Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.google-analytics.com/analytics.js https://www.google-analytics.com/plugins/ua/linkid.js http://www.google.com/recaptcha/api/challenge; style-src 'self' 'unsafe-inline'; connect-src 'self' wss://www.cai-world.com https://stats.unity3d.com/HWStats.cgi; img-src 'self' data: https://www.google-analytics.com; media-src 'self' blob:; frame-src 'self' https://www.youtube.com https://www.google.com/maps |