| Content-Security-Policy | default-src 'self'; script-src data: 'self' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com https://*.google.com http://*.google.com https://*.pay1.de http://*.zopim.com https://*.zopim.com http://*.zopim.io https://*.zopim.io https://*.trustedshops.com http://*.trustedshops.com; style-src 'self' data: 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com http://*.zopim.com https://*.zopim.com http://*.zopim.io https://*.zopim.io https://*.google.com http://*.google.com https://*.pay1.de https://*.trustedshops.com http://*.trustedshops.com; img-src 'self' data: 'unsafe-inline' http://*.mymoria.de https://*.mymoria.de http://*.meelogic.com https://*.meelogic.com https://*.google.com http://*.google.com https://*.pay1.de pci.usd.de *.amazonaws.com www.google-analytics.com https://*.doubleclick.net http://*.doubleclick.net http://*.zopim.com https://*.zopim.com http://*.zopim.io https://*.zopim.io https://*.trustedshops.com http://*.trustedshops.com; connect-src 'self' ws: wss:; font-src 'self' fonts.gstatic.com data: maxcdn.bootstrapcdn.com http://*.zopim.com https://*.zopim.com https://*.trustedshops.com http://*.trustedshops.com; object-src 'none'; media-src 'none'; frame-src https://*.pay1.de https://*.youtube.com |