Content-Security-Policy-Report-Only | default-src 'self';script-src 'self' 'nonce-8mKG5xvM0D5uQpDL/lEG' *.jquery.com *.google.com *.google-analytics.com *.gstatic.com *.googleapis.com *.googleadservices.com *.aspnetcdn.com ajax.aspnetcdn.com pbs.twimg.com *.twitter.com cdnjs.cloudflare.com *.googletagmanager.com;style-src 'self' 'unsafe-inline' *.jquery.com *.google.com *.gstatic.com *.googleapis.com *.aspnetcdn.com pbs.twimg.com stats.g.doubleclick.net *.twitter.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com;img-src 'self' stats.g.doubleclick.net *.google-analytics.com *.ytimg.com *.gstatic.com *.googleapis.com *.googleadservices.com *.google.com *.google.co.uk googleads.g.doubleclick.net *.amazonaws.com ab-enzymes.azurewebsites.net abitec.azurewebsites.net ohly.azurewebsites.net spi-pharma.azurewebsites.net pgpi.azurewebsites.net *.abenzymes.com *.abfingredients.com *.ohly.com *.spipharma.com *.abiteccorp.com *.pgpint.com abfgroupwebsitesmedia.blob.core.windows.net data:;frame-src 'self' *.youtube.com googleads.g.doubleclick.net *.google.com *.google.co.uk bid.g.doubleclick.net;font-src 'self' *.gstatic.com maxcdn.bootstrapcdn.com;connect-src 'self' query.yahooapis.com |