| Content-Security-Policy | child-src 'self' 'nonce-0a04e86a-cfcd-4d2b-ab9a-0499ef84a1de'; default-src 'self'; connect-src 'self' http://www.google-analytics.com/; img-src 'self' http://www.google-analytics.com/ https://www.facebook.com/ https://d5nxst8fruw4z.cloudfront.net; font-src 'self' https://fonts.gstatic.com/; frame-src 'none'; object-src 'self'; media-src 'self'; manifest-src 'self'; script-src 'self' 'nonce-0a04e86a-cfcd-4d2b-ab9a-0499ef84a1de' 'unsafe-inline' https://cdn.polyfill.io https://www.googletagmanager.com http://www.google-analytics.com/analytics.js http://tagmanager.google.com/debug; style-src 'self' 'unsafe-inline' blob: https://fonts.googleapis.com |