| Content-Security-Policy | default-src 'self' *.nr-data.net fonts.gstatic.com fonts.googleapis.com https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nr-data.net js-agent.newrelic.com *.embedly.com *.embed.ly *.googletagmanager.com *.doubleclick.net *.googleadservices.com *.facebook.net snap.licdn.com *.linkedin.com *.bing.com; img-src 'self' data: *; style-src 'self' 'unsafe-inline' fonts.googleapis.com; child-src 'self' *.vimeo.com; frame-src 'self' *.investis.com *.quartalflife.com *.youtube.com *.youtu.be *.youku.com *.embedly.com *.embed.ly http://player.youko.com https: *.doubleclick.net snap.licdn.com *.linkedin.com; |