ https:\/\/qwww.aexp-static.com\/akamai\/remotecommerce\/scripts\/ https:\/\/webapp.src.discover.com\/websdk\/ https:\/\/content.discovercard.com\/ https:\/\/js.verygoodvault.com\/vgs-collect\/ https:\/\/js3.verygoodvault.com\/vgs-collect\/ https:\/\/www.datadoghq-browser-agent.com\/datadog-logs-v4.js https:\/\/applepay.cdn-apple.com\/jsapi\/ https:\/\/cdn.gotab.io\/static\/; font-src 'self' data: https:\/\/fonts.gstatic.com https:\/\/cdn.gotab.io\/static\/; img-src 'self' data: https:\/\/img.gotab.io\/ https:\/\/static.gotab.io\/ https:\/\/s3.amazonaws.com\/gotabpublic\/ https:\/\/s3.amazonaws.com\/gotabpublic\/ https:\/\/maps.gstatic.com\/ https:\/\/maps.googleapis.com\/maps\/ https:\/\/i.vimeocdn.com\/video\/ https:\/\/src.mastercard.com\/srci\/integration\/ https:\/\/content.discovercard.com\/ https:\/\/cdn.jsdelivr.net\/npm\/intl-tel-input@25.3.1\/build\/img\/ https:\/\/*.untappd.com\/ https:\/\/checkoutshopper-live.adyen.com\/checkoutshopper\/images\/ https:\/\/checkoutshopper-live-us.adyen.com\/ https:\/\/applepay.cdn-apple.com https:\/\/*.googleapis.com https:\/\/gotabpublic.s3.amazonaws.com\/ https:\/\/cdn.gotab.io\/static\/; media-src 'self' data: https:\/\/s3.amazonaws.com\/gotabpublic\/ https:\/\/gotabpublic.s3.amazonaws.com\/ https:\/\/cdn.gotab.io\/static\/; frame-src 'self' https:\/\/js.stripe.com\/ https:\/\/metabase.gotab.io\/ https:\/\/report.gotab.io\/ https:\/\/www.google.com\/ https:\/\/js.verygoodvault.com\/vgs-collect\/ https:\/\/content.discovercard.com\/ https:\/\/src.mastercard.com\/ https:\/\/srcdcf.americanexpress.com\/ https:\/\/secure.checkout.visa.com\/checkout-widget\/ https:\/\/checkoutshopper-live.adyen.com\/ https:\/\/checkoutshopper-live-us.adyen.com\/ https:\/\/challenges.cloudflare.com\/ https:\/\/applepay.cdn-apple.com https:\/\/loveychat.gotab.io\/ https:\/\/app.opsi.io\/; connect-src 'self' https:\/\/*.gotab.io\/ wss:\/\/stats.gotab.io\/ https:\/\/s3.amazonaws.com\/gotabpublic\/ https:\/\/s3.amazonaws.com\/gotabpublic\/ https:\/\/hosted.paysafe.com\/request\/api\/ https:\/\/api.paysafe.com\/request\/api\/ https:\/\/api.paysafe.com\/request\/api\/v1\/ https:\/\/checkoutshopper-live.adyen.com\/checkoutshopper\/ https:\/\/checkoutshopper-live-us.adyen.com\/ https:\/\/checkoutanalytics-live.adyen.com\/checkoutanalytics\/ https:\/\/checkoutanalytics-live-us.adyen.com\/checkoutanalytics\/ https:\/\/*.logs.datadoghq.com\/ https:\/\/*.browser-intake-datadoghq.com\/ https:\/\/openreplay.gotab.org\/ https:\/\/otel.gotab.io\/ *.verygoodvault.com *.verygoodproxy.com https:\/\/maps.googleapis.com\/maps\/api\/ https:\/\/cloud.handpoint.io\/ https:\/\/cloud.handpoint.com\/ ws:\/\/ws-mt1.pusher.com\/app\/ https:\/\/vimeo.com\/api\/ https:\/\/vgs-collect-keeper.apps.verygood.systems\/vgs https:\/\/*.mastercard.com\/ https:\/\/*.aexp-static.com\/ https:\/\/*.americanexpress.com\/ https:\/\/*.visa.com\/ https:\/\/*.staticv.me\/ https:\/\/*.discover.com\/ https:\/\/*.discovercard.com\/ https:\/\/content.discovercard.com\/ https:\/\/src.apis.discover.com\/sdk\/ https:\/\/www.google.com\/maps\/conversion\/collect https:\/\/*.googleapis.com https:\/\/www.google.com\/recaptcha\/ https:\/\/home.gotablocal.com https:\/\/home1.gotablocal.com; worker-src 'self' blob: https:\/\/cdn.gotab.io\/static\/; report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=pub4721f170b2076f8c4dce4d125ff9509d&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=version%3Adev%2Cservice%3Agotabnode%2Cenv%3Aproduction; report-to csp-report","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'report-sample' 'self' https:\/\/bat.bing.com https:\/\/cdn.segment.com https:\/\/connect.facebook.net https:\/\/container.pepperjam.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/googleads.g.doubleclick.net https:\/\/js.stripe.com https:\/\/maps.googleapis.com https:\/\/player.vimeo.com https:\/\/static.zdassets.com https:\/\/websdk.appsflyer.com https:\/\/www.google-analytics.com https:\/\/www.googleadservices.com https:\/\/www.googletagmanager.com https:\/\/www.upsellit.com https:\/\/app.upsellit.com https:\/\/cdn.gbqofs.com\/bluebottle\/u\/detector-dom.min.js https:\/\/cdn.optimizely.com; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self' https:\/\/1wjcus8nhr-1.algolianet.com https:\/\/1wjcus8nhr-2.algolianet.com https:\/\/1wjcus8nhr-3.algolianet.com https:\/\/1wjcus8nhr-dsn.algolia.net https:\/\/www.googletagmanager.com https:\/\/adservice.google.com https:\/\/analytics.google.com https:\/\/api.honeybadger.io https:\/\/api.segment.io https:\/\/app.brightback.com https:\/\/banner.appsflyer.com https:\/\/bat.bing.com https:\/\/blue-bottle-coffee.assembly-api.com https:\/\/bluebottlecoffeesupport.zendesk.com https:\/\/cdn.segment.com https:\/\/cognito-identity.us-east-1.amazonaws.com https:\/\/cognito-idp.us-east-1.amazonaws.com https:\/\/creatives-cdn.appsflyer.com