Content-Security-Policy | frame-ancestors 'self'; object-src 'none'; script-src https: 'self' 'unsafe-inline' 'unsafe-eval' www.google.com/recaptcha/api/ www.google-analytics.com static-na.payments-amazon.com api-cdn.amazon.com payments.amazon.com js.stripe.com connect.facebook.net; font-src https: 'self' data: d2sx9mrt4zumaq.cloudfront.net; style-src https: 'self' 'unsafe-inline' 'unsafe-eval' d2sx9mrt4zumaq.cloudfront.net; child-src 'self' api-cdn.amazon.com payments.amazon.com www.paypal.com paypal.com js.stripe.com discordapp.com player.twitch.tv player.vimeo.com sketchfab.com w.soundcloud.com www.liveleak.com www.gamereactor.eu www.youtube-nocookie.com www.youtube.com, img-src https: data:; media-src https:; child-src https:; connect-src https: |