| Content-Security-Policy | default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.sitecore.net https://*.google.com https://*.gstatic.com *.google-analytics.com https://www.googletagmanager.com https://js-agent.newrelic.com https://bam.nr-data.net *.googleapis.com https://*.edialog24.com https://*.edialog24.no https://edialog24.no;style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css https://hello.myfonts.net/count/2637c7 https://fonts.googleapis.com https://*.edialog24.no;img-src 'self' https://*.edialog24.no https://*.gstatic.com *.google-analytics.com https://*.googleapis.com https://stats.g.doubleclick.net data:;frame-src 'self' https://*.google.com https://www.googletagmanager.com *.youtube.com *.vimeo.com *.morningstar.com *.portalbank.no http://*.sitecore.net;font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com;connect-src 'self' http://*.sitecore.net;report-uri /WebResource.axd?cspReport=true |