https:\/\/dev.visualwebsiteoptimizer.com https:\/\/ekr.zdassets.com https:\/\/maps.googleapis.com https:\/\/pixel.quantcount.com https:\/\/region1.analytics.google.com https:\/\/region1.google-analytics.com https:\/\/report.nestle.gbqofs.io https:\/\/res.cloudinary.com https:\/\/stats.g.doubleclick.net https:\/\/umry56azoa.execute-api.us-east-1.amazonaws.com https:\/\/vimeo.com https:\/\/www.facebook.com https:\/\/adservice.google.com https:\/\/www.google-analytics.com https:\/\/www.google.ca https:\/\/www.google.com https:\/\/logx.optimizely.com; font-src 'self' data: https:\/\/cdn.appsflyer.com https:\/\/res.cloudinary.com https:\/\/static.rakuten.com https:\/\/storage.googleapis.com; frame-src 'self' https:\/\/8721801.fls.doubleclick.net https:\/\/cdn.pbbl.co https:\/\/js.stripe.com https:\/\/player.vimeo.com https:\/\/t.pepperjamnetwork.com https:\/\/td.doubleclick.net https:\/\/www.facebook.com https:\/\/www.googletagmanager.com https:\/\/a12600010354.cdn.optimizely.com\/; img-src 'self' data: http:\/\/res.cloudinary.com https:\/\/ad.doubleclick.net https:\/\/bat.bing.com https:\/\/blue-bottle-cms.global.ssl.fastly.net https:\/\/chord-oms-production-public-web-assets.s3.amazonaws.com\/bluebottlecoffee\/ https:\/\/dev.visualwebsiteoptimizer.com https:\/\/googleads.g.doubleclick.net https:\/\/res.cloudinary.com https:\/\/www.facebook.com https:\/\/www.google-analytics.com https:\/\/adservice.google.com https:\/\/www.googleadservices.com https:\/\/www.google.ae https:\/\/www.google.ca https:\/\/www.google.com.co https:\/\/www.google.com.mx https:\/\/www.google.com.in https:\/\/www.google.com.ng https:\/\/www.google.sr https:\/\/www.google.com.ph https:\/\/www.google.com.sa https:\/\/www.google.de https:\/\/www.google.cn https:\/\/www.google.com https:\/\/www.google.com.au https:\/\/www.google.com.br https:\/\/www.google.com.hk https:\/\/www.google.com.vn https:\/\/www.google.fr https:\/\/www.google.it https:\/\/www.google.nl https:\/\/www.google.no https:\/\/www.google.co.kr https:\/\/www.google.com.tw https:\/\/www.google.co.uk https:\/\/www.google.co.jp https:\/\/www.google.com.pa https:\/\/www.google.bg https:\/\/translate.google.com https:\/\/www.google.com.gt https:\/\/www.googletagmanager.com https:\/\/www.upsellit.com; manifest-src 'self'; media-src 'self' https:\/\/res.cloudinary.com; worker-src blob:; frame-ancestors https:\/\/studio.bluebottlecoffee.dev; report-uri https:\/\/6998a7fb68a97a37f8789b5c.endpoint.csper.io?v=0;","count":1},{"content-security-policy-report-only":" object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-kWlxbSFMM6FN6-h5NaBglA' 'unsafe-inline' 'unsafe-eval' https:\/\/*.msauth.net https:\/\/*.msftauth.net https:\/\/*.msftauthimages.net https:\/\/*.msauthimages.net https:\/\/*.msidentity.com https:\/\/*.microsoftonline-p.com https:\/\/*.microsoftazuread-sso.com https:\/\/*.azureedge.net https:\/\/*.outlook.com https:\/\/*.office.com https:\/\/*.office365.com https:\/\/*.microsoft.com https:\/\/*.bing.com 'report-sample'; report-uri https:\/\/csp.microsoft.com\/report\/ESTS-UX-All","count":1},{"content-security-policy-report-only":" report-uri https:\/\/www.dropbox.com\/csp_log?policy_name=dash&report_only=true; default-src 'none'; img-src 'self' data: https:\/\/*; font-src 'self' data:; object-src 'none'; frame-src https:\/\/www.dropbox.com https:\/\/snippet.meticulous.ai https:\/\/*.dropboxusercontent.com https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com; connect-src 'self' blob: https:\/\/*.dropbox.com https:\/\/*.logs.datadoghq.com https:\/\/*.logs.datadoghq.eu https:\/\/*.sentry.io https:\/\/api.dropboxapi.com https:\/\/content.dropboxapi.com https:\/\/cdn.dropboxexperiment.com https:\/\/api.sprig.com https:\/\/cognito-identity.us-west-2.amazonaws.com https:\/\/user-events-v3.s3-accelerate.amazonaws.com https:\/\/*.dropboxusercontent.com https:\/\/cfl.dropboxstatic.com https:\/\/edge.fullstory.com https:\/\/rs.fullstory.com https:\/\/browser.sentry-cdn.com https:\/\/s2.googleusercontent.com https:\/\/paper.dropboxstatic.com https:\/\/app.dropboxer.net https:\/\/cdn.prod.website-files.com; media-src 'self' https:\/\/*.dropbox.com https:\/\/*.dropboxusercontent.com blob:; script-src 'self' 'report-sample' 'wasm-unsafe-eval' 'sha256-roap\/WuzYB2wh2tvlLixXzzse29Pczg3jgvuJlmqVfI=' https:\/\/www.dropbox.com https:\/\/browser.sentry-cdn.com https:\/\/snippet.meticulous.ai https:\/\/cfl.dropboxstatic.com; style-src 'self' 'unsafe-inline'; worker-src 'self' blob:;","count":1},{"content-security-policy-report-only":" font-src *.typekit.net *.gstatic.com fonts.gstatic.com use.typekit.net *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com fonts.googleapis.com https:\/\/fonts.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com https:\/\/widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https:\/\/plumrocket.