Content-Security-Policy | default-src 'self' http://www.google-analytics.com https://www.google-analytics.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://* https://*; script-src 'self' 'unsafe-inline' http://www.google-analytics.com https://www.google-analytics.com http://cdn.mxpnl.com https://cdn.mxpnl.com 'unsafe-eval' http://* https://*; connect-src * 'self' http://www.google-analytics.com https://www.google-analytics.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://* https://*; img-src data: 'self' http://www.google-analytics.com https://www.google-analytics.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://* https://*; style-src 'self' 'unsafe-inline' http://www.google-analytics.com https://www.google-analytics.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://* https://*; |