| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-eval' *.fontawesome.com *.nr-data.net *.sharethis.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.googleadservices.com *.trustpilot.com *.newrelic.com *.googletagmanager.com *.google.com maps.google.com *.multiyb.com 'unsafe-inline'; connect-src 'self' *.sharethis.com; img-src 'self' data: *.google.co.uk *.doubleclick.net *.imgix.net http://newimages.yachtworld.com https://unsplash.it http://placehold.it *.gravatar.com *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.multiyb.com *.sharethis.com *.facebook.com *.scorecardresearch.com; style-src 'self' *.fontawesome.com *.facebook.com *.google.com *.googleapis.com fonts.google.com *.multiyb.com 'unsafe-inline'; font-src 'self' *.fontawesome.com fonts.gstatic.com *.multiyb.com data:; frame-src 'self' *.facebook.com *.multiyb.com *.doubleclick.net *.sharethis.com *.google.com *.google.co.uk; |