Content-Security-Policy | default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com ajax.aspnetcdn.com maps.googleapis.com localhost:8089 http://www.cbinvest.qa:8089 maps.google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' khms0.googleapis.com khms1.googleapis.com maps.googleapis.com maps.google.com maps.gstatic.com csi.gstatic.com data:; media-src 'self'; font-src 'self' cdn.linearicons.com fonts.gstatic.com; connect-src 'self' localhost:8089 http://www.cbinvest.qa:8089;form-action 'self';object-src 'self'; |