| Content-Security-Policy | default-src 'self' *.google-analytics.com *.facebook.net https://twitter.com https://*.twitter.com *.facebook.com services.arcgisonline.com *.arcgis.com https://www.arcgis.com *.sharethis.com www.youtube.com https://www.youtube.com https://*.google.com https://maps.google.co.nz http://*.r2.co.nz http://plugins.longtailvideo.com; script-src 'self' *.google-analytics.com loader.webspellchecker.net *.twitter.com https://*.twimg.com https://*.google.com services.arcgisonline.com *.arcgis.com *.sharethis.com script.crazyegg.com *.cetrk.com 'unsafe-eval' 'unsafe-inline'; style-src 'self' *.twitter.com js.arcgis.com *.sharethis.com 'unsafe-inline'; img-src 'self' https://*.google.com *.googleapis.com *.google-analytics.com https://*.twimg.com resources.esri.com *.arcgis.com *.arcgisonline.com *.sharethis.com trk.cetrk.com data:; frame-src 'self' http://webteammoh.cartodb.com https://webteammoh.cartodb.com www.youtube.com https://www.youtube.com http://www.r2.co.nz healthnz.maps.arcgis.com |