| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://matlo.us14.list-manage.com https://s3.amazonaws.com https://www.googletagmanager.com https://ssl.google-analytics.com https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://www.google.com https://www.google-analytics.com https://www.gstatic.com https://cdnjs.cloudflare.com https://maps.googleapis.com https://khms0.googleapis.com https://khms1.googleapis.com https://hello.myfonts.net; img-src 'self' https://*.matlo.com https://ssl.google-analytics.com https://www.google-analytics.com https://csi.gstatic.com https://maps.gstatic.com https://maps.googleapis.com data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://hello.myfonts.net; font-src 'self' data: https://fonts.gstatic.com; frame-src https://www.google.com https://www.youtube.com; object-src 'self'; connect-src * |