Content-Security-Policy | default-src 'self'; script-src 'self' https://www.youtube.com http://www.youtube.com https://s.ytimg.com http://s.ytimg.com http://cdn.dashhoundhq.com https://www.google-analytics.com; connect-src 'self' https://api-ssl.bitly.com http://api-ssl.bitly.com; style-src 'self' http://cdn.materialdesignicons.com https://fonts.googleapis.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com http://cdn.materialdesignicons.com data:; img-src 'self' https://fonts.googleapis.com http://cdn.dashhoundhq.com data: https://www.google-analytics.com; frame-src 'self' https://www.youtube.com; frame-ancestors 'none' |