| Content-Security-Policy | default-src 'self' 'unsafe-inline' http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com http://*.google.com https://*.google.com http://*.google-analytics.com https://*.google-analytics.com http://*.googletagmanager.com https://*.googletagmanager.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.youtube.com https://*.youtube.com http://s.ytimg.com https://s.ytimg.com http://*.vimeo.com https://*.vimeo.com http://*.vimeocdn.com https://*.vimeocdn.com http://*.trustpilot.com https://*.trustpilot.com http://*.zopim.com https://*.zopim.com http://*.zopim.io https://*.zopim.io ws://*.zopim.com wss://*.zopim.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com http://*.google.com https://*.google.com http://*.google-analytics.com https://*.google-analytics.com http://*.googletagmanager.com https://*.googletagmanager.com http://*.googleapis.com https://*.googleapis.com http://s.ytimg.com https://s.ytimg.com http://*.vimeocdn.com https://*.vimeocdn.com http://*.trustpilot.com https://*.trustpilot.com http://*.zopim.com https://*.zopim.com http://*.zopim.io https://*.zopim.io; frame-ancestors 'self'; |