| Content-Security-Policy | default-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://code.jquery.com https://www.google.com https://www.google-analytics.com https://www.googleapis.com https://cse.google.com https://clients1.google.com https://spark.adobe.com; img-src 'self' https://ssl.gstatic.com https://encrypted-tbn0.gstatic.com https://cse.google.com https://www.google.com https://stats.g.doubleclick.net https://www.googleapis.com https://encrypted-tbn2.gstatic.com https://www.google-analytics.com https://encrypted-tbn3.gstatic.com https://clients1.google.com https://referrer.disqus.com https://a.disquscdn.com https://spark.adobe.com; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.google.com https://cse.google.com https://a.disquscdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://www.google-analytics.com https://spark.adobe.com https://cse.google.com https://www.google.com https://www.googleapis.com https://ccipowerontheinside.disqus.com/embed.js; frame-src 'self' 'unsafe-inline' https://www.haikudeck.com https://player.vimeo.com https://vimeo.com https://cse.google.com https://disqus.com https://www.google.com https://spark.adobe.com; |