| Content-Security-Policy | default-src *; img-src * 'self' data:; style-src * 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com www.google-analytics.com tagmanager.google.com *.googleapis.com www.googletagmanager.com *.livechatinc.com connect.facebook.net *.turn.com *.zopim.com *.zopim.io cdn-akamai.mookie1.com tags.tiqcdn.com t.mookie1.com b3.mookie1.com *.zopim.com api.map.baidu.com js.maxmind.com *.map.bdimg.com *.bdstatic.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io *.googleadservices.com *.adnxs.com *.doubleclick.net cloudfront.net *.mimecast.com *.adsrvr.org *.facebook.com ; connect-src 'self' wss://*.zopim.com js.maxmind.com api.map.baidu.com *.adnxs.com *.turn.com *.adsrvr.org *.facebook.com *.vimeo.com; |