| Content-Security-Policy | report-uri /content-security-policy; default-src 'self' *.indpages.com indpages.com; img-src 'self' data: *.indpages.com indpages.com *.2mdn.net *.google-analytics.com *.doubleclick.net *.googleapis.com *.googlesyndication.com *.googleadservices.com *.gstatic.com www.google.com https://*.2mdn.net https://*.google-analytics.com https://*.doubleclick.net https://*.googleapis.com https://*.googlesyndication.com https://*.googleadservices.com https://*.gstatic.com https://www.google.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.indpages.com indpages.com *.doubleclick.net *.googlesyndication.com *.googleadservices.com *.gstatic.com gstatic.com *.googleapis.com *.google.com google.com *.google-analytics.com https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://*.gstatic.com https://gstatic.com https://*.googleapis.com https://*.google.com https://google.com https://*.google-analytics.com; frame-src 'self' *.indpages.com indpages.com *.doubleclick.net *.googlesyndication.com *.googleadservices.com *.gstatic.com gstatic.com *.googleapis.com *.google.com google.com https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://*.gstatic.com https://gstatic.com https://*.googleapis.com https://*.google.com https://google.com; object-src 'self' *.indpages.com indpages.com *.doubleclick.net *.googlesyndication.com *.googleadservices.com *.gstatic.com https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://*.gstatic.com; connect-src 'self' *.indpages.com indpages.com *.google-analytics.com pipe.skype.com https://*.google-analytics.com https://pipe.skype.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.indpages.com indpages.com *.googleapis.com *.gstatic.com https://*.googleapis.com https://*.gstatic.com; font-src 'self' data: *.indpages.com indpages.com *.googleapis.com *.gstatic.com https://*.googleapis.com https://*.gstatic.com; |