| Content-Security-Policy | default-src 'self' http://tagmanager.google.com https://tagmanager.google.com http://*.youtube.com https://*.youtube.com http://*.dailymotion.com https://*.dailymotion.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://*.googleapis.com https://*.googleapis.com http://maps.gstatic.com https://maps.gstatic.com http://csi.gstatic.com https://csi.gstatic.com http://use.typekit.net https://use.typekit.net http://p.typekit.net https://p.typekit.net http://*.stripe.com https://*.stripe.com https://oss.maxcdn.com/*; script-src 'self' 'unsafe-inline' http://www.google-analytics.com https://www.google-analytics.com http://www.googletagmanager.com https://www.googletagmanager.com http://tagmanager.google.com https://tagmanager.google.com 'unsafe-eval' http://*.youtube.com https://*.youtube.com http://*.dailymotion.com https://*.dailymotion.com http://player.vimeo.com https://player.vimeo.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://*.googleapis.com https://*.googleapis.com http://maps.gstatic.com https://maps.gstatic.com http://csi.gstatic.com https://csi.gstatic.com http://use.typekit.net https://use.typekit.net http://p.typekit.net https://p.typekit.net http://*.stripe.com https://*.stripe.com https://oss.maxcdn.com/*; connect-src * 'self' http://tagmanager.google.com https://tagmanager.google.com http://*.youtube.com https://*.youtube.com http://*.dailymotion.com https://*.dailymotion.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://*.googleapis.com https://*.googleapis.com http://maps.gstatic.com https://maps.gstatic.com http://csi.gstatic.com https://csi.gstatic.com http://use.typekit.net https://use.typekit.net http://p.typekit.net https://p.typekit.net http://*.stripe.com https://*.stripe.com https://oss.maxcdn.com/*; img-src data: 'self' http://www.google-analytics.com https://www.google-analytics.com http://tagmanager.google.com https://tagmanager.google.com http://*.youtube.com https://*.youtube.com http://*.dailymotion.com https://*.dailymotion.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://*.googleapis.com https://*.googleapis.com http://maps.gstatic.com https://maps.gstatic.com http://csi.gstatic.com https://csi.gstatic.com http://use.typekit.net https://use.typekit.net http://p.typekit.net https://p.typekit.net https://*.twimg.com http://*.twimg.com https://*.googleusercontent.com https://lh3.googleusercontent.com https://*.licdn.com http://*.licdn.com https://media.licdn.com https://media.licdn.com/* https://www.linkedin.com/* https://*.linkedin.com http://*.stripe.com https://*.stripe.com blob: https://oss.maxcdn.com/*; style-src 'self' 'unsafe-inline' http://tagmanager.google.com https://tagmanager.google.com http://*.youtube.com https://*.youtube.com http://*.dailymotion.com https://*.dailymotion.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://*.googleapis.com https://*.googleapis.com http://maps.gstatic.com https://maps.gstatic.com http://csi.gstatic.com https://csi.gstatic.com http://use.typekit.net https://use.typekit.net http://p.typekit.net https://p.typekit.net http://*.stripe.com https://*.stripe.com https://oss.maxcdn.com/*; frame-src 'self' http://www.googletagmanager.com https://www.googletagmanager.com http://tagmanager.google.com https://tagmanager.google.com http://*.youtube.com https://*.youtube.com http://*.dailymotion.com https://*.dailymotion.com http://player.vimeo.com https://player.vimeo.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://*.googleapis.com https://*.googleapis.com http://maps.gstatic.com https://maps.gstatic.com http://csi.gstatic.com https://csi.gstatic.com http://use.typekit.net https://use.typekit.net http://p.typekit.net https://p.typekit.net http://*.stripe.com https://*.stripe.com https://oss.maxcdn.com/*; font-src 'self' http://tagmanager.google.com https://tagmanager.google.com http://*.youtube.com https://*.youtube.com http://*.dailymotion.com https://*.dailymotion.com http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com http://*.googleapis.com https://*.googleapis.com http://maps.gstatic.com https://maps.gstatic.com http://csi.gstatic.com https://csi.gstatic.com http://use.typekit.net https://use.typekit.net http://p.typekit.net https://p.typekit.net data: http://*.stripe.com https://*.stripe.com https://oss.maxcdn.com/*; |