| Content-Security-Policy | default-src 'self' *.citrixonline.com;script-src 'self' dev.hu.tt:35729 *.hu.tt *.facebook.com *.google.com *.linkedin.com *.newrelic.com platform.twitter.com connect.facebook.net cdn.firebase.com *.google-analytics.com *.firebaseio.com podio.com 'unsafe-eval' 'unsafe-inline';font-src 'self' data: *.googleusercontent.com data://*;connect-src 'self' wss://*.hu.tt:35729 *.hu.tt *.box.com *.citrixonline.com wss://*.firebaseio.com js.logentries.com;frame-src 'self' platform.twitter.com *.facebook.com *.google.com *.googleapis.com *.google.dk *.firebaseio.com *.youtube.com podio.com *.fls.doubleclick.net;img-src 'self' *.facebook.com lorempixel.com jserror.newrelic.com data: *.google-analytics.com data://*;style-src 'self' *.googleapis.com *.bootstrapcdn.com 'unsafe-inline';media-src 'self' mediastream:; |