| Content-Security-Policy | default-src 'self' *.citrixonline.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' *.citrixonline.com *.citrixonlinecdn.com *.expertcity.com *.col.test.expercity.com *.crowdin.com *.facebook.com *.filepicker.io *.firebaseio.com *.g2m.me:* *.google-analytics.com *.google.com *.googleapis.com *.linkedin.com *.omtrdc.net *.tiqcdn.com cdn.firebase.com connect.facebook.net http://*.g2m.me:* platform.twitter.com podio.com localhost:* wss://localhost:*;font-src 'self' *.citrixonline.com *.crowdin.com *.filepicker.io *.googleusercontent.com data: data://*;connect-src 'self' *.box.com *.citrixonline.com *.expertcity.com *.col.test.expercity.com *.crowdin.com *.filepicker.io *.g2m.me:* http://*.g2m.me:* *.rollbar.com js.logentries.com wss://*.firebaseio.com wss://*.g2m.me:* localhost:* wss://localhost:*;frame-src 'self' *.crowdin.com *.citrixonline.com *.expertcity.com *.facebook.com *.filepicker.io *.firebaseio.com *.fls.doubleclick.net *.google.com *.google.dk *.googleapis.com *.youtube.com citrixonline://*.citrixonline.com citrixonline://*.expertcity.com platform.twitter.com podio.com;img-src 'self' *.crowdin.com *.facebook.com *.filepicker.io *.g2m.me *.google-analytics.com *.gravatar.com *.nr-data.net *.omtrdc.net data: data://*;style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.crowdin.com *.filepicker.io *.googleapis.com;media-src 'self' mediastream: blob:; |