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com *.braintreegateway.com *.paypal.com google.com *.google.com https:\/\/static.addtoany.com\/ *.klarna.com *.google.com\/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https:\/\/plumrocket.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com www.facebook.com https:\/\/app-wallee.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com p.typekit.net validator.swagger.io *.klarna.com *.klarnaevt.com *.klarnacdn.net https:\/\/www.magezon.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com quickchart.io img.youtube.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/redchamps.com maps.gstatic.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/app-wallee.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ www.google.com *.commerce-payment-services.com *.typekit.net google.com *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https:\/\/static.addtoany.com\/ www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ upstream.heidipay.com sbx-upstream.heidipay.io *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.google.com\/ connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.gstatic.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.link.com www.gstatic.com https:\/\/widgets.trustedshops.com https:\/\/widgets-qa.trustedshops.com https:\/\/integrations.etrusted.com https:\/\/integrations.etrusted.site https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com https:\/\/app-wallee.com https:\/\/gmtech.mfgroup.ch https:\/\/assets.secure.checkout.visa.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com *.gstatic.com assets.braintreegateway.com https:\/\/fonts.googleapis.com *.stripe.network *.stripecdn.com www.gstatic.com https:\/\/widgets.trustedshops.com https:\/\/static-app.connect.trustedshops.com https:\/\/static-app.connect-qa.trustedshops.com https:\/\/app-wallee.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.adobe.io performance.typekit.net *.sentry.io https:\/\/stats.addtoany.com\/menu upstream.heidipay.com sbx-upstream.heidipay.io *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.stripe.com klarna.com *.link.com www.googleapis.com *.trustedshops.com *.etrusted.com https:\/\/integrations.etrusted.site https:\/\/app-wallee.com https:\/\/assets.secure.checkout.visa.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" frame-ancestors 'none'; report-uri https:\/\/13fc2e96c75baedc98bc60c37c2c93be.report-uri.com\/r\/d\/csp\/wizard; script-src 'strict-dynamic' 'nonce-Oazyy1AOZREZBZEOENWgzQ=='","count":1},{"content-security-policy-report-only":" report-uri https:\/\/www.yelp.com\/csp_report_only?id=2b11964878ea60ad&page=csp_report_frame_directives%2Cfull_site_ssl_csp_report_directives&policy_hash=41d0c45536d2a082f11d1cd0e00fde7f&site=www&timestamp=1788505113; frame-ancestors 'self' https:\/\/*.yelp.com; default-src https:; img-src https: data: blob:; script-src https: data: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' data:; font-src data: https:; child-src https: yelp-webview:\/\/* yelp:\/\/* data:; object-src 'none'; worker-src blob: https:; base-uri 'self'; form-action https:","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/ssl.google-analytics.com https:\/\/static.cloudflareinsights.com https:\/\/widget.trustpilot.com https:\/\/www.g2.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/*.googletagmanager.com https:\/\/cloudflareinsights.com https:\/\/members.coldproxy.com; frame-src 'self' https:\/\/widget.trustpilot.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'","count":1},{"content-security-policy-report-only":" report-uri https:\/\/www.yelp.com\/csp_report_only?id=87025f9b23c3befa&page=csp_report_frame_directives%2Cfull_site_ssl_csp_report_directives&policy_hash=41d0c45536d2a082f11d1cd0e00fde7f&site=www&timestamp=1788509443; frame-ancestors 'self' https:\/\/*.yelp.com; default-src https:; img-src https: data: blob:; script-src https: data: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' data:; font-src data: https:; child-src https: yelp-webview:\/\/* yelp:\/\/* data:; object-src 'none'; worker-src blob: https:; base-uri 'self'; form-action https:","count":1},{"content-security-policy-report-only":" report-uri https:\/\/logs-01.loggly.com\/inputs\/4e92d8a9-baa6-4559-82e2-05428d10fa7b\/tag\/csp; report-to default","count":1},{"content-security-policy-report-only":" object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-qL-nm3hoIP-8bfJp21-sFw' 'unsafe-inline' 'unsafe-eval' https:\/\/*.msauth.net https:\/\/*.msftauth.net https:\/\/*.msftauthimages.net https:\/\/*.msauthimages.net https:\/\/*.msidentity.com https:\/\/*.microsoftonline-p.com https:\/\/*.microsoftazuread-sso.com https:\/\/*.azureedge.net https:\/\/*.outlook.com https:\/\/*.office.com https:\/\/*.office365.com https:\/\/*.microsoft.com https:\/\/*.bing.com 'report-sample'; report-uri