| Content-Security-Policy | default-src https://*.bkb.ch https://*.mybkb.ch; img-src data: https://*.bkb.ch https://*.mybkb.ch; script-src 'unsafe-inline' 'unsafe-eval' https://*.bkb.ch https://*.mybkb.ch https://assets.adobedtm.com https://www.contovista.com; frame-src https://*.bkb.ch https://*.mybkb.ch https://*.quovadisglobal.com https://www.google.com; style-src 'unsafe-inline' 'unsafe-eval' https://*.bkb.ch https://*.mybkb.ch; connect-src wss://*.mybkb.ch https://*.mybkb.ch https://*.bkb.ch https://www.contovista.com; child-src blob: https://*.mybkb.ch https://*.bkb.ch; media-src blob: https://*.mybkb.ch https://*.bkb.ch; frame-ancestors https://*.bkb.ch https://*.mybkb.ch ; form-action https://*.bkb.ch https://*.mybkb.ch; |