| Content-Security-Policy | default-src 'self' 'unsafe-inline' ; style-src 'self' 'unsafe-inline' 'unsafe-eval' http://maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://fonts.googleapis.com https://code.jquery.com/ https://cdnjs.cloudflare.com https://blueimp.github.io/; img-src 'self' data: blob: http://www.google-analytics.com http://csi.gstatic.com http://maps.gstatic.com http://maps.googleapis.com/ http://maps.google.com/ https://maps.google.com/ https://scontent.xx.fbcdn.net https://external.xx.fbcdn.net/ https://shop.dasgen.com.tw/ https://a.ecimg.tw/ http://a.ecimg.tw/ https://code.jquery.com/ https://cdn.ywxi.net/ https://csi.gstatic.com/ https://maps.gstatic.com/ https://www.facebook.com; font-src 'self' http://maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://fonts.googleapis.com https://fonts.gstatic.com http://fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.google-analytics.com http://ajax.googleapis.com https://ajax.googleapis.com http://maps.google.com https://maps.google.com http://maps.googleapis.com/ https://maps.googleapis.com https://www.google.com/ https://www.gstatic.com https://cdnjs.cloudflare.com https://wp-themes.com/ https://code.jquery.com/ https://cdn.ywxi.net/js/ https://www.mcafeesecure.com/ https://blueimp.github.io/ https://connect.facebook.net; frame-src https://www.google.com https://www.facebook.com https://staticxx.facebook.com; connect-src https://graph.facebook.com/ https://shop.dasgen.com.tw/ http://sitekeeper.itop.com.tw/ http://www.itop.com.tw/; |