https:\/\/csp.microsoft.com\/report\/ESTS-UX-All","count":1},{"content-security-policy-report-only":" default-src 'self' https:; connect-src 'self' https: properties:; font-src 'self' https: data:; img-src 'self' https: data: blob:; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'strict-dynamic' *.halalstatic.com www.googletagmanager.com accounts.google.com maps.google.com connect.facebook.net applepay.cdn-apple.com *.checkout.com *.stripe.com *.recaptcha.net cdn.safecharge.com 'nonce-0IVffXbathoE2hpKCcIOLg=='; style-src 'self' https: 'nonce-0IVffXbathoE2hpKCcIOLg=='; style-src-elem 'self' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-attr 'unsafe-inline'","count":1},{"content-security-policy-report-only":" default-src https:; connect-src https: wss:; font-src https: data:; frame-src https:; img-src https: data:; media-src https:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'unsafe-inline' https:; report-uri https:\/\/www.check24.net\/csp-violation-ezmd9dpdxv7nb0ecejb9\/","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.blenheimpalace.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.googlesyndication.com www.googleadservices.com *.google.com maps.googleapis.com *.gstatic.com *.doubleclick.net *.convertexperiments.com *.cookiebot.com *.civiccomputing.com connect.facebook.net analytics.tiktok.com bat.bing.com snap.licdn.com *.clarity.ms static.cloudflareinsights.com challenges.cloudflare.com js.createsend1.com *.tradedoubler.com a.tdguard.eu *.app-us1.com *.adswizz.com *.youtube.com www.youtube-nocookie.com cdn.jsdelivr.net static.beaconproducts.co.uk js.stripe.com *.hcaptcha.com *.codepen.io d2513fpustehec.cloudfront.net; style-src 'self' 'unsafe-inline' use.typekit.net p.typekit.net fonts.googleapis.com cdn.jsdelivr.net *.codepen.io *.gstatic.com *.blenheimpalace.com; font-src 'self' data: use.typekit.net fonts.gstatic.com cdn.jsdelivr.net *.codepen.io d2513fpustehec.cloudfront.net *.blenheimpalace.com; img-src https: data: blob:; connect-src https: wss:; media-src 'self' data: blob: *.blenheimpalace.com d2513fpustehec.cloudfront.net; frame-src 'self' *.blenheimpalace.com *.cookiebot.com *.youtube.com www.youtube-nocookie.com forms.office.com forms.cloud.microsoft *.beaconforms.com js.stripe.com m.stripe.com *.hcaptcha.com challenges.cloudflare.com *.doubleclick.net www.googletagmanager.com *.codepen.io cdpn.io *.formsite.com *.livevacancies.co.uk *.google.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' *.blenheimpalace.com forms.office.com *.beaconforms.com *.formsite.com *.createsend.com","count":1},{"content-security-policy-report-only":" default-src 'none';base-uri 'none';font-src 'self' https:\/\/cdn.openagenda.com https:\/\/client.crisp.chat;form-action 'self';frame-ancestors 'self';img-src 'self' https: data: blob: https:\/\/matomo.openagenda.com https:\/\/client.crisp.chat https:\/\/image.crisp.chat https:\/\/storage.crisp.chat;object-src 'none';script-src https: 'unsafe-inline' 'strict-dynamic' 'nonce-TlNPqKzjfnEA+2oFzWa9ng==' https:\/\/client.crisp.chat https:\/\/settings.crisp.chat;script-src-attr 'none';style-src 'self' 'unsafe-inline' https:\/\/cdn.openagenda.com https:\/\/client.crisp.chat;media-src 'self' https: data: https:\/\/client.crisp.chat;frame-src 'self' https:\/\/service.mtcaptcha.com https:\/\/service2.mtcaptcha.com https:\/\/game.crisp.chat;connect-src 'self' https:\/\/cdn.openagenda.com https:\/\/matomo.openagenda.com https:\/\/client.crisp.chat https:\/\/storage.crisp.chat wss:\/\/client.relay.crisp.chat wss:\/\/stream.relay.crisp.chat;upgrade-insecure-requests;report-to default;report-uri https:\/\/openagenda.com\/reports","count":1},{"content-security-policy-report-only":" frame-ancestors 'self'; report-uri https:\/\/www.delicious.com.au\/csp-reports","count":1},{"content-security-policy-report-only":" block-all-mixed-content; report-uri https:\/\/awp.abd.jp\/apiViewer\/getCspInfo","count":1},{"content-security-policy-report-only":" default-src 'self'; connect-src 'self' https:\/\/*.adsrvr.org https:\/\/*.arcgis.com https:\/\/*.clarity.ms https:\/\/*.googleapis.com https:\/\/*.googlesyndication.com https:\/\/*.lovi.ai https:\/\/*.onetrust.com https:\/\/*.openfpcdn.io https:\/\/*.pingdom.net https:\/\/*.schaer.com https:\/\/*.teads.tv https:\/\/*.userway.org https:\/\/*.yotpo.com https:\/\/ad.doubleclick.net https:\/\/analytics-ipv6.tiktokw.us https:\/\/analytics.tiktok.com https:\/\/brands.click2buy.com https:\/\/cdn.cookielaw.org https:\/\/ct.pinterest.com https:\/\/demo-1.conversionsapigateway.com https:\/\/*.g.doubleclick.net https:\/\/hlc7l6v5w6.execute-api.us-west-2.amazonaws.com https:\/\/*.adnxs.com https:\/\/lets.shop https:\/\/maxmind.destinilocators.com https:\/\/*.google-analytics.com https:\/\/s.yimg.com https:\/\/www.facebook.com https:\/\/www.google.at https:\/\/www.google.be https:\/\/www.google.ca https:\/\/www.google.ch