| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.google.com https://*.googleapis.com https://www.google-analytics.com https://ifsttar.libcast.com http://platform.twitter.com http://syndication.twitter.com https://*.syndication.twimg.com https://use.typekit.net http://latex.codecogs.com http://coredeufrabase.ifsttar.fr https://buttons.github.io https://api.github.com https://feed.mikle.com http://connect.facebook.net; frame-src 'self' http://ifsttar.libcast.com/ https://ifsttar.libcast.com http://coredeufrabase.ifsttar.fr http://platform.twitter.com https://buttons.github.io https://syndication.twitter.com http://feed.mikle.com https://www.facebook.com http://*.facebook.com https://*.facebook.com https://groups.google.com/ https://player.vimeo.com/ https://www.youtube.com/ http://podcast.u-pem.fr/; style-src 'self' 'unsafe-inline' http://fonts.googleapis.com https://ifsttar.libcast.com http://platform.twitter.com http://coredeufrabase.ifsttar.fr http://fontawesome.io https://ton.twimg.com https://buttons.github.io; font-src 'self' http://fonts.gstatic.com https://ifsttar.libcast.com https://use.typekit.net http://coredeufrabase.ifsttar.fr http://fontawesome.io; child-src 'self' https://ifsttar.libcast.com; img-src 'self' data: https://*.gstatic.com https://maps.google.com https://*.googleapis.com https://*.ggpht.com https://www.google-analytics.com http://*.addthis.com https://ifsttar.libcast.com http://syndication.twitter.com http://platform.twitter.com http://*.twimg.com https://p.typekit.net http://coredeufrabase.ifsttar.fr http://latex.codecogs.com https://img.shields.io https://static.licdn.com https://*.facebook.com; connect-src 'self' https://syndication.twitter.com https://performance.typekit.net |