Content-Security-Policy | default-src 'self'; script-src 'self' https://*.twitter.com https://*.vine.co https://vine.co http://www.google-analytics.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' https://*.twitter.com https://t.co https://*.twimg.com http://www.google-analytics.com https://www.google-analytics.com; frame-src https://www.youtube.com https://*.twimg.com https://player.vimeo.com https://*.vine.co https://vine.co; connect-src 'self' ; media-src 'self' https://*.twimg.com |