https:\/\/www.google.co.uk https:\/\/*.google.com https:\/\/www.google.com.ar https:\/\/www.google.com.br https:\/\/www.google.com.mx https:\/\/www.google.com.tr https:\/\/www.google.cz https:\/\/www.google.de https:\/\/www.google.dk https:\/\/www.google.ee https:\/\/www.google.es https:\/\/www.google.fi https:\/\/www.google.fr https:\/\/www.google.gr https:\/\/www.google.hr https:\/\/www.google.hu https:\/\/www.google.it https:\/\/www.google.nl https:\/\/www.google.no https:\/\/www.google.pl https:\/\/www.google.pt https:\/\/www.google.ro https:\/\/www.google.rs https:\/\/www.google.ru https:\/\/www.google.se https:\/\/www.google.si https:\/\/www.google.sk https:\/\/www.googleadservices.com https:\/\/*.googletagmanager.com https:\/\/www.opinionstage.com https:\/\/*.a.run.app data: https:\/\/connect.facebook.net https:\/\/*.gstatic.com https:\/\/p.yotpoapi.com https:\/\/gmc.lingotek.com https:\/\/google.com https:\/\/www.google.ie https:\/\/www.google.com.au https:\/\/www.google.cl https:\/\/www.google.com.sa https:\/\/www.google.com.lb https:\/\/www.google.co.il https:\/\/www.google.com.cy https:\/\/www.google-analytics.com https:\/\/www.googletagmanager.com; font-src 'self' data: https:\/\/*.schaer.com https:\/\/*.arcgis.com https:\/\/*.gstatic.com https:\/\/*.userway.org https:\/\/*.yotpo.com; frame-src 'self' https:\/\/*.adsrvr.org https:\/\/*.fls.doubleclick.net https:\/\/game-eu.flarie.com https:\/\/game.flarie.com https:\/\/gateway.zscloud.net https:\/\/*.lovi.ai https:\/\/*.userway.org https:\/\/ct.pinterest.com https:\/\/*.adform.net https:\/\/www.facebook.com https:\/\/www.google.com https:\/\/www.instagram.com https:\/\/*.googletagmanager.com https:\/\/www.opinionstage.com https:\/\/www.youtube.com https:\/\/game-us.flarie.com https:\/\/game-ap.flarie.com https:\/\/drschaer.api.oneall.com https:\/\/www.gut-sense.com https:\/\/*.googlesyndication.com; img-src 'self' blob: data: https:; media-src 'self' data: https:\/\/*.userway.org; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https:\/\/*.adsrvr.org https:\/\/*.arcgis.com https:\/\/*.blackfire.io https:\/\/*.clarity.ms https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.lovi.ai https:\/\/*.pingdom.net https:\/\/*.serving-sys.com https:\/\/*.teads.tv https:\/\/*.userway.org https:\/\/*.yotpo.com https:\/\/*.adnxs.com https:\/\/ad.uinterbox.com https:\/\/analytics.clic2buy.com https:\/\/analytics.tiktok.com https:\/\/cdn.cookielaw.org https:\/\/connect.facebook.net https:\/\/ct.pinterest.com https:\/\/*.g.doubleclick.net https:\/\/googletagmanager.com https:\/\/lets.shop https:\/\/s.pinimg.com https:\/\/s.yimg.com https:\/\/unpkg.com https:\/\/www.google.com https:\/\/www.instagram.com https:\/\/*.googletagmanager.com https:\/\/www.opinionstage.com https:\/\/*.adform.net https:\/\/play.flarie.com https:\/\/secured-pixel.com https:\/\/www.youtube.com blob: https:\/\/*.schaer.com https:\/\/apis.google.com gmc.lingotek.com https:\/\/cdn.jsdelivr.net https:\/\/cscoreproweustor.blob.core.windows.net https:\/\/d3js.org https:\/\/maxcdn.bootstrapcdn.com https:\/\/widget.clic2buy.com maps.google.com; script-src-elem 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https:\/\/*.adsrvr.org https:\/\/*.arcgis.com https:\/\/*.blackfire.io https:\/\/*.clarity.ms https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.lovi.ai https:\/\/*.pingdom.net https:\/\/*.serving-sys.com https:\/\/*.teads.tv https:\/\/*.userway.org https:\/\/*.yotpo.com https:\/\/*.adnxs.com https:\/\/ad.uinterbox.com https:\/\/analytics.clic2buy.com https:\/\/analytics.tiktok.com https:\/\/cdn.cookielaw.org https:\/\/connect.facebook.net https:\/\/ct.pinterest.com https:\/\/*.g.doubleclick.net https:\/\/googletagmanager.com https:\/\/lets.shop https:\/\/s.pinimg.com https:\/\/s.yimg.com https:\/\/unpkg.com https:\/\/www.google.com https:\/\/www.instagram.com https:\/\/*.googletagmanager.com https:\/\/www.opinionstage.com https:\/\/*.adform.net https:\/\/play.flarie.com https:\/\/secured-pixel.com https:\/\/www.youtube.com blob: https:\/\/*.schaer.com https:\/\/apis.google.com gmc.lingotek.com https:\/\/cdn.jsdelivr.net https:\/\/cscoreproweustor.blob.core.windows.net https:\/\/d3js.org https:\/\/maxcdn.bootstrapcdn.com https:\/\/widget.clic2buy.com maps.google.com; style-src 'self' 'report-sample' 'unsafe-inline' https:\/\/*.arcgis.com https:\/\/*.googleapis.com https:\/\/*.gstatic.com https:\/\/*.userway.org https:\/\/*.yotpo.com data: https:\/\/*.schaer.com https:\/\/*.googletagmanager.com gmc.lingotek.com https:\/\/cdn.jsdelivr.net; worker-src 'self' blob:; base-uri 'self'; form-action 'self' https:\/\/www.facebook.com https:\/\/*.schaer.com; frame-ancestors 'self' https:\/\/*.schaer.com; report-uri https:\/\/www.schaer.com\/en-us\/log-report-uri\/reportOnly","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/www.googletagmanager.com