| Content-Security-Policy | default-src 'self' *.boyne.com 'unsafe-inline' *.googleapis.com *.google.com *.otstatic.com; img-src * data:; script-src *.otstatic.com *.opentable.com 'unsafe-eval' a.adtpix.com ib.adnxs.com *.google.com *.googleapis.com cdnjs.cloudflare.com s7.addthis.com *.vimeocdn.com *.googletagmanager.com 'self' *.boyne.com www.navistechnologies.info use.typekit.net *.msecnd.net *.googleadservices.com dnn506yrbagrg.cloudfront.net www.sc.pages03.net connect.facebook.net bat.bing.com *.google-analytics.com maps.googleapis.com 'unsafe-inline'; font-src data: *.otstatic.com *.typekit.net *.boyne.com *.gstatic.com; frame-src *.doubleclick.com *.doubleclick.net *.youtube.com *.vimeo.com *.boyne.com *.resorts-interactive.com www.facebook.com cse.google.com; connect-src *.opentable.com *.visualstudio.com www.facebook.com *.boyne.com performance.typekit.net; |