| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.newrelic.com bam.nr-data.net *.googleapis.com *.gstatic.com https://www.google.com/recaptcha/api.js *.google-analytics.com *.surveymonkey.com; connect-src 'self'; img-src 'self' *.surveymonkey.com *.gravatar.com *.umbraco.org *.google.com *.gstatic.com *.googleapis.com *.google-analytics.com *.busconnects.ie *.elasticbeanstalk.com; style-src 'self' 'unsafe-inline' *.googleapis.com; frame-src 'self' *.vimeo.com *.youtube.com *.youtu.be *.google.com *.transportforireland.ie; font-src 'self' *.gstatic.com |