https:\/\/platform.twitter.com https:\/\/static.codepen.io https:\/\/cpwebassets.codepen.io https:\/\/production-assets.codepen.io https:\/\/gist.github.com https:\/\/w.soundcloud.com; style-src 'self' 'unsafe-inline' https:\/\/fonts.googleapis.com https:\/\/github.githubassets.com; font-src 'self' https:\/\/fonts.gstatic.com; img-src 'self' data: https:; media-src 'self' https:; frame-src https:\/\/www.youtube.com https:\/\/www.youtube-nocookie.com https:\/\/player.vimeo.com https:\/\/open.spotify.com https:\/\/w.soundcloud.com https:\/\/codepen.io https:\/\/www.slideshare.net https:\/\/substack.com https:\/\/platform.twitter.com; connect-src 'self' https:\/\/*.google-analytics.com https:\/\/www.googletagmanager.com https:\/\/webmention.io; object-src 'none'; base-uri 'self'","count":1},{"content-security-policy-report-only":" default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'","count":1},{"content-security-policy-report-only":" font-src www.paypalobjects.com *.googleapis.com https:\/\/*.gstatic.com data: https:\/\/*.cookiebot.com https:\/\/*.typekit.net *.klevu.com *.ksearchnet.com *.fontawesome.com https:\/\/fonts.bunny.net *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.typekit.net *.klarnacdn.net fonts.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ www.google.com https:\/\/*.doubleclick.net https:\/\/*.paypal.com https:\/\/*.trustpilot.com https:\/\/*.salesfire.co.uk https:\/\/*.cookiebot.com https:\/\/*.google.com https:\/\/*.hotjar.com *.google.com *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https:\/\/*.paypal.com https:\/\/*.salesfire.co.uk https:\/\/*.cookiebot.com https:\/\/*.doubleclick.net https:\/\/*.google.com https:\/\/*.google.co.uk *.cloudfront.net *.klevu.com *.ksearchnet.com https:\/\/firebasestorage.googleapis.com *.reviews.io *.reviews.co.uk *.salesfire.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ https:\/\/rum.hlx.page *.googleapis.com https:\/\/www.gstatic.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https:\/\/*.cloudfront.net https:\/\/*.google-analytics.com https:\/\/*.doubleclick.net https:\/\/*.paypal.com https:\/\/*.trustpilot.com https:\/\/*.salesfire.co.uk https:\/\/*.smartmetrics.co.uk https:\/\/*.cookiebot.com https:\/\/*.pcapredict.com\/js\/sensor.js https:\/\/www.googletagmanager.com https:\/\/www.google.com https:\/\/*.hotjar.com https:\/\/secure.leadforensics.com https:\/\/*.googleapis.com *.klevu.com *.ksearchnet.com *.avada.io *.shopify.com *.google.com *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https:\/\/js.klevu.com https:\/\/www.heamar.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com https:\/\/*.cloudfront.net https:\/\/*.googleapis.com https:\/\/*.salesfire.co.uk https:\/\/*.cookiebot.com https:\/\/*.typekit.net *.klevu.com *.ksearchnet.com *.fontawesome.com https:\/\/fonts.bunny.net *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.typekit.net *.stripe.network *.stripecdn.com *.amazon.com https:\/\/www.heamar.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https:\/\/*.cloudfront.net https:\/\/*.cookiebot.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https:\/\/*.freshdesk.com https:\/\/*.hotjar.com wss:\/\/*.hotjar.com https:\/\/*.googleapis.com https:\/\/*.cloudfront.net https:\/\/*.cookiebot.com wss:\/\/*.cookiebot.com api.addressy.com https:\/\/*.adobedc.net https:\/\/*.nr-data.net *.klevu.com *.ksearchnet.com https:\/\/get.geojs.io *.avada.io *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.smartmetrics.co.uk *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/csp.deploy.co.uk\/019b0385-48f2-71e4-b630-d188b00601f3; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" default-src 'self' d1re4mvb3lawey.cloudfront.net *.bibliu.co *.bibliu.com; style-src 'self'; img-src 'self' d1re4mvb3lawey.cloudfront.net *.bibliu.co *.bibliu.com; font-src 'self' d1re4mvb3lawey.cloudfront.net *.bibliu.co *.bibliu.com; frame-src 'self' *.bibliu.co *.bibliu.com;","count":1},{"content-security-policy-report-only":" script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data: blob:; connect-src 'self'; media-src 'self' data: blob:; frame-src 'self' data: blob:; worker-src 'self' data: blob:; manifest-src 'self'; object-src 'self' data: blob:; form-action 'self'; base-uri 'self'; report-uri \/csp_reports","count":1},{"content-security-policy-report-only":" font-src *.fontawesome.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com *.elecrow.com *.chromestatus.com *.bootcss.com maxcdn.bootstrapcdn.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com https:\/\/store.plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.google.com *.addthis.com *.pinterest.com *.amazonaws.com *.awin1.com *.zenaps.com *.fls.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https:\/\/store.plumrocket.com cashier1.uat.useepay.com cashier.useepay.