| Content-Security-Policy | default-src 'self' http://*.onesignal.com https://*.onesignal.com http://onesignal.com https://onesignal.com http://fonts.googleapis.com https://fonts.googleapis.com http://stockding.com https://stockding.com stockding.com:* http://*.googletagmanager.com https://*.googletagmanager.com http://*.google-analytics.com https://*.google-analytics.com http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.onesignal.com https://*.onesignal.com http://onesignal.com https://onesignal.com http://fonts.googleapis.com https://fonts.googleapis.com http://stockding.com https://stockding.com stockding.com:* http://*.googletagmanager.com https://*.googletagmanager.com http://*.google-analytics.com https://*.google-analytics.com http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com; connect-src * 'self' http://*.onesignal.com https://*.onesignal.com http://onesignal.com https://onesignal.com http://fonts.googleapis.com https://fonts.googleapis.com http://stockding.com https://stockding.com stockding.com:* http://*.googletagmanager.com https://*.googletagmanager.com http://*.google-analytics.com https://*.google-analytics.com http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com; img-src data: 'self' http://*.onesignal.com https://*.onesignal.com http://onesignal.com https://onesignal.com http://fonts.googleapis.com https://fonts.googleapis.com http://stockding.com https://stockding.com stockding.com:* http://*.googletagmanager.com https://*.googletagmanager.com http://*.google-analytics.com https://*.google-analytics.com http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com http://secure.gravatar.com https://secure.gravatar.com http://*.wp.com https://*.wp.com http://s3.amazonaws.com https://s3.amazonaws.com http://*.images-amazon.com https://*.images-amazon.com http://*.ssl-images-amazon.com https://*.ssl-images-amazon.com http://*.amazon.com https://*.amazon.com http://*.amazon.co.uk https://*.amazon.co.uk http://*.toysrus.co.uk https://*.toysrus.co.uk http://*.toysrus.com https://*.toysrus.com http://*.smythstoys.com https://*.smythstoys.com http://*.argos.co.uk https://*.argos.co.uk; style-src 'self' 'unsafe-inline' http://*.onesignal.com https://*.onesignal.com http://onesignal.com https://onesignal.com http://fonts.googleapis.com https://fonts.googleapis.com http://stockding.com https://stockding.com stockding.com:* http://*.googletagmanager.com https://*.googletagmanager.com http://*.google-analytics.com https://*.google-analytics.com http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com; media-src blob: 'self' http://*.onesignal.com https://*.onesignal.com http://onesignal.com https://onesignal.com http://fonts.googleapis.com https://fonts.googleapis.com http://stockding.com https://stockding.com stockding.com:* http://*.googletagmanager.com https://*.googletagmanager.com http://*.google-analytics.com https://*.google-analytics.com http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com; |