| Content-Security-Policy | default-src 'self' http://www.copypants.com https://www.copypants.com http://app.copypants.com https://app.copypants.com http://media.copypants.com https://media.copypants.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.kadira.io https://*.kadira.io http://www.youtube.com https://www.youtube.com http://tagmanager.google.com https://tagmanager.google.com http://www.google-analytics.com https://www.google-analytics.com http://js.intercomcdn.com https://js.intercomcdn.com http://heapanalytics.com https://heapanalytics.com http://*.sharethis.com https://*.sharethis.com; script-src 'self' 'unsafe-inline' http://www.copypants.com https://www.copypants.com http://app.copypants.com https://app.copypants.com http://media.copypants.com https://media.copypants.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.kadira.io https://*.kadira.io http://www.youtube.com https://www.youtube.com http://www.googletagmanager.com https://www.googletagmanager.com http://tagmanager.google.com https://tagmanager.google.com 'unsafe-eval' http://www.google-analytics.com https://www.google-analytics.com http://cdn.heapanalytics.com https://cdn.heapanalytics.com http://js.intercomcdn.com https://js.intercomcdn.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://widget.intercom.io https://widget.intercom.io http://heapanalytics.com https://heapanalytics.com http://*.sharethis.com https://*.sharethis.com http://connect.facebook.net https://connect.facebook.net data:; connect-src * 'self' http://www.copypants.com https://www.copypants.com http://app.copypants.com https://app.copypants.com http://media.copypants.com https://media.copypants.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.kadira.io https://*.kadira.io http://www.youtube.com https://www.youtube.com http://tagmanager.google.com https://tagmanager.google.com http://www.google-analytics.com https://www.google-analytics.com http://js.intercomcdn.com https://js.intercomcdn.com http://heapanalytics.com https://heapanalytics.com http://*.sharethis.com https://*.sharethis.com; img-src data: 'self' http://www.copypants.com https://www.copypants.com http://app.copypants.com https://app.copypants.com http://media.copypants.com https://media.copypants.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.kadira.io https://*.kadira.io http://www.youtube.com https://www.youtube.com http://tagmanager.google.com https://tagmanager.google.com http://www.google-analytics.com https://www.google-analytics.com http://js.intercomcdn.com https://js.intercomcdn.com http://heapanalytics.com https://heapanalytics.com http://*.sharethis.com https://*.sharethis.com; style-src 'self' 'unsafe-inline' http://www.copypants.com https://www.copypants.com http://app.copypants.com https://app.copypants.com http://media.copypants.com https://media.copypants.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.kadira.io https://*.kadira.io http://www.youtube.com https://www.youtube.com http://tagmanager.google.com https://tagmanager.google.com http://www.google-analytics.com https://www.google-analytics.com http://js.intercomcdn.com https://js.intercomcdn.com http://heapanalytics.com https://heapanalytics.com http://*.sharethis.com https://*.sharethis.com data:; frame-src 'self' http://www.copypants.com https://www.copypants.com http://app.copypants.com https://app.copypants.com http://media.copypants.com https://media.copypants.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.kadira.io https://*.kadira.io http://www.youtube.com https://www.youtube.com http://www.googletagmanager.com https://www.googletagmanager.com http://tagmanager.google.com https://tagmanager.google.com http://www.google-analytics.com https://www.google-analytics.com http://js.intercomcdn.com https://js.intercomcdn.com http://heapanalytics.com https://heapanalytics.com http://*.sharethis.com https://*.sharethis.com http://seg.sharethis.com https://seg.sharethis.com http://edge.sharethis.com https://edge.sharethis.com http://*.facebook.com https://*.facebook.com http://platform.twitter.com https://platform.twitter.com; font-src 'self' http://www.copypants.com https://www.copypants.com http://app.copypants.com https://app.copypants.com http://media.copypants.com https://media.copypants.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com http://*.kadira.io https://*.kadira.io http://www.youtube.com https://www.youtube.com http://tagmanager.google.com https://tagmanager.google.com http://www.google-analytics.com https://www.google-analytics.com http://js.intercomcdn.com https://js.intercomcdn.com http://heapanalytics.com ht |