Content-Security-Policy | connect-src 'self' https://mediascore.de ;default-src 'self' https://mediascore.de https://fonts.gstatic.com https://www.google-analytics.com ;frame-ancestors 'self' https://mediascore.de ;frame-src 'none' https://mediascore.de ;media-src 'self' https://mediascore.de *.mediascore.de ;object-src 'none' https://mediascore.de ; report-uri https://example.com/violationReportForCSP.php;script-src 'self' 'unsafe-inline' https://mediascore.de https://code.jquery.com https://ajax.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com ;style-src 'self' 'unsafe-inline' https://mediascore.de https://fonts.googleapis.com ; |