| Content-Security-Policy | default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://maxcdn.bootstrapcdn.com https://www.google-analytics.com https://secure.leadforensics.com https://connect.facebook.net https://*.clickdimensions.com https://www.youtube.com https://*.hotjar.com https://*.ytimg.com; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com; img-src 'self' wpstrategictestadmin.azurewebsites.net https://*.datacash.com https://*.water-plus.co.uk https://www.google-analytics.com https://www.facebook.com https://*.doubleclick.net https://*.google.com https://*.google.co.uk; media-src 'self' wpstrategictestadmin.azurewebsites.net https://*.water-plus.co.uk https://*.google.com https://*.google.co.uk; child-src 'self' https://www.youtube.com https://*.datacash.com https://*.hotjar.com; connect-src 'self' https://*.hotjar.com; frame-src 'self' https://www.youtube.com https://*.datacash.com https://*.hotjar.com; font-src 'self' |