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com *.elecrow.com *.shopify.com github.com *.githubusercontent.com *.wp.com *.imgur.com bitronics.store www.longan-labs.cc www.facebook.com elecrow.s3.us-west-1.amazonaws.com *.sharethis.com *.awin1.com *.zenaps.com *.wepowerconnections.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: blob: 'unsafe-inline' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.googleapis.com *.google-analytics.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.facebook.net *.pinterest.com *.instagram.com *.dwin1.com *.livechatinc.com *.elecrow.com *.bootcdn.net *.googletagmanager.com *.doubleclick.net t.contentsquare.net *.awin1.com *.zenaps.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com lantern.roeyecdn.com s7.addthis.com *.fontawesome.com *.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com cashier.useepay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.bootcss.com maxcdn.bootstrapcdn.com plugin-code.salesmartly.com *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com client.salesmartly.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com *.google-analytics.com *.elecrow.com *.googletagmanager.com *.doubleclick.net *.amazonaws.com *.wepowerconnections.com https:\/\/the.sciencebehindecommerce.com ekr.zdassets.com\/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" connect-src 'self' 8x8.com *.8x8.com algolia.io *.algolia.io algolia.net *.algolia.net algolianet.com *.algolianet.com attentivemobile.com *.attentivemobile.com attn.tv *.attn.tv azure.com *.azure.com boltdns.net *.boltdns.net brightcove.com *.brightcove.com brightcove.net *.brightcove.net brightcovecdn.com *.brightcovecdn.com clarity.ms *.clarity.ms cloudflare.com *.cloudflare.com cloudflareinsights.com *.cloudflareinsights.com d1igp3oop3iho5.cloudfront.net *.d1igp3oop3iho5.cloudfront.net delego-cloud.com *.delego-cloud.com doubleclick.net *.doubleclick.net episerver.net *.episerver.net facebook.com *.facebook.com facebook.net *.facebook.net gadstat.com *.gadstat.com google-analytics.com *.google-analytics.com google.ca *.google.ca google.cl *.google.cl google.co.cr *.google.co.cr google.co.jp *.google.co.jp google.co.kr *.google.co.kr google.co.nz *.google.co.nz google.co.uk *.google.co.uk google.co.vi *.google.co.vi google.com *.google.com google.de *.google.de googleadservices.com *.googleadservices.com googletagmanager.com *.googletagmanager.com hs-analytics.net *.hs-analytics.net hs-banner.com *.hs-banner.com hs-scripts.com *.hs-scripts.com hsadspixel.net *.hsadspixel.net hsforms.com *.hsforms.com hsforms.net *.hsforms.net hubapi.com *.hubapi.com hubspot.com *.hubspot.com iesnare.com *.iesnare.com ipify.org *.ipify.org jquery.com *.jquery.com licdn.com *.licdn.com linkedin.com *.linkedin.com lottingem.com *.lottingem.com maps.googleapis.com *.maps.googleapis.com optimizely.com *.optimizely.com paypal.com *.paypal.com paypalobjects.com *.paypalobjects.com perimeterx.net *.perimeterx.net powerreviews.com *.powerreviews.com prospectdesk.ai *.prospectdesk.ai px-cloud.net *.px-cloud.net riogrande.com *.riogrande.com statsdata.online *.statsdata.online trovo-tag.com *.trovo-tag.com vaudiencelabs.io *.vaudiencelabs.io youtube.com *.youtube.com; report-uri https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=Ciy5KQvaxS_eKSKwv0F.mYFh7E23B6xs9iuUOCxfgPQ-1788507239.3574972-1.0.1.1-6SkJGZ02l6N4.z1hZZthyZAw3LntY5gxwnt55wkq7qPhfnzMrIb7vIxLxIWR9BLKXYOw5FiSmEzwKz_0gCF99MrnSqUOf7LNA9Q9uaT4PuXtDCxuVtxCujdwqwlq_36u1J2x7OIl5oTAYuDW9nFjE7FlcbWM.LfjKITzHE8Ia9wCP6_1zKZ566wooM6kjpS.bzg8ZpsgkqIbxsOwYwT1Fg; report-to cf-mrjhklurisycpjjb","count":1},{"content-security-policy-report-only":" default-src 'self';   connect-src 'self' https:\/\/gvb-apim-service-prod2.azure-api.net https:\/\/gvb-app.matomo.cloud consentcdn.cookiebot.com https:\/\/dc.services.visualstudio.com\/v2\/track https:\/\/*.algolia.net https:\/\/*.algolianet.com https:\/\/*.algolia.io https:\/\/*.dynamics.com https:\/\/*.azureedge.net ;   script-src 'strict-dynamic' 'nonce-hIR4xf8Q2iW+xOeS9D2EVGyBDq9H8AQUk0uhjNDUdq8=' 'sha256-X9GtzORyUShRgrb5vBVwF3p8WtKom3jBuMyocEhfL3Q='  'self' https:\/\/cdn.matomo.cloud https:\/\/gvb-app.matomo.cloud consent.cookiebot.com consentcdn.cookiebot.com https:\/\/*.dynamics.com https:\/\/*.azureedge.net;   frame-src 'self' consentcdn.cookiebot.com https:\/\/*.tiqets.com;   base-uri 'self';   block-all-mixed-content;   font-src 'self' https: data:;   img-src * 'self' data: https;   object-src 'none';   script-src-attr 'none';   style-src 'self' https:\/\/gvb-apim-service-prod2.azure-api.net 'unsafe-inline';","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https:\/\/fonts.googleapis.com https:\/\/fonts.gstatic.com https:\/\/js.klevu.com *.ccbagroup.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.paypal.com *.typekit.net *.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:\/\/static.whatsapp.net *.ccbagroup.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com\/@adobe\/ cdn.jsdelivr.net\/npm\/@adobe\/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ *.magento-datasolutions.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/js-agent.newrelic.com https:\/\/apps.mypurecloud.ie *.ccbagroup.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com assets.braintreegateway.com https:\/\/cdnjs.cloudflare.com *.ccbagroup.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.magento-datasolutions.com *.magento-ds.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/edge.adobedc.net https:\/\/bam.nr-data.net https:\/\/api-cdn.mypurecloud.ie *.ccbagroup.com https:\/\/adobedc.demdex.net\/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';","count":1},{"content-security-policy-report-only":" font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com fonts.googleapis.com *.slant.co *.userway.org eadn-wc05-14712294.nxedge.io *.fontawesome.com *.klevu.com *.ksearchnet.com https:\/\/fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com https:\/\/plumrocket.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com https:\/\/static.addtoany.com\/ *.instagram.com *.weltpixel.com https:\/\/td.doubleclick.net widget.usersnap.com *.googletagmanager.com *.doubleclick.net https:\/\/plumrocket.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * landofcoder.com *.google.com\/ *.wesupply.xyz https:\/\/wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cdninstagram.com maps.googleapis.com maps.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.agkn.com *.doubleclick.net *.facebook.com *.google.com *.nexcesscdn.net *.pricespider.com *.sitescout.com *.userway.org *.pixel.ad eadn-wc05-14712294.nxedge.io *.reddit.com *.google-analytics.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.klevu.com *.ksearchnet.com https:\/\/firebasestorage.googleapis.com https:\/\/www.magezon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https:\/\/static.addtoany.com\/ *.instagram.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.nakanohito.jp\/b3\/bi.js *.addthis.com *.crazyegg.com *.doubleclick.net *.elfsight.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.klevu.com *.mapbox.com *.noibu.com *.pricespider.com *.userway.org d31qbv1cthcecs.cloudfront.net *.krxd.net *.pixel.ad *.sitescout.com *.owneriq.net eadn-wc05-14712294.nxedge.io widget.usersnap.com resources.usersnap.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:\/\/browser.sentry-cdn.com js.klevu.com *.ksearchnet.com https:\/\/ajax.cloudflare.com *.kaptcha.com landofcoder.com *.avada.io *.google.com\/ *.cloudflare.com https:\/\/chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.mapbox.com *.pricespider.com *.userway.org eadn-wc05-14712294.nxedge.io *.tagmanager.google.com *.googletagmanager.com *.fontawesome.com assets.braintreegateway.com *.klevu.com *.ksearchnet.com https:\/\/fonts.bunny.net https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https:\/\/stats.addtoany.com\/menu *.addthis.com *.crazyegg.com *.doubleclick.net *.facebook.com *.google-analytics.com *.googleapis.com *.mapbox.com *.noibu.com wss:\/\/input.noibu.com *.pricespider.com *.userway.org *.pixel.ad *.agkn.com *.sitescout.com *.owneriq.net *.elfsight.com eadn-wc05-14712294.nxedge.io widget.usersnap.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https:\/\/*.ingest.sentry.io *.klevu.com *.ksearchnet.com *.kaptcha.com landofcoder.com https:\/\/get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https:\/\/86c8b4f9-cefc-4184-9926-360586b833fe.sansec.watch\/; report-to report-endpoint;","count":1},{"content-security-policy-report-only":" script-src 'nonce-__Kn4psnrGEZLClwueXqLQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https:\/\/csp.withgoogle.com\/csp\/static-on-bigtable; base-uri 'none'","count":1},{"content-security-policy-report-only":" default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; media-src https: http: rtsp: rtmp: data:; report-uri \/csp-report","count":1},{"content-security-policy-report-only":" default-src 'self'; frame-ancestors 'self'; object-src 'self'; script-src 'self' 'unsafe-inline' https:\/\/download.digiaccess.org https:\/\/download.digiaccess.org\/digiaccess\/tool https:\/\/*.digiaccess.org https:\/\/translate-pa.googleapis.com https:\/\/translate.google.com https:\/\/translate.googleapis.com; worker-src 'self' blob:; img-src 'self' https:\/\/download.digiaccess.org https:\/\/translate.google.com https:\/\/www.gstatic.com https:\/\/www.google.com https:\/\/fonts.gstatic.com https:\/\/translate.googleapis.com https:\/\/translate.googleapis.com\/images https:\/\/*.digiaccess.org *.translate.googleapis.com data:; connect-src 'self' https:\/\/translate-pa.googleapis.com https:\/\/digiaccess.org https:\/\/download.digiaccess.org https:\/\/api.digiaccess.org ht